Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/EofwCiaqG0r1JQcy7gL9Sev9pvA.roa
File: EofwCiaqG0r1JQcy7gL9Sev9pvA.roa (raw, json)
Hash identifier: DeNXBTOuuup4bYz0VkLN/6eEB1ZHnKUgsLH2CC0anr8=
Subject key identifier: 12:87:F0:0A:26:AA:1B:4A:F5:25:07:32:EE:02:FD:49:EB:FD:A6:F0
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C785D7E4B4BDB4BCD74AEF76275CC05
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/EofwCiaqG0r1JQcy7gL9Sev9pvA.roa
Signing time: Sun 01 Jan 2023 08:35:05 +0000
ROA not before: Sun 01 Jan 2023 08:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150303
IP address blocks: 95.214.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Feb 2023 16:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:5d:7e:4b:4b:db:4b:cd:74:ae:f7:62:75:cc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1287f00a26aa1b4af5250732ee02fd49ebfda6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:94:0e:2e:69:60:cc:86:54:69:bb:fb:37:05:
10:db:6a:41:54:3d:dc:aa:a0:e0:dc:48:56:99:b9:
a0:94:1c:84:e1:8b:ce:77:3d:97:2c:1f:f7:5c:81:
17:9a:f8:b3:b9:62:6b:cc:60:b8:cc:3f:30:37:34:
99:bc:5b:50:08:0b:05:e0:c5:57:48:bd:4c:dd:d1:
5a:9a:b3:a9:97:2e:51:43:1d:49:62:ad:14:24:f9:
bf:f8:81:9d:6e:c5:af:a5:01:40:24:a5:fb:a8:5e:
f2:34:1d:c2:e7:b8:01:72:f2:ad:25:8a:22:e9:09:
4b:cd:ef:21:8a:a7:da:39:6b:cc:60:2e:2b:3e:49:
e1:ce:4e:83:a6:a6:33:e6:a4:bf:71:82:48:1a:d3:
c4:eb:5f:33:ed:cc:72:b6:c5:da:70:80:b0:32:25:
38:ef:63:b0:2f:88:64:90:ca:28:00:4c:00:00:c1:
e8:8d:47:53:28:7d:b8:20:8d:81:82:30:58:d3:27:
39:c8:80:bc:0f:57:22:74:1a:d4:70:37:95:bc:cf:
de:03:d5:bb:9e:66:02:7a:f1:b1:2b:c0:b6:3e:a8:
43:17:51:a5:fd:e2:cc:b9:5d:80:09:27:d6:48:bc:
cd:40:31:76:22:2d:f4:9d:b7:69:89:22:4d:23:e7:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:87:F0:0A:26:AA:1B:4A:F5:25:07:32:EE:02:FD:49:EB:FD:A6:F0
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/EofwCiaqG0r1JQcy7gL9Sev9pvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.177.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:97:90:0f:e5:ca:59:5a:6d:97:26:b5:82:e7:a0:e6:92:a1:
55:8c:9b:8f:0b:5f:fa:52:81:b9:7c:30:34:a6:8a:27:b8:a7:
01:47:31:f4:85:60:98:f9:f9:a7:e9:70:c4:5c:63:48:0b:33:
d1:ff:55:77:8d:84:23:78:e3:90:74:ae:2e:27:38:71:ef:32:
fe:7b:df:83:9d:8b:22:c5:cb:dd:99:8e:9b:36:6b:6c:80:38:
39:4a:df:96:1e:76:1f:46:4d:49:d6:49:63:50:e9:8d:e0:65:
23:bd:01:49:e7:2f:11:18:9f:e6:13:fd:9f:dd:45:fe:3d:2e:
0a:63:dd:e3:f7:39:8d:1b:68:73:45:a6:6e:03:4f:34:c4:cf:
a0:99:9d:fe:ac:75:9d:d8:ff:22:ef:12:c5:ec:1c:73:b1:3e:
68:71:f9:fc:1d:1c:2b:6c:97:9f:bd:5e:ec:ef:f6:5d:10:e0:
24:9a:46:bc:ae:c9:38:67:f3:bd:2c:db:21:ef:08:a4:57:51:
f7:12:ad:90:4d:bc:32:de:47:95:d8:38:47:32:28:22:af:18:
7e:01:41:ec:9f:65:81:df:6f:50:58:2c:2c:0c:25:a2:22:bf:
a6:41:ef:d9:05:43:8a:a7:03:68:f0:ee:22:fd:d6:72:81:ac:
48:56:4c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org