Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/1-eEN2bbrGAH7JsEv1fSZyp8dqkw.roa
File: 1-eEN2bbrGAH7JsEv1fSZyp8dqkw.roa (raw, json)
Hash identifier: 3ReeAAKj1z62hgKSTIoJ1X209ikK0RGMLgatRlw1OOk=
Subject key identifier: F9:E1:0D:D9:B6:EB:18:01:FB:26:C1:2F:D5:F4:99:CA:9F:1D:AA:4C
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018D52055D4AFB2B02D63A914E7C45B6AAF2
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/1-eEN2bbrGAH7JsEv1fSZyp8dqkw.roa
Signing time: Sun 28 Jan 2024 21:41:39 +0000
ROA not before: Sun 28 Jan 2024 21:41:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 10:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:52:05:5d:4a:fb:2b:02:d6:3a:91:4e:7c:45:b6:aa:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jan 28 21:41:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9e10dd9b6eb1801fb26c12fd5f499ca9f1daa4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:61:67:eb:79:1c:ea:3d:17:42:d8:47:31:43:
57:01:f9:b7:de:58:c6:a0:28:07:d4:b2:d0:57:c4:
24:15:9d:04:eb:85:bc:30:35:27:85:61:d1:d0:6d:
51:91:78:71:3f:07:f5:91:0a:90:cf:7d:d0:69:6f:
23:f8:9f:fb:8f:f3:a6:96:39:38:b4:36:15:1f:2c:
d5:ed:60:7d:73:1f:87:5d:7a:de:75:37:10:66:24:
95:85:69:de:bb:99:f1:1f:23:36:0d:c1:db:c3:02:
5e:cd:9d:10:ca:3f:9d:4d:6c:46:97:8f:29:f6:1c:
f7:3e:42:3e:1d:73:c7:b2:9c:de:aa:b8:e7:9a:0c:
6d:a8:90:14:f0:b9:8d:47:9d:09:9e:42:89:e4:83:
7c:b5:84:07:4b:2c:f5:fd:cf:b6:7e:07:20:89:ae:
fc:4b:ab:4c:87:a2:1a:af:01:48:78:df:49:dd:da:
bd:c6:d7:9c:8f:e6:f3:a0:9f:b7:a0:f8:45:e8:27:
06:0b:34:3d:30:f0:78:5b:ac:c7:1d:23:d9:ac:c2:
0e:9d:44:de:41:ac:7b:c8:ff:d2:71:bb:96:a5:e6:
33:bf:79:8d:7c:44:09:0e:18:58:1f:8a:a8:44:c0:
16:95:79:78:d3:00:da:99:d9:b8:55:52:bd:96:09:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E1:0D:D9:B6:EB:18:01:FB:26:C1:2F:D5:F4:99:CA:9F:1D:AA:4C
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/1-eEN2bbrGAH7JsEv1fSZyp8dqkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.44.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:1f:9e:d8:0f:2e:65:18:9c:ae:eb:10:94:92:1c:f9:ff:14:
c4:d7:17:f7:d6:40:ab:30:3e:e1:64:d3:36:e8:13:36:d1:b1:
cf:37:62:f9:71:67:23:0b:47:44:b5:9e:f9:17:25:65:df:8b:
8e:e7:13:d9:d1:60:0a:84:99:3a:c7:12:10:aa:fa:52:c2:e0:
5a:74:f0:82:f2:aa:bb:fa:b6:86:6d:89:55:e7:b8:64:07:a7:
29:4f:79:59:b6:37:3a:4b:cc:b4:a6:50:6d:14:6d:ab:bf:f7:
27:7f:57:2f:ab:9c:41:61:d7:dd:69:91:8a:ad:01:07:d1:1a:
b6:d5:ca:2b:ab:e4:d0:e9:55:ae:67:d0:67:94:60:02:fa:95:
26:a0:ba:0b:50:ec:33:a7:68:f8:7d:1e:9a:b2:44:07:8c:01:
1a:bd:87:39:78:0f:d5:b3:47:ab:ce:87:9b:33:ee:92:7c:01:
a5:24:6a:36:2d:0d:05:79:ca:6d:89:62:8a:ac:ee:dd:be:fa:
d5:74:4e:3b:b0:b2:a7:b4:27:6b:ec:1d:53:4d:4d:a1:25:ba:
f4:97:9e:f6:e4:2f:73:57:ee:d8:dd:b9:9b:15:4a:eb:6f:e7:
2d:8d:ba:18:48:fd:f2:44:a2:eb:28:29:d5:fa:19:e1:38:e6:
57:c7:05:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:31 2024 by rpki-client on console-fra.rpki-client.org