Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/AAoUrzwok5R16YPorqbWNdV-P7M.roa
File: AAoUrzwok5R16YPorqbWNdV-P7M.roa (raw, json)
Hash identifier: +gM5QMlRgFnQLbcYTEh4fkR/4PLuBF4uTlVZfqHdQ2k=
Subject key identifier: 00:0A:14:AF:3C:28:93:94:75:E9:83:E8:AE:A6:D6:35:D5:7E:3F:B3
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 019077E9A3E5FAAE0FE66BC7F5BAABB9D5EB
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/AAoUrzwok5R16YPorqbWNdV-P7M.roa
Signing time: Wed 03 Jul 2024 09:25:18 +0000
ROA not before: Wed 03 Jul 2024 09:25:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198154
IP address blocks: 95.128.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 06:42:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:e9:a3:e5:fa:ae:0f:e6:6b:c7:f5:ba:ab:b9:d5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Jul 3 09:25:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=000a14af3c28939475e983e8aea6d635d57e3fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f4:50:2d:b8:78:33:ff:cc:4f:70:b8:fc:78:
b6:94:b0:e2:29:a8:13:15:71:fa:d8:df:fd:a1:0c:
c4:af:47:48:1f:38:36:92:84:f4:28:4d:f0:de:20:
c4:f9:d6:b7:d3:ef:10:10:23:f6:7b:9a:8b:a1:e1:
0a:05:38:97:4f:30:d3:bf:5f:bf:b6:81:fa:0f:e7:
a2:0d:14:28:cf:eb:00:34:78:c4:24:3d:c6:d4:41:
c2:1e:b9:82:cd:98:3f:81:04:c0:35:b9:04:f0:3e:
12:fb:19:e9:fc:26:f9:27:f6:5a:eb:d8:50:0a:c9:
6a:a6:52:9b:b5:47:50:0b:f1:e6:c7:bf:d7:78:db:
6e:2a:39:be:9e:50:49:68:05:50:5d:d4:85:9e:ea:
ea:5a:b3:ac:2a:59:82:8b:87:ab:58:72:f1:c3:ef:
a5:aa:9b:a9:ed:49:b0:4a:47:de:81:4d:fe:1e:d5:
0e:8a:bc:03:8f:1e:b2:01:36:22:94:ad:ac:1a:8a:
28:70:52:1a:dc:5b:a0:40:a9:8b:80:26:85:ae:1c:
92:e1:58:f9:7c:a6:88:44:28:96:48:71:e8:56:56:
73:7d:6e:b8:0a:64:93:43:f7:a3:25:28:59:b7:c6:
11:91:b7:60:6f:f5:6e:73:c5:cc:dd:b4:f1:40:fb:
5d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0A:14:AF:3C:28:93:94:75:E9:83:E8:AE:A6:D6:35:D5:7E:3F:B3
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/AAoUrzwok5R16YPorqbWNdV-P7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.198.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:86:28:d2:8f:70:7e:0c:3a:f5:82:c2:ee:2c:8b:03:fe:77:
66:cb:8a:3d:44:2b:78:90:d4:2d:8d:42:26:25:99:6b:d0:3c:
64:98:03:6b:73:43:0e:f3:d4:72:ae:57:49:53:c5:44:23:ed:
a9:d8:e1:09:6a:4d:bd:52:03:4e:23:e0:0a:ba:b7:26:03:b0:
b4:05:8c:ac:27:e5:53:72:fd:5b:9e:ca:be:f7:bd:76:a0:15:
fa:d2:f4:ca:8e:5a:13:0c:59:2e:d6:5a:e4:9f:0e:36:44:74:
8e:f5:f0:a6:13:39:b6:51:8d:79:4b:01:84:c6:be:6f:ef:e4:
6a:29:c8:50:77:ca:9d:6b:03:65:3a:ee:e9:03:7f:9f:f7:13:
b3:92:b1:5b:48:59:a5:16:5a:a1:14:80:f2:cc:52:a6:4c:0b:
3d:50:26:90:d6:cc:bc:55:12:e7:1a:39:8d:4c:e5:25:13:44:
2d:29:db:ce:74:95:de:f6:cf:5e:ce:70:60:4e:f3:9a:9e:8c:
3f:c8:47:da:39:f1:b7:ae:81:7f:6c:88:70:78:dd:2a:89:37:
bc:22:e8:fc:91:82:8d:21:c6:48:b0:92:a5:4d:6b:0f:ce:e0:
d1:9d:37:22:e8:7c:58:66:7f:da:b8:ba:58:78:0f:44:1a:7a:
b8:3d:65:00
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 11 07:51:13 2024 by rpki-client on console-fra.rpki-client.org