Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Jm_jvuxUvS0oGKIuVlS6_PX48_k.roa
File: Jm_jvuxUvS0oGKIuVlS6_PX48_k.roa (raw, json)
Hash identifier: iRrpjqKi1ZNh+ZTaGo6xALt3vL2GfDJGtsttEJB3tbk=
Subject key identifier: 26:6F:E3:BE:EC:54:BD:2D:28:18:A2:2E:56:54:BA:FC:F5:F8:F3:F9
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0189A6DC5F447D43B62B089E67715A577199
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Jm_jvuxUvS0oGKIuVlS6_PX48_k.roa
Signing time: Sun 30 Jul 2023 12:53:27 +0000
ROA not before: Sun 30 Jul 2023 12:53:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 95.214.181.0/24 maxlen: 24
45.156.52.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a6:dc:5f:44:7d:43:b6:2b:08:9e:67:71:5a:57:71:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jul 30 12:53:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=266fe3beec54bd2d2818a22e5654bafcf5f8f3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:85:82:74:d6:a6:84:83:38:7d:c7:bc:c3:7b:
28:95:9b:a2:87:71:84:be:1a:76:f1:72:12:94:26:
9c:bf:39:08:e4:62:49:ef:bd:a1:53:07:15:52:e4:
4a:47:a2:73:98:5b:6f:6a:83:51:64:44:3d:fd:9c:
02:99:8e:82:f6:6e:e9:81:dd:f0:e8:97:1d:80:ed:
ae:cc:65:e0:fc:f7:77:94:4b:de:29:1c:7f:82:2f:
71:62:be:9a:40:23:87:83:6a:f6:1e:cd:9a:5c:bc:
47:0f:ad:17:8a:9f:16:cd:33:b4:27:6e:14:92:0f:
31:18:36:93:a7:9a:9a:ff:df:14:8c:58:96:7c:cf:
d7:07:0c:a4:0a:99:4e:d6:d6:d9:0b:c7:07:51:bf:
bd:48:30:90:b8:63:8b:2d:19:83:37:f3:91:ec:de:
77:c9:fc:49:22:1c:12:f8:db:96:68:e4:fb:1b:af:
4f:b5:26:36:e1:e2:f4:bb:d7:aa:80:e9:4f:25:a1:
6a:59:f1:56:d9:6d:ac:ba:3a:b0:ec:30:0e:6a:60:
86:c0:13:d0:0e:18:ee:14:68:96:cf:56:96:7a:3d:
b8:c7:5c:08:b2:68:2c:69:07:92:32:2e:19:cc:1f:
26:c8:f4:98:f5:b0:42:d5:59:28:31:b6:06:1a:13:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6F:E3:BE:EC:54:BD:2D:28:18:A2:2E:56:54:BA:FC:F5:F8:F3:F9
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Jm_jvuxUvS0oGKIuVlS6_PX48_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.52.0/22
95.214.181.0/24
Signature Algorithm: sha256WithRSAEncryption
21:66:d1:71:39:37:c4:83:74:0f:d0:c0:f2:aa:43:e0:48:61:
73:53:a5:a8:48:bc:d4:33:de:f5:02:d4:12:57:fd:6f:6d:84:
96:0a:bb:b3:22:ac:e5:e6:a8:14:47:94:45:4a:38:9b:d5:01:
d8:e4:94:39:64:0f:bf:70:b7:d3:d0:6b:5e:0c:1d:ac:38:d2:
09:79:7e:48:54:6d:08:24:e2:4a:16:93:7a:3d:d7:6d:10:ac:
87:89:13:8d:48:76:64:8a:c5:58:1e:95:59:81:87:c9:b4:4b:
1c:ee:95:9f:63:0f:89:8d:28:04:ca:ba:e6:b9:31:dd:9f:ea:
87:8d:f5:7d:36:25:43:3e:31:ae:c0:7b:eb:7b:66:78:80:43:
97:86:9d:c4:62:4c:72:bb:78:89:2e:2c:76:bc:fc:57:ad:42:
79:f7:af:5a:48:09:67:39:f8:4e:91:20:1b:49:01:09:33:b2:
aa:64:a3:3a:c5:29:a0:b6:75:cf:85:23:ea:15:11:ae:d1:d8:
06:64:2f:41:28:cf:1e:04:e4:78:ae:8e:91:46:9d:f5:ef:f0:
0f:95:db:a7:97:82:31:4d:d7:79:9a:7d:7e:81:c4:c1:74:14:
41:e4:19:cb:b7:08:d0:35:fc:a2:98:bf:6b:a1:c5:fa:e5:c9:
4e:ca:e0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 06:28:30 2023 by rpki-client on console-fra.rpki-client.org