Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/Co03PheMr8s8zlMrED1KjQXF3VA.roa
File: Co03PheMr8s8zlMrED1KjQXF3VA.roa (raw, json)
Hash identifier: v/LJaQ5u0MaOvEM1gRdoiz/IGt2RlHV5U8z21wDAbjk=
Subject key identifier: 0A:8D:37:3E:17:8C:AF:CB:3C:CE:53:2B:10:3D:4A:8D:05:C5:DD:50
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018C90B87B1207D9017E0A55F0DC2E88AA27
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/Co03PheMr8s8zlMrED1KjQXF3VA.roa
Signing time: Fri 22 Dec 2023 08:50:58 +0000
ROA not before: Fri 22 Dec 2023 08:50:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.41.0/24 maxlen: 24
94.154.40.0/22 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:90:b8:7b:12:07:d9:01:7e:0a:55:f0:dc:2e:88:aa:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Dec 22 08:50:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a8d373e178cafcb3cce532b103d4a8d05c5dd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cc:82:78:79:fb:98:e0:db:b0:ca:fd:ac:cc:
6e:4e:ee:b1:13:d7:40:f1:63:75:a0:02:cd:c3:51:
9a:52:c0:e0:e9:16:65:be:6d:32:72:15:27:7e:be:
f4:87:26:3a:65:d0:03:a2:33:7b:1a:a9:0f:cc:fe:
eb:34:e0:a2:9f:bd:80:c3:d0:00:4f:75:56:10:28:
11:1b:c1:a4:e9:25:53:19:cb:41:bb:8c:b1:0c:93:
d9:62:19:05:0b:27:4f:e5:28:da:98:f7:8c:b2:3c:
7e:b1:f6:2e:da:95:57:bb:1c:d1:f3:a0:90:63:db:
bf:45:44:42:10:d9:0a:31:cd:3d:77:6b:eb:06:d5:
c3:9f:18:11:b0:19:7a:02:8a:aa:37:45:69:f5:84:
38:c1:0b:a2:ae:24:dc:49:1c:fb:54:eb:e9:e3:80:
ba:3d:94:ec:a3:a6:ee:a6:48:b0:23:51:4d:28:79:
14:0c:71:58:9d:4c:65:bd:3b:2c:e3:aa:b0:a8:94:
14:4e:33:7a:4c:22:ea:db:52:3b:d8:a7:90:6c:25:
9d:b4:2e:c2:5f:45:17:eb:1c:6b:41:3b:6e:da:c5:
de:50:89:bb:3e:58:dd:84:78:da:2e:b6:cd:68:04:
fe:c7:bb:e9:d6:88:e7:98:b0:3d:d5:43:c2:a2:8f:
fd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8D:37:3E:17:8C:AF:CB:3C:CE:53:2B:10:3D:4A:8D:05:C5:DD:50
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/Co03PheMr8s8zlMrED1KjQXF3VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
0f:63:59:b1:b6:9c:0a:f0:1a:43:e0:ca:ae:1e:fe:e4:28:54:
5b:cb:0c:72:7d:c3:c2:e2:3d:57:88:b9:fa:63:4b:0d:2b:9f:
b8:01:1a:15:9e:4a:7f:0a:32:fa:11:99:f7:63:18:2c:7c:ad:
76:70:0e:ba:e9:0a:23:30:21:8f:6d:7e:c2:fa:73:98:ee:15:
9d:17:ca:cc:62:31:a0:49:44:ad:b8:b2:ef:74:bb:26:34:e3:
12:76:e4:e0:b0:1c:5b:65:62:50:a8:97:84:dc:1e:58:e0:c7:
ef:26:da:2c:23:91:12:79:e2:fc:48:c5:8d:d2:92:22:10:d3:
5d:c1:ee:a5:ee:00:67:c1:1a:43:ed:a2:57:4f:9a:a4:12:93:
e6:cf:b3:7b:c5:a0:29:80:82:d3:6e:a2:13:3e:e1:b9:68:74:
53:1e:f1:4e:92:9f:7f:2b:7f:ae:ad:21:b3:9e:24:04:2f:e6:
cd:84:96:b3:6a:f1:73:69:60:5f:50:37:a4:09:c8:c3:6f:9b:
d2:60:2b:2d:f2:9a:c7:7a:72:ec:e8:5a:2d:ca:2a:4a:b2:a8:
9f:ab:28:82:b6:04:c3:8e:49:75:0e:a0:cf:14:97:1e:e3:88:
85:73:d0:2a:1c:ba:aa:a9:c3:59:16:d5:11:5b:39:88:d7:57:
af:04:94:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:55 2024 by rpki-client on console-ams.rpki-client.org