Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/x-B8JiEHMjHJrLwMxXZykY5fFkM.roa
File: x-B8JiEHMjHJrLwMxXZykY5fFkM.roa (raw, json)
Hash identifier: yjj5wbjClO/bZtJiPdFhVRvDyBptaxpEPhJH8xzGzKM=
Subject key identifier: C7:E0:7C:26:21:07:32:31:C9:AC:BC:0C:C5:76:72:91:8E:5F:16:43
Certificate issuer: /CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Certificate serial: 01856F82476EEA18843466276E086CD10141
Authority key identifier: C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/x-B8JiEHMjHJrLwMxXZykY5fFkM.roa
Signing time: Sun 01 Jan 2023 22:44:47 +0000
ROA not before: Sun 01 Jan 2023 22:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 94.127.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Sep 2023 06:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:47:6e:ea:18:84:34:66:27:6e:08:6c:d1:01:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2a234e224bf87996f2f0df559ead882f9e651
Validity
Not Before: Jan 1 22:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7e07c2621073231c9acbc0cc57672918e5f1643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:70:15:7d:d5:a0:ea:6f:67:57:63:de:4c:2e:
f2:0f:64:ff:84:5d:7f:97:cc:a6:05:25:5a:05:ea:
6d:ca:0e:27:a9:8f:f4:83:cb:1d:b9:6e:75:41:a0:
9c:76:7b:20:3e:2b:f9:0c:af:d2:4f:36:e7:57:05:
49:69:3f:89:12:e8:83:a2:6f:f8:53:aa:bc:16:c2:
0f:e3:d2:c9:be:9c:bc:15:84:bd:5a:fd:dc:41:85:
9d:84:f3:28:db:ad:5a:ac:89:c7:f4:81:0f:42:b6:
54:c0:8f:37:3b:01:11:5c:f9:ba:e7:54:fb:9b:fb:
d5:40:c5:0f:29:d6:e7:19:ea:96:e5:68:49:ac:46:
80:e3:64:8a:c5:52:44:05:83:05:f8:d1:35:58:6a:
59:7b:04:31:e7:21:ea:57:d3:bc:01:86:0c:b1:89:
67:01:73:ba:2d:12:ba:e1:8d:2b:21:30:0e:f9:c6:
af:c0:39:62:d5:39:61:5d:bd:47:ea:13:d5:43:48:
ac:d9:e6:52:29:84:0d:52:89:f5:f7:9c:c5:4d:71:
e7:68:73:3b:50:9b:45:45:f6:5a:1d:f7:d5:48:d1:
50:a0:56:aa:8e:12:73:42:f4:54:f7:d4:06:16:c4:
94:11:3e:e1:f1:30:c5:6f:ce:37:56:ab:f1:d4:8e:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E0:7C:26:21:07:32:31:C9:AC:BC:0C:C5:76:72:91:8E:5F:16:43
X509v3 Authority Key Identifier:
keyid:C2:D2:A2:34:E2:24:BF:87:99:6F:2F:0D:F5:59:EA:D8:82:F9:E6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKiNOIkv4eZby8N9Vnq2IL55lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/x-B8JiEHMjHJrLwMxXZykY5fFkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d1ee4b-e88a-4e41-a616-4b248da6c96c/1/wtKiNOIkv4eZby8N9Vnq2IL55lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.189.0/24
Signature Algorithm: sha256WithRSAEncryption
81:6b:2b:9c:3c:7a:0f:c9:98:e9:1f:22:1d:17:34:58:97:e7:
64:05:ab:42:e3:55:a2:c0:05:8f:cd:5f:b1:0e:cf:06:ff:18:
8f:34:28:4d:51:93:f1:61:5f:0a:ab:db:01:da:aa:19:63:1e:
5b:45:18:b5:db:db:e6:4d:cc:e1:50:39:11:fa:86:90:f9:c2:
08:00:59:3c:1a:20:40:78:09:bc:82:f8:61:74:bc:f6:56:1a:
b5:7b:08:39:a9:a0:7f:dc:0b:46:cf:3d:cf:51:40:56:db:ed:
47:78:90:b8:04:27:3d:fd:6f:1a:2e:f4:69:3e:51:e7:28:d5:
48:45:4f:ba:b9:39:4e:63:8c:70:eb:a4:f7:13:b9:8f:a2:e6:
05:b3:9d:da:56:03:6f:d3:a4:61:b6:73:9b:89:4c:0b:a6:17:
5f:63:81:29:ad:eb:c4:88:a5:59:ec:b2:44:80:4d:94:83:4d:
3b:45:32:08:82:d2:a2:1d:1b:72:15:a2:29:c3:29:30:ff:d7:
4d:8a:7a:7d:e4:95:e3:aa:53:ff:a3:db:51:88:b3:01:e3:72:
33:c6:8d:5c:aa:e1:7f:3e:f3:ba:13:7a:24:22:48:1b:bc:35:
3f:1c:9d:02:0e:b9:ef:06:48:4e:ce:82:93:38:bd:73:52:26:
bf:4c:d2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-fra.rpki-client.org