Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/llOrv3C2zvgK0HiHiJn5YTOT6wo.roa
File: llOrv3C2zvgK0HiHiJn5YTOT6wo.roa (raw, json)
Hash identifier: 2u/CQgUmVKXwXvum0czOneQWRS441jvQhxZHBghw2iY=
Subject key identifier: 96:53:AB:BF:70:B6:CE:F8:0A:D0:78:87:88:99:F9:61:33:93:EB:0A
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01856EAA235A8C16DB51D3C99F0A2EA98200
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/llOrv3C2zvgK0HiHiJn5YTOT6wo.roa
Signing time: Sun 01 Jan 2023 18:48:42 +0000
ROA not before: Sun 01 Jan 2023 18:48:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 95.214.172.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:aa:23:5a:8c:16:db:51:d3:c9:9f:0a:2e:a9:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 1 18:48:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9653abbf70b6cef80ad078878899f9613393eb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c6:c4:c0:a2:c2:9d:ac:49:bc:6a:b4:e5:bc:
de:38:66:72:39:52:5b:a3:d0:fa:5f:dd:5f:07:bd:
67:95:8d:61:21:a9:b5:5c:23:2c:0d:a3:9d:fb:12:
c8:9b:a3:4f:53:23:39:f9:a9:38:a4:e7:1b:f6:8a:
cd:a2:fe:c3:e4:e0:b1:1e:5d:e5:f0:02:25:b5:34:
d1:19:57:b4:81:ec:1c:c7:8b:87:03:ac:df:a9:f8:
ec:76:18:f9:ed:92:e7:f5:66:48:f6:75:a0:e8:59:
6a:fa:d8:54:12:e2:89:95:c4:9e:08:21:dd:b4:79:
d5:e9:dd:74:9d:78:f0:23:a3:d2:f6:43:09:62:68:
e0:95:02:ca:bf:53:c5:c1:86:d9:b8:68:75:62:7a:
90:b4:36:8e:51:cd:53:cf:e7:84:de:80:0b:48:63:
ce:f1:ec:5c:c2:f8:cb:9a:44:8a:bb:55:51:35:7f:
9e:83:f7:0e:89:b0:46:cb:31:af:43:0c:65:02:8a:
1c:af:ad:56:99:a9:09:9c:bf:b5:cf:de:2d:bb:eb:
9a:80:b9:b2:22:f5:2b:2c:ec:c1:cb:e5:81:2c:86:
da:67:86:58:82:64:f3:7f:fd:35:63:dc:96:3f:45:
e9:ab:17:25:42:f9:b9:e1:3a:77:ea:72:26:95:c7:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:53:AB:BF:70:B6:CE:F8:0A:D0:78:87:88:99:F9:61:33:93:EB:0A
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/llOrv3C2zvgK0HiHiJn5YTOT6wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.172.0/22
Signature Algorithm: sha256WithRSAEncryption
44:32:d1:e4:95:09:b0:97:57:1f:dc:65:2c:6b:aa:a2:b1:82:
81:3c:55:71:5e:0f:db:d9:8b:e5:50:02:d4:a0:40:e2:e4:ad:
2e:62:8d:82:b4:6a:f3:6d:2d:85:f6:78:77:84:49:fb:08:78:
4a:16:64:85:ba:4c:69:0d:f9:99:96:9a:65:8f:14:af:9e:47:
2c:45:56:39:b8:b8:0c:62:9f:1a:7d:d2:68:11:53:a8:74:4d:
b8:71:48:1c:35:79:e8:db:98:5c:c0:cf:bc:b7:92:a5:aa:c1:
1b:f1:73:69:18:eb:97:58:19:d1:d2:7f:68:a1:64:34:01:12:
0a:0f:ec:57:d0:e8:28:5d:6d:c3:34:1a:11:b4:af:8b:e8:97:
3b:fb:3c:03:88:80:7a:9e:bc:8e:33:b3:9d:eb:f9:63:b2:f7:
a4:c5:ca:6d:45:5c:9b:c3:21:ae:9f:ed:a1:0e:22:ec:30:34:
be:9d:15:09:4b:e3:11:44:52:70:ae:38:1a:64:25:f3:bd:39:
c3:8c:23:0c:09:07:07:5e:e0:e1:d7:65:83:15:13:31:97:86:
3e:30:e9:aa:c7:4d:9b:a1:19:35:38:b6:e2:2b:73:3c:2d:c1:
96:88:f4:bc:a3:44:32:cd:4c:ff:1e:58:31:32:1d:31:67:f5:
c6:21:c0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:15 2023 by rpki-client on console-ams.rpki-client.org