Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fyl_nhX6z-n5l6jVtRZP0XaE2R0.roa
File: fyl_nhX6z-n5l6jVtRZP0XaE2R0.roa (raw, json)
Hash identifier: +Ep2YM2vWB/tnxBOD22cL7W2gtKKT1gJuLzjxsDyjQo=
Subject key identifier: 7F:29:7F:9E:15:FA:CF:E9:F9:97:A8:D5:B5:16:4F:D1:76:84:D9:1D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018683AF6548A56FD73FADA13BCF13D1EDB6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fyl_nhX6z-n5l6jVtRZP0XaE2R0.roa
Signing time: Fri 24 Feb 2023 13:49:15 +0000
ROA not before: Fri 24 Feb 2023 13:49:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49716
IP address blocks: 171.22.28.0/24 maxlen: 24
95.214.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:83:af:65:48:a5:6f:d7:3f:ad:a1:3b:cf:13:d1:ed:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 24 13:49:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f297f9e15facfe9f997a8d5b5164fd17684d91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:1d:f3:30:59:76:12:55:2c:47:bf:0f:24:
2d:e0:da:b9:07:a8:da:d4:25:d9:8b:4b:82:af:78:
6a:a5:f4:21:f1:17:87:a1:ea:3a:11:5e:fb:ac:c9:
71:dc:c6:49:95:f9:96:81:d8:01:a9:cb:a9:58:fa:
63:b6:ae:25:51:e3:c8:32:2f:0d:12:20:03:37:77:
27:be:a8:cb:a1:60:66:f9:dc:0d:ee:24:8e:25:e5:
16:4d:00:62:8a:ab:35:3d:1d:b2:a6:55:8e:62:a0:
87:a2:86:c2:8e:58:4f:dc:e3:ac:e0:f9:99:56:67:
0d:46:c1:0f:44:47:9d:d5:90:7a:1f:a6:eb:17:0e:
ef:ba:7f:90:54:4c:60:03:c9:8a:06:a6:e2:a9:18:
94:5d:35:6d:fc:b1:a3:1e:6f:fc:5a:fa:da:54:e6:
1e:2e:f5:7c:04:80:d8:8d:01:3e:e4:cc:63:09:9e:
df:f2:1b:6a:45:be:97:8e:85:fe:f2:7d:09:cd:9e:
e2:5c:46:37:64:05:56:42:5b:e2:e0:0b:b9:60:7a:
a5:b2:de:79:df:39:1f:1f:26:ca:2f:8b:39:9a:26:
55:cc:78:42:95:84:c4:d6:a0:b7:22:6a:d2:64:02:
a2:9c:a3:59:56:23:e5:cc:11:58:a7:94:4e:54:cd:
d0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:29:7F:9E:15:FA:CF:E9:F9:97:A8:D5:B5:16:4F:D1:76:84:D9:1D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/fyl_nhX6z-n5l6jVtRZP0XaE2R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.26.0/24
171.22.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:61:83:0a:5d:ff:02:9b:f2:6d:64:74:73:76:27:93:eb:39:
eb:ac:d4:88:85:76:69:49:a6:10:2a:1d:a3:e1:51:29:3f:2e:
b7:bb:83:35:4a:db:8e:23:d2:d5:df:2d:f3:6c:68:25:47:80:
5e:ed:e4:0f:c1:c2:17:78:a5:a0:81:74:0c:fd:7a:d1:48:bc:
27:0f:d2:8f:d7:35:41:c4:be:1d:99:2b:25:74:2b:a2:4d:ef:
6e:b6:10:11:eb:07:4e:64:2b:95:87:d6:f4:86:ff:71:1b:51:
2e:36:cf:e6:8c:12:81:60:cf:d1:fd:b6:11:ce:46:2d:f8:72:
cd:eb:84:45:e1:af:06:68:46:e0:50:8f:68:2c:7d:b3:31:12:
b9:23:44:5e:eb:19:c4:de:1f:28:12:6b:54:a2:ec:ad:37:81:
fe:40:fc:b3:b3:1e:c5:b5:77:10:e9:02:41:56:2f:79:4c:fb:
38:27:82:f5:96:66:92:c7:3b:80:95:6b:01:3d:f9:94:51:8f:
ad:c3:c3:2e:52:51:61:2e:4b:b0:8c:de:67:93:bc:c1:68:18:
83:6f:8d:26:b4:95:67:51:4b:9d:da:55:4e:0e:43:aa:79:e9:
f6:88:5c:30:16:5a:1b:af:06:cc:40:7e:1e:68:b2:0f:6a:f3:
6f:38:a3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org