Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/vpFmM3NfTT5_4Z2LNa9DQvPcvso.roa
File: vpFmM3NfTT5_4Z2LNa9DQvPcvso.roa (raw, json)
Hash identifier: /w39Pnr33KoutKokpsWkWvNChnySTjubwU/DKKFGVUk=
Subject key identifier: BE:91:66:33:73:5F:4D:3E:7F:E1:9D:8B:35:AF:43:42:F3:DC:BE:CA
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 018A06C31E30C311270465D200DA662594F7
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/vpFmM3NfTT5_4Z2LNa9DQvPcvso.roa
Signing time: Fri 18 Aug 2023 03:49:25 +0000
ROA not before: Fri 18 Aug 2023 03:49:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202779
IP address blocks: 95.215.220.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:06:c3:1e:30:c3:11:27:04:65:d2:00:da:66:25:94:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Aug 18 03:49:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be916633735f4d3e7fe19d8b35af4342f3dcbeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:26:6d:6e:c2:b4:5b:9c:21:83:80:32:d6:31:
8d:07:06:d9:db:be:be:6b:d1:5f:72:90:83:b3:91:
0f:ff:3b:fb:c0:61:48:d6:6c:de:c7:aa:e6:af:f9:
a0:ac:7a:78:6f:c8:5a:5d:a0:00:86:8e:2d:6d:eb:
c2:b6:65:11:60:f1:9d:1b:eb:ce:bb:5a:a9:05:fa:
af:f9:27:df:ba:1b:5b:09:f1:4b:e9:4f:d5:45:a0:
fb:0d:4e:96:ce:da:d6:72:39:3d:6e:0e:cd:ac:fe:
af:05:b5:04:ff:e2:a4:19:4c:0b:b1:14:67:50:d9:
df:2e:a1:16:49:cf:38:0c:3b:b1:c0:59:7f:b0:cc:
3d:95:8e:6b:58:ed:51:9a:fe:bf:e0:51:e9:de:dc:
d6:06:85:78:44:8a:8b:32:87:95:09:f6:2d:25:b4:
41:c8:97:23:7a:3a:48:92:51:6d:98:d7:a6:ca:66:
20:9a:32:19:72:74:46:1a:82:0e:09:1c:d6:65:88:
e3:0c:34:fa:b8:58:60:72:4a:3d:15:d7:f5:33:7b:
97:95:83:2e:87:da:eb:03:a2:bd:51:65:e4:0e:7c:
1e:0c:16:63:33:a2:e4:a7:30:ae:cc:63:10:56:3f:
ff:e3:a0:fa:8c:bc:d3:78:d9:87:e4:49:74:ab:dc:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:91:66:33:73:5F:4D:3E:7F:E1:9D:8B:35:AF:43:42:F3:DC:BE:CA
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/vpFmM3NfTT5_4Z2LNa9DQvPcvso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.220.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:69:da:7a:d4:00:81:ac:18:3b:2e:d9:5e:af:1d:ce:8e:d7:
c2:4a:06:9b:ad:50:f4:12:a8:62:d8:69:da:44:b5:51:fa:95:
0d:b6:bd:2c:17:ee:ea:13:d0:d2:2a:7c:e3:04:b6:04:14:2b:
d1:d2:69:ac:98:94:78:09:a2:c8:fa:6b:35:f3:72:83:14:a0:
1c:44:16:3c:71:d6:aa:a2:94:8b:52:b9:60:44:c6:92:5b:0b:
b2:02:b9:a2:ec:a0:79:6c:5c:ee:bd:8b:92:8b:7e:00:a4:54:
f4:2c:86:0c:38:f5:90:20:42:86:58:c7:f5:0c:66:22:8e:51:
f9:9b:a4:db:08:85:d2:53:af:cd:e0:1f:2f:fe:d5:cd:fd:3f:
6b:52:dc:d2:88:a8:35:08:79:eb:c7:88:db:c4:45:e3:e7:71:
99:8e:32:87:3c:86:41:bc:98:77:23:96:16:a0:80:3a:ad:be:
09:7f:de:20:60:92:49:7d:e0:72:22:d7:bd:a8:7b:49:bb:a1:
f6:22:be:44:14:66:63:6e:ef:11:84:c6:0c:06:33:da:d0:2b:
0e:cc:6d:af:83:8c:6f:e8:43:ce:57:8d:8f:58:a1:3f:1f:93:
ea:e0:0c:e2:60:a3:dc:69:5b:7c:30:3e:21:f0:2f:49:0f:0b:
a2:ba:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:53 2024 by rpki-client on console-ams.rpki-client.org