Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/rKU1NvY0hkvfLyfrV4G9b1WTXQ4.roa
File: rKU1NvY0hkvfLyfrV4G9b1WTXQ4.roa (raw, json)
Hash identifier: 6WN6IE2MlhocpnGd5tulc0aV3URV1IzQsx+Pe4C0J9s=
Subject key identifier: AC:A5:35:36:F6:34:86:4B:DF:2F:27:EB:57:81:BD:6F:55:93:5D:0E
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 0186A253D8CBA82A64FDB3A4018C929165FA
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/rKU1NvY0hkvfLyfrV4G9b1WTXQ4.roa
Signing time: Thu 02 Mar 2023 12:37:29 +0000
ROA not before: Thu 02 Mar 2023 12:37:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39598
IP address blocks: 95.161.125.0/24 maxlen: 24
95.161.127.0/24 maxlen: 24
95.161.248.0/21 maxlen: 21
95.161.95.0/24 maxlen: 24
95.161.0.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:53:d8:cb:a8:2a:64:fd:b3:a4:01:8c:92:91:65:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Mar 2 12:37:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aca53536f634864bdf2f27eb5781bd6f55935d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:ad:8a:b2:4e:09:18:a9:ac:3e:49:4e:36:
a9:f7:dc:f1:aa:f3:5d:e1:6a:44:91:a1:9a:4e:30:
8b:3a:28:24:55:1b:79:47:3a:8b:6d:04:60:43:b7:
e0:1c:fc:b4:9a:82:4b:c7:45:8a:cc:d2:df:21:18:
70:20:a2:8c:50:3c:d5:bc:c7:58:45:5b:8d:56:eb:
c2:d6:4b:29:90:4e:39:d6:6c:4a:b5:08:46:74:d5:
05:78:bb:09:fd:fe:23:7e:f6:ea:c3:12:60:28:19:
ec:67:dc:48:53:fa:d2:8f:54:a6:0b:07:ba:68:35:
27:97:2c:ef:bb:8a:f1:94:c6:e8:90:45:a8:24:f9:
81:43:08:0d:5a:1d:da:7c:9d:16:55:24:cf:b6:ac:
e6:35:a5:d5:55:77:be:5c:44:b2:84:4f:ff:ac:81:
90:d9:91:9b:0a:d0:4e:89:71:e7:0e:fa:0a:56:a9:
43:98:a2:47:30:1d:7a:1e:05:18:01:90:fe:02:98:
86:a9:e8:1c:ef:1f:fc:a8:e8:41:4f:74:26:72:b3:
b0:e4:e6:0e:04:8c:2e:c6:a4:85:97:d9:17:18:9a:
3f:e7:4a:24:be:b6:28:82:16:eb:e6:49:b0:8b:01:
85:00:e1:cc:45:06:bf:2e:8a:80:82:18:8a:c8:e3:
b0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A5:35:36:F6:34:86:4B:DF:2F:27:EB:57:81:BD:6F:55:93:5D:0E
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/rKU1NvY0hkvfLyfrV4G9b1WTXQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.161.0.0/18
95.161.95.0/24
95.161.125.0/24
95.161.127.0/24
95.161.248.0/21
Signature Algorithm: sha256WithRSAEncryption
80:10:f6:ca:e5:78:06:63:e8:3a:f0:25:62:8f:15:16:65:2f:
38:59:d3:12:f7:60:45:d5:32:58:0c:30:7d:89:18:07:44:5d:
44:3a:ed:2d:16:90:b1:83:bd:e9:00:21:18:d4:95:f7:46:51:
ae:7d:a0:b0:f4:15:b2:6e:f4:4f:1e:f2:6a:7d:47:24:0c:f4:
95:9c:c6:98:de:7b:89:0a:d7:d8:76:5c:e8:26:08:0b:fb:bb:
6b:73:df:7a:20:ce:a2:fe:2d:0b:38:c3:a0:42:8d:07:7f:fb:
b2:3c:db:c6:70:1a:41:ad:a9:57:3c:49:cb:4c:78:21:4c:5a:
f1:14:06:04:36:a0:ea:1c:50:f0:cc:bd:c5:99:95:98:fd:50:
4d:3c:76:b4:c9:63:66:86:a8:29:e1:d0:27:e8:6b:f3:24:7d:
6e:c7:a7:32:91:c7:e0:c6:ee:b7:9e:c6:9f:78:01:61:57:8c:
3a:aa:5a:df:9f:c7:d5:a5:c5:6a:75:da:16:73:d0:a2:2c:6a:
1a:d2:1a:27:bf:f7:8b:d1:dd:ff:c7:c7:65:26:33:20:59:41:
88:40:df:4c:52:52:42:fb:b9:76:2c:a3:a2:72:dc:04:d2:aa:
33:a8:ee:be:36:a8:57:4b:0b:76:24:a7:be:70:f7:1f:ce:bc:
1a:ca:db:13
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYaiU9jLqCpk/bOkAYySkWX6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx
YTUxYjgwHhcNMjMwMzAyMTIzNzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2E1MzUzNmY2MzQ4NjRiZGYyZjI3ZWI1NzgxYmQ2ZjU1OTM1ZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppOtirJOCRiprD5JTjap99zxqvNd
4WpEkaGaTjCLOigkVRt5RzqLbQRgQ7fgHPy0moJLx0WKzNLfIRhwIKKMUDzVvMdY
RVuNVuvC1kspkE451mxKtQhGdNUFeLsJ/f4jfvbqwxJgKBnsZ9xIU/rSj1SmCwe6
aDUnlyzvu4rxlMbokEWoJPmBQwgNWh3afJ0WVSTPtqzmNaXVVXe+XESyhE//rIGQ
2ZGbCtBOiXHnDvoKVqlDmKJHMB16HgUYAZD+ApiGqegc7x/8qOhBT3QmcrOw5OYO
BIwuxqSFl9kXGJo/50okvrYoghbr5kmwiwGFAOHMRQa/LoqAghiKyOOwXQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKylNTb2NIZL3y8n61eBvW9Vk10OMB8GA1UdIwQY
MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt
NzY3NDE2NTI1MTBkLzEvcktVMU52WTBoa3ZmTHlmclY0RzliMVdUWFE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk
LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQGX6EAAwQA
X6FfAwQAX6F9AwQAX6F/AwQDX6H4MA0GCSqGSIb3DQEBCwUAA4IBAQCAEPbK5XgG
Y+g68CVijxUWZS84WdMS92BF1TJYDDB9iRgHRF1EOu0tFpCxg73pACEY1JX3RlGu
faCw9BWybvRPHvJqfUckDPSVnMaY3nuJCtfYdlzoJggL+7trc996IM6i/i0LOMOg
Qo0Hf/uyPNvGcBpBralXPEnLTHghTFrxFAYENqDqHFDwzL3FmZWY/VBNPHa0yWNm
hqgp4dAn6GvzJH1ux6cykcfgxu63nsafeAFhV4w6qlrfn8fVpcVqddoWc9CiLGoa
0honv/eL0d3/x8dlJjMgWUGIQN9MUlJC+7l2LKOictwE0qozqO6+NqhXSwt2JKe+
cPcfzrwaytsT
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:41 2023 by rpki-client on console.sobornost.net