Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/trDvyU2VFoLRosqo04y3rrSOJXk.roa
File: trDvyU2VFoLRosqo04y3rrSOJXk.roa (raw, json)
Hash identifier: 8OVwu3l8jS/9NKgafyQy3FDP5gCip/6x01ReLjTm6lo=
Subject key identifier: B6:B0:EF:C9:4D:95:16:82:D1:A2:CA:A8:D3:8C:B7:AE:B4:8E:25:79
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01856EAA29D24E286A3D708FE3EEC6055BF7
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/trDvyU2VFoLRosqo04y3rrSOJXk.roa
Signing time: Sun 01 Jan 2023 18:48:43 +0000
ROA not before: Sun 01 Jan 2023 18:48:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209181
IP address blocks: 95.214.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:aa:29:d2:4e:28:6a:3d:70:8f:e3:ee:c6:05:5b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 1 18:48:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6b0efc94d951682d1a2caa8d38cb7aeb48e2579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:d9:83:d6:80:5f:86:15:80:0d:a9:20:8b:
f9:a5:68:c2:d3:a5:70:eb:96:fc:5a:dc:62:f7:2d:
35:94:41:f1:74:47:27:51:36:fa:dd:fd:0c:d8:46:
c2:59:75:d1:f5:72:df:c2:da:9e:a8:1d:57:7a:25:
68:ce:ec:20:1e:a6:ff:fc:47:d3:cb:8b:31:ab:b3:
dc:06:1b:04:aa:c6:01:a4:fa:35:df:cb:4b:83:06:
87:57:c8:c5:59:f2:c4:45:e4:bc:7d:c7:79:45:52:
3c:e9:b7:ba:a0:8a:0d:fe:dc:c3:8d:6c:dd:b2:81:
0a:a7:8c:a7:43:81:f7:d8:9a:b5:04:ea:6d:73:d1:
76:f5:0e:9d:e4:b1:69:14:b1:73:ed:67:90:e6:a0:
b1:9d:10:a5:42:69:a0:aa:cd:ab:c6:0a:3a:58:08:
9d:9f:ff:23:af:3d:3b:53:cc:86:61:7a:15:fb:a0:
85:9d:1a:0f:08:f7:1c:67:26:24:8a:45:ab:92:70:
a3:00:e5:c7:8f:15:1d:85:79:5b:73:ae:a9:fd:2a:
52:59:d5:f8:d4:13:59:16:f6:cd:95:34:22:a5:75:
d7:78:32:e0:2a:43:2c:c1:cd:61:7e:3b:f6:67:30:
a3:44:fa:4a:dd:3a:0a:b7:8c:58:ba:fc:4a:5b:fa:
32:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B0:EF:C9:4D:95:16:82:D1:A2:CA:A8:D3:8C:B7:AE:B4:8E:25:79
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/trDvyU2VFoLRosqo04y3rrSOJXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.183.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b7:08:e7:a2:d1:86:27:4f:c2:cd:cc:0a:d1:e4:c9:d0:5f:
39:d5:5e:a3:27:11:8e:5a:0b:91:3e:9c:a8:83:77:55:1c:75:
82:ed:57:97:d5:82:17:59:c1:46:c1:22:f4:11:93:bc:d7:c5:
d7:e5:84:40:2b:c9:04:63:d3:b9:2f:c4:5e:c2:e6:a8:34:8f:
06:2f:ad:8b:ab:d1:8c:7a:2e:75:e8:68:5f:3e:43:14:49:67:
d0:b9:9a:52:82:9b:17:9c:37:61:d0:4c:16:2c:c6:e6:98:82:
8b:83:8e:0c:42:39:40:91:31:80:fa:67:1b:d2:e0:03:2a:b0:
f0:de:4f:ad:55:fb:76:3c:68:bb:40:c8:ae:ef:aa:71:ce:07:
71:3c:58:20:c3:93:bb:fe:f4:bd:d9:09:7f:11:23:91:ee:fd:
46:42:d5:d7:b7:78:11:f4:f0:97:1b:b7:dc:1e:2c:0d:b8:c8:
35:b3:8f:f3:77:33:4d:a6:b4:35:e8:bb:0d:95:e0:35:de:f9:
f4:19:c3:0c:d4:6d:40:f5:d5:57:90:6d:bf:d4:7f:22:e3:0f:
da:63:aa:e9:ff:fd:e0:19:28:95:d2:4b:fe:d1:32:86:ee:76:
ed:8c:20:97:24:e2:ef:a2:7b:81:92:bc:d9:46:76:21:26:83:
59:55:3b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:03 2024 by rpki-client on console-fra.rpki-client.org