Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EYIHgmsaryzOaTvZKID2QETqN5I.roa
File: EYIHgmsaryzOaTvZKID2QETqN5I.roa (raw, json)
Hash identifier: GOd4bhAU7Gw8L/zaGYcw5wl2bhMZOmZOYR3XqK6x3IE=
Subject key identifier: 11:82:07:82:6B:1A:AF:2C:CE:69:3B:D9:28:80:F6:40:44:EA:37:92
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E27991F675F6277526909692BB86DB165
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EYIHgmsaryzOaTvZKID2QETqN5I.roa
Signing time: Sun 10 Mar 2024 09:02:10 +0000
ROA not before: Sun 10 Mar 2024 09:02:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215479
IP address blocks: 95.214.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 11:45:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:27:99:1f:67:5f:62:77:52:69:09:69:2b:b8:6d:b1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 10 09:02:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=118207826b1aaf2cce693bd92880f64044ea3792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:92:df:80:e6:7e:84:92:dc:da:ad:2f:28:
9b:db:4b:cc:57:4b:5e:6b:c4:25:38:75:9c:55:e4:
13:29:4f:68:4f:06:5d:1d:8d:0d:6c:0a:8a:ec:29:
03:f1:36:e7:cb:e5:7d:c6:a9:fb:fd:20:2d:84:3c:
f8:ee:b2:2d:6d:69:2b:a5:c9:d2:fe:3a:2c:2a:6c:
e9:70:d4:6a:e1:51:56:a9:12:7f:43:c7:7a:ab:63:
aa:95:95:6e:82:23:8a:86:75:76:a3:79:b0:88:e2:
25:2b:62:78:b7:40:44:3c:90:00:44:1a:9b:be:b6:
27:fe:7e:33:72:d1:23:11:5b:1f:3e:9a:d5:f8:6d:
d7:a9:da:df:f0:44:39:f0:a8:f3:06:20:14:a2:7f:
44:43:18:a4:3a:f8:05:ac:7f:23:a9:fc:30:ac:f7:
64:1e:cf:bb:82:e0:e1:00:5c:47:f7:d0:a9:2d:30:
f5:de:3a:78:8d:fd:e4:c4:88:85:bd:16:cb:a1:b9:
14:fe:e0:72:cd:10:99:7f:53:fe:b4:af:f7:ef:22:
fa:cf:70:ea:d4:46:56:65:8f:68:08:08:2d:f2:c4:
c9:ca:a8:04:b5:c0:60:89:f4:29:e8:6e:a2:aa:c8:
97:18:b8:a8:de:13:d3:f3:2b:bf:50:f0:2b:15:51:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:82:07:82:6B:1A:AF:2C:CE:69:3B:D9:28:80:F6:40:44:EA:37:92
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EYIHgmsaryzOaTvZKID2QETqN5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.27.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ed:53:fe:f7:bc:7d:ce:b4:44:dc:c2:01:fe:75:19:cc:d1:
6d:fd:99:6f:c0:32:fb:c4:66:85:77:c9:57:50:5c:3e:a7:7a:
b2:b3:97:b4:64:13:df:ce:de:df:61:9a:d8:f5:38:e1:98:3f:
a7:14:a6:80:04:48:3c:71:d5:c5:af:2c:7c:1f:a6:e2:fa:df:
b2:1d:9c:3e:28:23:bb:b8:06:f5:59:29:67:26:11:28:f0:96:
d5:81:05:94:aa:d7:93:06:08:a3:2d:1f:07:c9:a2:77:56:ec:
39:e6:2e:6f:94:4c:e7:c3:ac:e7:be:57:25:2d:d2:a5:21:60:
b5:cd:56:34:3b:4b:bf:fd:db:fa:11:c4:81:f4:38:7c:c4:a4:
41:c1:89:41:44:67:88:63:78:5d:f1:d0:e2:71:dc:5a:b6:6d:
80:05:df:5b:32:45:75:16:5d:7e:71:65:65:c6:cd:2f:59:ba:
30:28:a8:37:45:d7:c4:59:ac:7d:c6:49:29:c9:c0:04:39:92:
ca:1d:fa:c2:54:57:29:28:c2:fd:ac:79:af:9d:ff:ec:2a:d1:
71:db:49:65:b2:e2:8b:a1:34:ef:49:1e:62:97:98:fc:d1:7c:
99:49:99:52:46:80:e2:c2:c4:1d:25:55:30:b8:12:32:9d:54:
db:f3:eb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 15:12:34 2024 by rpki-client on console-ams.rpki-client.org