Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/P0tLvxd_EVhpdGBh5zKr2W0eTFE.roa
File: P0tLvxd_EVhpdGBh5zKr2W0eTFE.roa (raw, json)
Hash identifier: 2894ReHkFHU34krltoIdeyk8thaZeFqhwC5d0H4C9ko=
Subject key identifier: 3F:4B:4B:BF:17:7F:11:58:69:74:60:61:E7:32:AB:D9:6D:1E:4C:51
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0188CD5A9074231EA832DF06E39057194CF4
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/P0tLvxd_EVhpdGBh5zKr2W0eTFE.roa
Signing time: Sun 18 Jun 2023 07:14:04 +0000
ROA not before: Sun 18 Jun 2023 07:14:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.214.172.0/23 maxlen: 24
95.214.174.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 06:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cd:5a:90:74:23:1e:a8:32:df:06:e3:90:57:19:4c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jun 18 07:14:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f4b4bbf177f115869746061e732abd96d1e4c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:43:20:e6:0f:63:63:1d:f7:4b:08:09:4d:
fe:ae:c8:54:b2:25:5c:ea:de:b3:e0:06:a2:7c:c9:
28:73:bc:37:70:3e:55:26:67:20:37:68:a3:02:27:
0e:59:99:f4:25:37:f3:52:6d:dd:98:a8:79:b5:59:
0e:3c:1a:e4:ed:f8:02:bb:ff:88:4e:ad:64:3e:41:
84:a8:d4:86:19:a2:aa:7e:f7:db:c0:61:a2:2b:72:
51:1f:78:41:3c:ba:22:c9:99:a2:9e:a6:41:eb:64:
59:6f:73:15:dd:5f:f5:21:ad:2b:b9:78:ef:52:24:
f3:cc:70:d4:ce:04:09:50:e1:b5:32:ef:15:86:13:
ff:ef:dd:19:7b:61:ed:db:ac:49:fa:26:67:b8:45:
a5:b8:a7:14:49:fb:ba:2a:b0:69:12:f5:cb:bb:f6:
53:ba:9b:0f:0e:2b:36:45:ba:b7:61:4f:3f:1e:52:
a7:ab:d2:cc:7b:f9:64:79:ae:1a:44:91:4f:4b:75:
0e:07:d1:57:8b:7e:d9:28:45:31:d3:e5:f7:f5:86:
f7:0d:26:40:fc:d1:19:41:df:52:dc:8a:f7:7c:4b:
07:29:e4:9b:54:9e:63:ea:4a:ff:50:2c:40:fa:6e:
7c:c9:8f:f5:9c:12:70:e6:9b:ea:e7:b7:c9:13:a0:
d1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:4B:BF:17:7F:11:58:69:74:60:61:E7:32:AB:D9:6D:1E:4C:51
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/P0tLvxd_EVhpdGBh5zKr2W0eTFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.172.0/22
Signature Algorithm: sha256WithRSAEncryption
59:04:5d:fd:cf:52:0e:db:24:70:1e:d4:8c:c8:1e:34:5d:7e:
c1:79:d1:69:98:d4:ce:86:8d:11:39:3b:9c:02:7f:62:56:06:
8b:21:0c:d7:26:c7:41:32:c3:1e:2e:a8:93:d5:a4:51:18:49:
e2:1b:b1:ae:97:14:6a:aa:9f:bf:15:3c:dc:b9:d8:cb:94:bf:
a0:d0:4b:a8:81:9d:e1:f2:0d:a2:0d:64:73:4d:cd:3f:2f:6c:
82:59:40:8c:9e:ac:dc:f7:6d:4c:47:88:89:6a:3c:67:61:4b:
64:66:fb:4b:95:f5:33:00:0c:49:c4:0b:73:7c:0b:0b:5d:1b:
ac:1d:94:1c:3e:8d:c8:f7:83:e2:0f:d1:ce:ce:f2:09:7f:84:
b3:39:71:1d:8a:e7:63:c7:bf:4e:db:c0:37:4c:ad:9f:f0:7b:
39:5b:be:9f:fe:1d:ff:68:70:bb:2a:1c:de:0e:53:93:49:4d:
76:8c:04:9e:87:44:e6:06:ae:e1:ba:e7:85:62:27:3c:11:9d:
b6:c8:71:4b:8c:15:f4:49:a9:59:95:9f:c9:08:eb:66:bc:80:
4a:4b:d4:63:b8:32:ec:f7:7f:f8:70:3c:14:85:2b:a1:d3:b8:
f9:d4:02:d5:84:51:b5:76:86:ad:c3:99:94:55:cf:4b:1a:c1:
e6:7c:b0:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjNWpB0Ix6oMt8G45BXGUz0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjMwNjE4MDcxNDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjRiNGJiZjE3N2YxMTU4Njk3NDYwNjFlNzMyYWJkOTZkMWU0YzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzlDIOYPY2Md90sICU3+rshUsiVc
6t6z4AaifMkoc7w3cD5VJmcgN2ijAicOWZn0JTfzUm3dmKh5tVkOPBrk7fgCu/+I
Tq1kPkGEqNSGGaKqfvfbwGGiK3JRH3hBPLoiyZminqZB62RZb3MV3V/1Ia0ruXjv
UiTzzHDUzgQJUOG1Mu8VhhP/790Ze2Ht26xJ+iZnuEWluKcUSfu6KrBpEvXLu/ZT
upsPDis2Rbq3YU8/HlKnq9LMe/lkea4aRJFPS3UOB9FXi37ZKEUx0+X39Yb3DSZA
/NEZQd9S3Ir3fEsHKeSbVJ5j6kr/UCxA+m58yY/1nBJw5pvq57fJE6DRrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD9LS78XfxFYaXRgYecyq9ltHkxRMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvUDB0THZ4ZF9FVmhwZEdCaDV6S3IyVzBlVEZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCX9asMA0G
CSqGSIb3DQEBCwUAA4IBAQBZBF39z1IO2yRwHtSMyB40XX7BedFpmNTOho0ROTuc
An9iVgaLIQzXJsdBMsMeLqiT1aRRGEniG7GulxRqqp+/FTzcudjLlL+g0EuogZ3h
8g2iDWRzTc0/L2yCWUCMnqzc921MR4iJajxnYUtkZvtLlfUzAAxJxAtzfAsLXRus
HZQcPo3I94PiD9HOzvIJf4SzOXEdiudjx79O28A3TK2f8Hs5W76f/h3/aHC7Khze
DlOTSU12jASeh0TmBq7huueFYic8EZ22yHFLjBX0SalZlZ/JCOtmvIBKS9RjuDLs
93/4cDwUhSuh07j51ALVhFG1doatw5mUVc9LGsHmfLAk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:46 2024 by rpki-client on console-fra.rpki-client.org