Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e3bdd-6bc6-4169-94b1-2a8f79d030f8/1/iYkfPnsuh2akyF8ejd5WDVnb_WQ.roa
File: iYkfPnsuh2akyF8ejd5WDVnb_WQ.roa (raw, json)
Hash identifier: J4t02qnQVBP+6mdiFi4Qmoh8ay5tmHWNk5zPkGqq9j0=
Subject key identifier: 89:89:1F:3E:7B:2E:87:66:A4:C8:5F:1E:8D:DE:56:0D:59:DB:FD:64
Certificate issuer: /CN=bd2eac0200de608ec967aad178e400fde7880737
Certificate serial: 01856CAF351E79CEC45BFF0F08DC6E2F5C17
Authority key identifier: BD:2E:AC:02:00:DE:60:8E:C9:67:AA:D1:78:E4:00:FD:E7:88:07:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vS6sAgDeYI7JZ6rReOQA_eeIBzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e3bdd-6bc6-4169-94b1-2a8f79d030f8/1/iYkfPnsuh2akyF8ejd5WDVnb_WQ.roa
Signing time: Sun 01 Jan 2023 09:34:59 +0000
ROA not before: Sun 01 Jan 2023 09:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209288
IP address blocks: 94.142.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:35:1e:79:ce:c4:5b:ff:0f:08:dc:6e:2f:5c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2eac0200de608ec967aad178e400fde7880737
Validity
Not Before: Jan 1 09:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89891f3e7b2e8766a4c85f1e8dde560d59dbfd64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:5d:d8:3b:b9:11:4b:7a:25:b9:6b:ef:df:
a7:3a:69:16:c6:9c:a7:ab:b6:4b:8d:22:65:f3:22:
dd:f9:f2:ac:5e:d3:a7:b3:1d:5f:27:9b:52:b4:49:
71:11:f9:e7:cb:ef:37:67:e2:5e:12:78:81:38:36:
2f:d7:07:b2:2e:4d:c2:c6:e6:98:f0:a2:a1:fc:0f:
19:70:35:cf:32:62:a4:6c:2f:2f:d0:88:50:59:5a:
30:e2:61:d6:92:0f:db:12:85:fe:2f:33:28:8e:30:
c3:52:aa:58:c6:96:ee:7f:d4:d4:21:30:60:91:46:
16:4b:62:83:82:a4:b8:73:f4:2b:c1:5e:2c:f3:6e:
0c:f0:bd:dc:3c:23:b1:24:e3:76:fc:ea:92:b4:db:
0d:29:34:ea:59:75:af:81:fc:fc:63:8b:cd:14:a9:
90:c4:99:29:38:9a:2d:b3:a5:0f:dc:48:ca:55:07:
1e:06:93:7d:18:ac:74:93:fd:da:c8:9b:75:a6:89:
df:90:64:3a:69:4d:3f:45:de:c5:e7:4b:5a:c1:40:
bc:69:3b:30:c6:ed:97:39:88:60:47:1d:95:e1:9c:
64:dd:21:bb:65:f5:25:cf:17:ef:c9:dd:7b:1d:ef:
bc:ac:c8:7d:b1:6b:3e:3b:ff:a1:6e:a7:05:20:2a:
04:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:89:1F:3E:7B:2E:87:66:A4:C8:5F:1E:8D:DE:56:0D:59:DB:FD:64
X509v3 Authority Key Identifier:
keyid:BD:2E:AC:02:00:DE:60:8E:C9:67:AA:D1:78:E4:00:FD:E7:88:07:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vS6sAgDeYI7JZ6rReOQA_eeIBzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e3bdd-6bc6-4169-94b1-2a8f79d030f8/1/iYkfPnsuh2akyF8ejd5WDVnb_WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e3bdd-6bc6-4169-94b1-2a8f79d030f8/1/vS6sAgDeYI7JZ6rReOQA_eeIBzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.253.0/24
Signature Algorithm: sha256WithRSAEncryption
23:9e:fc:6b:b1:8e:94:d8:ab:53:56:2e:35:5f:4e:5d:9c:e1:
d6:40:d2:8c:de:33:aa:f1:8e:80:96:9a:b4:67:2f:1c:4e:1a:
e2:6f:ab:a0:ae:c4:25:8b:0b:2b:fc:7b:9b:ac:82:bf:7d:11:
e4:eb:70:25:88:d4:85:22:47:ba:c4:51:53:0b:f2:c8:81:ac:
80:43:a4:4f:67:0d:7c:51:a8:14:b7:1e:13:7a:0f:10:53:f0:
d3:d9:f3:f9:cc:9b:a6:33:02:d5:c4:06:4e:aa:b6:d4:48:2e:
35:e7:4b:dc:fc:50:94:9a:4e:53:32:f0:c1:78:f7:fd:04:dd:
ed:55:c7:53:1a:d6:19:dd:41:69:c2:26:6a:e6:71:fa:f1:ed:
3b:1d:d1:fe:1c:e9:db:12:8c:0d:e7:ab:84:77:04:ed:ab:9b:
13:47:e5:4d:e8:e1:9a:84:9e:d3:8f:3b:04:72:72:23:7d:c4:
d6:3b:fc:71:98:c9:55:f8:d2:1b:99:2a:22:37:fd:16:bb:28:
42:56:58:d8:53:c6:5c:0b:e4:60:b1:67:75:1c:84:03:af:9f:
39:a6:be:3b:f0:40:ea:42:4c:74:38:f7:28:2d:67:21:01:c3:
b0:c3:e9:ba:05:0c:a2:1b:b4:0c:99:9c:28:71:3c:15:78:f6:
dc:4f:b4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:29 2024 by rpki-client on console-ams.rpki-client.org