Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/ZjVJ-lBWUK5bedqdGa5qTr2AIiA.roa
File: ZjVJ-lBWUK5bedqdGa5qTr2AIiA.roa (raw, json)
Hash identifier: yTii1DFzVYrBvJg1iUu0KuhStkgALi5GBX5a/UvDTqY=
Subject key identifier: 66:35:49:FA:50:56:50:AE:5B:79:DA:9D:19:AE:6A:4E:BD:80:22:20
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018C16C46FC0D24174FE3CA5636592EF79CC
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/ZjVJ-lBWUK5bedqdGa5qTr2AIiA.roa
Signing time: Tue 28 Nov 2023 16:30:21 +0000
ROA not before: Tue 28 Nov 2023 16:30:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44103
IP address blocks: 94.154.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Dec 2023 08:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:16:c4:6f:c0:d2:41:74:fe:3c:a5:63:65:92:ef:79:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Nov 28 16:30:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=663549fa505650ae5b79da9d19ae6a4ebd802220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:77:8e:96:df:4e:51:c2:b7:17:b3:42:22:
09:10:ac:e7:e6:41:14:13:62:55:da:70:8a:ea:2a:
f7:e5:3d:3d:69:49:c9:20:2c:89:d4:02:93:a7:49:
c1:f6:c3:2e:15:67:f1:c8:b4:dd:42:b6:ad:e3:26:
91:a1:2a:72:b6:7d:1c:d6:54:ab:15:d4:6d:6f:e1:
0d:68:1f:47:82:b5:c1:09:6c:82:49:37:ae:4e:b2:
93:83:f3:b8:23:24:3d:4c:01:15:f2:29:03:c0:94:
b5:fa:ac:ea:92:3c:fb:6a:68:23:64:68:ac:62:9f:
6d:22:12:fc:c4:5f:18:b2:02:84:35:a8:23:4d:f0:
05:33:0c:e6:0d:57:80:0d:6d:3d:cb:8f:ed:61:fe:
3a:c6:73:a9:56:d9:28:68:e4:4f:83:98:6d:f7:ac:
87:f5:5f:9b:ad:d8:b7:cf:e3:aa:bb:96:fe:20:a3:
a9:a4:32:dc:e7:0e:f5:7f:1b:52:c8:b1:90:09:e4:
bb:8c:56:81:4a:f3:83:fe:ff:35:d3:d4:de:33:10:
47:89:06:65:16:07:4f:3d:37:4d:7b:5e:2f:01:3a:
4f:b7:75:ca:7b:d4:60:96:2d:d5:eb:9c:11:7f:37:
a2:bc:1c:4a:27:fc:02:e0:60:e7:39:9e:4c:49:67:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:35:49:FA:50:56:50:AE:5B:79:DA:9D:19:AE:6A:4E:BD:80:22:20
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/ZjVJ-lBWUK5bedqdGa5qTr2AIiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.41.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ab:5b:ae:50:59:83:4c:4e:75:17:f6:7c:27:bd:17:9e:02:
b1:ef:a9:2b:ec:7a:1c:45:29:3c:20:0d:35:f4:c9:ce:39:97:
2b:bf:79:24:2f:e4:5a:4c:6f:1e:03:dc:ab:3f:e9:03:18:78:
ee:8a:cc:06:db:ac:7a:15:03:ef:8d:a7:c2:1d:26:ce:78:d5:
e6:ec:20:53:87:18:ea:46:af:7c:fe:22:52:d3:cf:31:2b:cd:
c6:cb:3a:0d:35:df:4c:05:f0:39:dc:ef:08:55:3d:49:02:a4:
c7:74:0c:c1:0d:36:c6:96:1b:d9:b5:1d:5f:48:92:4b:a4:0c:
bc:bf:eb:87:ae:b7:5a:da:ea:6b:67:f3:91:b6:3f:01:9a:15:
3d:35:d4:45:7f:80:e3:5a:2e:db:21:43:75:87:f4:da:77:3d:
a0:26:ba:71:2f:9b:df:10:54:64:da:46:40:f4:43:de:aa:d0:
5d:d5:e5:31:32:eb:99:75:8f:ef:c7:d3:c4:ef:b4:43:34:a1:
09:42:a3:86:7b:e5:7b:8c:e7:4c:1c:98:3f:6e:b0:4a:80:32:
6f:8a:95:7a:87:22:46:82:2d:8e:3a:37:54:86:e2:1e:36:b4:
f2:eb:25:13:ff:a7:3f:2b:c7:32:4d:4d:ef:e7:4a:2c:7f:ed:
6c:f5:68:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:31 2024 by rpki-client on console-fra.rpki-client.org