Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/VVHhxBW9NJXGx4kk3Mon8Oo9DE0.roa
File: VVHhxBW9NJXGx4kk3Mon8Oo9DE0.roa (raw, json)
Hash identifier: OoyHL0t71ssw58UvU4jeBIUIbGCuiK6kGvJHS5MFPuo=
Subject key identifier: 55:51:E1:C4:15:BD:34:95:C6:C7:89:24:DC:CA:27:F0:EA:3D:0C:4D
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018972A2EB9DF31F4297E1F3541E6982B056
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/VVHhxBW9NJXGx4kk3Mon8Oo9DE0.roa
Signing time: Thu 20 Jul 2023 09:30:27 +0000
ROA not before: Thu 20 Jul 2023 09:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 95.214.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:a2:eb:9d:f3:1f:42:97:e1:f3:54:1e:69:82:b0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jul 20 09:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5551e1c415bd3495c6c78924dcca27f0ea3d0c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:b7:b4:7a:10:71:44:6b:40:bb:1e:b1:c1:
03:85:b8:a6:b4:73:5d:9f:c1:c2:f2:23:94:f9:9a:
c0:28:a9:be:02:e1:ff:d3:74:24:ff:0b:e6:d1:6f:
a5:5f:34:2b:49:cd:b5:3f:41:38:22:95:87:20:c9:
11:41:04:0b:94:45:b1:dd:61:d5:3a:1e:a4:31:0e:
b4:f8:37:15:7d:0a:fa:d3:5d:6c:12:3f:22:1d:1e:
c3:50:76:a9:4e:70:31:d4:29:19:ed:ff:d4:2d:ed:
bc:a1:7a:65:04:5c:dd:4b:f6:ca:3f:66:c1:a4:dc:
3d:a3:c1:7d:a5:07:fb:8b:70:6f:a1:5f:33:04:b4:
a0:01:fd:5e:f3:bb:90:0e:aa:f0:70:c7:7a:5d:18:
05:c1:ee:36:3c:52:82:e5:17:59:fa:75:f7:7e:8a:
96:5a:0c:5a:47:e2:b4:29:e8:52:42:cf:39:9f:63:
10:28:0b:75:cb:67:3d:20:8d:e1:c0:78:33:49:db:
9a:35:f8:b0:0e:13:92:7e:e4:37:02:c2:31:e1:37:
7e:9a:03:51:51:8b:63:4a:e9:04:2d:b7:75:61:84:
78:67:a0:65:dc:3c:23:2a:30:65:bb:cf:58:af:ad:
3a:04:34:da:5f:b1:68:e9:17:87:21:2c:c5:fa:3b:
a7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:51:E1:C4:15:BD:34:95:C6:C7:89:24:DC:CA:27:F0:EA:3D:0C:4D
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/VVHhxBW9NJXGx4kk3Mon8Oo9DE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.175.0/24
Signature Algorithm: sha256WithRSAEncryption
74:46:df:26:0f:f1:bc:75:f5:c3:9c:d0:3a:3b:7c:bc:d9:4b:
2b:89:6d:44:56:d6:e1:5d:ee:eb:29:cd:69:5f:51:1d:bb:c2:
a4:60:eb:36:57:5e:37:9a:26:b2:43:d1:9e:39:30:76:29:a8:
45:98:3f:43:7c:49:f9:2c:fb:ab:52:13:61:12:25:99:13:7e:
b5:0e:2c:9b:b0:70:54:ed:ce:be:fb:bc:29:5d:79:d1:6c:0a:
f0:74:9b:c5:80:9e:86:71:5a:c1:fe:c4:af:8e:ee:ca:8a:45:
bc:0b:3d:ce:46:c6:6d:9b:a3:59:83:1a:8b:73:aa:24:e0:91:
82:5d:63:d3:65:fe:f1:d0:ea:fc:9a:c2:56:ef:da:20:d2:e3:
83:07:c7:b3:53:af:42:82:2a:09:5f:d5:e5:3e:e3:c5:1a:6d:
ff:72:c5:8f:cb:d2:b3:7a:f3:25:bc:c5:cb:54:8f:3a:6c:27:
87:d5:65:0d:a3:97:a4:37:ba:d3:ad:b3:10:ab:17:b1:e0:76:
18:7e:3c:cb:47:f8:78:ce:38:d3:89:9f:5a:15:0f:2a:a9:fb:
5b:b9:f5:62:de:b5:47:ab:ca:15:ad:ae:32:61:d3:ea:93:6f:
01:db:b9:c4:62:b6:54:45:36:77:ff:9e:d0:60:27:f1:61:2b:
54:f6:ad:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:49 2024 by rpki-client on console-ams.rpki-client.org