Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0gliEAV0-tVbYtPdPXSlZAZPzb8.roa
File: 0gliEAV0-tVbYtPdPXSlZAZPzb8.roa (raw, json)
Hash identifier: Q9WYClnHf+2sLRZQQeUQVI3TpbL8nFHJPeAvbDqWPWk=
Subject key identifier: D2:09:62:10:05:74:FA:D5:5B:62:D3:DD:3D:74:A5:64:06:4F:CD:BF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F7C6C09C254210204EEF6E0300961E6FC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0gliEAV0-tVbYtPdPXSlZAZPzb8.roa
Signing time: Wed 15 May 2024 13:23:26 +0000
ROA not before: Wed 15 May 2024 13:23:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 11938
IP address blocks: 94.156.78.0/24 maxlen: 24
109.206.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jun 2024 05:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:6c:09:c2:54:21:02:04:ee:f6:e0:30:09:61:e6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 15 13:23:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d20962100574fad55b62d3dd3d74a564064fcdbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:6e:23:0a:ae:7c:e2:3f:da:fe:81:bb:e8:
70:ca:f3:61:bc:54:5f:b3:28:57:b3:7e:f8:54:5f:
1e:4c:a6:3e:d9:91:90:0f:f5:07:4e:33:43:05:f3:
e8:82:44:00:74:a7:c7:18:e2:ba:c4:3c:c0:12:dc:
34:80:0b:42:cc:40:6c:e1:14:62:f6:22:84:86:6c:
a9:4f:9a:90:e4:4b:a5:e0:ca:61:24:ec:d5:1f:a3:
83:4a:4f:06:65:9a:8c:bc:5b:39:3d:1b:be:98:60:
fe:23:74:3a:63:5d:9e:11:c2:af:cb:a0:fd:7c:3b:
78:1c:8b:e4:0f:5e:49:47:d2:ef:5d:5c:c3:45:f5:
0b:f9:29:dc:a1:ba:c2:df:23:da:1a:2f:f2:d3:54:
ed:6b:ef:9b:08:0c:47:38:1e:b2:5d:6c:fd:8b:27:
c1:85:6f:fd:b1:74:28:ac:6d:0e:a7:54:ba:34:da:
17:8f:87:ef:46:9e:12:f3:54:de:35:a2:03:3c:a7:
72:f3:7f:79:4c:d8:0f:ff:e0:de:e1:da:42:53:ca:
a1:1e:7e:11:d6:2b:26:36:f7:1b:c2:54:ea:e7:34:
f7:9f:c2:e3:b8:f4:c8:d4:89:89:9a:19:7b:a7:66:
70:c3:09:71:8e:ce:45:96:22:d3:3e:4f:fc:22:4c:
2b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:09:62:10:05:74:FA:D5:5B:62:D3:DD:3D:74:A5:64:06:4F:CD:BF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0gliEAV0-tVbYtPdPXSlZAZPzb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.78.0/24
109.206.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:20:2c:00:5c:fb:88:f3:d9:87:0c:22:42:09:0d:70:5d:43:
7b:46:8f:21:98:b9:48:2b:e4:d5:a9:3a:06:18:b8:31:1c:06:
05:8a:db:08:d5:03:58:f3:66:4d:20:cb:ce:bb:99:fd:26:f2:
b5:75:85:6b:e0:64:f9:51:d8:90:59:70:a8:3a:7d:a8:cc:c7:
28:5e:d2:85:34:bc:65:b2:5d:00:be:dc:58:97:2f:cd:ec:90:
36:83:b5:9d:51:97:16:8e:d6:d9:80:b6:e1:50:10:5d:73:6b:
73:8f:e1:61:2a:67:84:ad:12:bd:ac:e3:b9:cc:b6:0b:ef:39:
ba:a2:32:c1:30:d4:c2:26:79:1e:81:1b:44:c0:cf:58:ea:9f:
0a:7b:fc:df:6d:74:20:2d:7e:8e:4e:94:f3:67:3c:d8:1f:f6:
43:90:1a:b9:54:e1:46:af:76:6a:34:db:31:f2:fd:c9:2a:aa:
02:c8:9b:ce:20:5a:69:c5:49:59:6f:76:b1:af:73:2a:ab:2e:
15:02:13:9f:57:cf:a8:17:61:e2:b1:7c:e7:3f:c3:c2:e5:65:
42:cf:fa:2b:3a:c6:8f:4d:c7:4a:db:0d:44:19:b3:b8:a4:2e:
38:76:3e:ca:d9:d3:45:72:79:3f:8f:5e:bd:7f:96:f0:b0:78:
26:7b:92:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 09:50:25 2024 by rpki-client on console-ams.rpki-client.org