Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uzP4m_ojeAnjrPAyyjFfmhWEtXU.roa
File: uzP4m_ojeAnjrPAyyjFfmhWEtXU.roa (raw, json)
Hash identifier: DJTjuLOFfBFk/oObfl5ynefQd5GoSrSt3YXpnaFXJgM=
Subject key identifier: BB:33:F8:9B:FA:23:78:09:E3:AC:F0:32:CA:31:5F:9A:15:84:B5:75
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD0DBB03A84383766518B60720F5EE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uzP4m_ojeAnjrPAyyjFfmhWEtXU.roa
Signing time: Tue 02 Jan 2024 06:29:39 +0000
ROA not before: Tue 02 Jan 2024 06:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211760
IP address blocks: 95.214.26.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 13:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:0d:bb:03:a8:43:83:76:65:18:b6:07:20:f5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb33f89bfa237809e3acf032ca315f9a1584b575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:49:67:64:7c:35:a1:b6:ba:6a:1a:1a:18:
fe:0f:5e:88:dd:48:bc:5e:8f:8a:26:71:d1:94:59:
19:86:02:a0:c7:e0:9e:b0:4c:79:60:66:94:b4:e7:
31:a7:fa:d7:a3:60:e6:ae:d9:b6:8f:a4:5d:2c:8b:
70:f5:38:0a:e0:aa:d5:6b:98:62:18:af:4b:f9:0c:
e5:14:37:b1:1c:ec:36:ce:11:1c:65:1d:f0:2f:0f:
33:39:e2:02:5a:7d:14:a1:a2:39:1e:4c:fe:13:4a:
88:c9:da:1c:a5:64:63:e0:d8:49:ad:10:47:66:8f:
bd:3a:e3:51:ef:0b:b1:0e:ad:f7:c1:dd:d5:b5:01:
5a:74:2e:ad:b8:d8:6f:86:04:c0:83:5c:70:8e:ad:
cc:a5:f9:5d:24:bc:11:38:8e:3e:b0:f5:58:db:05:
54:b9:5b:c6:8b:43:71:4c:b0:03:fa:73:69:91:b8:
48:b3:f2:c4:3d:f2:4c:ab:97:0e:65:06:9a:90:13:
32:cd:a6:b1:58:99:11:92:48:ce:75:ed:03:9c:43:
17:19:a7:67:3c:9d:57:64:38:39:f9:a3:8c:68:ed:
15:d9:e4:80:80:a1:43:03:ec:e5:0e:dd:e8:ee:c2:
1c:fb:2d:0b:b2:99:24:13:87:d2:50:fc:ce:9a:ee:
07:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:33:F8:9B:FA:23:78:09:E3:AC:F0:32:CA:31:5F:9A:15:84:B5:75
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/uzP4m_ojeAnjrPAyyjFfmhWEtXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.25.0-95.214.26.255
Signature Algorithm: sha256WithRSAEncryption
97:e0:06:d2:ac:48:ae:6e:db:93:60:76:a9:7a:28:b8:e8:5c:
f0:d4:fa:ac:8c:4d:ea:9b:00:27:48:f5:58:ee:c2:7f:46:90:
15:02:d6:4a:e4:c7:e2:6f:3f:70:d5:7b:32:39:32:b2:4a:55:
e2:8e:31:0f:ed:f9:23:a2:01:cc:b0:a6:92:ad:17:55:f8:71:
e9:3f:7d:6e:7f:9b:b0:25:8b:94:e0:1c:d7:9b:e3:97:bf:d0:
7b:ba:f5:f2:30:b2:25:71:0e:6c:79:f5:ce:3b:52:7f:7f:a2:
39:0c:07:6b:f0:0b:cb:fa:ed:a2:33:94:09:b9:15:4d:06:15:
5d:18:46:41:cf:7d:2e:16:da:c8:2b:45:38:82:b2:82:98:74:
26:2c:dc:a8:aa:17:a8:fc:08:0f:40:99:8c:93:6d:dd:d1:0f:
96:0e:51:3a:d6:a9:82:b1:c1:32:a8:7b:19:e1:c5:bc:2e:84:
06:fd:30:e7:ce:12:e1:c8:8f:0d:ee:d2:a1:4f:0c:6a:e8:ad:
fa:3a:39:cf:0b:68:33:1a:08:53:56:1d:03:7e:74:8a:8b:02:
4c:c8:53:de:49:eb:bb:8e:ff:31:53:e2:f0:ce:8d:0a:ef:30:
a2:4a:fb:33:dd:b9:c0:51:68:36:65:bd:69:45:8d:21:b8:56:
30:dd:6a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 17:26:15 2024 by rpki-client on console-ams.rpki-client.org