Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Q2nYGmf9hBOvVkh5dyE1QMRmxUs.roa
File: Q2nYGmf9hBOvVkh5dyE1QMRmxUs.roa (raw, json)
Hash identifier: w49gBqz3olzq7HgktHpWhf6S5Hbdby7L+sio4rPe2Ao=
Subject key identifier: 43:69:D8:1A:67:FD:84:13:AF:56:48:79:77:21:35:40:C4:66:C5:4B
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0188D795E2F381BAC53A9D0D90A57F6BFE7B
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Q2nYGmf9hBOvVkh5dyE1QMRmxUs.roa
Signing time: Tue 20 Jun 2023 06:55:04 +0000
ROA not before: Tue 20 Jun 2023 06:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 95.214.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jul 2023 18:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:95:e2:f3:81:ba:c5:3a:9d:0d:90:a5:7f:6b:fe:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jun 20 06:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4369d81a67fd8413af56487977213540c466c54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:cd:6f:59:79:bb:63:47:96:6e:cf:1c:2b:
36:8c:74:8c:2d:88:ab:af:66:bf:56:fb:db:43:fe:
c8:0d:c0:66:b7:06:64:f0:aa:95:ec:ae:5a:b1:91:
2c:9d:17:94:b4:0d:b0:59:ce:39:3f:e9:3e:89:97:
52:34:9b:4e:e5:ef:6b:ff:42:30:ce:19:36:d0:71:
e3:eb:e9:a8:19:3f:36:86:d3:a5:f5:08:99:93:fb:
eb:fb:fb:8f:56:07:69:a1:51:47:8e:11:ec:5e:a4:
8e:02:80:01:bc:0a:8d:53:45:5a:f0:77:6d:a0:76:
27:43:db:8c:40:66:f4:01:b6:12:f5:22:f5:73:a1:
04:a5:77:98:05:ba:1b:b3:15:ad:6a:51:83:6d:fc:
e1:1b:2d:b6:dd:e8:ca:54:a1:81:3c:c4:78:f8:a3:
56:c0:f7:02:ed:eb:91:62:39:55:c8:8c:63:44:c7:
3c:83:18:5f:23:7b:7d:5e:ff:af:16:e4:ea:f3:d7:
01:a3:cc:0a:32:1b:12:ae:f4:98:d7:b8:90:37:e1:
eb:5a:1f:bb:3f:21:be:46:59:bc:87:5b:33:13:42:
fc:33:6a:9d:28:06:54:3d:81:b0:43:ab:97:54:16:
0a:c9:6b:25:1f:58:09:f9:78:32:68:89:26:d8:4f:
0e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:69:D8:1A:67:FD:84:13:AF:56:48:79:77:21:35:40:C4:66:C5:4B
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/Q2nYGmf9hBOvVkh5dyE1QMRmxUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.175.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:6b:25:1f:95:e2:96:0d:a8:12:b9:81:86:81:cf:1a:cc:d6:
64:3e:8a:b7:bb:b4:bf:61:e3:d9:bc:77:70:ff:64:68:44:55:
9c:1c:5c:31:05:54:ec:ad:9f:0e:66:44:55:6f:16:4a:bd:ce:
1f:9f:de:b7:43:ef:65:a9:36:2a:bf:fa:0b:3f:77:30:6b:7a:
ea:05:5b:b3:33:4a:18:d7:60:3a:69:b1:60:78:8a:e1:3f:5e:
ad:35:7b:a0:a5:d5:83:a6:e8:8d:dd:18:d2:7c:6b:d0:56:59:
86:c1:45:ca:8a:e1:fc:df:dc:08:fb:58:a6:fb:30:a0:fd:7b:
47:0e:0a:2d:7c:16:5b:61:b2:c7:1d:fd:2b:92:f4:c5:2c:f8:
db:8b:a9:85:54:2a:24:5b:97:eb:aa:b1:39:33:2d:98:b9:d7:
78:a1:92:c4:56:40:0a:a3:36:24:77:51:e6:fd:f5:d6:8a:75:
b1:7f:8a:53:e0:9a:3e:f6:ff:fa:74:92:1f:dc:dd:e4:4e:56:
73:75:32:17:8c:4e:a5:9d:67:2c:79:fb:61:77:30:09:6a:b2:
38:ba:07:cb:7b:06:00:02:fa:17:f6:de:dd:4a:5e:5c:0a:8e:
06:21:63:fa:c4:33:c5:8d:cd:be:33:0b:ac:81:32:eb:2f:8d:
ac:19:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:46 2024 by rpki-client on console-fra.rpki-client.org