Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/OoKtpYXLwZXL9efgfwnErVWNXag.roa
File: OoKtpYXLwZXL9efgfwnErVWNXag.roa (raw, json)
Hash identifier: CatzKTOiw5HCaD+Qa5nvhgFe/g5/AALWdnuMzHCdW5k=
Subject key identifier: 3A:82:AD:A5:85:CB:C1:95:CB:F5:E7:E0:7F:09:C4:AD:55:8D:5D:A8
Certificate issuer: /CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Certificate serial: 018CC2DAD1C9AD2A2DB633AEE0A0D8402EB6
Authority key identifier: 44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/OoKtpYXLwZXL9efgfwnErVWNXag.roa
Signing time: Mon 01 Jan 2024 02:29:29 +0000
ROA not before: Mon 01 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204105
IP address blocks: 95.215.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 14:40:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d1:c9:ad:2a:2d:b6:33:ae:e0:a0:d8:40:2e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Validity
Not Before: Jan 1 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a82ada585cbc195cbf5e7e07f09c4ad558d5da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0d:93:7e:63:ad:d3:6f:ef:c4:dd:6c:77:04:
04:7f:0c:dc:44:e7:40:e2:c1:2f:6a:3f:44:5e:77:
f0:33:ac:e0:a1:34:77:70:5c:8e:f8:3d:3e:08:aa:
da:80:30:bf:ba:29:f3:29:ec:19:af:26:56:0a:08:
28:f4:55:8c:28:3a:58:cd:fd:18:4a:7b:38:d4:0e:
8b:8c:95:2c:10:40:c0:84:21:ca:e2:ba:73:e4:06:
d5:d1:14:f8:0b:b7:c1:de:00:f9:61:7a:15:97:60:
e8:94:12:7d:cc:27:ef:06:43:75:6c:a4:41:d7:04:
0a:91:ff:32:8a:e8:29:85:73:7e:cc:99:cf:f9:f2:
92:d5:02:7c:88:7c:1e:33:da:e7:87:92:19:68:5e:
18:e5:e4:68:36:82:ab:80:13:6e:df:8d:27:fc:b9:
7b:28:98:14:21:8b:89:af:46:7b:8e:0f:31:5b:c3:
71:5f:8c:d3:6f:f4:37:92:3d:1f:4f:dd:17:7f:4d:
37:cd:da:e0:b6:0b:a6:6d:13:c2:6e:d9:e5:db:05:
f4:64:3c:ec:6a:97:4d:19:96:5b:be:84:12:4a:fa:
b0:8c:85:26:71:2c:81:c7:99:48:e6:92:3a:a2:cb:
ec:ab:7a:7a:b0:cd:74:58:ef:5f:ae:e1:f0:49:be:
f6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:82:AD:A5:85:CB:C1:95:CB:F5:E7:E0:7F:09:C4:AD:55:8D:5D:A8
X509v3 Authority Key Identifier:
keyid:44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/OoKtpYXLwZXL9efgfwnErVWNXag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.59.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:88:bb:5b:a3:39:11:a7:99:86:57:d8:db:08:3b:5b:09:81:
7c:19:17:f3:68:57:d2:e2:d6:e5:79:c3:ce:70:40:3e:99:bb:
4c:ef:4f:7e:28:04:ba:51:b1:cb:37:92:47:ef:9d:16:e2:4d:
f6:39:97:7d:ac:68:09:0b:44:a4:46:f6:3c:a6:d1:68:a7:ca:
ee:0f:ce:5f:4a:00:8a:b0:64:53:75:f0:05:6a:71:84:96:79:
bd:87:bc:4f:e5:36:d6:08:fb:90:93:de:4b:37:22:81:d3:3d:
bd:ac:01:63:02:8b:6c:91:38:ef:e6:c2:9c:4a:36:4f:11:02:
ac:3e:02:94:ae:a0:34:22:66:33:67:71:bd:9f:6e:ae:9f:67:
e2:38:e5:56:e5:19:1a:78:26:61:c2:86:ce:bc:66:9c:38:00:
e3:68:12:9a:11:0d:c5:a9:fa:8b:ee:71:87:86:24:89:d8:b4:
31:be:81:3e:d6:de:e5:9f:75:3f:55:8c:70:c6:66:c5:7a:83:
f4:77:b9:7d:48:11:b1:7c:81:d2:6b:60:a0:63:04:d5:6c:c7:
bb:64:6e:ae:ac:3a:4d:09:77:e8:21:ea:f9:eb:cb:1f:f9:e2:
7f:eb:2e:b3:5d:ef:6a:87:9f:44:cc:ba:c0:fd:c9:23:f2:08:
54:61:70:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:49 2024 by rpki-client on console-ams.rpki-client.org