Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xMb9jdX8M9AawbLEdL1FwFHhSuM.roa
File: xMb9jdX8M9AawbLEdL1FwFHhSuM.roa (raw, json)
Hash identifier: tnxval8D9lNBmTVFIHPf1GgQy++1v/bylfN92rtQh5Y=
Subject key identifier: C4:C6:FD:8D:D5:FC:33:D0:1A:C1:B2:C4:74:BD:45:C0:51:E1:4A:E3
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01856FF973E4169CB17C24268AD3EA6CE149
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xMb9jdX8M9AawbLEdL1FwFHhSuM.roa
Signing time: Mon 02 Jan 2023 00:54:57 +0000
ROA not before: Mon 02 Jan 2023 00:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 95.215.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:73:e4:16:9c:b1:7c:24:26:8a:d3:ea:6c:e1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 2 00:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4c6fd8dd5fc33d01ac1b2c474bd45c051e14ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:57:a4:b7:45:17:3e:3d:7e:19:1c:18:0c:
5b:91:1c:99:0c:c6:0e:76:10:25:98:c1:77:03:38:
ec:89:3b:93:6d:b1:b9:91:53:b3:c1:a6:f9:8e:ac:
5b:87:da:2a:13:6f:4d:99:3f:37:f2:b3:06:a6:c0:
e7:fb:21:d4:77:73:57:bb:94:2c:c2:7f:31:73:75:
db:9c:9f:b1:81:73:82:fd:8e:b3:d1:6d:d0:2c:d9:
03:59:62:c8:a6:eb:b1:f9:9f:d5:89:aa:85:12:66:
02:21:79:7b:38:94:8f:ea:02:cc:b2:83:99:5d:5d:
8f:93:63:4d:1c:b0:bf:9b:e5:45:51:f1:c6:e0:cc:
99:b2:e4:3c:d3:76:4b:f8:fa:5a:41:fb:83:57:5c:
b9:9b:6c:5a:9f:78:72:de:e2:3c:76:6c:77:92:59:
e5:d0:e7:b9:58:5d:b6:7a:bd:da:2c:e3:db:36:ff:
ee:cb:79:72:5c:b5:48:14:ed:6b:9a:30:e5:5f:8f:
17:e5:fa:e4:d3:75:7e:08:b0:11:06:fa:6d:6c:31:
d2:49:c4:d6:17:bf:a5:ba:dc:86:d7:3c:10:42:1b:
90:51:f4:c3:9b:4f:45:76:6a:5c:4f:ba:99:1e:b0:
b7:5a:0e:8b:0a:06:e1:bd:86:32:74:89:7d:1c:88:
3d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C6:FD:8D:D5:FC:33:D0:1A:C1:B2:C4:74:BD:45:C0:51:E1:4A:E3
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xMb9jdX8M9AawbLEdL1FwFHhSuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.108.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b9:26:26:92:0c:b5:c5:05:6d:a2:53:e5:d4:d0:c4:58:55:
49:72:1c:32:7e:8a:d9:da:aa:ba:78:cd:e2:eb:15:3d:c2:1c:
82:12:27:16:56:0f:33:95:f8:34:cc:d8:20:82:e1:69:85:5a:
4a:11:00:35:1f:25:0f:a2:26:77:3f:ed:4a:80:3d:8a:3d:f4:
de:8d:aa:6a:7c:ee:e9:32:89:c5:af:60:e3:47:5d:1c:75:4a:
94:37:6e:ae:e7:55:0b:4a:e7:92:f7:5b:f3:f7:b2:63:5a:51:
84:32:d0:7b:8d:6d:a7:2b:79:e4:28:c4:ef:16:44:27:c6:15:
70:65:7e:ec:60:fb:fd:f1:59:30:0e:6c:61:53:4d:58:b9:8d:
cf:fb:9a:e7:aa:17:00:f0:ad:73:35:4d:ad:97:bd:0e:a3:bc:
53:e8:e5:93:6c:33:57:37:ad:39:95:73:42:dc:0e:bd:f3:ce:
3f:58:25:dc:51:0a:95:7a:61:8b:6b:6a:87:b2:81:f0:a4:32:
2f:99:25:55:5e:04:b0:7e:7e:87:d8:8a:84:90:2c:62:40:be:
69:08:d4:4b:5d:66:60:12:dd:e0:65:95:92:cd:c0:d3:26:95:
31:0d:7f:94:2c:27:be:60:cd:8c:d1:bd:e3:c1:29:39:cc:21:
da:fc:e8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:08 2024 by rpki-client on console-ams.rpki-client.org