Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/eYo-NqoT9gV_HxUaGDKoiRqXaSo.roa
File: eYo-NqoT9gV_HxUaGDKoiRqXaSo.roa (raw, json)
Hash identifier: Ljtxm3i7wMkON6RLNZDmLH8M6LnFK/qgKOkzel/EZ3U=
Subject key identifier: 79:8A:3E:36:AA:13:F6:05:7F:1F:15:1A:18:32:A8:89:1A:97:69:2A
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 019243F3E002F80BAC5786EDE6C7C0FE4BD9
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/eYo-NqoT9gV_HxUaGDKoiRqXaSo.roa
Signing time: Mon 30 Sep 2024 17:21:48 +0000
ROA not before: Mon 30 Sep 2024 17:21:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 95.214.173.0/24 maxlen: 24
193.239.236.0/24 maxlen: 24
193.239.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 17:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:43:f3:e0:02:f8:0b:ac:57:86:ed:e6:c7:c0:fe:4b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Sep 30 17:21:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=798a3e36aa13f6057f1f151a1832a8891a97692a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:0e:3c:d9:2b:8f:98:da:16:63:0c:d8:1b:
99:28:54:7b:a6:8c:e1:49:d8:69:aa:a3:97:70:e1:
04:4e:12:8e:46:8b:c3:bc:0b:24:a7:a4:4d:0f:fe:
10:06:f0:86:4d:83:f0:58:7c:19:f5:84:67:03:08:
d8:d9:45:f3:a5:60:e2:45:12:79:1c:12:d0:88:b6:
7a:3d:4b:9c:7e:ee:ff:af:2c:95:be:cd:d9:73:94:
97:43:1b:37:a9:a8:f2:73:ff:01:17:77:66:41:65:
8c:0f:67:a4:e7:39:fa:b4:b9:97:8b:35:4f:c0:1a:
ca:da:ff:fb:b7:5d:1a:c6:5f:15:b9:e4:a1:97:7e:
75:fe:75:3e:2a:4d:da:ac:3c:13:f2:e2:ca:b3:08:
ba:52:85:47:d9:13:45:04:ce:61:f6:05:9d:0f:84:
13:ca:51:1a:4a:0e:d1:2f:b9:02:87:ed:8e:09:c4:
8e:ae:24:3f:d4:d6:93:04:26:95:30:e3:ee:3b:5b:
f3:f1:f7:40:39:bd:ef:3b:9c:bb:39:e4:cf:1f:9d:
66:36:c2:f3:36:7d:11:09:4e:12:63:4c:ca:95:f4:
72:14:e7:20:b3:47:31:14:e1:7f:d0:68:b4:b4:73:
c3:29:d8:50:de:29:34:45:a9:f8:4a:eb:f1:a0:8f:
24:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8A:3E:36:AA:13:F6:05:7F:1F:15:1A:18:32:A8:89:1A:97:69:2A
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/eYo-NqoT9gV_HxUaGDKoiRqXaSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.173.0/24
193.239.236.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:04:23:ee:f8:21:a0:b4:29:f0:91:35:5d:70:da:07:d3:26:
b4:ee:c3:c7:56:65:ce:0a:d4:fc:6c:f2:fd:05:ef:1b:dc:02:
02:4d:61:18:4b:87:52:b7:40:88:be:c9:ef:4b:02:d6:cc:db:
76:54:c6:6d:c4:7a:14:1e:fe:c4:41:82:22:9d:52:87:d7:7c:
70:88:8f:58:41:e8:e5:40:05:88:c3:3d:de:45:8c:9e:a3:77:
37:4c:d0:28:e1:37:d2:f1:91:31:40:ef:4a:62:ea:59:a5:bd:
be:cc:49:4d:fb:b1:dc:70:26:6c:f7:c6:d2:05:2b:87:d3:82:
21:b9:7d:13:d0:10:db:56:ed:82:71:f8:a5:2d:78:5d:ee:15:
1b:fc:9f:d4:e5:7a:b3:6d:8d:15:f4:cc:8f:c0:6f:91:03:1f:
ed:d5:71:ef:39:99:48:77:68:35:d5:00:c8:7a:e0:81:14:19:
fc:58:26:b7:48:1b:46:14:df:46:99:48:c6:b5:27:d2:7c:41:
13:db:1f:90:6c:d8:c1:99:8d:8d:e5:e9:8b:41:15:45:06:e7:
10:cf:0b:54:22:9c:e5:f9:fa:f4:eb:74:42:48:c6:65:a9:d8:
d3:39:b0:05:69:1f:ae:f3:47:b9:15:d0:bf:82:b3:91:57:7d:
a1:20:44:4a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJD8+AC+AusV4bt5sfA/kvZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjQwOTMwMTcyMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OThhM2UzNmFhMTNmNjA1N2YxZjE1MWExODMyYTg4OTFhOTc2OTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOYOPNkrj5jaFmMM2BuZKFR7pozh
SdhpqqOXcOEEThKORovDvAskp6RND/4QBvCGTYPwWHwZ9YRnAwjY2UXzpWDiRRJ5
HBLQiLZ6PUucfu7/ryyVvs3Zc5SXQxs3qajyc/8BF3dmQWWMD2ek5zn6tLmXizVP
wBrK2v/7t10axl8VueShl351/nU+Kk3arDwT8uLKswi6UoVH2RNFBM5h9gWdD4QT
ylEaSg7RL7kCh+2OCcSOriQ/1NaTBCaVMOPuO1vz8fdAOb3vO5y7OeTPH51mNsLz
Nn0RCU4SY0zKlfRyFOcgs0cxFOF/0Gi0tHPDKdhQ3ik0Ran4SuvxoI8kyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHmKPjaqE/YFfx8VGhgyqIkal2kqMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvZVlvLU5xb1Q5Z1ZfSHhVYUdES29pUnFYYVNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX9atAwQB
we/sMA0GCSqGSIb3DQEBCwUAA4IBAQAeBCPu+CGgtCnwkTVdcNoH0ya07sPHVmXO
CtT8bPL9Be8b3AICTWEYS4dSt0CIvsnvSwLWzNt2VMZtxHoUHv7EQYIinVKH13xw
iI9YQejlQAWIwz3eRYyeo3c3TNAo4TfS8ZExQO9KYupZpb2+zElN+7HccCZs98bS
BSuH04IhuX0T0BDbVu2CcfilLXhd7hUb/J/U5XqzbY0V9MyPwG+RAx/t1XHvOZlI
d2g11QDIeuCBFBn8WCa3SBtGFN9GmUjGtSfSfEET2x+QbNjBmY2N5emLQRVFBucQ
zwtUIpzl+fr063RCSMZlqdjTObAFaR+u80e5FdC/grORV32hIERK
-----END CERTIFICATE-----
Generated at Wed Oct 2 19:58:40 2024 by rpki-client on console-ams.rpki-client.org