Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/H7oOY0cyltqL9qKNruTU0vpjnxM.roa
File: H7oOY0cyltqL9qKNruTU0vpjnxM.roa (raw, json)
Hash identifier: CV0PO/A4AHRk8K2pzeorksIPDaQus1z8Bqynuofz9bA=
Subject key identifier: 1F:BA:0E:63:47:32:96:DA:8B:F6:A2:8D:AE:E4:D4:D2:FA:63:9F:13
Certificate issuer: /CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Certificate serial: 0185710BE6AA6BA9B5718973130A751E14C6
Authority key identifier: 4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/H7oOY0cyltqL9qKNruTU0vpjnxM.roa
Signing time: Mon 02 Jan 2023 05:54:43 +0000
ROA not before: Mon 02 Jan 2023 05:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48431
IP address blocks: 185.57.132.0/22 maxlen: 22
95.80.190.0/24 maxlen: 24
95.80.128.0/20 maxlen: 20
95.80.128.0/18 maxlen: 18
95.80.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:e6:aa:6b:a9:b5:71:89:73:13:0a:75:1e:14:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e72ac71eb4507ac0a652a54598dae451fe33f47
Validity
Not Before: Jan 2 05:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fba0e63473296da8bf6a28daee4d4d2fa639f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:e1:a6:e8:f1:8b:e2:16:44:18:9f:f7:55:
e3:aa:1b:10:d1:23:a8:0a:17:dc:73:37:cc:0f:4f:
56:69:34:c4:09:e0:4f:c1:e9:fc:80:ab:44:fb:5f:
5a:1b:39:38:eb:ad:a4:19:a3:14:45:20:06:f2:d2:
5f:4d:f4:cb:8e:aa:79:92:64:54:f2:2d:ba:45:b2:
c5:83:ee:fd:8f:cd:db:25:72:92:57:2e:94:f7:0e:
2f:60:61:ef:8e:9f:4b:76:15:0c:85:eb:91:0e:26:
c0:d5:bc:50:b2:d6:11:74:c8:cf:1a:6e:b2:6e:95:
fe:79:0d:6a:2a:15:4b:61:79:2a:72:5d:10:49:a9:
d7:c9:33:dc:3a:a7:3e:b5:ab:3d:23:1d:30:3b:de:
53:6e:6d:a5:0d:ed:2a:f7:8b:fb:86:3f:f7:a7:0a:
9d:db:f1:87:ac:1c:c7:bd:7f:28:96:c3:dc:1a:66:
db:b6:0d:c8:2c:bc:de:6e:b3:78:47:64:e2:3c:00:
1c:c8:b4:29:cc:2c:ec:ba:3e:7c:5d:d9:92:3e:03:
02:78:bf:e7:23:de:50:37:f3:d8:fe:65:d6:e7:1c:
8e:f1:29:11:21:da:d9:8d:92:be:4a:f5:a4:0b:b0:
2c:1f:3b:e4:1f:37:d2:60:7c:c5:6c:d8:0f:d1:aa:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BA:0E:63:47:32:96:DA:8B:F6:A2:8D:AE:E4:D4:D2:FA:63:9F:13
X509v3 Authority Key Identifier:
keyid:4E:72:AC:71:EB:45:07:AC:0A:65:2A:54:59:8D:AE:45:1F:E3:3F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnKscetFB6wKZSpUWY2uRR_jP0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/H7oOY0cyltqL9qKNruTU0vpjnxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a07523-8392-47f5-82b3-30c430a398e6/1/TnKscetFB6wKZSpUWY2uRR_jP0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.80.128.0/18
185.57.132.0/22
Signature Algorithm: sha256WithRSAEncryption
53:58:f1:4b:52:70:da:44:d1:3f:2b:85:80:ca:a6:49:42:11:
d6:16:bf:7d:12:a3:d1:42:a5:d5:08:f0:ce:c1:ac:3b:e9:d2:
03:6e:83:0f:f6:7a:8d:d5:59:f0:bb:01:d1:39:44:05:8d:ee:
b0:19:ed:e5:c1:38:12:41:cc:d9:87:18:76:89:d7:48:53:14:
d5:68:8f:27:51:49:09:7e:20:a9:6b:cd:df:3a:9c:1b:eb:71:
d8:e6:38:b2:d3:c9:77:9a:cc:1f:15:f7:95:5c:c4:52:03:45:
5d:6a:1a:ed:d1:d7:76:8e:54:ef:44:08:db:c0:fb:f6:05:be:
40:51:24:f1:17:e6:e8:19:c0:be:55:7e:b3:c8:31:47:7f:74:
bb:c2:61:47:d1:71:6b:ac:55:bd:bd:a7:1b:94:f6:19:f7:98:
fc:8c:67:5d:76:b8:6f:5c:4e:01:27:44:1c:0a:2e:01:2a:68:
36:cd:47:c0:97:3f:85:a0:1a:ca:f5:a0:7a:56:f4:e7:0a:01:
a3:48:93:b2:90:58:1a:fa:16:2e:91:78:e8:81:ad:4c:2e:b5:
23:1d:cc:15:19:55:c1:b5:0f:89:f8:b4:6d:48:21:0b:10:52:
aa:89:84:bf:d1:59:a4:55:bd:bf:04:4d:81:30:67:24:c9:63:
de:ac:63:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:39 2024 by rpki-client on console-ams.rpki-client.org