Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/1-ioD6uWc7NMSXUFNXUlpACBaCfw.roa
File: 1-ioD6uWc7NMSXUFNXUlpACBaCfw.roa (raw, json)
Hash identifier: 9fcfmU4jLwacQQfE4h0QjTf1d1jGzHHPFqqnmPtMiKE=
Subject key identifier: FA:2A:03:EA:E5:9C:EC:D3:12:5D:41:4D:5D:49:69:00:20:5A:09:FC
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018DEC29A3BC17979AF6A9DAEE26F263AF1B
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/1-ioD6uWc7NMSXUFNXUlpACBaCfw.roa
Signing time: Tue 27 Feb 2024 20:02:48 +0000
ROA not before: Tue 27 Feb 2024 20:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210542
IP address blocks: 95.214.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 19:10:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ec:29:a3:bc:17:97:9a:f6:a9:da:ee:26:f2:63:af:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Feb 27 20:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa2a03eae59cecd3125d414d5d496900205a09fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:34:2d:98:4c:f7:5f:9a:30:35:c9:8c:db:
44:a2:bc:f4:ac:65:9c:d2:0d:dc:e6:24:dd:4e:13:
19:19:91:12:4f:26:1a:58:41:df:03:02:65:89:b0:
ca:04:b5:e8:1c:63:d0:d8:b1:28:2b:24:ea:b4:c4:
31:a5:16:2b:20:97:a7:f8:2c:45:14:53:d2:d5:60:
98:60:c5:f8:c8:fd:a1:73:af:da:83:33:2f:d4:dd:
4c:2a:28:d9:88:71:e5:12:55:e4:24:40:a4:e5:26:
78:d1:e8:71:21:36:32:6e:8b:29:17:ac:28:9d:be:
93:d9:90:4e:1d:a4:86:f3:23:29:d6:4b:d6:b9:9e:
4a:7e:e4:ae:a2:ef:d0:d8:81:0e:03:bf:95:f2:a6:
ca:22:76:63:43:1b:64:ef:e7:64:59:fd:f0:50:e1:
23:48:69:cb:e2:4b:99:66:08:94:bf:f2:7c:9f:64:
d8:6d:20:bc:79:76:04:60:ce:4a:43:f6:6c:42:e9:
b4:5d:23:ef:57:18:3d:67:db:7d:00:f1:46:6b:b1:
9f:99:b1:96:0b:02:0e:4c:53:88:12:3f:9f:a3:3c:
ad:ef:98:8f:f1:c9:45:d1:f9:34:0c:34:47:36:63:
d2:06:38:b4:d4:04:be:00:08:41:4c:8e:6c:26:27:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2A:03:EA:E5:9C:EC:D3:12:5D:41:4D:5D:49:69:00:20:5A:09:FC
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/1-ioD6uWc7NMSXUFNXUlpACBaCfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.174.0/24
Signature Algorithm: sha256WithRSAEncryption
13:d4:43:b2:ed:e1:47:9e:d8:2e:d0:39:ff:68:c4:dd:79:81:
31:8d:2c:47:27:34:d2:ea:5e:54:33:22:be:3a:a0:25:27:20:
be:27:51:cb:fe:c2:00:5f:1f:82:19:2b:ab:94:a5:cb:f3:54:
69:3a:a6:95:c1:e7:62:c6:a9:c3:ca:a6:c8:eb:f3:bc:3d:f8:
0c:51:d3:ea:87:e4:f1:29:ba:f3:a1:b4:f1:69:3c:60:8f:c5:
6b:79:df:51:da:55:a7:cc:41:88:c9:cb:dd:d8:e4:71:34:bd:
97:93:d8:ef:83:61:ea:3a:f6:29:80:6f:3f:0a:52:01:3d:59:
89:8b:21:e6:1b:ed:36:cc:9a:d1:91:56:3a:b9:de:c8:a0:20:
3d:d3:b0:7f:d5:c7:74:6d:81:57:7f:0b:97:1b:b4:67:83:37:
27:80:32:d6:79:37:4f:d6:28:c7:8c:62:9c:f4:d0:d6:f8:88:
1c:e3:5c:22:f7:41:c2:36:3d:5a:5b:2f:36:d8:1a:06:9d:d5:
9f:d1:4a:97:29:73:da:3f:67:4f:64:1f:e2:37:5f:a0:1e:90:
74:15:d1:cd:7e:4a:03:3c:0b:18:76:61:81:dd:04:70:ed:1c:
ef:eb:8a:12:18:06:b1:26:48:19:36:f7:97:96:54:1b:1e:aa:
c9:d4:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org