Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/eC_Qd0-ekXjBLC-LXd-skof7AfQ.roa
File: eC_Qd0-ekXjBLC-LXd-skof7AfQ.roa (raw, json)
Hash identifier: 6OdrzcdJqMvJ016r5OtwAhdfGtGsAK+VtMbtHNhQzkE=
Subject key identifier: 78:2F:D0:77:4F:9E:91:78:C1:2C:2F:8B:5D:DF:AC:92:87:FB:01:F4
Certificate issuer: /CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Certificate serial: 01882654E34FB32769400E45A7DA3ABDF278
Authority key identifier: A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/eC_Qd0-ekXjBLC-LXd-skof7AfQ.roa
Signing time: Tue 16 May 2023 20:51:17 +0000
ROA not before: Tue 16 May 2023 20:51:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59778
IP address blocks: 95.215.224.0/24 maxlen: 24
95.215.225.0/24 maxlen: 24
95.215.226.0/24 maxlen: 24
95.215.227.0/24 maxlen: 24
91.232.124.0/24 maxlen: 24
91.232.125.0/24 maxlen: 24
178.216.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:26:54:e3:4f:b3:27:69:40:0e:45:a7:da:3a:bd:f2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Validity
Not Before: May 16 20:51:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=782fd0774f9e9178c12c2f8b5ddfac9287fb01f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0d:2c:3e:bf:c2:2f:19:87:32:74:77:20:b0:
3a:07:4d:1e:97:50:c1:89:e3:70:97:ef:23:94:55:
81:56:91:42:bf:0e:e3:26:64:bd:5b:18:a8:69:e9:
eb:89:f7:75:4c:5a:75:51:0e:da:ec:d2:19:fb:c4:
f9:99:e7:3b:0a:ce:63:ee:f3:27:bf:e8:0e:cd:7b:
fa:5a:92:61:71:d8:fd:ae:24:ae:52:eb:4d:62:5f:
59:b5:10:35:8c:b1:09:59:e8:d9:10:31:06:d2:49:
a3:96:81:8a:b9:ca:b4:35:13:cf:8d:d5:2e:c4:2b:
32:19:bf:e3:be:a8:fd:d1:1c:07:9a:d4:88:c6:15:
ac:01:61:4c:69:25:04:4c:77:70:c4:21:a0:fe:3a:
3e:67:79:f5:0d:97:98:a5:39:c2:d6:b2:d1:60:df:
0d:3c:ae:62:99:85:c0:56:4b:ef:b7:77:ed:4a:5a:
5f:73:88:38:da:0e:1f:db:7e:90:fd:11:14:40:33:
09:44:8a:8a:5a:50:66:cd:b1:a2:b3:ae:01:93:8f:
52:83:47:84:64:3c:3b:82:73:78:9f:7c:81:4e:36:
cf:2e:3d:3e:5a:5a:ee:13:9b:bb:72:bc:93:ce:8b:
e5:a9:cc:1b:58:be:99:55:8b:e9:92:1d:6a:5b:6b:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2F:D0:77:4F:9E:91:78:C1:2C:2F:8B:5D:DF:AC:92:87:FB:01:F4
X509v3 Authority Key Identifier:
keyid:A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/eC_Qd0-ekXjBLC-LXd-skof7AfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.124.0/23
95.215.224.0/22
178.216.247.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:95:de:5a:38:13:8a:83:30:6d:ec:a8:27:79:48:81:f0:c4:
0e:b2:fd:50:b3:e4:2c:b8:d9:66:22:ff:fc:5f:1b:2c:8f:ae:
15:93:88:8c:52:d8:da:3e:9e:69:b0:5a:1e:60:18:9a:00:79:
3f:1d:11:07:ba:d2:b0:4f:c2:67:da:53:57:97:4f:32:35:42:
ac:f5:4c:c7:b9:37:e2:39:05:40:fe:11:c8:38:d6:af:e5:b4:
65:e7:58:91:91:72:01:19:a9:c7:44:1f:ac:7f:f7:e2:5d:88:
8e:f2:e8:bc:f9:3c:3f:bb:d8:41:ed:e3:6d:5f:3c:d1:6a:49:
b3:31:c4:f8:ae:68:05:cb:f6:bf:2c:3a:16:a6:06:28:10:e8:
fb:b9:dc:0e:e6:d3:7d:f5:5d:67:36:56:53:67:5e:99:b7:b3:
a4:b4:96:de:62:07:01:b3:7f:a9:9b:f8:67:8b:63:1b:e7:7f:
41:1a:62:09:14:5f:99:7f:65:7c:0d:b6:5b:98:10:81:e6:8e:
4a:c5:93:1d:92:85:37:59:41:7c:76:57:f3:21:8e:f9:c7:a7:
13:98:97:4e:70:8a:f7:02:40:23:54:4b:c2:f1:c8:3e:12:5e:
e3:8a:67:fb:6c:69:aa:df:95:25:0d:9e:5d:29:0b:ba:6a:3d:
b2:85:cd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:00 2024 by rpki-client on console-ams.rpki-client.org