Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/6MhzXkz0KgfBfafgDjLNWzTQVDA.roa
File: 6MhzXkz0KgfBfafgDjLNWzTQVDA.roa (raw, json)
Hash identifier: fFwGcfdPT7wTd0CVV3Cb95w9j5hBYk6IpWG0YrqyRHc=
Subject key identifier: E8:C8:73:5E:4C:F4:2A:07:C1:7D:A7:E0:0E:32:CD:5B:34:D0:54:30
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 019229C9DFBC7C4D96C9F50F7C1D6DE050E3
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/6MhzXkz0KgfBfafgDjLNWzTQVDA.roa
Signing time: Wed 25 Sep 2024 15:25:48 +0000
ROA not before: Wed 25 Sep 2024 15:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 95.214.173.0/24 maxlen: 24
193.239.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 00:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:29:c9:df:bc:7c:4d:96:c9:f5:0f:7c:1d:6d:e0:50:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Sep 25 15:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8c8735e4cf42a07c17da7e00e32cd5b34d05430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:28:ea:cf:51:5e:2e:58:6d:38:b8:3f:e1:d0:
8e:76:d0:cb:af:93:e3:ac:e7:76:73:fd:88:e6:eb:
5c:a6:07:38:6c:a2:eb:e9:e2:58:03:bd:4d:e3:01:
7e:f9:23:77:ca:33:56:f6:27:42:31:c7:cb:ba:bc:
f5:36:b2:0e:1b:f9:ce:c8:a2:d0:f8:1b:99:a7:b3:
73:35:d4:08:53:00:9c:28:a3:51:76:19:4c:a0:d9:
31:65:cc:5d:4c:22:1f:ec:f4:65:ab:c4:2d:a8:d6:
1a:0a:67:c4:8f:04:20:a7:cc:62:38:62:3a:cc:20:
0b:f7:b0:56:f3:cc:94:f3:90:29:b4:f1:0a:90:01:
40:18:25:b1:1d:7a:a3:29:c4:ac:a6:57:0c:6e:5b:
e5:50:c1:4d:cd:b3:41:e5:a7:48:de:c6:4d:27:d0:
37:76:80:97:33:48:93:ba:e1:89:d4:7d:6b:a2:d2:
6a:d5:4e:09:c4:f1:ee:c1:60:b7:0c:af:7d:5d:21:
f7:0c:c4:fe:ad:ae:b9:cd:74:9a:7d:86:2d:9b:67:
91:eb:4a:5c:db:95:c1:b9:30:c5:cb:3c:b3:20:ad:
13:b8:bb:5b:ef:34:70:f6:13:ed:33:a0:42:5b:e0:
cb:bb:fb:fe:58:ec:da:2f:d4:4b:f3:2c:b3:3d:d9:
da:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C8:73:5E:4C:F4:2A:07:C1:7D:A7:E0:0E:32:CD:5B:34:D0:54:30
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/6MhzXkz0KgfBfafgDjLNWzTQVDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.173.0/24
193.239.196.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:22:57:11:58:5d:40:ea:7d:30:49:1f:b8:2c:5b:6a:6e:4d:
1b:b3:61:4b:39:9e:32:6b:0a:82:af:00:d7:98:34:14:b4:bb:
1d:e1:68:df:6f:e8:a6:89:ca:00:dc:84:04:64:b3:a3:c6:f5:
0a:30:f0:17:96:f1:ff:85:cd:87:8c:4a:2a:99:e1:1f:51:46:
00:24:e4:47:7a:e5:31:46:fa:04:e1:34:d1:1e:f9:ba:91:fa:
76:2b:8e:f4:18:b0:ed:17:1e:1b:50:51:3c:32:cf:33:42:6a:
da:82:1f:1d:d3:e2:8e:3c:d5:35:c6:5b:dc:52:a1:8b:7c:60:
77:87:2b:a5:05:0f:6e:99:4e:91:f3:1c:e8:ba:8a:f7:bf:c6:
63:95:9c:6c:8e:d2:33:4b:65:5d:ae:7d:65:be:c8:5f:44:fa:
6b:cd:77:ad:20:64:ef:ac:be:b1:66:da:59:78:6c:5c:91:8d:
fb:e8:41:3b:49:46:49:87:0f:bc:d2:eb:50:f9:92:4d:46:fd:
58:18:a9:06:e0:d9:fe:14:7c:53:39:3b:01:a1:3b:c5:5f:54:
77:4e:32:17:c7:08:20:61:31:9c:49:2c:22:5d:71:e7:b7:15:
e2:aa:c3:f3:ec:47:bb:8a:fe:ac:b3:39:9f:4e:4b:c7:da:a8:
d5:fc:6a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 02:51:21 2024 by rpki-client on console-fra.rpki-client.org