Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/XeDRsXWFbLrfZAvhcQ-AJE8qp1U.roa
File: XeDRsXWFbLrfZAvhcQ-AJE8qp1U.roa (raw, json)
Hash identifier: G8eMVlzVexIPzPlBFsdpe6HbJPGWJtZJS2SN/O+HvpM=
Subject key identifier: 5D:E0:D1:B1:75:85:6C:BA:DF:64:0B:E1:71:0F:80:24:4F:2A:A7:55
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 01856C65F24D028DFEEED0D2CDBC3B15F6B6
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/XeDRsXWFbLrfZAvhcQ-AJE8qp1U.roa
Signing time: Sun 01 Jan 2023 08:14:58 +0000
ROA not before: Sun 01 Jan 2023 08:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59917
IP address blocks: 95.181.208.0/23 maxlen: 23
95.181.210.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:f2:4d:02:8d:fe:ee:d0:d2:cd:bc:3b:15:f6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 08:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5de0d1b175856cbadf640be1710f80244f2aa755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:d0:e4:35:c0:0d:ea:7d:6f:67:8f:62:aa:
5c:10:ef:f9:3a:03:d1:ac:31:6d:fb:92:df:d9:92:
e0:51:7e:9c:f6:72:6f:8a:c8:a3:f7:ef:4a:92:ea:
b9:b8:c1:8f:af:cc:a9:72:8e:a8:4f:43:61:c6:77:
51:8e:2f:31:e2:32:72:4e:12:19:2d:89:4c:00:6c:
1f:62:d9:21:b9:ea:24:7f:71:88:31:ab:89:63:54:
ce:5d:4a:88:96:06:1b:9e:bd:cc:44:21:83:75:eb:
29:42:a2:57:04:82:87:08:06:d3:53:89:39:e0:70:
45:94:f1:8d:bc:f9:6e:b3:19:e4:90:37:64:bc:2a:
3f:90:cc:58:0d:71:16:e0:25:b1:4a:df:8f:8e:e3:
34:10:5c:e3:f1:1f:5d:4a:84:e1:3c:f6:dc:2a:13:
2e:31:ab:ce:80:c4:0f:26:9d:7f:43:d9:2d:20:a0:
c3:fa:2f:39:89:99:61:fc:aa:63:07:5c:d5:0a:41:
99:b0:45:d8:69:4d:4b:d3:29:93:78:57:85:60:69:
87:88:cf:08:44:46:79:cc:01:d1:3a:58:e5:58:2a:
75:aa:fa:a4:b1:42:ef:fe:a2:a6:7a:87:24:50:d3:
f2:1c:39:3e:6f:e7:f4:c1:a6:4c:a3:83:20:71:71:
30:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E0:D1:B1:75:85:6C:BA:DF:64:0B:E1:71:0F:80:24:4F:2A:A7:55
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/XeDRsXWFbLrfZAvhcQ-AJE8qp1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.208.0/22
Signature Algorithm: sha256WithRSAEncryption
38:99:11:5c:ba:2b:7b:aa:de:b5:76:91:51:53:fe:a7:b2:60:
ab:3f:9f:a4:07:b0:ec:13:bb:ee:c3:41:64:30:07:4a:51:20:
e2:02:cb:d1:ad:8a:28:ac:42:b0:dd:5f:e3:54:95:25:01:37:
70:0d:70:96:fe:76:37:3e:23:ee:51:2b:ce:f7:f4:19:1d:ff:
99:2c:d3:7e:08:74:98:1f:a6:91:b7:f4:01:ec:c5:a4:09:b4:
28:ce:e4:c8:cd:a8:cb:d3:ba:39:a6:4d:4f:a1:e5:9f:a5:02:
d6:e7:88:a9:aa:4e:5b:f3:15:3e:52:fb:34:be:5f:c0:1a:b8:
61:3a:ae:8b:7e:5c:fd:03:b5:c4:55:84:d9:27:e7:79:57:59:
6e:9c:bb:0a:3b:81:1c:2b:7a:f8:73:25:42:7a:fa:b9:40:6a:
d6:76:3e:2e:fe:28:68:83:c4:6c:2f:43:90:d0:5a:8b:2a:14:
18:62:16:03:0c:d2:59:2d:d9:32:5d:44:c7:0b:dc:6c:2b:32:
64:f2:6a:e4:76:36:28:02:89:f7:71:71:38:cb:cf:8a:cd:2f:
f2:a5:ec:ee:85:9f:87:8a:d7:98:15:8c:91:30:78:98:85:11:
6f:fc:72:c0:94:43:32:1e:d6:85:ac:3b:2c:71:a9:98:53:c3:
6a:9c:93:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:15 2024 by rpki-client on console.sobornost.net