Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/b9-xFmGbBc-7bkMKP9MlrqJ41rU.roa
File: b9-xFmGbBc-7bkMKP9MlrqJ41rU.roa (raw, json)
Hash identifier: x8n+EvbiE6w1BBgU+73qmWtVkocLPEGbFGZ+uDn+0kc=
Subject key identifier: 6F:DF:B1:16:61:9B:05:CF:BB:6E:43:0A:3F:D3:25:AE:A2:78:D6:B5
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018B88E9F67F301915A3F54C0EB50DA4AEE2
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/b9-xFmGbBc-7bkMKP9MlrqJ41rU.roa
Signing time: Wed 01 Nov 2023 03:25:16 +0000
ROA not before: Wed 01 Nov 2023 03:25:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.214.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 16:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:88:e9:f6:7f:30:19:15:a3:f5:4c:0e:b5:0d:a4:ae:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Nov 1 03:25:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fdfb116619b05cfbb6e430a3fd325aea278d6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4d:46:0b:72:52:a8:7b:de:ec:56:23:2b:78:
fc:08:75:43:ca:f6:08:2e:22:39:74:e2:8b:11:e3:
c5:6e:ce:c0:5e:21:7b:bd:9a:7d:fa:1d:a3:d1:b0:
0c:3e:53:00:2f:5e:a4:8b:b8:4d:b7:78:c1:b4:bd:
64:fc:4d:db:cd:69:5c:78:e1:ef:64:08:b8:ce:e0:
ee:8d:cd:72:32:1c:39:1e:9e:65:f2:a7:b5:64:d4:
94:f5:d9:01:62:d0:ff:04:de:1f:f9:74:f4:be:62:
3c:c5:8b:7a:df:b0:23:f7:7d:8c:7e:57:5a:89:15:
7d:48:ce:94:68:c1:91:2c:8e:a1:b3:2d:7c:a1:b3:
22:bd:46:79:c6:22:54:76:b6:8b:85:3c:9c:de:b3:
e2:43:b4:2f:17:66:7c:14:02:56:74:d0:5c:58:03:
59:98:6d:94:16:56:bb:a8:b3:72:91:3d:ef:64:34:
d3:64:a4:7e:2c:8b:e2:74:3f:d9:b6:c4:e2:d3:16:
de:dd:ee:66:7e:18:93:2b:0b:7a:7a:35:24:04:bb:
af:32:3f:02:39:8d:09:55:8d:c9:e7:23:4e:36:c5:
f6:65:61:12:93:b7:d4:7b:e2:47:83:37:1a:46:58:
8b:f8:98:f5:a7:82:97:cf:c5:9d:c0:94:77:0a:60:
cc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DF:B1:16:61:9B:05:CF:BB:6E:43:0A:3F:D3:25:AE:A2:78:D6:B5
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/b9-xFmGbBc-7bkMKP9MlrqJ41rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.181.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b7:ce:9a:85:17:94:bd:41:a4:8d:87:0e:57:dd:d9:13:57:
45:ab:86:27:cb:b2:c3:39:92:ba:58:dc:d1:01:93:bf:0e:1b:
6a:f5:64:32:89:24:33:ed:b5:67:9f:55:af:a6:0e:a0:7c:8a:
fa:c8:f0:66:38:42:8a:ec:3f:12:7c:e7:c5:fa:00:1e:19:d8:
84:59:b0:96:31:bf:fc:94:3b:c6:04:90:23:6f:46:00:64:f1:
d2:ea:74:27:cb:cb:ff:08:fa:7b:45:13:fd:c7:61:42:c7:4f:
3e:bb:14:5a:18:46:53:b0:8e:b9:02:2e:3a:54:b5:54:b0:eb:
3e:17:18:66:a8:09:e3:87:23:8b:87:cc:75:67:db:de:05:f9:
69:9e:98:7c:a2:3c:34:2e:99:38:4e:8b:4d:19:b3:df:ec:d5:
90:02:c0:9e:15:88:ed:2f:69:28:8c:ee:1c:7b:e3:aa:1a:ef:
4f:c1:34:9a:05:f0:b5:74:5d:6c:54:d7:11:7d:69:33:ac:c8:
9d:8e:be:32:0f:d3:00:16:62:6d:02:dc:01:9c:39:63:25:a3:
db:1b:b7:61:42:47:e4:cb:e2:91:f5:7f:5e:e0:92:cd:50:75:
2f:0d:f0:95:c4:b9:67:3b:c2:1f:70:a2:a9:de:33:ca:fd:e3:
d7:4d:bd:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuI6fZ/MBkVo/VMDrUNpK7iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjMxMTAxMDMyNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmRmYjExNjYxOWIwNWNmYmI2ZTQzMGEzZmQzMjVhZWEyNzhkNmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk1GC3JSqHve7FYjK3j8CHVDyvYI
LiI5dOKLEePFbs7AXiF7vZp9+h2j0bAMPlMAL16ki7hNt3jBtL1k/E3bzWlceOHv
ZAi4zuDujc1yMhw5Hp5l8qe1ZNSU9dkBYtD/BN4f+XT0vmI8xYt637Aj932Mflda
iRV9SM6UaMGRLI6hsy18obMivUZ5xiJUdraLhTyc3rPiQ7QvF2Z8FAJWdNBcWANZ
mG2UFla7qLNykT3vZDTTZKR+LIvidD/ZtsTi0xbe3e5mfhiTKwt6ejUkBLuvMj8C
OY0JVY3J5yNONsX2ZWESk7fUe+JHgzcaRliL+Jj1p4KXz8WdwJR3CmDM1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG/fsRZhmwXPu25DCj/TJa6ieNa1MB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvYjkteEZtR2JCYy03YmtNS1A5TWxycUo0MXJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX9a1MA0G
CSqGSIb3DQEBCwUAA4IBAQB9t86ahReUvUGkjYcOV93ZE1dFq4Yny7LDOZK6WNzR
AZO/Dhtq9WQyiSQz7bVnn1Wvpg6gfIr6yPBmOEKK7D8SfOfF+gAeGdiEWbCWMb/8
lDvGBJAjb0YAZPHS6nQny8v/CPp7RRP9x2FCx08+uxRaGEZTsI65Ai46VLVUsOs+
FxhmqAnjhyOLh8x1Z9veBflpnph8ojw0Lpk4TotNGbPf7NWQAsCeFYjtL2kojO4c
e+OqGu9PwTSaBfC1dF1sVNcRfWkzrMidjr4yD9MAFmJtAtwBnDljJaPbG7dhQkfk
y+KR9X9e4JLNUHUvDfCVxLlnO8IfcKKp3jPK/ePXTb18
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:46 2024 by rpki-client on console-fra.rpki-client.org