Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/cSxcLPrRfllTZdDiOBCcQ-Z4VT4.roa
File: cSxcLPrRfllTZdDiOBCcQ-Z4VT4.roa (raw, json)
Hash identifier: WvfK2/1n+FdiIHZ/9KYMeAQHBB+d/c6mBEWbCNYAHYw=
Subject key identifier: 71:2C:5C:2C:FA:D1:7E:59:53:65:D0:E2:38:10:9C:43:E6:78:55:3E
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0192989D3274DB05943D329D095EC6F39039
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/cSxcLPrRfllTZdDiOBCcQ-Z4VT4.roa
Signing time: Thu 17 Oct 2024 03:54:51 +0000
ROA not before: Thu 17 Oct 2024 03:54:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 95.214.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 17:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:98:9d:32:74:db:05:94:3d:32:9d:09:5e:c6:f3:90:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 17 03:54:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=712c5c2cfad17e595365d0e238109c43e678553e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ba:97:ff:84:98:c2:93:86:57:95:d1:68:ea:
37:f9:97:aa:16:41:8f:55:26:ce:07:17:bd:69:52:
e2:a1:23:54:47:e7:34:54:16:50:33:52:6d:af:64:
36:c9:57:db:8e:9f:6f:4d:db:fb:0a:78:69:6a:20:
32:79:e2:fc:23:4c:b3:54:77:b8:cb:28:47:4d:9d:
f5:5e:83:d3:d1:be:05:8c:06:68:5d:c3:8a:89:97:
8f:f7:5f:d7:4c:95:27:a1:57:86:f4:5e:77:49:a4:
25:15:c0:2e:b0:c0:9b:1f:72:0e:30:b4:04:81:b8:
dc:c4:03:e9:7b:1a:2c:b3:77:1e:2b:fd:22:e8:26:
89:fb:8f:5c:dd:81:fb:23:97:63:c8:5c:84:f8:ed:
3b:d5:29:c3:cf:5e:47:5f:6a:f0:66:3a:cd:29:b4:
f2:db:ed:05:49:85:3c:68:df:86:99:4a:89:3e:1e:
39:b4:bd:8d:66:0a:87:73:08:46:42:1f:fb:a1:9c:
01:1c:eb:85:5c:21:30:7a:65:a2:e5:fd:7f:e4:21:
48:f7:12:6e:f8:72:4f:2a:dd:d2:14:04:ae:8d:35:
4f:ba:5e:96:be:7c:2a:61:d2:94:5f:34:e4:4e:e8:
7a:5f:20:04:5c:7b:be:89:a3:f1:b4:b0:98:a8:bd:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2C:5C:2C:FA:D1:7E:59:53:65:D0:E2:38:10:9C:43:E6:78:55:3E
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/cSxcLPrRfllTZdDiOBCcQ-Z4VT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.176.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:5d:4b:71:ad:21:81:0a:47:10:c9:90:ea:0b:84:71:1b:12:
ce:20:b0:26:6d:f5:7b:88:e2:36:cc:0f:74:9e:dc:7d:5a:63:
86:33:bf:4f:aa:7c:d1:89:db:da:27:76:6c:68:2f:86:5c:44:
1a:c8:22:61:c6:53:c4:f3:97:fa:e1:33:75:a6:56:be:10:92:
52:a4:a5:a5:6e:24:d0:94:6b:3f:d4:e7:c3:2a:0d:f1:3e:3c:
cd:b4:f3:06:31:72:bb:a3:d4:25:e8:fb:ae:99:a3:0c:71:b2:
3c:47:dc:73:1e:fc:a6:da:4a:74:23:b8:1d:18:c4:7e:47:de:
7a:93:45:48:0a:02:0f:66:dc:56:a3:e1:8d:76:5a:34:4b:7f:
60:67:30:d1:d3:64:03:46:71:97:9e:80:56:4d:ec:49:90:51:
cb:ba:1e:11:29:ce:eb:fc:b2:5e:e7:84:9e:12:d3:59:10:ab:
62:45:be:e5:22:b8:c5:61:8c:65:91:dd:3d:e8:0a:38:6d:cd:
18:6c:09:3a:bd:f4:49:4e:79:e2:e3:49:c0:3e:33:c4:4a:37:
22:46:db:f1:b4:64:c0:5c:30:7e:8c:d0:60:97:d5:07:a4:c5:
3c:3e:0f:24:33:12:3d:96:12:11:bc:11:a6:23:e2:ac:e4:5b:
6e:03:c3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:50:12 2024 by rpki-client on console-ams.rpki-client.org