Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/s6KDaXdh7qbKWiD3mjyrS_WQgAQ.roa
File: s6KDaXdh7qbKWiD3mjyrS_WQgAQ.roa (raw, json)
Hash identifier: G2x9JvMPlY8p961BhX0gibNUSniXREPyLhbw/It2N2c=
Subject key identifier: B3:A2:83:69:77:61:EE:A6:CA:5A:20:F7:9A:3C:AB:4B:F5:90:80:04
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018A24210BED3D02CBED5825C005EA1687AD
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/s6KDaXdh7qbKWiD3mjyrS_WQgAQ.roa
Signing time: Wed 23 Aug 2023 20:41:00 +0000
ROA not before: Wed 23 Aug 2023 20:41:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197842
IP address blocks: 95.214.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Oct 2023 04:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:24:21:0b:ed:3d:02:cb:ed:58:25:c0:05:ea:16:87:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Aug 23 20:41:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3a283697761eea6ca5a20f79a3cab4bf5908004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:87:bc:b8:ee:f5:f9:62:58:9f:17:a4:8d:
f7:df:87:25:ad:fc:10:b7:fa:3b:5e:8c:7f:e5:9d:
1a:88:32:f4:55:88:0c:f9:1a:59:f4:96:b4:2b:b0:
ab:3a:1a:24:23:87:88:44:86:ca:1d:ae:fc:64:63:
42:86:52:c0:0b:c6:b0:28:c2:80:0b:ee:b6:cf:b0:
be:a6:5b:34:96:09:3e:b0:ed:aa:df:76:df:76:01:
16:33:a9:38:52:f8:32:30:e9:c5:47:e9:10:70:a3:
1b:6f:bd:93:3d:9d:98:bc:44:03:bb:01:1b:52:94:
c0:41:0c:9f:88:14:e5:9a:50:3a:51:1b:8e:c3:44:
0d:43:84:93:26:a1:9f:bd:ee:1f:cc:a5:a7:3d:61:
f0:4e:b9:e2:cb:f3:fb:c7:d1:49:d3:d8:e4:cc:63:
62:66:21:ba:7e:46:c9:50:c6:ca:62:d6:55:49:b4:
17:c2:7d:0b:c0:b4:e1:8a:52:16:d3:73:8e:f2:19:
31:87:f2:05:05:74:46:29:7e:ad:01:c6:8d:83:1a:
b0:56:71:15:7f:e0:49:59:80:b7:1b:50:18:43:37:
c8:ac:e1:f1:10:f5:7e:90:6c:6b:2f:a6:ce:47:92:
8e:b8:f0:6f:ae:c0:6f:68:2c:6d:cf:50:b7:51:86:
c0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A2:83:69:77:61:EE:A6:CA:5A:20:F7:9A:3C:AB:4B:F5:90:80:04
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/s6KDaXdh7qbKWiD3mjyrS_WQgAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.181.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:15:79:85:03:22:e0:64:73:ea:b1:f9:e0:32:17:64:4e:c6:
63:3b:06:5a:3b:f6:4b:68:48:10:b5:d3:2d:b3:bf:2e:99:1b:
f0:5a:8f:98:32:64:7a:2e:20:0d:e0:5d:78:95:10:e1:5c:cc:
e8:52:25:2e:62:79:56:e6:14:8c:e8:43:ff:49:f2:a7:d2:17:
61:a2:47:2c:0f:09:57:b4:70:04:91:80:25:16:2e:74:c4:1a:
fb:1f:bc:cc:41:00:9f:07:72:ac:e4:48:16:5a:f3:1f:5e:44:
7d:dd:ad:e3:fe:f3:84:ee:a1:d3:c0:0e:98:98:dc:3e:b4:7e:
0c:64:6c:10:2c:a4:0b:f6:64:94:c8:6a:5c:25:7a:28:a6:28:
4d:07:97:b7:1e:a2:0d:01:ea:d2:fd:10:f7:42:4c:97:6a:0c:
61:96:26:d7:13:a3:56:25:62:02:9e:e9:7c:c0:a4:14:82:b3:
90:14:14:94:e1:cb:88:5b:6d:6c:3d:56:76:aa:b7:25:61:5c:
56:a0:44:e5:5c:56:3d:f9:2b:d5:81:34:02:6f:ef:38:44:65:
95:2e:e6:ad:4a:db:ab:dc:43:23:05:57:8f:e4:cc:fe:c7:e1:
5e:f0:e2:ba:ae:00:97:a3:3d:08:51:2f:02:ab:13:a0:13:13:
07:5e:d0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org