Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hJeqveBqJMPdJ-mj-0Nv_fMcpDU.roa
File: hJeqveBqJMPdJ-mj-0Nv_fMcpDU.roa (raw, json)
Hash identifier: K16igEgJxbZHmEuMejbuvTV7TpLVx9dzhB/yU21/5tE=
Subject key identifier: 84:97:AA:BD:E0:6A:24:C3:DD:27:E9:A3:FB:43:6F:FD:F3:1C:A4:35
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01916E6DEC244FE51183F6C39CEEA3206211
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hJeqveBqJMPdJ-mj-0Nv_fMcpDU.roa
Signing time: Tue 20 Aug 2024 06:16:23 +0000
ROA not before: Tue 20 Aug 2024 06:16:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215479
IP address blocks: 95.214.27.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 13:37:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6e:6d:ec:24:4f:e5:11:83:f6:c3:9c:ee:a3:20:62:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 20 06:16:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8497aabde06a24c3dd27e9a3fb436ffdf31ca435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f2:c2:45:0f:51:8d:6f:98:79:ed:b3:73:cd:
2a:c5:5e:ff:70:93:61:f8:df:5f:c6:c9:d0:44:ff:
1f:51:5c:1e:7e:a6:67:2d:f0:fa:86:20:a3:8c:78:
0f:87:1a:ee:c6:f5:b4:24:42:da:6d:1e:48:96:a2:
1e:2f:20:81:a1:eb:30:d4:b5:57:14:aa:52:7d:31:
71:b3:41:e1:80:98:ae:19:56:43:bf:6e:b0:34:67:
52:28:2a:29:70:38:d1:a2:43:b9:bd:1e:39:7b:41:
82:92:50:8a:b1:39:32:13:44:ed:4d:fd:cf:1a:6f:
5f:b9:9e:d6:83:41:ae:af:9d:ae:33:d6:51:83:80:
4d:f4:18:bf:a9:22:d7:b5:e9:c1:90:87:d1:bb:c4:
c2:8f:83:ca:28:0a:9a:6e:13:27:62:62:f6:26:dc:
46:0f:0d:61:c1:b4:f5:df:a7:c2:7d:da:be:bf:bf:
ed:4f:bd:dd:22:e0:20:ae:60:e5:b4:68:f2:48:43:
a5:71:6e:70:2f:0f:3c:87:4d:84:78:72:54:18:fd:
fc:39:6c:11:ad:06:f0:2e:70:8e:83:0a:fc:b8:28:
ea:3a:da:2e:7d:5d:12:5a:98:59:85:fa:db:de:4a:
78:ae:e9:49:2b:7d:47:55:68:da:e8:78:51:3a:fd:
96:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:97:AA:BD:E0:6A:24:C3:DD:27:E9:A3:FB:43:6F:FD:F3:1C:A4:35
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hJeqveBqJMPdJ-mj-0Nv_fMcpDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.27.0/24
178.215.238.0/24
Signature Algorithm: sha256WithRSAEncryption
18:48:b5:91:e5:69:d5:f0:f8:07:52:66:ca:82:77:0d:07:82:
8b:4a:d9:f9:44:3e:b1:20:67:49:6c:6d:29:09:60:76:ae:11:
45:d8:95:ed:54:91:be:b6:a0:ab:7e:8d:9e:fa:04:79:d7:8b:
c5:33:4c:9a:93:ed:1d:c5:cc:14:fe:80:3a:3a:37:75:a9:6a:
5d:35:a0:87:a8:de:a0:e2:ce:8a:60:d5:ee:3e:92:19:0b:94:
f5:0d:12:ad:d0:c2:b4:61:1f:26:21:a6:c9:20:6a:b8:9f:ce:
68:f3:a7:cb:c8:64:83:cf:18:bc:b0:08:b0:58:60:df:8a:bd:
24:27:8a:f6:bd:00:8d:a6:5b:b2:fd:ea:af:29:03:39:91:c1:
dc:af:ef:46:f8:ec:74:07:d8:89:51:d3:62:a0:15:0e:85:19:
43:1e:90:a9:7e:2e:2f:33:eb:eb:66:d0:d2:bc:b2:53:b2:39:
b5:0c:2c:dd:07:c8:d6:0b:b0:86:77:16:e4:76:9d:cf:dd:9f:
9e:00:66:db:43:50:9f:32:f9:df:4a:ce:ea:e5:3c:e8:c8:4b:
6b:d5:52:33:08:60:01:b9:cd:8f:c1:db:3c:26:06:96:61:ed:
ac:0a:29:91:c6:74:33:5c:20:3d:f5:f0:00:5a:79:6e:52:fe:
1a:59:17:ea
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZFubewkT+URg/bDnO6jIGIRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwODIwMDYxNjIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDk3YWFiZGUwNmEyNGMzZGQyN2U5YTNmYjQzNmZmZGYzMWNhNDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvLCRQ9RjW+Yee2zc80qxV7/cJNh
+N9fxsnQRP8fUVwefqZnLfD6hiCjjHgPhxruxvW0JELabR5IlqIeLyCBoesw1LVX
FKpSfTFxs0HhgJiuGVZDv26wNGdSKCopcDjRokO5vR45e0GCklCKsTkyE0TtTf3P
Gm9fuZ7Wg0Gur52uM9ZRg4BN9Bi/qSLXtenBkIfRu8TCj4PKKAqabhMnYmL2JtxG
Dw1hwbT136fCfdq+v7/tT73dIuAgrmDltGjySEOlcW5wLw88h02EeHJUGP38OWwR
rQbwLnCOgwr8uCjqOtoufV0SWphZhfrb3kp4rulJK31HVWja6HhROv2WUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFISXqr3gaiTD3Sfpo/tDb/3zHKQ1MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvaEplcXZlQnFKTVBkSi1tai0wTnZfZk1jcERVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX9YbAwQA
stfuMA0GCSqGSIb3DQEBCwUAA4IBAQAYSLWR5WnV8PgHUmbKgncNB4KLStn5RD6x
IGdJbG0pCWB2rhFF2JXtVJG+tqCrfo2e+gR514vFM0yak+0dxcwU/oA6Ojd1qWpd
NaCHqN6g4s6KYNXuPpIZC5T1DRKt0MK0YR8mIabJIGq4n85o86fLyGSDzxi8sAiw
WGDfir0kJ4r2vQCNpluy/eqvKQM5kcHcr+9G+Ox0B9iJUdNioBUOhRlDHpCpfi4v
M+vrZtDSvLJTsjm1DCzdB8jWC7CGdxbkdp3P3Z+eAGbbQ1CfMvnfSs7q5TzoyEtr
1VIzCGABuc2Pwds8JgaWYe2sCimRxnQzXCA99fAAWnluUv4aWRfq
-----END CERTIFICATE-----
Generated at Tue Sep 24 16:53:35 2024 by rpki-client on console-fra.rpki-client.org