Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/qg9eBOLTJHBGVqv03Eg78yO63dw.roa
File: qg9eBOLTJHBGVqv03Eg78yO63dw.roa (raw, json)
Hash identifier: t6/eE4ESrZwngiWIMpUXjZaEtC8Pde/DL7snjcotBII=
Subject key identifier: AA:0F:5E:04:E2:D3:24:70:46:56:AB:F4:DC:48:3B:F3:23:BA:DD:DC
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018E845F5978468C6EDF6184EBD3E7240D7C
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/qg9eBOLTJHBGVqv03Eg78yO63dw.roa
Signing time: Thu 28 Mar 2024 09:23:45 +0000
ROA not before: Thu 28 Mar 2024 09:23:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.40.0/24 maxlen: 24
94.154.44.0/23 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 19:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:5f:59:78:46:8c:6e:df:61:84:eb:d3:e7:24:0d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Mar 28 09:23:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa0f5e04e2d324704656abf4dc483bf323badddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:33:c1:86:d1:db:26:42:2e:e5:22:d5:65:
a7:10:63:03:fa:16:ab:48:6e:d4:e8:e8:25:89:d7:
5a:2c:eb:a7:be:f5:76:6c:2e:b3:0e:4b:5c:dc:86:
38:ef:f2:33:30:96:64:d2:f7:5d:52:ba:b3:42:ff:
d5:3a:bb:c2:df:29:28:c6:9d:61:e9:7a:1d:04:22:
16:44:95:9b:27:61:d3:f8:32:ff:ed:02:49:21:ad:
df:74:30:98:9b:11:d7:97:71:d8:72:11:b1:df:c2:
35:92:30:68:3c:d8:23:84:3b:0c:e0:6f:da:1f:1a:
d7:44:ca:fc:a8:0a:c2:31:2f:44:9b:17:a6:42:89:
e5:c3:72:b4:76:63:c8:4f:21:6d:a4:43:44:3f:e4:
04:ea:79:15:2e:98:97:dd:70:3e:63:2e:ef:9e:f7:
98:d3:1a:74:24:30:e9:c0:9b:c7:aa:b4:51:ce:b8:
b3:0d:ed:2a:58:c1:fa:e9:1b:04:ce:87:b6:fc:46:
8b:e3:ce:7d:b5:ae:41:9e:45:ba:3f:5c:85:be:7e:
39:75:6e:e8:d8:17:69:66:99:51:e6:ce:b0:59:a0:
5a:40:bd:d1:ed:3d:b7:0a:c8:a0:c3:d9:d6:19:10:
16:ab:8b:91:77:f4:a0:e3:16:f7:4a:72:6a:7e:02:
0e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0F:5E:04:E2:D3:24:70:46:56:AB:F4:DC:48:3B:F3:23:BA:DD:DC
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/qg9eBOLTJHBGVqv03Eg78yO63dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0/24
94.154.44.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
a2:6b:2f:6f:b7:52:d3:96:0f:99:ab:80:81:eb:62:2c:e1:49:
83:b9:f1:6e:fc:65:4a:52:27:62:5e:60:23:0c:f5:7a:92:a5:
b6:bc:fe:68:c1:f8:ef:9a:1f:c0:25:88:e8:63:4c:37:6e:6a:
30:d3:91:4f:2f:78:6a:d3:2b:6c:a2:9d:55:8e:a7:ef:b5:d2:
78:39:8c:46:92:cd:cd:ac:59:16:28:0c:3d:3e:38:f7:c2:2b:
49:50:5f:5b:a7:b3:2b:7c:7f:be:3e:6a:8c:63:f5:aa:ac:0b:
b9:ef:3a:8f:20:70:83:38:20:14:e2:72:9b:a4:c0:e8:05:72:
4a:86:56:9c:0c:62:43:b5:a8:15:36:08:d2:e7:c9:2d:7d:d8:
0f:72:1a:49:cc:1d:be:ca:65:ad:4b:b6:69:11:e9:58:1b:d2:
e1:52:8e:ff:d6:3e:47:aa:74:63:e0:28:be:76:3b:c7:eb:65:
5b:ae:84:f9:91:b7:dc:1d:2c:62:f9:8a:59:02:a9:be:6e:c9:
8e:0d:af:e3:3a:4e:5d:f9:05:4b:43:00:39:5f:0a:15:ae:aa:
94:8b:2e:0a:36:3c:89:42:0e:e1:50:03:26:b0:c5:04:bc:4e:
71:c3:23:98:0b:fe:a2:44:0b:43:f8:10:db:7f:ac:83:25:e0:
c4:b9:29:9c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:31 2024 by rpki-client on console-fra.rpki-client.org