Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/cMPPVahn_YvcElVAMa-q6hrES9I.roa
File: cMPPVahn_YvcElVAMa-q6hrES9I.roa (raw, json)
Hash identifier: DCobXd/2V0G+uWRAuQRQcdMeD5AkXgx3c4ihopmXvKo=
Subject key identifier: 70:C3:CF:55:A8:67:FD:8B:DC:12:55:40:31:AF:AA:EA:1A:C4:4B:D2
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018BB8E637D2F1F7C350CADB1BF4AB0539E3
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/cMPPVahn_YvcElVAMa-q6hrES9I.roa
Signing time: Fri 10 Nov 2023 11:02:57 +0000
ROA not before: Fri 10 Nov 2023 11:02:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 94.154.43.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Nov 2023 09:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:e6:37:d2:f1:f7:c3:50:ca:db:1b:f4:ab:05:39:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Nov 10 11:02:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70c3cf55a867fd8bdc12554031afaaea1ac44bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c2:d3:e6:c3:d9:4d:a3:21:05:ec:bf:dd:83:
87:d8:72:cb:29:52:8e:15:12:55:b8:f8:6e:61:ae:
2a:5c:a9:26:a4:8e:28:d0:16:1c:90:b0:ca:fd:b0:
7d:5b:b1:4b:1f:09:b4:b1:54:28:4a:f7:d7:f6:ea:
d4:d4:78:0f:e3:6a:1b:5f:ab:13:a5:cb:94:4f:e6:
c8:d4:4f:1a:1f:3b:39:17:7d:f8:8d:c6:54:7f:06:
9a:61:87:70:27:e9:93:7d:d4:67:e1:ec:a0:a1:24:
25:84:fd:db:41:6c:72:7e:43:be:bf:88:88:05:d6:
1d:0a:f8:d5:21:9b:54:07:31:dc:48:47:7a:44:63:
f1:a3:12:5a:89:87:64:ec:60:10:4c:25:1f:70:e1:
2d:ce:4c:0c:54:d7:27:bd:65:a8:c9:09:3c:14:45:
bc:c2:fd:0b:5e:f5:d0:dc:3f:40:24:ad:1b:53:b5:
15:9d:2f:a1:47:47:09:55:62:3d:de:67:54:a3:a8:
14:96:6f:ac:75:73:9e:3f:33:dc:2a:17:bb:7d:5d:
40:75:b0:ee:14:d4:b5:55:d7:84:1a:3b:72:ed:2c:
b7:74:1d:8b:fa:6a:2c:5e:46:48:99:56:13:0a:2a:
2f:1f:24:49:6d:02:74:76:e2:a1:fc:eb:e4:83:ee:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C3:CF:55:A8:67:FD:8B:DC:12:55:40:31:AF:AA:EA:1A:C4:4B:D2
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/cMPPVahn_YvcElVAMa-q6hrES9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.41.0-94.154.43.255
Signature Algorithm: sha256WithRSAEncryption
94:fe:f8:71:e3:b6:9c:6e:8b:fd:f0:23:c5:e5:cc:5e:2b:b9:
91:fa:7e:a9:a5:e9:5d:e2:a2:b1:31:2e:04:0b:66:4b:1e:06:
77:23:cb:2e:0a:91:a0:15:72:bc:ab:5d:21:ca:ba:af:dd:f7:
76:91:cf:f7:13:36:06:2b:90:ec:1d:52:91:09:ca:fa:fc:ce:
08:74:5f:58:79:f6:38:10:30:50:ee:57:e8:1e:fe:ba:85:7d:
fa:62:13:50:c9:fd:e9:55:ea:8b:9e:e2:ac:c9:be:53:67:fb:
79:8f:c5:ba:92:32:3c:b0:3f:2d:29:f8:2b:44:a0:0b:b6:8b:
96:ea:de:ee:05:aa:61:7f:57:e2:d4:99:f6:0f:ea:af:d4:60:
95:e0:b0:50:a2:35:14:af:45:b9:1c:a2:b6:ab:47:03:ee:53:
6f:79:88:ec:9d:42:d0:6b:d3:87:24:91:e8:b4:fd:b3:da:ed:
e5:7f:ab:e3:31:53:b9:d4:92:86:fe:3f:a2:26:82:e3:ac:d9:
d7:f8:33:5f:20:22:17:24:b6:50:7c:d0:54:f8:ca:3c:d8:a5:
a8:b6:8d:9b:f6:63:0f:29:d9:22:3c:22:92:ce:34:e6:3e:fc:
e3:65:f2:e6:ff:f9:90:67:81:b9:af:68:b7:63:11:b4:f5:f8:
9f:96:0d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:55 2024 by rpki-client on console-ams.rpki-client.org