Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h4nsjT_zywL7eJe5QV57phkzTdk.roa
File: h4nsjT_zywL7eJe5QV57phkzTdk.roa (raw, json)
Hash identifier: GcDUvETnMlAAfGkNzj8iTWWzkBRxL1IyTlufeAKHWfE=
Subject key identifier: 87:89:EC:8D:3F:F3:CB:02:FB:78:97:B9:41:5E:7B:A6:19:33:4D:D9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD131A7A90E828522C456AA5652DE2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h4nsjT_zywL7eJe5QV57phkzTdk.roa
Signing time: Tue 02 Jan 2024 06:29:40 +0000
ROA not before: Tue 02 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216419
IP address blocks: 95.214.26.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 13:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:13:1a:7a:90:e8:28:52:2c:45:6a:a5:65:2d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8789ec8d3ff3cb02fb7897b9415e7ba619334dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:5e:a7:1c:c2:09:1b:cc:50:f9:2a:25:3c:
d4:f5:da:34:07:89:85:dd:79:1b:00:65:53:7e:e9:
23:5f:9c:f0:60:b8:0c:88:38:d3:0f:41:bd:8b:7f:
b8:9f:57:2b:7b:a5:e1:da:6c:a9:d4:f3:b6:63:83:
6f:54:96:90:85:84:1c:06:15:7c:6a:3b:8b:45:ab:
1c:2a:6d:4e:dc:17:23:8a:54:fd:28:02:29:2c:44:
9b:06:4c:a0:de:65:92:b8:2d:93:6b:ca:a4:95:b0:
c7:e2:a1:d2:2b:88:d8:ca:29:2e:40:b9:c5:64:c9:
a0:33:4b:39:c0:bd:8c:a6:a6:5f:5b:ac:f9:2a:f9:
19:d3:34:bf:2d:20:f1:fe:59:c7:3b:8a:92:c0:28:
f6:bc:0d:c8:7e:05:a0:99:4f:c9:53:be:6f:f7:60:
2b:34:71:a0:0f:c0:52:95:a2:df:68:c4:98:9d:a3:
6f:1c:d5:9f:b7:46:5d:66:82:52:42:9c:d7:0e:71:
94:98:92:93:55:ac:c6:51:be:a0:82:74:08:ca:0e:
89:a9:8c:a7:62:5e:35:78:a2:7e:e3:d5:4f:bf:f7:
d5:6b:bd:2e:d6:76:c6:a1:22:c9:06:87:30:54:cb:
95:d5:a4:d7:37:af:56:39:f2:e7:04:3e:bb:63:d6:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:89:EC:8D:3F:F3:CB:02:FB:78:97:B9:41:5E:7B:A6:19:33:4D:D9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/h4nsjT_zywL7eJe5QV57phkzTdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.25.0-95.214.26.255
Signature Algorithm: sha256WithRSAEncryption
b2:94:fd:7a:80:86:3e:91:ec:30:29:57:e1:be:b6:15:26:b4:
98:9c:d8:8c:5a:ff:b4:c9:05:31:ef:ea:d5:72:fd:fe:b6:18:
ce:29:f6:ae:b5:03:3e:8b:f6:c6:ef:e6:fa:e7:7f:30:c1:2d:
b7:6a:a3:92:65:de:bf:53:a5:32:37:93:c1:91:24:17:5e:6a:
de:53:78:eb:ec:f3:9c:67:2b:58:0f:45:62:46:65:50:7c:df:
ca:e5:71:9f:8f:67:49:bd:41:34:19:fe:ba:14:27:da:a4:dc:
e9:da:2b:27:55:b3:9f:d4:10:f3:b9:6b:56:e5:d1:53:7e:ef:
d6:b3:f8:ff:f5:56:b5:80:3d:1e:a1:db:37:d2:d9:32:64:cd:
2a:d2:70:ef:05:83:b8:72:40:47:7f:16:e3:2a:81:cc:b9:ba:
6f:7d:80:82:cb:b8:ab:59:a6:5a:29:7d:28:ae:1a:96:ce:08:
01:1e:a1:2d:80:18:a1:1a:35:6b:36:fc:11:f3:91:86:8d:7b:
b9:41:fc:86:5c:cc:c1:ea:a6:46:ad:53:7e:51:0c:de:83:00:
c1:61:64:be:b8:78:ec:cc:35:83:7c:e8:88:3d:4d:39:df:cc:
c2:aa:2b:13:21:cc:9e:d8:e2:3d:3a:01:aa:6b:9e:c8:d6:b7:
14:d2:27:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 17:26:15 2024 by rpki-client on console-ams.rpki-client.org