Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/20uEvHoEpqKzQ78y21jvld_xIC0.roa
File: 20uEvHoEpqKzQ78y21jvld_xIC0.roa (raw, json)
Hash identifier: h8yjBWvfzWf8pWkg3e9qr5Xty1Ba5jPMRUU0A9ZkzWE=
Subject key identifier: DB:4B:84:BC:7A:04:A6:A2:B3:43:BF:32:DB:58:EF:95:DF:F1:20:2D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E9F17424F7B2E8820098F46240C26387D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/20uEvHoEpqKzQ78y21jvld_xIC0.roa
Signing time: Tue 02 Apr 2024 13:54:45 +0000
ROA not before: Tue 02 Apr 2024 13:54:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15731
IP address blocks: 94.156.117.0/24 maxlen: 24
94.156.119.0/24 maxlen: 24
94.156.122.0/24 maxlen: 24
94.156.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 05:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9f:17:42:4f:7b:2e:88:20:09:8f:46:24:0c:26:38:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 2 13:54:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db4b84bc7a04a6a2b343bf32db58ef95dff1202d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:91:f2:e6:c7:7e:a7:95:b7:07:b3:6b:28:
46:1f:85:9b:7f:53:ae:72:d6:d9:64:09:33:9f:48:
1e:88:17:10:99:13:94:86:6c:ee:41:f7:e3:95:f0:
ff:8c:84:a0:c3:e6:a8:b7:20:26:d2:c5:0c:8a:02:
95:2a:15:74:0e:5f:ff:8a:d3:4f:59:b3:fc:29:3b:
cf:95:69:d6:ff:27:85:73:73:56:c2:45:6d:74:cf:
8d:d1:e8:11:ea:26:23:e6:8e:65:8b:bc:88:62:c0:
7d:47:c9:db:0f:8b:f2:63:6d:33:fc:48:58:dc:bb:
85:24:00:e3:20:0c:1c:45:af:72:e4:d2:61:1a:60:
13:e2:72:b8:71:dd:ee:60:71:d7:5d:e7:ef:35:ea:
2b:45:4a:b0:7e:e7:25:df:e7:7a:3b:fb:98:b1:ea:
71:60:7a:24:1d:e6:4a:75:f7:02:19:8d:21:94:58:
ee:b8:ad:82:24:23:e7:0a:b2:91:58:22:a4:f3:80:
f6:10:7a:2a:29:36:58:8a:cd:a8:33:03:c1:2f:9d:
c5:35:60:ed:cb:d6:59:62:58:8e:ce:37:10:e4:de:
de:39:b5:ec:cb:91:d6:c5:a3:50:36:6a:fa:e4:21:
19:d0:8c:93:e7:c5:e9:e3:b3:a9:1e:fd:9a:ae:9c:
f9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4B:84:BC:7A:04:A6:A2:B3:43:BF:32:DB:58:EF:95:DF:F1:20:2D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/20uEvHoEpqKzQ78y21jvld_xIC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.117.0/24
94.156.119.0/24
94.156.122.0/24
94.156.131.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:4f:92:34:17:61:fb:4c:02:de:fd:60:58:1e:52:c9:83:0f:
b4:7b:87:a7:0f:83:2a:56:2b:5d:36:ae:d0:d4:3a:fa:cd:c5:
cd:70:36:cd:17:ed:6f:bf:f8:de:3b:c5:68:27:35:62:e2:d8:
86:4e:e8:cf:67:a4:b6:a4:3c:ec:e9:89:a5:6b:3c:69:73:1c:
67:1f:29:15:84:4e:65:d1:f4:5b:ec:52:93:f9:bc:63:81:45:
03:99:d2:0e:ae:c8:38:0f:2c:25:87:bb:20:b7:2b:05:c7:a1:
43:9c:11:9e:4d:9b:96:2f:d7:7b:2a:25:ee:13:5c:df:93:fe:
f7:a7:da:9a:70:46:ec:65:e2:0b:65:3a:25:6f:be:43:4e:ff:
2e:60:bc:0a:7a:d4:c4:26:bb:06:e8:a8:01:38:2e:68:a9:e8:
11:07:9f:37:39:ef:64:1c:0e:47:93:d9:d2:a5:a4:c5:45:3c:
8c:9f:50:de:be:58:41:9e:44:b4:f1:cd:af:73:5a:5b:9e:31:
60:38:e4:0b:98:61:c8:f7:90:ba:ee:a9:90:fc:8d:dd:8b:15:
08:e5:73:ba:49:a3:e9:f6:f0:05:05:0a:70:b5:25:cc:8b:e5:
da:85:79:9d:b2:ea:98:4d:9e:c1:7d:6b:7c:cf:e7:04:1f:80:
fd:8f:f7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:56 2024 by rpki-client on console-fra.rpki-client.org