Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/0-L8wpsSfcCGKF6YVERKWKzJ-U8.roa
File: 0-L8wpsSfcCGKF6YVERKWKzJ-U8.roa (raw, json)
Hash identifier: 5YiNNHRRkJusFci1ktYoNoyQ3xcTwHSo6almLbOaYbg=
Subject key identifier: D3:E2:FC:C2:9B:12:7D:C0:86:28:5E:98:54:44:4A:58:AC:C9:F9:4F
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018DD6D4857A5288A84B8A2FF6655E4A3E1C
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/0-L8wpsSfcCGKF6YVERKWKzJ-U8.roa
Signing time: Fri 23 Feb 2024 16:37:48 +0000
ROA not before: Fri 23 Feb 2024 16:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 95.214.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 20:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d6:d4:85:7a:52:88:a8:4b:8a:2f:f6:65:5e:4a:3e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Feb 23 16:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3e2fcc29b127dc086285e9854444a58acc9f94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8c:1e:da:b1:11:7b:6e:0b:be:49:f8:16:6d:
0e:0d:8c:ac:54:a3:ef:de:b2:0b:87:1c:8a:b2:72:
4b:10:82:a1:ab:66:35:fc:71:89:58:b0:f9:88:22:
f5:48:95:ec:a2:23:25:22:1c:9a:ce:6f:b3:60:6e:
96:87:af:5b:af:fb:09:43:59:62:a6:d4:f7:27:76:
29:f3:ce:d3:2b:45:1a:6e:a1:d1:f6:3c:55:55:dd:
19:3d:4e:19:0d:62:44:bb:44:59:f9:a9:76:3c:b3:
1e:09:7f:52:7f:4e:07:7b:0a:cc:d5:2c:15:b9:6e:
39:68:ed:65:2c:71:13:7b:ed:68:f2:62:f0:7b:90:
ca:ab:21:a2:7f:e7:2b:92:1b:5c:41:ad:d9:2b:ca:
fe:cd:02:7f:86:9f:39:95:33:af:35:22:ee:af:a5:
c7:80:77:2d:c9:90:1a:74:b7:fb:45:32:dd:01:14:
e1:4b:3b:a4:a1:cc:cf:24:8f:1a:54:1c:eb:63:e4:
67:91:52:c7:d8:77:a6:c6:f7:4b:4b:01:ed:d6:c6:
ff:1b:89:5b:34:e3:4b:6e:ac:54:73:b4:0f:04:6c:
ab:63:75:6f:cb:b8:1e:f6:25:f3:82:0b:b5:26:c3:
e4:69:c3:45:a1:a7:1a:70:f2:46:dd:c4:85:81:c3:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E2:FC:C2:9B:12:7D:C0:86:28:5E:98:54:44:4A:58:AC:C9:F9:4F
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/0-L8wpsSfcCGKF6YVERKWKzJ-U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.174.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:8f:05:0f:a7:39:89:cc:40:57:d1:ca:2a:f9:68:d3:d3:87:
ba:62:ac:87:30:19:f7:6f:85:17:0d:d7:58:ba:4f:cb:06:53:
cc:44:7f:33:91:e8:5c:f1:56:c0:13:0f:4e:cb:e3:c2:86:46:
17:80:23:e4:8a:af:26:15:81:52:41:1a:96:63:4e:90:5d:8c:
e5:c7:6b:77:62:1d:f2:4f:58:21:58:32:ad:b2:2b:41:bc:04:
02:d2:e1:47:7f:cd:7e:c2:4c:ae:c4:4b:90:c4:c0:89:b9:b3:
b3:43:2b:b7:cf:86:f4:30:98:88:64:55:4b:ac:73:92:eb:eb:
48:01:f0:cd:df:64:c2:b9:65:50:78:e2:a9:b1:94:8a:d3:d2:
85:e6:50:92:a4:84:dc:d3:d1:6a:5b:19:d4:f8:74:e4:4b:80:
af:45:75:57:2e:3c:01:a7:ad:a6:90:24:68:48:92:71:17:33:
0d:34:35:3b:54:8e:66:59:d7:90:bb:d4:97:56:82:c5:87:24:
a5:4f:5c:41:1b:2a:b4:27:53:27:41:bc:9c:fe:0a:4b:8c:39:
14:a1:e2:ed:2b:e9:e2:eb:1e:a2:a3:b8:11:23:6b:23:98:3b:
8f:99:01:8e:73:08:3c:ad:04:98:0c:b1:67:cb:61:dc:46:a5:
f3:cf:72:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org