Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/w5A6D3VcfNTinV1mK2B8vsXWiQA.roa
File: w5A6D3VcfNTinV1mK2B8vsXWiQA.roa (raw, json)
Hash identifier: SCTKLoCmn1hYSADTGtCxld2rMzRa6J3kLeSZTgm4AhI=
Subject key identifier: C3:90:3A:0F:75:5C:7C:D4:E2:9D:5D:66:2B:60:7C:BE:C5:D6:89:00
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 018C9DAAB0C8EA1F9F54505F43D8FBA3CF4A
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/w5A6D3VcfNTinV1mK2B8vsXWiQA.roa
Signing time: Sun 24 Dec 2023 21:10:58 +0000
ROA not before: Sun 24 Dec 2023 21:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50366
IP address blocks: 109.95.138.0/24 maxlen: 24
109.95.136.0/24 maxlen: 24
109.95.139.0/24 maxlen: 24
109.95.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9d:aa:b0:c8:ea:1f:9f:54:50:5f:43:d8:fb:a3:cf:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: Dec 24 21:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3903a0f755c7cd4e29d5d662b607cbec5d68900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bb:b0:d1:31:f7:dc:78:97:59:82:0c:22:99:
0a:73:a7:c4:ca:ad:70:51:86:41:da:cf:e4:fa:3a:
bc:12:bd:de:93:b7:7f:37:be:0c:96:97:da:cb:18:
1b:5a:dd:fc:7a:d6:13:3d:50:ea:7d:3a:77:fa:49:
ed:ae:de:eb:41:55:13:94:e0:1a:2b:5d:79:87:f7:
47:b2:f4:dd:a6:60:b1:42:e0:af:b0:d5:d0:bc:07:
49:0f:ce:7a:d0:30:5a:df:cb:5d:db:35:ed:ab:c5:
e3:df:2b:6f:ae:8c:31:35:96:1a:57:71:9e:cf:e8:
74:43:1d:83:61:a3:67:9b:26:90:fb:f4:e2:b4:c6:
35:95:59:b2:c3:bd:5a:c7:68:8d:dd:22:1e:cc:54:
bb:85:16:15:3e:f6:52:70:4f:37:90:62:82:9d:51:
ce:db:9d:db:e3:17:82:47:be:65:46:f8:e3:1c:47:
de:6b:33:01:f0:66:41:3d:62:34:ab:9b:64:11:9b:
d3:79:af:87:e2:8e:d0:41:22:ed:81:07:1a:84:59:
dc:1a:8d:6f:bf:04:68:32:84:b9:ba:01:ba:09:65:
8e:f0:54:76:c2:c1:bf:0f:43:cf:3d:dc:28:26:c0:
3c:ef:1b:e6:d0:95:0d:4a:9d:1b:33:8d:c1:75:48:
8e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:90:3A:0F:75:5C:7C:D4:E2:9D:5D:66:2B:60:7C:BE:C5:D6:89:00
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/w5A6D3VcfNTinV1mK2B8vsXWiQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.136.0/24
109.95.138.0-109.95.140.255
Signature Algorithm: sha256WithRSAEncryption
a6:7c:8d:8b:9f:ce:3f:86:e6:f5:82:67:a5:8a:f5:9c:b7:40:
31:f9:dd:a5:4b:da:e6:32:a2:2a:e7:17:13:73:83:7d:2a:8b:
44:77:8a:de:2f:37:0b:9c:32:d4:0a:10:1d:63:51:6f:b7:42:
b2:a7:95:8c:96:e9:4f:92:e1:7b:1d:b8:34:00:e4:88:65:f0:
d2:4c:55:5d:e7:ae:b7:b8:2d:b1:b4:e2:00:8b:1a:21:85:ed:
a6:52:d7:b4:fe:33:cc:24:5c:f8:13:1f:b6:13:24:c1:0b:55:
4f:2e:1c:4f:be:13:c5:bc:ad:fd:b4:44:4d:11:47:dd:e3:84:
9a:64:86:df:7e:01:5f:48:bf:13:ad:1e:3f:46:76:5c:6f:ed:
9f:f8:9f:d1:3d:4e:c2:e8:cf:af:3f:27:84:84:bb:5d:5a:d9:
a6:97:4a:c1:f4:c7:c9:3f:e0:3c:2c:de:2e:40:3a:ad:97:d3:
68:29:66:13:b9:0d:70:b3:69:0b:2d:40:c4:31:b3:18:39:30:
e2:c6:fb:53:9e:d4:36:92:56:82:bb:0e:2b:50:0b:ef:e8:f6:
be:22:2d:a1:db:66:e2:74:5b:6c:72:60:1f:6a:1a:7e:f4:b1:
4d:ba:1c:fb:c1:15:44:70:5b:ae:23:6f:93:db:c6:71:dd:db:
38:91:5f:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:47 2023 by rpki-client on console.sobornost.net