Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/V3EKg3WjC_3eMCYYqPGrWESnfEY.roa
File: V3EKg3WjC_3eMCYYqPGrWESnfEY.roa (raw, json)
Hash identifier: Ah0cpRdyTy/Nvmy7gk8w12ibDM6MxNWHLZH0B5kT7hw=
Subject key identifier: 57:71:0A:83:75:A3:0B:FD:DE:30:26:18:A8:F1:AB:58:44:A7:7C:46
Certificate issuer: /CN=e96334b072108abae8f321ec4cce7494c10f0ef1
Certificate serial: 018746FEC4BF9C904B49AA23770D07FEC65C
Authority key identifier: E9:63:34:B0:72:10:8A:BA:E8:F3:21:EC:4C:CE:74:94:C1:0F:0E:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WM0sHIQirro8yHsTM50lMEPDvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/V3EKg3WjC_3eMCYYqPGrWESnfEY.roa
Signing time: Mon 03 Apr 2023 12:01:54 +0000
ROA not before: Mon 03 Apr 2023 12:01:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41745
IP address blocks: 95.215.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:fe:c4:bf:9c:90:4b:49:aa:23:77:0d:07:fe:c6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96334b072108abae8f321ec4cce7494c10f0ef1
Validity
Not Before: Apr 3 12:01:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57710a8375a30bfdde302618a8f1ab5844a77c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f4:e4:65:f9:bf:6e:7b:1d:b6:15:76:67:7e:
bc:b5:16:bb:36:9e:99:7d:16:2b:4b:d2:f6:42:3f:
2f:a5:b6:0e:fc:69:69:e7:14:7c:d9:f8:39:74:07:
fb:b3:06:03:ba:15:95:c2:4a:e8:c2:50:9d:46:72:
b5:df:65:48:64:9a:6c:3c:1e:a0:9b:6b:ce:d7:36:
51:ef:43:34:2d:1c:87:b2:69:c6:8b:c3:c3:16:c7:
8e:78:d2:8d:44:e4:4d:9a:51:f6:9d:0a:83:79:ea:
32:f6:7d:77:95:67:b7:3b:58:1c:3d:4c:a6:7e:18:
82:0f:55:e8:76:aa:0c:3e:a1:e3:f2:a5:31:64:fe:
a2:e8:64:72:59:34:9c:32:ee:27:19:bd:2d:0c:67:
aa:9d:cf:b2:05:39:5d:3b:92:c7:02:79:2c:e0:76:
b1:aa:a6:ed:02:b0:5b:f4:2d:19:93:5b:16:c6:90:
cc:d8:44:d6:d5:6e:f1:ff:5d:b9:b8:9a:8d:73:af:
d8:c1:be:df:fa:37:a8:45:43:29:17:fb:1e:ea:c7:
e2:5d:7d:c8:9f:25:c6:ee:56:81:a2:97:63:a7:05:
65:ac:db:99:78:f8:b6:85:67:96:73:16:92:b8:f4:
b5:54:df:d5:b4:f1:8c:b6:53:73:db:5a:73:a9:35:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:71:0A:83:75:A3:0B:FD:DE:30:26:18:A8:F1:AB:58:44:A7:7C:46
X509v3 Authority Key Identifier:
keyid:E9:63:34:B0:72:10:8A:BA:E8:F3:21:EC:4C:CE:74:94:C1:0F:0E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WM0sHIQirro8yHsTM50lMEPDvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/V3EKg3WjC_3eMCYYqPGrWESnfEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9f5523-269c-45b0-aa6e-1106b047f6e0/1/6WM0sHIQirro8yHsTM50lMEPDvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.8.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b4:48:84:a0:0f:58:5c:2b:c3:9b:7d:7f:45:54:59:79:d6:
4a:ec:22:d9:ca:81:81:bd:50:b0:6f:14:6a:2d:92:b9:9f:14:
d0:6c:cb:77:f3:9e:31:db:ab:fd:89:79:ba:af:15:7f:b0:13:
89:e3:f4:9d:17:86:90:37:e7:3e:06:28:69:aa:12:30:40:b8:
06:3c:88:04:3c:56:41:0d:b4:42:7d:25:76:90:7c:1c:65:a7:
75:93:31:07:eb:f6:57:0e:42:9a:f8:e0:10:97:c8:ca:40:38:
1f:e4:5b:31:1c:3c:29:66:4d:a0:ec:6f:f8:c2:e7:7c:f5:22:
5f:89:71:a4:3b:7c:9e:0a:a9:39:67:d1:74:75:e4:23:23:d9:
5b:f3:68:5d:24:de:15:ff:c3:2c:8a:e3:98:4c:cd:33:41:c8:
2c:fd:83:a1:5e:8b:5e:8f:7b:c7:c5:c6:5f:c5:59:b7:1c:c2:
bb:3f:d1:24:47:43:66:f1:58:cc:b9:31:05:ff:93:94:88:47:
df:7f:99:cd:63:4f:af:50:2d:e4:1a:88:ca:46:df:4f:68:55:
31:3b:02:76:6b:04:e3:3c:9b:e5:c7:17:d4:d2:f2:03:48:32:
e6:99:9c:b4:90:26:c9:b5:56:d3:04:8e:b6:34:f5:e9:12:3c:
79:a4:4d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:58 2024 by rpki-client on console-ams.rpki-client.org