Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/dB4_0Ry7PaUeQqZMxryzG3w41vk.roa
File: dB4_0Ry7PaUeQqZMxryzG3w41vk.roa (raw, json)
Hash identifier: ole8bfTYSWNXpSX52yG7QY4oG5SB3Wg7jXToemTQcFw=
Subject key identifier: 74:1E:3F:D1:1C:BB:3D:A5:1E:42:A6:4C:C6:BC:B3:1B:7C:38:D6:F9
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01856EAA2C73FA77FC3EA16F59AD9936AD41
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/dB4_0Ry7PaUeQqZMxryzG3w41vk.roa
Signing time: Sun 01 Jan 2023 18:48:44 +0000
ROA not before: Sun 01 Jan 2023 18:48:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 95.214.172.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Jun 2023 07:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:aa:2c:73:fa:77:fc:3e:a1:6f:59:ad:99:36:ad:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 1 18:48:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=741e3fd11cbb3da51e42a64cc6bcb31b7c38d6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:9a:43:30:36:80:9e:98:ac:98:7b:10:3f:
59:07:9f:e7:ea:d6:e1:8a:2f:33:bd:ba:d8:1a:06:
f8:28:13:e6:ee:b6:c6:f5:25:76:e0:33:4e:cd:75:
22:62:4a:d3:5a:54:8a:61:2e:f1:bc:69:f5:01:1e:
d9:0d:3a:fe:5d:a1:2f:ea:a4:5b:46:62:fa:d0:84:
72:f0:a3:5d:7a:1f:9f:2d:f4:cd:a4:5f:44:68:b6:
bf:6d:17:1e:44:34:e0:0f:9b:6f:0b:c0:b7:84:72:
a2:3c:4f:81:2b:16:89:59:6f:81:6e:aa:a9:bf:67:
61:57:99:15:96:76:9d:51:fa:14:e1:b8:7e:8a:e8:
2f:81:17:9f:2f:1d:ad:4e:0f:75:0f:aa:f5:46:2d:
89:a8:94:e6:5a:95:06:1b:a4:60:5b:90:18:37:3d:
6c:e1:37:55:f5:bc:2e:88:74:72:f2:c0:65:24:17:
63:1f:21:83:12:b2:1f:e1:41:98:63:06:8c:da:22:
a9:93:5f:f3:59:61:93:91:90:d4:6c:8a:2a:56:6e:
93:f1:c6:01:b1:74:b5:d4:e9:05:dc:27:a2:84:7e:
9a:58:ce:fe:cd:69:d2:4d:98:d4:9f:e0:bf:34:db:
3d:11:06:dc:9d:be:58:08:fc:63:b5:88:ea:81:e3:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1E:3F:D1:1C:BB:3D:A5:1E:42:A6:4C:C6:BC:B3:1B:7C:38:D6:F9
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/dB4_0Ry7PaUeQqZMxryzG3w41vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.172.0/22
Signature Algorithm: sha256WithRSAEncryption
40:bb:ff:c7:f4:66:7d:6b:b8:cd:03:cb:97:4d:94:c3:53:d9:
b7:3d:43:a9:9e:c7:95:22:61:98:51:e2:05:66:f8:9b:bf:c8:
58:a8:b9:a9:4e:02:bb:86:23:be:00:10:ee:62:e8:c4:8d:c7:
a3:dc:4b:a1:4b:cb:49:1f:64:5a:62:9e:cd:4d:68:ea:f8:7e:
4c:bf:be:e1:53:c1:c3:6b:9d:dc:65:91:12:01:62:2d:0b:a4:
67:60:02:bb:9e:55:e0:34:93:6c:1b:92:dc:bd:f2:26:72:ce:
64:28:9c:54:88:5b:fe:bd:c2:9e:e4:74:60:fd:fb:a2:ee:4b:
e3:4a:4c:40:b3:19:65:17:40:50:23:a0:f3:75:12:f6:68:6d:
5c:a0:c8:18:fe:c8:e8:78:2d:28:33:f9:08:57:49:a0:e5:14:
f9:4b:3f:79:27:78:25:6f:cf:ee:a0:8c:4b:98:d3:6c:c5:ec:
ac:15:0f:63:c7:f8:5f:08:84:a0:e4:e3:12:8d:82:2a:cc:50:
24:41:a3:e4:66:27:c0:a2:db:f1:f6:71:5d:18:f2:62:6a:0e:
02:6a:6c:43:8d:44:4e:ae:fc:92:37:f7:85:c4:bb:59:d4:77:
fb:84:15:d0:7f:93:4b:fa:ac:7d:e6:39:b7:b1:8e:35:43:1c:
7f:6d:da:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:46 2024 by rpki-client on console-fra.rpki-client.org