Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/jpaMsbeqfCzA-IrQhp2DUIP-ipA.roa
File: jpaMsbeqfCzA-IrQhp2DUIP-ipA.roa (raw, json)
Hash identifier: vNvpt4ynw2TdcFmkJWo2MJ2vF0bV/J7ptURY5dEflpw=
Subject key identifier: 8E:96:8C:B1:B7:AA:7C:2C:C0:F8:8A:D0:86:9D:83:50:83:FE:8A:90
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018BBD66DE19C7D4E5C18F42B7E6A964A197
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/jpaMsbeqfCzA-IrQhp2DUIP-ipA.roa
Signing time: Sat 11 Nov 2023 08:01:57 +0000
ROA not before: Sat 11 Nov 2023 08:01:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 95.214.173.0/24 maxlen: 24
193.239.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bd:66:de:19:c7:d4:e5:c1:8f:42:b7:e6:a9:64:a1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Nov 11 08:01:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e968cb1b7aa7c2cc0f88ad0869d835083fe8a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ff:34:06:cf:41:31:12:48:4c:4d:46:cd:69:
03:0c:9f:44:62:35:e3:4e:ec:e6:2c:41:40:eb:c4:
77:3a:7a:85:53:12:74:cf:8b:2e:9a:65:a7:51:60:
55:09:c7:aa:13:cd:3d:c4:33:1f:be:81:15:2e:9e:
fb:2d:bc:7f:34:6b:4a:b0:65:f0:0f:0c:dd:54:71:
5e:f3:fe:a8:5b:3c:f6:31:58:73:6b:57:86:29:0a:
5c:03:4d:95:80:0a:1f:97:af:2f:3f:1f:6e:e0:11:
74:1d:46:7b:99:ca:36:d1:53:51:57:9c:63:f4:5e:
ba:30:f9:a1:74:79:e8:bc:18:87:46:2c:d1:b3:57:
99:b4:d8:62:e3:39:d6:e7:b6:90:09:63:ae:ad:ef:
2a:48:00:68:d5:7e:b0:1d:54:3b:ad:07:c3:cd:5e:
6f:2a:d2:19:e6:89:f7:21:43:38:72:75:b4:57:f9:
28:71:4a:87:91:34:f0:2e:8a:f0:ab:a8:d8:65:b7:
c4:86:cf:ba:70:99:de:b9:33:96:4c:14:22:09:ee:
2e:24:d9:a7:69:8c:4a:f8:92:65:d9:ce:1c:35:71:
4c:2c:e6:8f:02:ec:c8:95:a8:5b:d9:d9:89:20:41:
09:59:92:6f:81:84:a3:45:27:04:8e:ba:42:f2:e4:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:96:8C:B1:B7:AA:7C:2C:C0:F8:8A:D0:86:9D:83:50:83:FE:8A:90
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/jpaMsbeqfCzA-IrQhp2DUIP-ipA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.173.0/24
193.239.196.0/24
Signature Algorithm: sha256WithRSAEncryption
27:5d:97:83:d4:77:44:65:72:7f:9e:b8:1f:29:3f:76:60:e2:
12:bf:4b:24:5c:7b:a2:0f:05:a5:a5:07:4e:d9:9e:f4:b6:a5:
b8:7e:be:18:32:2f:a8:4a:f9:8d:af:31:3c:b4:c8:57:47:0c:
d2:3d:7c:01:73:e5:8b:29:04:44:c8:64:8f:86:2c:84:c2:57:
45:1c:6f:73:92:97:75:7a:b5:5c:75:21:70:8a:3e:6d:37:1a:
31:7e:28:40:03:b1:c7:bc:cd:3f:ad:7e:9f:92:d9:c8:da:3e:
4f:53:13:ae:d4:89:7d:aa:eb:8d:4e:08:fb:ae:ad:86:cc:76:
36:6e:f7:87:9d:e2:70:76:ac:12:74:87:87:6e:b1:4f:e4:a8:
ca:60:a0:50:e7:43:77:dd:fb:d4:75:1e:39:77:94:d5:a5:ee:
25:89:91:b4:b3:4b:b4:62:a8:4e:3b:e4:2e:66:6c:a0:b7:92:
dc:92:52:5c:71:e0:6a:20:2a:b1:30:85:8a:62:3c:cf:89:87:
69:d8:92:a2:be:be:4e:08:aa:bc:35:da:97:40:ba:65:4d:1c:
e9:08:45:ca:9b:84:85:5e:5c:d2:16:9a:dc:1a:2d:a4:b1:28:
a0:19:b3:a0:43:21:02:ca:99:c8:86:f5:c3:17:b0:0c:7e:7a:
ee:be:71:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org