Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/V91PoxVOQHVQlVriHhR7CfhTXPo.roa
File: V91PoxVOQHVQlVriHhR7CfhTXPo.roa (raw, json)
Hash identifier: kG+p1sVZDdx4tCov929kkGiLA9+NgmxKMyfDyn1TWTM=
Subject key identifier: 57:DD:4F:A3:15:4E:40:75:50:95:5A:E2:1E:14:7B:09:F8:53:5C:FA
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018B6A38E71430338E91BE36154E519FB348
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/V91PoxVOQHVQlVriHhR7CfhTXPo.roa
Signing time: Thu 26 Oct 2023 04:23:15 +0000
ROA not before: Thu 26 Oct 2023 04:23:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.214.181.0/24 maxlen: 24
45.139.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6a:38:e7:14:30:33:8e:91:be:36:15:4e:51:9f:b3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Oct 26 04:23:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57dd4fa3154e407550955ae21e147b09f8535cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:38:d6:5e:05:ea:7d:53:4e:ea:e6:f2:e9:
1c:85:ff:1f:c3:2e:26:7b:a4:54:8e:9d:21:98:70:
ad:18:c7:c6:1c:20:03:08:b8:12:bc:4c:46:9a:93:
f6:24:1b:23:c4:b3:c7:c3:a3:59:f9:4d:15:06:0d:
45:18:06:34:0e:4c:e2:6d:cc:ca:c8:63:aa:d3:99:
13:d4:fc:1d:ff:50:17:31:a7:9c:49:56:0f:8a:aa:
7b:d9:53:ab:28:0e:17:e1:b2:3e:33:a7:a0:ac:00:
4d:80:45:60:1c:4a:db:37:93:1c:23:02:96:3d:d9:
85:9e:a7:77:a6:b5:59:35:5d:a5:c2:8f:37:0d:bf:
9d:42:68:bd:27:a5:23:7e:98:93:c8:20:16:7f:11:
df:2a:a3:4b:74:7b:8f:65:3b:db:48:33:5c:44:7a:
9b:3f:53:a0:bc:b2:6d:90:73:4f:12:aa:8b:a8:c9:
ba:56:64:14:8f:58:89:86:22:73:c6:d3:6b:b8:5f:
1b:1d:72:c3:0e:20:d5:4b:d1:59:5e:c7:4c:f3:59:
e0:9d:56:37:21:16:d3:22:c9:55:20:fa:5e:83:aa:
6a:4d:46:b9:74:23:16:b7:7f:66:70:e1:d9:e8:f5:
89:a8:4c:91:b5:65:27:76:5a:66:9e:4a:e5:80:08:
5a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DD:4F:A3:15:4E:40:75:50:95:5A:E2:1E:14:7B:09:F8:53:5C:FA
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/V91PoxVOQHVQlVriHhR7CfhTXPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.198.0/24
95.214.181.0/24
Signature Algorithm: sha256WithRSAEncryption
89:58:80:7c:c8:11:08:59:64:ef:a6:7b:b3:14:8a:57:6f:54:
e3:60:58:41:82:d1:93:0f:a2:d3:b5:b9:e5:da:e5:b1:1b:72:
3d:fd:78:b1:d5:d0:52:a8:44:72:da:ac:f7:fc:82:57:b9:ff:
e0:57:59:57:87:f8:d8:30:04:6d:95:46:70:8e:0d:86:56:60:
f1:35:7c:64:bd:4b:7b:60:ae:24:83:8f:b9:6c:e9:0a:77:36:
3f:3f:b7:9b:21:93:62:73:7a:62:90:84:2a:3d:f1:cd:80:47:
60:c9:c3:b9:5a:b5:56:c6:50:cc:b6:53:2d:49:db:9c:84:50:
e2:f3:79:11:9d:10:c2:3e:bf:f6:73:e5:e9:5e:f1:d0:3d:f4:
05:91:05:ea:74:09:f3:53:a9:a8:07:a9:13:73:cf:cc:6b:6c:
9f:28:67:fe:ae:1e:33:a4:4b:aa:5a:18:e8:f5:db:25:a2:9b:
c2:fc:3b:92:71:9c:05:f2:3c:89:f2:4e:e9:79:c9:b1:5d:e5:
eb:3a:44:54:4d:7d:a9:bd:57:e7:da:35:71:c2:02:6d:85:4e:
11:0f:1f:3a:ed:35:83:44:8e:c5:bb:41:1f:32:d2:ac:be:4e:
31:ad:75:95:19:d0:16:28:4e:b2:be:17:ab:79:af:76:4c:0c:
03:f1:a6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 03:58:06 2023 by rpki-client on console-ams.rpki-client.org