Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/vm0Wgk_BASd13M3M26dVv9NC0CE.roa
File: vm0Wgk_BASd13M3M26dVv9NC0CE.roa (raw, json)
Hash identifier: +VpJMuzt4+VwHxIJZP0zGKCi4rud8yGbFy+lHUSxk2M=
Subject key identifier: BE:6D:16:82:4F:C1:01:27:75:DC:CD:CC:DB:A7:55:BF:D3:42:D0:21
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 01857082B02A25F2424F78CFE65C1856221E
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/vm0Wgk_BASd13M3M26dVv9NC0CE.roa
Signing time: Mon 02 Jan 2023 03:24:51 +0000
ROA not before: Mon 02 Jan 2023 03:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201748
IP address blocks: 95.39.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:b0:2a:25:f2:42:4f:78:cf:e6:5c:18:56:22:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 2 03:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be6d16824fc1012775dccdccdba755bfd342d021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:c1:b0:60:d0:6e:37:c6:9f:d5:2d:d3:63:
b5:d0:47:e6:af:c2:74:6c:6d:7c:06:f0:86:88:37:
7d:e5:c7:c4:c7:a6:27:64:8f:47:ca:d3:19:77:0f:
48:69:db:3e:f3:da:fa:0c:b3:60:49:60:ad:4b:01:
cf:c0:d1:b7:5f:a6:af:64:04:b2:a6:1f:e5:9f:64:
e1:d3:72:f3:bd:c8:9f:9b:5e:8a:49:7f:b5:30:e7:
9e:8f:88:c7:0d:0e:3f:31:69:14:a5:49:bf:ff:5b:
fe:31:0e:a7:3f:92:fc:f3:c5:ae:eb:fb:d9:1f:e3:
11:f4:9b:f2:aa:ee:ce:47:74:37:82:d9:14:ef:79:
07:cc:fb:30:36:4b:a7:87:ae:f4:92:d8:6e:bc:aa:
2a:d1:44:94:df:1c:74:4d:9b:1a:28:57:c4:b8:cc:
d6:59:eb:cd:bf:db:3f:ac:3e:e2:ee:36:b9:ac:93:
55:7f:2c:04:6b:13:39:1f:bb:24:6a:71:79:76:eb:
85:7b:a4:e0:7d:79:0a:9a:5b:05:32:77:da:13:7c:
23:cf:41:80:9b:d6:92:88:db:de:ab:5b:08:67:39:
d1:85:85:82:d1:26:d7:3b:29:09:e0:3a:01:60:cd:
8b:55:3d:b6:8a:3e:bd:e6:66:18:ae:41:57:66:d9:
d7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6D:16:82:4F:C1:01:27:75:DC:CD:CC:DB:A7:55:BF:D3:42:D0:21
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/vm0Wgk_BASd13M3M26dVv9NC0CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.39.17.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a1:af:7b:7a:52:46:79:dc:6b:26:8f:22:4a:6b:f9:00:75:
0d:1a:80:20:94:73:a8:f7:57:03:1d:0c:24:83:39:d5:b6:f1:
ec:5f:00:b7:80:61:1c:07:91:c7:47:d4:0f:2a:33:04:f7:b6:
30:16:45:3b:3b:c2:2b:d1:31:eb:b7:c9:2e:7a:58:b6:6c:ca:
97:1d:31:a3:96:13:aa:01:26:17:4a:42:f7:02:92:27:1c:e3:
7e:f3:93:18:a4:76:a3:81:87:c7:3b:a3:49:be:6e:5f:99:aa:
a1:25:63:03:2a:6b:ec:45:8d:bf:e4:4b:81:ec:4a:86:5b:ba:
13:b3:90:ff:af:0a:7e:13:f4:3a:f9:cc:40:96:22:91:f5:7a:
26:8d:50:53:a1:6b:65:fd:73:86:c3:5d:05:a5:68:c6:9d:a3:
e8:2c:aa:8b:44:ef:a0:15:4b:2e:e7:97:e0:c1:80:44:4e:c3:
ac:aa:8e:28:a9:a9:e0:7c:8a:b6:3f:ac:d1:ff:d2:ad:b2:2c:
f1:5a:c5:90:31:58:24:11:58:54:3e:59:96:ef:04:85:cf:ff:
68:b5:41:de:e9:19:2c:7b:6b:60:99:5c:38:80:69:9f:c5:7e:
a5:41:ae:89:8e:a5:1d:65:5e:13:df:ee:fa:4b:a2:6c:9a:46:
e4:36:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:57 2023 by rpki-client on console-fra.rpki-client.org