Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9r2QnP2QXPwX9AD7Mky06FCbA8Y.roa
File: 9r2QnP2QXPwX9AD7Mky06FCbA8Y.roa (raw, json)
Hash identifier: HumP6BfRQ1NC/EJF8ADqNPYPO4L3+LdErFFRQylKPiw=
Subject key identifier: F6:BD:90:9C:FD:90:5C:FC:17:F4:00:FB:32:4C:B4:E8:50:9B:03:C6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E0DA50297A930A05A6C35ABAD056F4CA6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9r2QnP2QXPwX9AD7Mky06FCbA8Y.roa
Signing time: Tue 05 Mar 2024 08:05:01 +0000
ROA not before: Tue 05 Mar 2024 08:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 94.156.112.0/24 maxlen: 24
94.156.113.0/24 maxlen: 24
94.156.114.0/24 maxlen: 24
94.156.115.0/24 maxlen: 24
94.156.116.0/24 maxlen: 24
94.156.118.0/24 maxlen: 24
94.156.120.0/24 maxlen: 24
94.156.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 12:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0d:a5:02:97:a9:30:a0:5a:6c:35:ab:ad:05:6f:4c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 5 08:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6bd909cfd905cfc17f400fb324cb4e8509b03c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:98:b0:9c:81:98:76:84:e3:78:af:19:fc:47:
3b:9b:ee:bb:46:51:c7:be:85:37:8f:d2:9c:7d:78:
b8:7a:97:29:5d:48:15:62:d4:32:d3:b8:4b:0b:ce:
05:d5:1b:bd:31:a5:a4:f1:57:1c:60:f5:4b:3b:9b:
db:65:04:57:0d:94:e4:fd:56:98:fd:5e:c5:d6:36:
97:3e:1e:e2:72:7c:b8:f5:28:5d:85:00:8e:42:1d:
fb:4c:e2:80:03:d5:b5:54:39:cf:07:1e:8b:44:45:
7a:7c:5c:b9:b9:d8:d3:4d:34:68:6e:42:55:66:59:
17:76:66:9d:d5:c3:a7:ac:4c:c6:c5:75:60:86:e0:
82:2d:21:be:89:13:2e:7d:19:ef:9f:c2:ab:6c:2d:
80:a5:1a:e4:d3:bb:18:58:1f:e8:0d:0d:83:92:a8:
c0:8a:a3:cd:71:35:56:80:66:ad:05:e6:53:14:ee:
fe:5d:1c:42:1c:1b:2d:95:1a:a5:86:c3:6e:42:65:
97:2e:bf:ff:00:41:f4:bf:1f:b2:66:12:50:7a:97:
28:87:71:6a:4c:fd:f2:75:30:7d:62:00:8a:67:63:
65:fb:08:dc:cc:06:fa:87:f0:43:a6:1e:d4:2a:43:
6f:66:c5:5d:0f:cb:2f:43:16:3d:4a:d1:f2:10:5f:
b4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BD:90:9C:FD:90:5C:FC:17:F4:00:FB:32:4C:B4:E8:50:9B:03:C6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9r2QnP2QXPwX9AD7Mky06FCbA8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.112.0-94.156.116.255
94.156.118.0/24
94.156.120.0/23
Signature Algorithm: sha256WithRSAEncryption
18:94:fd:bf:b2:1b:42:bb:32:0b:8f:66:e5:ed:e0:e6:ce:47:
9b:ac:a3:61:71:6b:59:ed:fc:06:a5:d1:5e:ea:56:73:8e:f5:
3a:52:f9:da:cc:80:d5:07:68:b4:53:7f:d3:f0:9e:9a:e6:98:
ea:97:3a:6b:cb:b6:d2:e7:cd:61:93:fb:48:b0:ce:b4:54:5d:
24:0a:44:df:fd:13:78:43:a1:04:4f:28:03:44:10:f6:10:f1:
6d:7b:d1:95:e5:48:eb:f8:ef:a1:0b:1a:e9:97:9b:d4:f0:f9:
38:08:49:3e:a7:3c:8d:a9:51:0d:50:e0:b3:35:1e:5a:aa:f3:
a0:7b:1c:9b:7c:8a:48:1c:c8:00:5a:a9:96:b8:59:f4:35:b0:
17:a1:b3:65:80:5c:52:38:24:02:18:44:14:04:7a:b8:ee:50:
20:cf:ab:74:6c:79:00:6e:3d:15:73:44:83:ea:77:81:37:44:
af:07:c8:61:12:a1:f7:da:09:66:61:e0:8d:0f:7a:9e:9b:24:
58:d7:7f:5b:43:1a:2b:32:b3:ca:b0:35:12:f5:21:2d:72:33:
83:4f:4d:45:14:5b:a5:b0:b5:f2:a9:9c:b4:54:68:1e:f9:f5:
b4:e5:87:78:45:ba:cc:d3:e5:69:a1:ed:fb:7b:01:1e:6d:c7:
01:be:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 17:16:02 2024 by rpki-client on console-fra.rpki-client.org