Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/LeOtkiP1mGkFezTOHNcS6sUosPE.roa
File: LeOtkiP1mGkFezTOHNcS6sUosPE.roa (raw, json)
Hash identifier: MCx1r0vIz+T813EUgpvSIdObD+NcRcCx2AX9iyIKDJk=
Subject key identifier: 2D:E3:AD:92:23:F5:98:69:05:7B:34:CE:1C:D7:12:EA:C5:28:B0:F1
Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial: 0188C4C373F1C54DA43AED8C014A4BAE70BE
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/LeOtkiP1mGkFezTOHNcS6sUosPE.roa
Signing time: Fri 16 Jun 2023 15:12:03 +0000
ROA not before: Fri 16 Jun 2023 15:12:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59676
IP address blocks: 95.215.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Oct 2023 01:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:c3:73:f1:c5:4d:a4:3a:ed:8c:01:4a:4b:ae:70:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Validity
Not Before: Jun 16 15:12:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2de3ad9223f59869057b34ce1cd712eac528b0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:d0:ef:dd:48:e0:bd:52:84:b3:ec:fe:ea:
3d:ac:d3:7c:1b:a8:94:b2:72:1a:83:31:92:a2:0a:
d2:77:c0:80:c5:39:c3:f9:95:0f:68:db:56:82:92:
c4:20:cc:d6:55:a0:9d:38:0a:c6:f8:fc:6e:b6:2c:
a1:50:55:33:1c:b6:65:9b:f8:ee:22:ff:76:e6:d0:
14:ab:e4:f9:aa:f0:ba:c9:81:fc:3d:70:9e:24:5e:
3e:fe:a1:17:05:47:77:7e:a7:85:d5:dd:d2:36:93:
ea:c1:4d:12:61:23:a9:30:23:27:8d:e2:84:e4:7d:
c0:2e:48:6b:f1:48:0e:ea:dc:88:e8:68:96:e9:46:
16:5f:66:22:f8:ea:0e:e9:9d:98:81:4f:56:0b:34:
bb:72:7a:19:52:6b:e3:55:a8:58:a0:18:8a:e6:b0:
ce:b1:f6:9b:85:cc:86:77:cb:d2:c3:ff:59:7c:73:
6a:bc:6d:41:43:85:95:47:07:3a:18:2b:f6:54:ed:
a0:f6:a5:b9:f3:3a:24:de:cb:29:3e:1b:92:05:1f:
5e:4d:3a:fe:16:ec:a0:f6:7d:40:b7:9a:b1:78:b2:
b5:ae:e5:2f:30:5c:e6:dd:ab:0e:e7:01:3e:33:87:
5c:18:f6:75:47:08:81:db:78:a8:dc:96:4f:96:ab:
91:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E3:AD:92:23:F5:98:69:05:7B:34:CE:1C:D7:12:EA:C5:28:B0:F1
X509v3 Authority Key Identifier:
keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/LeOtkiP1mGkFezTOHNcS6sUosPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.175.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:95:1a:a2:5b:1f:dd:ca:c1:60:f0:ab:a5:7c:05:c8:de:67:
c0:1a:dc:95:7c:3c:1c:f9:bb:83:1d:50:63:17:57:e0:cf:ca:
03:6a:84:01:73:f9:e1:86:e1:c0:8d:21:d5:06:91:55:a7:36:
10:1a:72:37:a7:1a:09:a2:5e:05:9e:c0:55:17:49:c6:f9:c4:
c4:b1:de:35:82:80:e2:c9:9b:fa:78:ec:27:d9:12:5d:be:d3:
db:18:20:7d:fb:32:d2:7b:b3:5d:08:65:46:f9:f0:78:f9:4f:
b1:c5:b6:4a:27:e2:ca:23:ce:34:0a:9e:18:fe:b7:37:25:17:
ef:bf:61:f5:2e:1a:4c:a2:ae:c4:51:90:bb:7f:e4:eb:29:0e:
6a:23:71:e6:e9:b5:3f:79:2d:ff:42:d2:b3:4f:01:e2:d7:f4:
ac:b4:c8:34:21:bd:46:57:95:1c:46:fb:ff:3c:ab:2c:1a:6b:
99:1b:f8:e0:9b:1a:7f:25:b7:20:37:ed:57:5f:8e:d2:e1:94:
08:ea:2e:9b:b9:13:a2:aa:e6:50:d8:b7:d0:79:e3:6a:ef:69:
f4:b8:f5:6a:5e:19:bb:f8:94:ba:ef:74:23:c7:06:42:59:6f:
e0:2b:49:87:fa:14:c7:f7:03:32:f7:69:2a:2a:c0:b4:17:2f:
62:ab:88:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:40 2024 by rpki-client on console-ams.rpki-client.org