Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7AzKei4BZaOOyWeKFvLyzquBWJw.roa
File: 7AzKei4BZaOOyWeKFvLyzquBWJw.roa (raw, json)
Hash identifier: 1PI1kvHZpMYWOBO236fNLL29k25zIT60FbkymJT4i+o=
Subject key identifier: EC:0C:CA:7A:2E:01:65:A3:8E:C9:67:8A:16:F2:F2:CE:AB:81:58:9C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018EA28ABDA27059090236FD5984E3CA76FC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7AzKei4BZaOOyWeKFvLyzquBWJw.roa
Signing time: Wed 03 Apr 2024 05:59:45 +0000
ROA not before: Wed 03 Apr 2024 05:59:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15731
IP address blocks: 94.156.122.0/24 maxlen: 24
94.156.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 08:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:8a:bd:a2:70:59:09:02:36:fd:59:84:e3:ca:76:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 3 05:59:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec0cca7a2e0165a38ec9678a16f2f2ceab81589c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:16:54:5e:c9:1f:9f:9c:69:87:5f:94:96:
5f:00:48:1a:98:0f:08:dd:cb:bb:dd:22:2e:26:1c:
05:96:6d:65:61:e2:e4:77:8f:cb:cf:65:53:5b:50:
63:9d:ea:35:f9:1f:16:c8:bc:c7:7d:1a:86:8e:99:
5a:d7:f9:fa:a5:1e:b6:cf:f5:39:df:9d:85:5c:29:
86:9d:d7:38:9b:75:34:1e:50:37:68:7d:f0:d5:1d:
90:9d:4a:16:07:8e:d4:2e:db:68:f4:74:a5:da:b9:
14:a0:7f:14:96:86:16:3d:1f:cb:18:a1:4f:66:36:
7f:f4:d3:aa:87:c4:fb:d0:63:96:51:41:dd:50:20:
eb:32:77:64:a8:4e:71:9f:41:60:c1:e9:20:0e:91:
48:1d:fa:c4:01:69:20:8a:5a:27:d3:c5:44:4e:6a:
61:7c:f7:3d:86:99:97:8a:c3:0e:3d:04:ef:47:87:
06:3d:9c:4e:0e:a4:7e:85:6a:28:e2:0e:fa:7e:4f:
92:e5:1e:67:c0:14:55:e4:25:86:25:40:aa:e9:8d:
c4:af:f2:f2:99:bf:14:9c:b8:b7:ee:ad:14:d4:36:
d6:f4:8b:89:f4:64:61:ae:6a:83:9f:c2:94:1b:63:
6d:62:46:16:84:21:94:44:78:74:6f:69:65:8b:4e:
73:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0C:CA:7A:2E:01:65:A3:8E:C9:67:8A:16:F2:F2:CE:AB:81:58:9C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7AzKei4BZaOOyWeKFvLyzquBWJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.122.0/24
94.156.131.0/24
Signature Algorithm: sha256WithRSAEncryption
48:b6:b9:81:2e:46:08:57:d0:c4:31:bc:fc:2d:18:4d:cc:cf:
32:1c:a6:7e:92:26:94:ba:ec:31:d3:5e:54:83:24:af:3b:a3:
e6:98:24:5a:59:9e:fe:c2:ec:2d:d8:f2:22:55:b8:9c:53:6f:
c6:53:f7:ea:57:8c:0f:90:0c:b2:18:31:34:f3:55:76:03:57:
ca:03:5d:e1:3b:eb:78:9a:76:15:c0:d2:a5:96:f1:82:c5:0a:
9a:cc:53:49:3b:49:04:62:af:1a:08:38:bf:f7:45:df:04:a0:
f8:3c:00:c5:40:99:03:7d:e3:96:e6:c3:df:60:0c:59:3a:8d:
eb:1a:29:17:3c:ab:38:97:72:ef:45:1c:ef:e3:17:5f:9d:cb:
b6:30:80:bc:87:0c:bd:2e:13:df:82:77:40:5b:da:76:86:c1:
50:2f:ea:fb:6a:58:e8:10:e2:d2:66:18:8d:dc:45:88:74:96:
5c:9e:fc:1b:7b:a0:02:35:80:9a:ec:af:de:ae:24:91:76:f4:
79:a8:8e:6b:8a:70:ab:16:b8:75:9d:f1:20:ae:20:4d:3c:ea:
0d:02:34:25:eb:ae:bc:1c:d2:ee:0d:c0:11:20:43:e0:c3:5a:
f6:23:83:ae:a7:36:f4:1e:a4:d0:c2:20:6a:aa:a6:38:a9:a0:
40:f7:73:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:25 2024 by rpki-client on console-ams.rpki-client.org