Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/rX14-d9DmNtdTJX9NcLxEdhsttA.roa
File: rX14-d9DmNtdTJX9NcLxEdhsttA.roa (raw, json)
Hash identifier: YVT+JFarxFI3N8QBBt0KUxW5QkY60JIeZl7plCs3LrU=
Subject key identifier: AD:7D:78:F9:DF:43:98:DB:5D:4C:95:FD:35:C2:F1:11:D8:6C:B6:D0
Certificate issuer: /CN=6137b5dbaaba28ae28c8e9a9780fb70c24fc9190
Certificate serial: 01856ED4B6E48CF10877077A6D16901133A6
Authority key identifier: 61:37:B5:DB:AA:BA:28:AE:28:C8:E9:A9:78:0F:B7:0C:24:FC:91:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/rX14-d9DmNtdTJX9NcLxEdhsttA.roa
Signing time: Sun 01 Jan 2023 19:35:12 +0000
ROA not before: Sun 01 Jan 2023 19:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207979
IP address blocks: 95.215.118.0/23 maxlen: 23
95.215.116.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:b6:e4:8c:f1:08:77:07:7a:6d:16:90:11:33:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6137b5dbaaba28ae28c8e9a9780fb70c24fc9190
Validity
Not Before: Jan 1 19:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad7d78f9df4398db5d4c95fd35c2f111d86cb6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a5:1e:87:8c:4d:e7:35:a4:b8:5d:63:2b:00:
50:e8:b8:e3:09:c0:23:90:ce:e2:31:20:76:08:15:
20:8b:25:a4:66:80:55:a8:b2:da:c6:e2:5b:66:0f:
b0:82:46:8d:70:7b:7e:95:2e:12:87:e3:2b:09:ff:
be:08:3a:28:59:35:ae:34:a1:c0:c0:63:cd:15:88:
dd:58:38:df:8c:0f:28:fa:10:27:70:70:78:1e:db:
c3:a2:37:ab:64:fa:19:ad:68:34:8a:16:2f:95:66:
d7:e3:64:3f:23:db:c4:d8:6d:12:19:b6:9e:9c:12:
84:5f:d0:40:da:1a:39:7a:02:d0:aa:c6:4a:9a:84:
9a:28:3d:9c:5c:82:f9:a6:c6:5e:ef:ac:6f:ba:8b:
04:6c:2a:0f:0c:31:72:aa:f2:bb:6e:6c:43:1c:84:
4b:2e:62:a5:99:02:3f:b6:5b:b0:87:f1:30:0b:b0:
61:fc:6f:c1:8a:4f:a6:06:81:c3:26:86:20:65:60:
c5:b1:8f:5e:14:02:96:57:ed:87:ef:13:8d:11:da:
9c:d3:2e:ec:6f:9e:89:c5:d5:71:cc:b9:fd:98:75:
7a:96:75:3d:11:bf:72:8f:6c:23:62:26:e7:9a:a0:
2f:9b:95:a4:7a:3a:10:ba:94:ac:3e:ec:02:33:b7:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7D:78:F9:DF:43:98:DB:5D:4C:95:FD:35:C2:F1:11:D8:6C:B6:D0
X509v3 Authority Key Identifier:
keyid:61:37:B5:DB:AA:BA:28:AE:28:C8:E9:A9:78:0F:B7:0C:24:FC:91:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTe126q6KK4oyOmpeA-3DCT8kZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/rX14-d9DmNtdTJX9NcLxEdhsttA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b0675b-e3bc-4dfc-bcca-23cd347d9719/1/YTe126q6KK4oyOmpeA-3DCT8kZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.116.0/22
Signature Algorithm: sha256WithRSAEncryption
68:c8:7e:05:40:e0:1b:59:60:43:d1:33:b9:46:35:1e:76:dc:
88:c7:e9:98:ef:fa:6e:1f:00:d8:79:5c:99:57:07:4b:f8:0d:
d5:61:49:36:09:a3:12:cb:c1:d3:c6:ef:67:7d:87:e8:db:31:
1f:cf:8b:eb:8e:32:77:f3:ec:0a:18:40:c1:ac:51:db:19:ad:
dd:41:94:71:b2:6d:48:f4:5f:b1:2d:68:63:5a:45:1b:d0:b9:
26:6d:55:52:e6:7f:82:fa:73:69:fa:42:f1:08:19:9e:61:ac:
fb:11:dc:b2:ea:9e:02:e1:6b:52:40:0f:2c:57:1a:1a:9b:9e:
3c:99:8d:7c:96:0b:9a:fd:00:ac:30:9f:a2:49:8a:2c:36:a4:
44:26:fe:fe:ac:b6:54:36:b3:59:8b:f4:52:b1:c6:3f:76:9e:
48:3e:ab:fc:6e:0a:70:04:fd:85:64:17:a6:16:a6:29:5e:53:
90:96:10:43:65:96:1d:ff:31:64:60:93:89:06:b3:c0:ed:22:
ff:51:1e:92:a3:f5:b2:5b:31:c5:9b:f7:37:5b:bf:a4:12:95:
2d:86:eb:e6:56:0a:17:09:7d:20:58:9e:f9:22:ce:4d:a2:09:
bc:93:6d:2c:b9:17:25:60:a7:69:b5:c1:f0:88:2e:96:6e:46:
71:95:e8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:42 2024 by rpki-client on console-fra.rpki-client.org