Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wQjF_XdJPKxvBAhNeuo1gib9vqM.roa
File: wQjF_XdJPKxvBAhNeuo1gib9vqM.roa (raw, json)
Hash identifier: RcB+iACXwBMoB0fZdI2L9G3R0ffphWuWcEqXPClhqiM=
Subject key identifier: C1:08:C5:FD:77:49:3C:AC:6F:04:08:4D:7A:EA:35:82:26:FD:BE:A3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C243C508829C65B7A7BBF1F75B79DFABE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wQjF_XdJPKxvBAhNeuo1gib9vqM.roa
Signing time: Fri 01 Dec 2023 07:16:21 +0000
ROA not before: Fri 01 Dec 2023 07:16:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216419
IP address blocks: 95.214.26.0/24 maxlen: 24
95.214.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:3c:50:88:29:c6:5b:7a:7b:bf:1f:75:b7:9d:fa:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 1 07:16:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c108c5fd77493cac6f04084d7aea358226fdbea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:15:64:eb:60:b4:7c:e0:27:18:50:95:f7:86:
f2:1e:e0:49:96:e0:c2:44:d9:17:03:89:dd:4d:a5:
48:f8:b2:5d:f5:c9:15:2f:54:d8:ac:79:43:6f:0e:
ae:a2:f8:2b:06:a3:0f:9d:f6:f3:73:63:57:f1:25:
62:82:44:4e:9d:26:24:2c:7c:45:22:5d:7c:86:9f:
ed:52:9d:8c:21:82:d5:dc:7b:0b:ff:be:fe:0e:fa:
ee:a3:cb:88:f1:c9:1e:1e:b2:87:e4:6c:93:4c:65:
e2:43:81:6a:8f:57:0d:0c:0f:7b:e5:6f:d5:97:04:
08:4b:56:55:c4:11:b4:8f:0a:e6:69:50:91:ae:79:
84:8c:10:35:f0:28:ef:b3:32:ae:aa:1e:b0:c1:67:
fc:5a:ee:37:5c:d0:9a:cd:38:ab:d8:ac:09:ca:32:
ae:72:3c:2c:9c:7c:dc:b5:2c:d3:9d:5b:c7:44:90:
a5:ef:66:4e:ba:98:25:e2:55:8a:c4:2d:58:4e:e9:
7a:79:b8:6a:c5:4f:e1:59:bf:bf:53:f0:0d:d4:c3:
d6:48:78:8e:67:f6:8f:87:e8:f3:81:d7:68:77:5f:
68:da:78:5b:74:a2:d6:d7:9b:71:7f:4a:c2:3c:2f:
89:ce:95:c8:9f:0f:cf:a1:d5:50:16:0b:2a:8e:e0:
15:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:08:C5:FD:77:49:3C:AC:6F:04:08:4D:7A:EA:35:82:26:FD:BE:A3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wQjF_XdJPKxvBAhNeuo1gib9vqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.25.0-95.214.26.255
Signature Algorithm: sha256WithRSAEncryption
10:64:66:40:ea:3c:22:3c:3a:9c:9b:02:39:eb:c8:70:83:b9:
de:6b:cb:8a:cb:5c:fd:bc:8a:6c:ae:22:1a:20:87:ba:08:fd:
b3:86:29:8f:39:f0:ad:55:a7:a2:4c:e6:2b:e4:41:67:ed:93:
8f:73:b0:6a:d8:ed:23:6c:03:81:08:20:a0:99:ea:8a:e9:00:
df:98:65:a4:50:c9:b1:d5:85:31:d9:1c:a3:df:4b:f8:1f:c8:
29:1c:d4:f6:9b:30:9f:4e:83:2e:d0:67:6b:0b:84:06:f9:56:
7c:f1:54:b2:75:1b:84:ad:a0:12:a1:c2:5a:d2:96:a6:32:18:
50:73:f4:11:67:35:40:19:b6:d8:05:cc:ae:26:63:47:ba:09:
0a:b4:9a:34:f6:56:56:53:c7:86:af:f9:72:b3:25:08:cc:48:
dd:e6:32:9c:89:c5:44:a0:2c:87:fa:76:20:d8:83:82:d3:5d:
48:95:bb:77:67:65:20:1f:43:4c:13:c6:a6:85:14:58:1a:f9:
f1:bd:61:f5:be:24:1b:01:98:7f:13:a7:42:ad:86:e8:3d:5b:
9f:af:f8:3f:cb:2e:9b:0a:1a:af:9a:21:b5:f9:68:4b:63:5a:
8c:ff:30:e4:22:2f:ad:92:06:ac:df:88:ab:87:15:e1:81:5c:
5d:5b:02:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:49 2024 by rpki-client on console-fra.rpki-client.org