Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/1-14AaEvR6vNRLfBvtbF2RCqdkmU.roa
File: 1-14AaEvR6vNRLfBvtbF2RCqdkmU.roa (raw, json)
Hash identifier: sV9/ksmZ1zNLCgg+ToYI6Gh/zj4cSLb9LntAmseTRlM=
Subject key identifier: FB:5E:00:68:4B:D1:EA:F3:51:2D:F0:6F:B5:B1:76:44:2A:9D:92:65
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0191C3414E263D1BC848176BC32D9B875854
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/1-14AaEvR6vNRLfBvtbF2RCqdkmU.roa
Signing time: Thu 05 Sep 2024 17:35:22 +0000
ROA not before: Thu 05 Sep 2024 17:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 95.214.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 15:25:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c3:41:4e:26:3d:1b:c8:48:17:6b:c3:2d:9b:87:58:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Sep 5 17:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb5e00684bd1eaf3512df06fb5b176442a9d9265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:23:e1:f1:6c:a3:8e:db:3e:40:28:7b:65:
46:fe:89:be:07:6f:78:4f:a6:f3:72:dd:11:85:e9:
a9:c3:39:1d:d2:d4:2e:b0:e7:04:57:68:73:45:1b:
b7:16:00:b7:ac:43:09:86:37:87:d7:93:ab:7f:98:
43:67:44:dd:3a:a2:59:88:9b:04:d9:30:aa:36:79:
dc:83:40:82:42:92:a9:71:95:82:9d:3d:2d:32:64:
a6:51:38:48:aa:b1:3e:ab:ab:74:f8:8c:8b:3f:a9:
5f:78:6d:27:df:c8:0b:b8:97:d9:01:a6:c2:05:e6:
88:e5:9e:cb:10:1d:3b:be:04:33:d5:dd:f9:4b:e2:
69:f5:79:1c:5a:2d:c1:8a:62:8a:a6:96:5c:af:43:
4b:65:dc:e6:fc:1a:03:c3:e2:da:eb:56:43:14:46:
31:3f:5c:46:73:37:22:ea:f7:f6:3f:61:0f:7b:a8:
54:57:13:08:41:8f:07:c6:0f:21:29:05:66:f8:89:
34:7d:89:d9:7e:af:25:78:5c:de:c9:5d:d6:20:a3:
51:ac:97:69:27:4b:7c:71:df:aa:98:07:be:17:bf:
91:5c:6a:80:ce:e2:e2:0a:93:08:f7:2c:2e:74:3b:
f0:bf:5e:14:38:07:92:a1:bf:43:97:dd:dc:51:c1:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5E:00:68:4B:D1:EA:F3:51:2D:F0:6F:B5:B1:76:44:2A:9D:92:65
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/1-14AaEvR6vNRLfBvtbF2RCqdkmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.173.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c9:60:65:16:e4:4a:9f:11:c0:bc:e3:4b:0b:46:32:01:45:
39:b1:8c:fc:17:a8:4c:df:de:b4:04:a2:9b:e1:f9:b7:36:75:
d8:9f:10:b8:8d:b3:2e:41:d2:70:31:f2:2b:3e:d4:a3:3a:f0:
67:2b:88:66:6e:f9:9d:5f:83:08:20:74:2b:1c:01:0e:ad:99:
93:a5:19:ea:72:04:31:bc:75:10:ee:34:ac:ce:4b:f3:1b:fa:
c2:0c:45:aa:ed:16:6d:90:d0:9f:cb:1b:c5:6c:2c:e0:39:c2:
57:a1:b2:93:66:b9:56:fc:c7:48:2c:4e:34:e4:3d:21:d6:e8:
18:4a:1d:7a:89:df:ee:52:e7:f0:ac:a8:45:4d:4a:cc:6f:c8:
67:70:e6:d8:9b:21:dd:79:61:7d:06:29:48:4a:77:47:d3:89:
4a:2e:3c:1a:60:d0:cc:3e:86:a4:d5:7e:66:89:80:e4:ef:39:
2e:b8:d4:6b:b4:5e:33:07:57:fa:fa:d0:b0:dc:94:bf:f1:ab:
b1:64:64:06:33:92:82:fe:68:fe:49:ba:c9:c8:03:e4:17:1f:
60:6e:0d:6d:61:85:96:cd:b5:b4:d0:ef:30:fa:b3:07:f1:ce:
fa:62:17:8c:71:1a:96:3c:5b:01:28:72:dc:62:14:33:44:98:
5e:52:99:a6
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZHDQU4mPRvISBdrwy2bh1hUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjQwOTA1MTczNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjVlMDA2ODRiZDFlYWYzNTEyZGYwNmZiNWIxNzY0NDJhOWQ5MjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVYj4fFso47bPkAoe2VG/om+B294
T6bzct0Rhempwzkd0tQusOcEV2hzRRu3FgC3rEMJhjeH15Orf5hDZ0TdOqJZiJsE
2TCqNnncg0CCQpKpcZWCnT0tMmSmUThIqrE+q6t0+IyLP6lfeG0n38gLuJfZAabC
BeaI5Z7LEB07vgQz1d35S+Jp9XkcWi3BimKKppZcr0NLZdzm/BoDw+La61ZDFEYx
P1xGczci6vf2P2EPe6hUVxMIQY8Hxg8hKQVm+Ik0fYnZfq8leFzeyV3WIKNRrJdp
J0t8cd+qmAe+F7+RXGqAzuLiCpMI9ywudDvwv14UOAeSob9Dl93cUcEc+QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPteAGhL0erzUS3wb7WxdkQqnZJlMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvMS0xNEFhRXZSNnZOUkxmQnZ0YkYyUkNxZGttVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjYvMDg4MjZlLTc3ZDAtNDM3Yi1hMWMyLWMwZmIzZWY3NjQw
ZS8xL0tCQjZ0cEllLU1zdDdLUHJkbVI0el9QbF9HMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF/WrTAN
BgkqhkiG9w0BAQsFAAOCAQEAWslgZRbkSp8RwLzjSwtGMgFFObGM/BeoTN/etASi
m+H5tzZ12J8QuI2zLkHScDHyKz7UozrwZyuIZm75nV+DCCB0KxwBDq2Zk6UZ6nIE
Mbx1EO40rM5L8xv6wgxFqu0WbZDQn8sbxWws4DnCV6Gyk2a5VvzHSCxONOQ9Idbo
GEodeonf7lLn8KyoRU1KzG/IZ3Dm2Jsh3XlhfQYpSEp3R9OJSi48GmDQzD6GpNV+
ZomA5O85LrjUa7ReMwdX+vrQsNyUv/GrsWRkBjOSgv5o/km6ycgD5BcfYG4NbWGF
ls21tNDvMPqzB/HO+mIXjHEaljxbAShy3GIUM0SYXlKZpg==
-----END CERTIFICATE-----
Generated at Wed Sep 25 19:06:12 2024 by rpki-client on console-ams.rpki-client.org