Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/x6wBGW0gUjr_vl8gLM727VdYu0s.roa
File: x6wBGW0gUjr_vl8gLM727VdYu0s.roa (raw, json)
Hash identifier: LuhZ6U529q3oOZgsOGsUnsIqNzXzujjhCj65lrGv6lo=
Subject key identifier: C7:AC:01:19:6D:20:52:3A:FF:BE:5F:20:2C:CE:F6:ED:57:58:BB:4B
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 018C68C2816C0A294C3C7CF608ECF29F124D
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/x6wBGW0gUjr_vl8gLM727VdYu0s.roa
Signing time: Thu 14 Dec 2023 14:37:06 +0000
ROA not before: Thu 14 Dec 2023 14:37:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39016
IP address blocks: 94.154.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:c2:81:6c:0a:29:4c:3c:7c:f6:08:ec:f2:9f:12:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Dec 14 14:37:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7ac01196d20523affbe5f202ccef6ed5758bb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:07:b8:99:ed:94:08:45:5f:ed:e4:ea:ec:
30:a3:33:6c:d5:79:69:78:48:bd:e6:cb:2b:82:03:
e0:23:0d:95:5d:3b:55:51:cb:90:fa:54:ad:c7:86:
f4:2c:4c:e8:c1:28:54:40:e2:1f:33:6d:04:ce:fe:
f2:27:9f:e0:d4:1a:a3:22:08:85:19:4b:6c:5e:4c:
4f:b3:fc:0e:94:39:21:e4:2d:93:7d:69:7d:92:f7:
83:f3:c4:81:85:b8:7b:e6:6d:1f:4f:89:53:3d:6c:
e0:1c:18:03:06:57:39:05:7c:8a:6c:af:05:22:ab:
cd:52:89:76:88:48:96:30:89:09:6d:0c:7a:5b:25:
d0:c7:38:00:fb:a9:d0:63:23:ec:cb:6a:fe:53:d0:
52:62:0b:83:c3:b0:72:56:53:8a:97:c1:80:ec:ad:
37:04:c2:c5:b0:66:e8:0d:44:b9:01:29:b1:35:3d:
7f:1b:d0:7b:06:7c:28:5d:02:ef:8c:a3:db:6e:51:
99:b0:6f:1b:45:7d:3a:6d:59:a4:c2:a1:43:11:26:
28:eb:4c:8a:00:dc:11:83:68:d0:54:c7:b6:2a:83:
cc:fe:5b:2e:28:26:67:5e:ab:c7:b4:55:a0:75:e3:
ac:cf:01:6f:49:44:d9:d0:14:99:60:1a:cf:2a:b6:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AC:01:19:6D:20:52:3A:FF:BE:5F:20:2C:CE:F6:ED:57:58:BB:4B
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/x6wBGW0gUjr_vl8gLM727VdYu0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.122.0/24
Signature Algorithm: sha256WithRSAEncryption
59:27:58:a6:8a:82:8e:41:d7:31:48:2c:6e:59:5e:cf:d5:e3:
92:40:92:cd:a8:a4:e8:44:08:31:75:f0:db:3b:53:fb:e2:cc:
fc:b3:8f:a7:bc:90:e8:41:b8:c6:ca:b3:3f:ff:78:09:9a:37:
2a:1c:89:1e:77:98:b3:5a:b1:8d:06:8d:71:d3:06:4d:2d:fe:
18:a4:23:60:29:14:e3:24:77:3f:d5:85:7b:22:86:12:bd:e1:
70:c4:af:5e:85:40:6e:78:5c:9c:4f:d4:62:b3:89:b5:ff:8c:
e9:ee:40:bd:44:2c:37:52:b3:6d:d0:03:56:f9:f8:9b:3a:2b:
c1:da:e2:f7:0e:1f:8a:71:87:d6:12:b7:45:3b:f2:45:39:ae:
b0:b9:3f:9e:d2:5d:a8:92:df:8c:10:81:61:dc:62:54:37:fd:
09:8d:e7:d9:ca:0a:22:4d:f4:98:5c:96:b9:d5:c9:a8:1c:fa:
84:d7:d9:6a:14:5e:c1:1b:5a:fc:7d:86:7e:59:23:9a:c5:e3:
2c:c2:f2:ce:a6:4f:75:28:ee:69:fe:b3:68:bc:7c:c8:52:4e:
b0:83:e3:fd:71:d0:df:c2:1e:22:7b:bd:14:b8:14:8f:98:87:
30:04:99:b5:ed:2b:53:40:01:59:e6:ad:5e:97:76:5b:ef:b6:
ab:63:f4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:24 2024 by rpki-client on console-fra.rpki-client.org