Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/7LPnj62tdtEc1Z4RqWDWzEBL0q4.roa
File: 7LPnj62tdtEc1Z4RqWDWzEBL0q4.roa (raw, json)
Hash identifier: Uf+B/XuHJvroyy1GT61p+ABhzcBUf1G/IkJIPepk5sg=
Subject key identifier: EC:B3:E7:8F:AD:AD:76:D1:1C:D5:9E:11:A9:60:D6:CC:40:4B:D2:AE
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 018DFF7C3BB031620EC4C0ED4BD01B353451
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/7LPnj62tdtEc1Z4RqWDWzEBL0q4.roa
Signing time: Sat 02 Mar 2024 14:05:48 +0000
ROA not before: Sat 02 Mar 2024 14:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42675
IP address blocks: 95.141.241.0/24 maxlen: 24
2a13:7c80::/29 maxlen: 48
Validation: Failed, certificate revoked on Sat 02 Mar 2024 17:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ff:7c:3b:b0:31:62:0e:c4:c0:ed:4b:d0:1b:35:34:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Mar 2 14:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecb3e78fadad76d11cd59e11a960d6cc404bd2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:2d:e0:25:00:55:d7:1b:79:fd:ef:92:7a:
98:12:e5:0c:41:b5:d2:f5:20:ef:01:f8:ab:96:6f:
1e:49:e7:f8:82:a1:6a:5b:99:15:ad:ba:85:7d:0a:
04:9c:cb:b2:1b:9e:b3:43:e8:ab:2b:49:d1:42:8c:
01:26:d7:88:d3:ef:48:ed:65:f8:1e:96:a5:20:a5:
30:7c:8a:a6:20:38:b1:31:84:03:94:a5:6e:eb:6a:
28:e8:0f:44:6f:05:ae:a0:86:74:b0:b0:c7:95:00:
39:7f:a7:c0:b9:33:50:a7:5f:a2:e6:ff:05:1a:0e:
4a:71:03:4c:4d:f3:24:5a:5a:2c:d3:b7:96:c5:f9:
10:ba:e7:c4:b2:d4:95:81:53:56:0f:ab:1b:ad:29:
77:a7:d2:00:d7:a6:a8:7b:4e:3a:e4:d8:ba:a2:14:
c4:f9:6f:47:4d:ed:42:da:0e:6c:c0:5b:3b:e3:1a:
ee:ee:38:42:58:72:03:c1:fa:8a:10:6e:e5:4a:74:
e8:8b:33:01:66:fa:da:26:58:6b:09:b4:74:b6:9b:
7b:17:92:c8:c9:6e:a2:6f:0c:65:ef:ea:71:ea:05:
3f:fb:e5:d9:d5:d6:31:e1:eb:73:f2:7b:be:04:9e:
90:a1:be:e6:9f:ce:a5:1c:57:d5:c9:48:8c:4e:b5:
da:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B3:E7:8F:AD:AD:76:D1:1C:D5:9E:11:A9:60:D6:CC:40:4B:D2:AE
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/7LPnj62tdtEc1Z4RqWDWzEBL0q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.241.0/24
IPv6:
2a13:7c80::/29
Signature Algorithm: sha256WithRSAEncryption
4d:51:57:53:a3:1d:51:6c:9a:c9:e7:35:52:3e:29:49:7b:3c:
0f:b6:8e:27:55:99:0c:83:1f:bd:60:39:bb:94:a6:98:d1:2e:
5b:9f:99:eb:9f:05:09:b5:60:c0:53:71:dc:95:35:2e:a5:0f:
fb:3c:e1:d4:97:cf:95:0b:06:fc:28:4b:c1:ea:a2:62:54:52:
2f:f2:4c:1e:9d:77:fb:31:bf:7d:33:f3:de:a5:8a:43:20:0a:
f0:75:4b:6d:6a:ff:54:ed:e9:b2:b2:b6:be:a6:39:99:d1:2e:
3e:29:4e:82:58:8a:a8:f5:47:3e:f5:46:d1:a1:e0:ee:79:01:
1b:fe:30:a5:d3:6c:06:90:63:6a:2f:09:48:1f:65:b4:2f:52:
50:87:57:48:1d:0b:c8:93:c4:bf:cc:87:3b:d5:e7:48:e5:83:
68:bb:7d:c6:0c:18:b1:7a:d3:91:6e:80:58:7d:56:14:a8:71:
9e:00:8d:94:6b:d9:33:37:fb:a9:e0:00:bd:51:65:e9:35:0c:
9e:2b:13:8a:fe:b6:4b:1e:40:95:e8:d4:3b:0e:4d:d8:d6:21:
50:80:17:4c:37:d9:27:6b:42:b4:f3:6a:bb:ce:9a:38:e9:5b:
ec:d2:4d:0b:6d:38:ce:1b:95:16:2a:a2:fb:03:8e:0b:88:b9:
3a:49:76:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 2 21:37:39 2024 by rpki-client on console.sobornost.net