Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/VUZcpqBw8TBmKFO2mkgFRW_iTjY.roa
File: VUZcpqBw8TBmKFO2mkgFRW_iTjY.roa (raw, json)
Hash identifier: fslIf0JQsPPGH3HFoZRXC1N5oJtmbrsxHenZsU7yEJs=
Subject key identifier: 55:46:5C:A6:A0:70:F1:30:66:28:53:B6:9A:48:05:45:6F:E2:4E:36
Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial: 018B30F701A2196D25AE41C444C5E6714B2B
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/VUZcpqBw8TBmKFO2mkgFRW_iTjY.roa
Signing time: Sun 15 Oct 2023 01:32:55 +0000
ROA not before: Sun 15 Oct 2023 01:32:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59676
IP address blocks: 95.215.175.0/24 maxlen: 24
2001:67c:2278::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:30:f7:01:a2:19:6d:25:ae:41:c4:44:c5:e6:71:4b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Validity
Not Before: Oct 15 01:32:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55465ca6a070f130662853b69a4805456fe24e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:96:f1:c0:56:96:36:48:b7:a0:43:7d:d7:
c3:35:b0:55:69:8e:d9:a3:27:ff:09:fe:23:1c:c8:
44:72:1c:9d:90:e6:73:3e:24:ca:90:48:8a:4a:b5:
ac:5a:d5:93:f2:d6:4c:66:ed:2d:c9:ac:65:ad:f2:
4a:ce:94:07:d6:ef:65:73:34:3d:04:15:62:36:a3:
c3:89:b0:f3:f6:90:ab:df:95:ab:29:ad:f3:9a:08:
d2:3a:07:12:9d:19:45:8f:32:cb:6f:fe:dd:85:a8:
b4:3f:18:bc:1e:4f:35:52:5b:71:c8:3b:ba:a3:59:
8c:d4:50:7e:b5:95:60:58:22:a4:5e:60:82:98:ae:
72:10:d8:b8:b1:8d:1a:97:bc:03:26:ac:d8:f9:dd:
60:e4:ec:06:88:ab:61:cd:bd:52:c5:2a:e1:4f:f3:
05:3b:bf:71:a4:72:1e:3a:68:16:65:96:c2:f0:44:
78:54:b9:d2:26:e3:9f:ff:5e:bd:a3:68:6b:f4:9c:
0e:76:85:07:ea:06:bc:f5:ab:74:09:94:6b:ae:8d:
50:c9:7e:d5:9c:79:0d:62:24:95:f3:01:5d:ec:46:
ab:f1:95:8c:07:39:74:42:e6:46:51:8c:9e:e4:f6:
3b:80:6f:e9:7a:90:3f:eb:9d:2c:92:78:4f:2a:d4:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:46:5C:A6:A0:70:F1:30:66:28:53:B6:9A:48:05:45:6F:E2:4E:36
X509v3 Authority Key Identifier:
keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/VUZcpqBw8TBmKFO2mkgFRW_iTjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.175.0/24
IPv6:
2001:67c:2278::/48
Signature Algorithm: sha256WithRSAEncryption
6e:68:52:15:39:c9:fc:da:3f:8e:99:90:84:4e:1d:42:d9:92:
0e:d1:86:9c:31:f6:f7:aa:4a:99:c1:c6:e2:68:08:8e:1b:99:
1c:3c:d7:5d:4c:bf:05:08:30:dc:5a:e9:89:f5:bd:af:2e:f3:
64:1e:7b:96:ed:f7:97:d8:13:0c:d2:33:8a:a8:24:b7:33:d0:
6d:92:3d:eb:f7:eb:4a:2d:55:a2:9f:c2:1b:38:4c:59:80:90:
2e:17:a3:4f:a6:b8:a7:42:52:7d:e9:78:fc:fc:d9:0c:29:f3:
ab:82:8f:d0:7c:8f:ea:81:44:cc:63:7a:9d:b7:2b:77:c8:c1:
4d:58:91:03:b2:cb:e5:41:21:75:39:e0:29:04:cd:5f:16:e9:
73:e4:b7:07:36:9a:2c:76:98:17:26:be:54:23:c2:5f:ce:8d:
13:10:bd:7c:68:12:d8:85:ea:7c:b2:d0:c7:d6:f4:e6:96:b7:
aa:16:be:94:e6:16:86:cc:9e:d2:71:fb:54:dc:63:c2:ef:2f:
89:34:27:d5:3e:18:cd:1b:ea:e2:93:2f:47:c9:4d:a2:5e:4a:
c9:90:aa:51:be:25:4a:46:d1:f0:fa:d2:ee:ac:9e:1d:94:8d:
45:b1:0b:b1:4d:d4:be:f9:50:40:c7:60:2c:e6:72:f2:01:3e:
da:50:e7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:38:00 2024 by rpki-client on console-fra.rpki-client.org