Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/EK0ULqrn_8sDsGbukEYv_3Qrjcs.roa
File: EK0ULqrn_8sDsGbukEYv_3Qrjcs.roa (raw, json)
Hash identifier: bNwc10/raByr0jyz5rGCaU8xAv469jo9OE+n0ljODCc=
Subject key identifier: 10:AD:14:2E:AA:E7:FF:CB:03:B0:66:EE:90:46:2F:FF:74:2B:8D:CB
Certificate issuer: /CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Certificate serial: 018819B98A7848F3DC7976BA06E7C4032144
Authority key identifier: 27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/EK0ULqrn_8sDsGbukEYv_3Qrjcs.roa
Signing time: Sun 14 May 2023 10:06:09 +0000
ROA not before: Sun 14 May 2023 10:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34636
IP address blocks: 95.81.82.0/23 maxlen: 24
95.81.80.0/24 maxlen: 24
95.81.80.0/23 maxlen: 23
95.81.81.0/24 maxlen: 24
95.81.88.0/22 maxlen: 24
95.81.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:19:b9:8a:78:48:f3:dc:79:76:ba:06:e7:c4:03:21:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=272ed090acf7c829a22bbfbe2b0e998cd20ad826
Validity
Not Before: May 14 10:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10ad142eaae7ffcb03b066ee90462fff742b8dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f9:50:24:e4:dc:b9:a6:bf:dc:5b:92:d8:96:
13:62:1c:a6:23:3e:b0:a6:5c:c7:d2:87:57:ba:e2:
17:ee:da:c8:5f:a8:ac:7c:0b:0f:25:de:9c:47:bf:
31:2b:0b:af:e9:5f:d3:38:f3:3f:e8:09:41:50:e9:
cc:11:1f:c4:7c:e6:28:9d:a9:1e:61:73:82:9b:27:
f8:9d:bc:58:08:5f:e7:04:4b:6e:95:00:7e:ba:6e:
a5:df:5d:fb:18:b4:e1:a6:07:f3:30:c0:0c:cc:da:
ab:b6:bd:c4:a0:d9:37:6e:c4:a0:d8:9e:2b:fe:87:
e2:bd:a8:ed:df:d9:9d:45:d5:18:51:32:84:a8:bd:
d1:15:76:b0:ad:a7:ef:ab:e5:5d:8d:88:7f:65:7b:
46:86:37:2f:d6:30:a1:da:73:d2:8d:98:d1:c3:52:
eb:0f:0b:d4:59:07:c6:2d:30:ed:bc:f8:37:42:b9:
18:47:91:69:65:21:f1:f5:14:c9:44:c3:21:bf:ca:
3f:a2:eb:90:01:f8:21:57:44:4c:2f:e5:b7:3c:5a:
14:ab:01:c3:6d:39:0c:fc:42:f3:56:d9:a8:37:7c:
53:42:e3:62:34:d2:c4:55:b1:d2:9d:47:7a:31:6e:
5e:50:64:97:35:65:e4:97:88:17:5e:0f:d7:61:34:
02:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AD:14:2E:AA:E7:FF:CB:03:B0:66:EE:90:46:2F:FF:74:2B:8D:CB
X509v3 Authority Key Identifier:
keyid:27:2E:D0:90:AC:F7:C8:29:A2:2B:BF:BE:2B:0E:99:8C:D2:0A:D8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/EK0ULqrn_8sDsGbukEYv_3Qrjcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/a15f96-ec18-4644-89b3-acc22bb4dced/1/Jy7QkKz3yCmiK7--Kw6ZjNIK2CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.81.80.0/22
95.81.88.0/22
95.81.95.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ce:80:cd:5c:21:a5:b4:80:c2:97:3f:a3:d8:b6:72:c9:f6:
c3:c2:e5:25:a4:56:15:38:73:f9:f6:42:78:04:6c:f1:7a:1a:
c8:5d:84:4b:3d:fa:dc:78:5e:88:8a:85:62:c6:31:b6:3b:02:
cc:9e:ea:1b:a3:d5:ea:7e:e2:30:25:89:34:a2:9d:43:25:0c:
44:0f:f3:94:e7:e0:96:40:e6:fe:93:06:9b:d6:95:48:45:34:
ce:87:9d:1a:87:d1:da:36:2e:ba:4b:3d:29:55:b9:02:bc:a4:
93:47:fa:be:0c:73:b0:6f:88:e2:40:65:7a:c6:0a:35:01:e6:
0c:93:42:38:a2:fc:e8:4d:8b:3a:91:43:37:a6:fe:4f:d2:f3:
a2:99:d6:2c:3a:1e:cd:a1:18:b5:d3:4e:9b:91:dc:70:2b:9e:
df:41:b2:6b:2a:d4:cd:ca:e6:f3:af:f5:d7:79:f2:92:bd:a8:
50:a9:51:b2:4f:f6:85:5d:f9:2a:0f:02:fe:4a:c1:6f:1d:f2:
04:dd:cf:30:28:ae:73:ad:5f:90:90:92:b0:49:71:0d:0b:13:
39:50:06:6a:9c:d8:70:89:0a:79:9b:16:4c:53:e2:c9:a4:bd:
1f:02:0a:df:2d:9e:ed:61:41:39:f9:54:3f:bd:80:7b:5b:ad:
5b:a9:98:6e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYgZuYp4SPPceXa6BufEAyFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MmVkMDkwYWNmN2M4MjlhMjJiYmZiZTJiMGU5OThjZDIw
YWQ4MjYwHhcNMjMwNTE0MTAwNjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGFkMTQyZWFhZTdmZmNiMDNiMDY2ZWU5MDQ2MmZmZjc0MmI4ZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PlQJOTcuaa/3FuS2JYTYhymIz6w
plzH0odXuuIX7trIX6isfAsPJd6cR78xKwuv6V/TOPM/6AlBUOnMER/EfOYonake
YXOCmyf4nbxYCF/nBEtulQB+um6l3137GLThpgfzMMAMzNqrtr3EoNk3bsSg2J4r
/ofivajt39mdRdUYUTKEqL3RFXawrafvq+VdjYh/ZXtGhjcv1jCh2nPSjZjRw1Lr
DwvUWQfGLTDtvPg3QrkYR5FpZSHx9RTJRMMhv8o/ouuQAfghV0RML+W3PFoUqwHD
bTkM/ELzVtmoN3xTQuNiNNLEVbHSnUd6MW5eUGSXNWXkl4gXXg/XYTQCowIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBCtFC6q5//LA7Bm7pBGL/90K43LMB8GA1UdIwQY
MBaAFCcu0JCs98gpoiu/visOmYzSCtgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMt
YWNjMjJiYjRkY2VkLzEvRUswVUxxcm5fOHNEc0didWtFWXZfM1FyamNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9hMTVmOTYtZWMxOC00NjQ0LTg5YjMtYWNjMjJiYjRkY2Vk
LzEvSnk3UWtLejN5Q21pSzctLUt3NlpqTklLMkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCX1FQAwQC
X1FYAwQAX1FfMA0GCSqGSIb3DQEBCwUAA4IBAQCYzoDNXCGltIDClz+j2LZyyfbD
wuUlpFYVOHP59kJ4BGzxehrIXYRLPfrceF6IioVixjG2OwLMnuobo9XqfuIwJYk0
op1DJQxED/OU5+CWQOb+kwab1pVIRTTOh50ah9HaNi66Sz0pVbkCvKSTR/q+DHOw
b4jiQGV6xgo1AeYMk0I4ovzoTYs6kUM3pv5P0vOimdYsOh7NoRi1006bkdxwK57f
QbJrKtTNyubzr/XXefKSvahQqVGyT/aFXfkqDwL+SsFvHfIE3c8wKK5zrV+QkJKw
SXENCxM5UAZqnNhwiQp5mxZMU+LJpL0fAgrfLZ7tYUE5+VQ/vYB7W61bqZhu
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:40 2024 by rpki-client on console-ams.rpki-client.org