Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/puMYgMF-Mf1KMEUFAjFdMcDKxac.roa
File: puMYgMF-Mf1KMEUFAjFdMcDKxac.roa (raw, json)
Hash identifier: pWfbDfFBEpZ9xmo5HOE25sL1v/rm4+YgZ72kzfed6YY=
Subject key identifier: A6:E3:18:80:C1:7E:31:FD:4A:30:45:05:02:31:5D:31:C0:CA:C5:A7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B22AE63D1FD6B53B7F4A04D1CFA96EED3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/puMYgMF-Mf1KMEUFAjFdMcDKxac.roa
Signing time: Thu 12 Oct 2023 06:58:55 +0000
ROA not before: Thu 12 Oct 2023 06:58:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216419
IP address blocks: 95.214.26.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
171.22.28.0/24 maxlen: 24
185.216.70.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
194.49.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:22:ae:63:d1:fd:6b:53:b7:f4:a0:4d:1c:fa:96:ee:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 12 06:58:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6e31880c17e31fd4a30450502315d31c0cac5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:8c:57:17:e5:e5:0a:32:b7:06:da:3b:c0:
fe:33:5b:65:43:82:52:2d:dc:0a:ab:eb:50:18:ce:
f0:84:40:8b:83:6c:45:da:d7:76:9e:cd:c3:db:3a:
e1:6b:7b:a8:c3:59:85:df:84:bb:31:f2:84:d5:9f:
d0:a8:19:8e:c2:2c:68:49:ea:77:52:c0:f1:a0:98:
10:ac:e8:1b:a1:8c:42:ed:15:0d:65:e2:7e:7c:a1:
02:c1:0a:c0:3b:ed:a3:33:13:71:7b:8e:10:4a:12:
65:73:bb:b5:c9:5e:ec:d8:94:05:3b:28:c9:df:b7:
03:29:64:d1:9e:5a:4e:da:fb:95:7c:f3:ab:ef:d7:
32:39:95:ab:fe:01:9e:ea:86:2b:59:6b:ea:16:80:
ca:21:af:b7:f7:f0:00:02:30:1b:e3:74:83:34:80:
09:7b:a3:66:5a:30:97:1b:62:1d:6b:ea:36:61:f3:
9f:a7:03:07:20:fa:1f:5a:08:ed:a1:ad:b4:7c:e2:
3c:78:f5:79:ad:4b:a3:c1:33:ea:4b:7d:ec:49:76:
16:28:71:33:03:a3:18:19:16:eb:61:3d:59:2a:e3:
78:de:ea:8d:f8:30:e2:3c:a6:c4:a8:a0:07:4d:2b:
6d:39:8a:4a:b0:4f:60:14:a1:9d:d5:59:7d:3a:6d:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E3:18:80:C1:7E:31:FD:4A:30:45:05:02:31:5D:31:C0:CA:C5:A7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/puMYgMF-Mf1KMEUFAjFdMcDKxac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.25.0-95.214.26.255
171.22.28.0/24
185.216.70.0/24
194.49.94.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
53:96:63:04:b3:0d:38:31:73:62:63:9f:ac:40:61:10:69:10:
e1:78:c5:3d:d5:d8:aa:46:c4:d3:50:98:46:19:0a:28:8c:69:
6e:75:ec:b1:c7:0d:77:98:1b:b8:61:ed:3c:98:a4:1b:69:10:
4f:04:95:b1:5e:c4:59:ab:c8:6d:d2:5f:28:2c:75:ef:03:fa:
1c:d7:78:2c:3f:a4:17:a2:d2:4f:de:fe:aa:93:c5:f2:ae:d7:
cc:66:08:3b:3a:11:14:dd:f7:59:38:83:14:ca:9e:5d:88:2e:
a4:bb:9f:66:cc:1e:82:1c:ef:04:06:fe:d7:c1:11:8a:1d:bb:
4e:e9:fa:f2:1e:91:e0:73:ba:4e:67:77:1a:13:fc:73:8f:fb:
5a:87:d5:a2:ae:d7:67:04:f1:b3:0d:0f:50:8f:50:1b:e9:77:
39:9f:56:f8:3a:33:08:f4:87:51:36:31:db:e9:5a:45:d8:dd:
26:66:8b:ae:ee:f1:af:20:7b:da:95:f9:2a:9e:da:ab:53:55:
30:55:a2:d0:c8:82:a1:c4:39:ec:c7:f5:f0:e3:f4:c4:77:94:
a5:25:ad:fc:4e:2b:2f:01:32:54:bc:5a:7b:c1:c3:13:86:6f:
05:fc:07:eb:47:c3:4f:8b:8a:c0:ba:5a:24:97:72:fc:43:c8:
14:a4:14:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 07:49:39 2023 by rpki-client on console-ams.rpki-client.org