Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/b48vJqq1OmKDHjiFTmGfRDpisIU.roa
File: b48vJqq1OmKDHjiFTmGfRDpisIU.roa (raw, json)
Hash identifier: nRFWsDEgnGC5eM1M9+zqWRjzt3EYsJBh/o/sRAHRs6M=
Subject key identifier: 6F:8F:2F:26:AA:B5:3A:62:83:1E:38:85:4E:61:9F:44:3A:62:B0:85
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018A1BCB56864DAE911120CE355B4909626C
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/b48vJqq1OmKDHjiFTmGfRDpisIU.roa
Signing time: Tue 22 Aug 2023 05:50:25 +0000
ROA not before: Tue 22 Aug 2023 05:50:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.214.172.0/24 maxlen: 24
95.214.173.0/24 maxlen: 24
95.214.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Aug 2023 00:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1b:cb:56:86:4d:ae:91:11:20:ce:35:5b:49:09:62:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Aug 22 05:50:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f8f2f26aab53a62831e38854e619f443a62b085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6a:2d:fe:97:74:e7:fe:7e:30:ce:b7:bb:77:
ea:19:47:e5:da:2d:a0:b3:1f:ff:4f:bb:94:c6:f2:
70:37:c3:06:88:b6:f7:eb:0d:ce:d8:03:a8:f4:c3:
57:b0:6c:23:99:49:27:87:83:9e:8e:b3:12:5a:91:
8d:b1:31:15:8a:1a:a1:dc:74:9c:d9:5d:8a:88:d4:
6b:ed:f5:95:c8:7b:6e:5f:4c:82:d7:f8:5e:27:33:
81:57:43:3a:9e:8f:00:21:9b:54:a1:f0:5d:b0:ff:
a7:48:05:a6:7a:2e:a7:00:79:9d:2d:67:78:73:6c:
58:7c:19:a6:60:28:d4:5b:9b:07:c6:6a:a6:b4:6a:
ea:f7:54:a2:38:3e:56:b2:cf:a3:de:9d:68:7e:89:
d1:b2:37:d1:ae:1e:71:ae:90:3f:4b:25:1c:65:bc:
ae:82:10:e7:40:7c:8f:cb:01:8b:1c:4e:a1:ca:c6:
e0:36:e2:cd:0c:00:77:8d:7a:7a:8a:82:cc:e7:14:
68:31:a2:fb:87:8b:89:9a:0f:3b:52:da:e4:9e:75:
93:f7:8a:36:73:7f:50:40:40:db:c8:e1:03:33:db:
88:0a:8a:03:0c:94:c9:a2:99:c9:7e:bc:67:8c:d2:
4e:65:25:f9:fd:be:b6:ac:7c:ab:9c:3f:a9:87:0b:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8F:2F:26:AA:B5:3A:62:83:1E:38:85:4E:61:9F:44:3A:62:B0:85
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/b48vJqq1OmKDHjiFTmGfRDpisIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.172.0/23
95.214.181.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:74:49:2f:ae:f2:34:9d:37:69:0f:ed:35:f2:cb:35:5d:87:
e1:c5:e1:8a:df:e1:58:5f:54:0e:28:f1:89:a2:2e:37:9c:71:
00:b2:fe:b7:09:3c:90:c5:4c:70:89:29:3d:13:e7:5d:94:1b:
d8:94:78:af:2d:82:39:be:f8:95:28:40:c0:f5:60:d2:2c:b4:
6f:10:8a:eb:63:66:da:e3:b0:c1:d7:82:1f:77:3e:e9:c8:18:
85:6b:8f:18:93:a7:ee:0c:fe:c9:03:fb:d2:81:37:18:e0:ca:
2a:06:5b:71:4f:b7:76:68:06:26:c1:c2:01:db:18:33:48:c2:
0b:91:12:a1:75:da:5f:d0:2a:c1:06:50:e1:5e:16:f5:48:20:
e9:f8:e8:28:4f:6c:af:0a:4e:e2:6d:64:e2:bd:5e:a9:ef:9d:
1a:67:13:f9:37:52:0e:34:a0:fb:bf:84:52:ec:ca:6d:e7:9d:
41:5b:5f:8d:1a:b8:1f:59:1a:03:8d:3a:b6:da:fa:e4:ad:b3:
39:51:fd:32:31:1a:0b:a9:20:f8:72:e8:ca:88:92:ae:43:bf:
d5:f1:64:b4:03:17:14:66:56:d3:70:13:61:c5:21:60:78:5e:
99:2f:20:57:80:b7:fd:ce:05:02:1d:59:64:bf:44:0c:07:70:
e9:74:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org