Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/fLEcGLZJZiMF1wLQSP3d_seRJfM.roa
File: fLEcGLZJZiMF1wLQSP3d_seRJfM.roa (raw, json)
Hash identifier: X0VPylsJfuWP8+qwaYjWf5rgR4bfJ+484B9DiT44wcM=
Subject key identifier: 7C:B1:1C:18:B6:49:66:23:05:D7:02:D0:48:FD:DD:FE:C7:91:25:F3
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0185F4281D89628E738A7335278315FCB0A2
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/fLEcGLZJZiMF1wLQSP3d_seRJfM.roa
Signing time: Fri 27 Jan 2023 16:55:47 +0000
ROA not before: Fri 27 Jan 2023 16:55:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 95.214.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f4:28:1d:89:62:8e:73:8a:73:35:27:83:15:fc:b0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 27 16:55:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cb11c18b649662305d702d048fdddfec79125f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:0c:c0:ab:da:fb:34:24:0c:e8:a0:fc:0e:
31:90:da:c5:e5:76:67:32:58:53:1c:7e:c1:ec:9e:
19:a4:fd:43:4a:42:61:7f:db:1f:a4:fa:5f:01:cb:
c0:5d:b0:c7:15:a6:2a:33:e5:41:01:d5:f5:d7:5c:
96:9c:b8:a4:61:42:f9:b0:ce:b1:8c:c0:0a:60:6c:
7a:d5:db:f7:be:25:a3:9d:bf:d2:ce:ba:8e:cf:bb:
4a:c4:5f:a7:1b:10:27:7a:de:c2:b2:55:30:42:29:
86:4c:63:6a:c5:31:a8:3b:25:46:0e:1f:c5:c0:5c:
8f:ac:59:bf:6a:96:f2:01:69:d3:49:7b:98:32:7f:
88:a5:f6:f4:b4:ff:54:0b:8f:4b:5a:cf:4d:6f:7d:
aa:fa:e9:ab:65:ac:83:a1:84:c1:91:f7:1f:dc:61:
d4:5f:dd:cc:22:ca:fd:94:b4:24:59:9e:15:d4:3f:
2f:af:97:2e:a6:a4:6c:15:62:ad:19:10:b3:02:8c:
92:60:a8:16:52:cd:dc:cd:cb:99:8a:d5:42:c6:e0:
b1:14:11:94:58:09:87:46:99:57:79:31:ba:5e:f8:
b2:19:23:a8:f0:b7:3b:e5:2c:74:7b:fa:73:f2:7b:
e0:94:45:0f:95:60:a0:d8:40:44:57:ac:8f:70:79:
eb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B1:1C:18:B6:49:66:23:05:D7:02:D0:48:FD:DD:FE:C7:91:25:F3
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/fLEcGLZJZiMF1wLQSP3d_seRJfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.176.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:da:a3:0c:b7:38:e7:b2:d2:72:8b:a2:18:a0:cf:60:82:b4:
47:f7:89:72:92:fc:09:fe:1c:b4:0c:51:e3:39:98:b4:87:83:
62:53:52:3a:31:d1:6a:05:0c:28:e3:13:6a:33:52:76:89:49:
e9:4d:b8:b7:69:1a:c4:58:0d:a1:d9:b7:04:7a:49:be:52:df:
8b:f7:36:39:ae:a5:5f:14:07:65:9c:75:63:52:d9:0b:6b:56:
88:f9:00:8e:9b:32:6a:8f:f6:d2:7a:3e:43:3b:d7:1c:2c:2c:
4c:6d:fc:24:49:8a:c3:57:4d:10:cf:b8:59:f9:26:50:ce:9e:
5e:b9:52:69:df:a7:4b:98:ed:f7:c0:e1:d0:e5:86:10:5b:14:
d8:4e:68:b3:26:42:85:22:d8:b3:b6:44:59:e5:82:4d:10:fa:
04:77:4c:69:9d:73:5b:af:5d:53:38:08:f2:9b:a8:f8:ee:64:
c6:70:95:40:e1:4e:95:0a:9b:4d:21:a8:cb:82:cb:f4:b0:ea:
a3:02:63:b5:0d:9e:74:d2:62:a1:cb:d1:32:94:b5:83:8f:42:
bd:e1:0f:b1:26:86:e7:66:67:d7:cc:b2:2d:d4:c5:11:c6:64:
30:ee:ac:7c:e8:e1:02:29:f6:1d:18:bc:27:a6:83:16:b7:1d:
3e:ec:a7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:19 2023 by rpki-client on console-fra.rpki-client.org