Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/I7BDODk_CFUK0XSJ4E85ILjn5BQ.roa
File: I7BDODk_CFUK0XSJ4E85ILjn5BQ.roa (raw, json)
Hash identifier: r2Mf/TCr5THjO0N/7Uq/Lq0n/kIf7S7QhBro5sZGx5g=
Subject key identifier: 23:B0:43:38:39:3F:08:55:0A:D1:74:89:E0:4F:39:20:B8:E7:E4:14
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018A1FB832E1A1E4583FFC055C7E72438405
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/I7BDODk_CFUK0XSJ4E85ILjn5BQ.roa
Signing time: Wed 23 Aug 2023 00:07:59 +0000
ROA not before: Wed 23 Aug 2023 00:07:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.214.172.0/24 maxlen: 24
95.214.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1f:b8:32:e1:a1:e4:58:3f:fc:05:5c:7e:72:43:84:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Aug 23 00:07:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23b04338393f08550ad17489e04f3920b8e7e414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:42:0b:f0:3f:a4:2e:20:58:55:d9:d5:14:98:
29:34:d8:e3:db:db:00:0c:b6:e8:9e:ed:b2:f4:8a:
d1:1a:f6:1e:d2:e8:4f:ed:86:2e:da:de:9e:10:79:
ae:0d:82:62:a6:59:5e:ce:4f:58:38:ca:5a:14:07:
63:c4:06:62:0e:f6:cb:5a:57:89:db:73:99:8b:a4:
2f:68:fb:2a:d6:84:51:fc:83:30:18:13:96:a9:81:
61:3c:2f:e2:d9:1e:0a:c9:03:d9:67:98:f9:54:02:
28:b4:49:1d:9c:4f:2e:00:39:47:b0:1c:56:cb:8a:
0f:d2:cd:1b:e7:6f:46:62:d0:0b:c0:84:a6:4f:70:
56:57:d1:a0:a4:ca:55:b4:70:e9:c1:ae:47:b9:c8:
6a:8d:ac:09:22:9d:1b:f4:32:9d:b2:6c:9c:f5:b7:
86:95:02:90:36:76:f1:98:87:da:ac:b2:5e:8d:69:
48:76:15:38:3e:5d:f9:d6:55:99:8e:ac:27:39:81:
d3:69:02:6c:c1:db:0a:77:c5:02:e2:12:87:0b:a1:
18:71:61:2d:19:9c:0d:75:45:31:5e:4a:d3:ed:51:
af:68:5a:a1:b9:23:84:23:65:35:ac:68:9d:2c:70:
31:d7:dc:0e:3b:ea:64:0b:db:2f:58:b0:ac:a4:29:
3f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B0:43:38:39:3F:08:55:0A:D1:74:89:E0:4F:39:20:B8:E7:E4:14
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/I7BDODk_CFUK0XSJ4E85ILjn5BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.172.0/24
95.214.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:dc:24:61:23:f7:50:79:c2:cd:3d:ed:87:21:af:94:d7:56:
df:7f:0a:8f:d1:ed:d4:a4:de:73:75:5b:2d:59:47:53:20:a5:
27:a5:f5:c7:80:86:28:55:0e:a7:f9:2f:fd:9f:e1:d8:5c:c3:
7a:46:32:6f:58:20:93:9c:50:90:cf:67:54:a3:75:15:ce:95:
ac:18:fb:fa:8f:b8:e2:af:f6:f6:83:04:a0:d9:e5:72:9e:36:
56:3c:39:f7:7f:62:cc:06:f6:e8:82:b2:8c:fc:8d:b5:7f:48:
fa:70:2e:b7:03:62:90:97:46:da:0f:ca:59:6d:8c:f3:75:49:
e4:ba:d2:b7:c9:8a:ce:b8:3a:b1:c3:2c:73:c9:a1:68:cb:31:
76:1c:89:23:fa:53:0d:88:52:13:c4:b4:54:25:40:ae:17:0b:
d2:89:b7:f8:51:cd:e0:2c:39:6a:1e:12:c2:a9:11:ad:f6:eb:
4f:42:6c:67:c7:ea:78:5a:01:fe:8c:41:24:c3:a9:5d:24:97:
f0:fc:c5:ae:7f:71:25:c7:18:09:e3:19:13:96:dc:f6:8d:cf:
df:be:aa:66:82:10:9e:da:9f:3f:39:48:83:ba:c3:65:c1:65:
6b:2d:da:43:6e:c2:04:10:b3:13:9d:53:11:60:7a:4a:8d:fc:
c3:76:ba:96
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYofuDLhoeRYP/wFXH5yQ4QFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjMwODIzMDAwNzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2IwNDMzODM5M2YwODU1MGFkMTc0ODllMDRmMzkyMGI4ZTdlNDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikIL8D+kLiBYVdnVFJgpNNjj29sA
DLbonu2y9IrRGvYe0uhP7YYu2t6eEHmuDYJipllezk9YOMpaFAdjxAZiDvbLWleJ
23OZi6QvaPsq1oRR/IMwGBOWqYFhPC/i2R4KyQPZZ5j5VAIotEkdnE8uADlHsBxW
y4oP0s0b529GYtALwISmT3BWV9GgpMpVtHDpwa5HuchqjawJIp0b9DKdsmyc9beG
lQKQNnbxmIfarLJejWlIdhU4Pl351lWZjqwnOYHTaQJswdsKd8UC4hKHC6EYcWEt
GZwNdUUxXkrT7VGvaFqhuSOEI2U1rGidLHAx19wOO+pkC9svWLCspCk/PQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCOwQzg5PwhVCtF0ieBPOSC45+QUMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvSTdCRE9Ea19DRlVLMFhTSjRFODVJTGpuNUJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX9asAwQA
X9a1MA0GCSqGSIb3DQEBCwUAA4IBAQCK3CRhI/dQecLNPe2HIa+U11bffwqP0e3U
pN5zdVstWUdTIKUnpfXHgIYoVQ6n+S/9n+HYXMN6RjJvWCCTnFCQz2dUo3UVzpWs
GPv6j7jir/b2gwSg2eVynjZWPDn3f2LMBvbogrKM/I21f0j6cC63A2KQl0baD8pZ
bYzzdUnkutK3yYrOuDqxwyxzyaFoyzF2HIkj+lMNiFITxLRUJUCuFwvSibf4Uc3g
LDlqHhLCqRGt9utPQmxnx+p4WgH+jEEkw6ldJJfw/MWuf3ElxxgJ4xkTltz2jc/f
vqpmghCe2p8/OUiDusNlwWVrLdpDbsIEELMTnVMRYHpKjfzDdrqW
-----END CERTIFICATE-----
Generated at Wed Aug 23 21:06:55 2023 by rpki-client on console-ams.rpki-client.org