Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/iDoFZwQZ3tOmo11_N0hLz2s6jjw.roa
File: iDoFZwQZ3tOmo11_N0hLz2s6jjw.roa (raw, json)
Hash identifier: o+96eHX0expSxkDOouz8HWh/N5IyvfnByk/vcZJY8bM=
Subject key identifier: 88:3A:05:67:04:19:DE:D3:A6:A3:5D:7F:37:48:4B:CF:6B:3A:8E:3C
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018B108353B359A657F3F89C4F63CB4B4848
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/iDoFZwQZ3tOmo11_N0hLz2s6jjw.roa
Signing time: Sun 08 Oct 2023 18:18:43 +0000
ROA not before: Sun 08 Oct 2023 18:18:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 95.214.176.0/24 maxlen: 24
91.238.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Nov 2023 23:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:10:83:53:b3:59:a6:57:f3:f8:9c:4f:63:cb:4b:48:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 8 18:18:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=883a05670419ded3a6a35d7f37484bcf6b3a8e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cc:75:3c:9e:4c:1a:72:1d:2b:fe:e9:1b:f0:
ca:d6:b1:f4:69:b8:7a:5d:3f:36:0b:e1:aa:46:e8:
4b:c9:2a:db:8e:2a:c9:57:18:bf:e8:2e:7d:7a:81:
c7:65:3d:9a:7b:bf:43:b0:a6:b3:8a:ca:ee:d0:48:
df:8e:91:5e:17:ad:a3:b7:4e:a8:3b:a8:bf:91:4d:
0e:3e:9d:7c:3d:e7:3a:84:09:bc:7c:94:2e:48:03:
fc:24:ad:1a:2a:46:6c:35:ff:09:d3:2d:68:71:18:
48:92:52:46:f0:91:14:bf:cb:44:bd:39:94:b5:cf:
5c:71:d6:12:f3:ce:2e:cf:f2:b3:6b:dc:b7:03:89:
62:70:45:4c:5c:9f:24:f4:e3:82:ff:e4:20:1b:25:
a1:8c:ed:83:be:3f:05:8f:2e:4a:ce:0b:1c:75:75:
dd:16:df:58:0f:82:07:55:e7:9f:64:14:ac:a0:97:
71:6f:19:72:f6:d3:ba:0f:f1:68:b7:e5:b2:b3:58:
b6:1c:71:16:bf:71:19:70:69:79:cd:68:eb:8d:28:
6d:b4:47:95:7b:f6:b2:09:69:e4:28:fb:96:40:d3:
0d:cd:64:42:3f:4a:48:65:70:ee:fc:0d:5c:c0:a9:
51:b4:af:78:ec:77:1b:a3:87:72:78:1a:db:67:fc:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3A:05:67:04:19:DE:D3:A6:A3:5D:7F:37:48:4B:CF:6B:3A:8E:3C
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/iDoFZwQZ3tOmo11_N0hLz2s6jjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.93.0/24
95.214.176.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:98:6c:7c:45:ca:f0:68:99:50:0e:76:45:0b:9f:b9:ef:1c:
b5:3b:e9:14:ad:4b:66:34:e2:a0:21:67:ed:f4:75:ef:d7:c6:
53:15:33:de:f0:ee:d8:0b:a1:34:b8:3c:b4:b7:35:f2:af:81:
8f:da:fa:e2:3e:e5:4e:04:be:ac:b5:e7:4f:73:a5:d7:ed:11:
0d:64:db:89:56:b0:d8:ac:8f:df:6f:24:91:20:d1:f0:a1:cd:
7c:0a:c9:59:c6:9f:c3:0f:53:89:ae:0f:81:98:4e:95:b6:43:
2d:d6:37:f9:b0:c6:6f:9b:b6:e2:08:fe:38:8f:e1:76:0f:aa:
21:7f:7d:11:2f:8e:cf:1b:b1:a8:b2:18:75:14:65:2f:ef:c2:
d3:02:f5:f0:31:4b:2e:b9:32:ec:e5:8d:1a:1e:fd:83:d3:8b:
96:6e:62:ff:e6:8e:ff:78:f0:ed:92:8d:0c:62:b8:44:3b:da:
f0:f3:76:7c:78:ca:ec:f8:af:d4:f6:90:9b:6b:a3:9b:4c:28:
81:f6:51:ac:2f:d2:51:8b:96:28:38:15:9e:1f:94:70:9f:13:
49:da:7c:d7:f3:cd:d5:c7:3b:45:48:ce:5c:8a:fe:61:e9:92:
3e:37:6b:e0:68:01:b8:bb:47:44:68:29:0f:ff:66:f2:09:08:
75:ca:04:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org