Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/2RBY76S0VPRXHqtRCoZzTdLmJk0.roa
File: 2RBY76S0VPRXHqtRCoZzTdLmJk0.roa (raw, json)
Hash identifier: WYKjp4qg1PRwlAlunDNeF3UPlw5pNlloj3+LSuBGw6U=
Subject key identifier: D9:10:58:EF:A4:B4:54:F4:57:1E:AB:51:0A:86:73:4D:D2:E6:26:4D
Certificate issuer: /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial: 018810479F65ABBE0978C499996EA608D3C0
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/2RBY76S0VPRXHqtRCoZzTdLmJk0.roa
Signing time: Fri 12 May 2023 14:05:09 +0000
ROA not before: Fri 12 May 2023 14:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 95.215.40.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:10:47:9f:65:ab:be:09:78:c4:99:99:6e:a6:08:d3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Validity
Not Before: May 12 14:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d91058efa4b454f4571eab510a86734dd2e6264d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:a9:48:0d:42:bf:d8:95:21:5c:6a:61:6c:
8d:65:19:37:2d:87:4b:10:d7:1f:35:d7:ad:ba:74:
d5:4b:13:5a:87:6c:ae:70:12:a4:3d:40:bb:72:4d:
d6:23:6f:63:65:20:34:50:af:b9:85:0e:72:8c:98:
86:0c:22:7f:86:20:cc:a9:f7:3b:5a:9c:94:cc:30:
6f:77:45:2e:49:1f:06:fd:66:78:41:fc:6a:25:91:
66:a6:3c:b7:f3:1f:2b:aa:76:55:24:10:e1:bf:a1:
b1:06:6b:a8:70:a7:16:73:d5:6a:22:eb:76:e4:91:
47:27:be:e7:22:19:02:71:fa:d1:8e:99:ba:8c:5d:
54:03:54:4c:02:54:2d:8f:e4:18:0e:23:4c:b3:aa:
8f:ec:55:38:7c:e2:2c:97:3c:0a:c3:39:c1:6b:0e:
d3:b6:31:75:e3:b1:c0:ed:95:74:69:81:15:85:d8:
c9:5e:7e:fa:ec:92:83:ea:c1:af:d6:93:78:98:18:
00:07:5e:02:e5:0a:89:03:57:c3:00:e7:50:e4:47:
69:49:34:ba:86:95:bb:e5:15:83:67:57:a1:1f:e1:
e4:e5:15:1e:a2:b2:be:51:70:b4:dd:42:04:47:d3:
cd:18:62:95:6f:eb:a4:dd:fe:78:8f:38:75:61:ed:
3b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:10:58:EF:A4:B4:54:F4:57:1E:AB:51:0A:86:73:4D:D2:E6:26:4D
X509v3 Authority Key Identifier:
keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/2RBY76S0VPRXHqtRCoZzTdLmJk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:a7:11:8d:e2:24:27:0b:30:fb:f4:91:2e:00:28:3e:a6:83:
e2:7d:3f:09:4b:de:00:80:d2:7b:7c:91:88:6c:20:85:6c:d7:
92:a5:2c:b1:50:c5:dc:e8:98:a3:75:d6:c6:98:1a:ef:51:36:
7e:b1:53:08:7b:5b:d5:44:70:e9:a7:e8:c0:e3:d7:be:50:21:
d5:22:dd:61:fa:e5:8b:88:64:13:cb:81:45:e0:3a:ae:f4:d0:
0f:e3:4b:e1:84:0f:58:a9:36:48:c5:c5:39:82:e7:1a:31:bd:
3a:1c:f5:99:5b:9b:a4:1b:e2:16:43:ea:3d:32:c8:57:0f:e2:
f4:71:93:c0:d0:10:70:2b:0b:b9:1f:26:be:64:5b:b1:ab:ac:
71:6b:22:85:2c:60:c7:bc:1d:9a:b9:b5:84:11:f6:f7:ea:58:
f9:34:5b:66:70:44:ed:a8:29:1c:04:b4:f7:e8:c3:b7:24:25:
60:ba:50:09:51:76:72:8e:86:ae:28:4c:42:8e:be:8a:a6:4b:
bb:9a:57:15:f3:d2:0a:5d:11:7f:db:2d:ef:85:aa:b8:e0:bb:
ce:e0:9a:cc:33:a3:22:71:c5:e7:69:43:ce:90:39:ce:53:c4:
11:f2:e3:53:64:df:5d:31:5f:63:48:f6:91:6f:8c:a4:7f:f2:
5f:9c:3f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:32 2024 by rpki-client on console-ams.rpki-client.org