Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Cyl-uQ3p2xVjtgQX42d7qvBzc9Y.roa
File: Cyl-uQ3p2xVjtgQX42d7qvBzc9Y.roa (raw, json)
Hash identifier: gbreAW3Y7PH2wA7jvuXvyY2sXnHmMJA1G0F3zray3ZM=
Subject key identifier: 0B:29:7E:B9:0D:E9:DB:15:63:B6:04:17:E3:67:7B:AA:F0:73:73:D6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190E88DCAC80CDB53C811F99F5B1DCEF878
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Cyl-uQ3p2xVjtgQX42d7qvBzc9Y.roa
Signing time: Thu 25 Jul 2024 06:22:04 +0000
ROA not before: Thu 25 Jul 2024 06:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 94.103.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 05:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e8:8d:ca:c8:0c:db:53:c8:11:f9:9f:5b:1d:ce:f8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 25 06:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b297eb90de9db1563b60417e3677baaf07373d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:12:48:98:48:07:ec:d2:7d:a1:e7:b0:dc:
45:f9:e6:49:c8:2b:14:e5:f8:bd:c1:f9:d3:a4:9f:
9a:ce:38:ce:a2:5b:1d:23:a1:69:be:82:eb:3f:b2:
a0:61:e3:ff:6d:cf:35:ec:9a:f9:8f:8d:db:47:1a:
3f:98:ae:6f:69:c1:89:af:1f:2f:3c:5e:e4:ae:9a:
89:30:d4:2d:9f:df:c4:c0:0c:4f:3d:21:89:77:06:
53:d3:ef:68:68:d1:2f:2c:22:df:f9:17:46:46:4f:
1f:82:a6:a6:f8:79:41:04:8d:f5:f4:ca:ed:e4:29:
bd:db:ea:78:65:dd:03:05:b8:2d:57:a4:61:60:58:
39:2d:ee:97:ce:45:38:0a:25:a5:c2:48:57:fb:88:
43:49:0a:6f:ed:97:74:80:55:6f:9c:34:09:be:b8:
a0:b0:61:63:3f:58:81:6a:4c:e9:ee:2a:9a:f3:7f:
11:75:fc:66:1c:6c:d8:48:10:e4:1e:e8:66:d8:58:
36:ec:d0:82:c8:18:d7:5a:f0:e7:2b:57:a3:7e:44:
b6:f4:8a:11:77:cf:86:69:51:21:dc:20:7c:5d:17:
d6:06:e9:8d:5f:75:ec:d4:72:6b:72:b7:8b:40:4b:
24:92:9b:36:da:cb:e7:c6:99:0a:af:9e:fb:95:5b:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:29:7E:B9:0D:E9:DB:15:63:B6:04:17:E3:67:7B:AA:F0:73:73:D6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Cyl-uQ3p2xVjtgQX42d7qvBzc9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.125.0/24
Signature Algorithm: sha256WithRSAEncryption
21:4a:88:58:85:c4:44:07:94:9b:07:7d:ec:48:7c:12:8e:16:
93:46:66:cf:9d:9b:49:ac:2f:48:e3:ee:2d:4c:99:e2:e5:2d:
50:eb:79:ec:5e:d9:8d:42:68:57:55:ef:9e:04:c6:06:1f:5e:
bf:70:61:99:f1:1c:25:8f:99:ed:be:ba:ac:ae:3c:d4:fd:e7:
6a:c9:4c:80:33:cc:84:54:79:41:74:6d:08:d3:ac:49:95:6e:
51:17:97:53:d1:8a:7a:40:4c:03:37:f1:a9:c9:98:9f:f3:75:
10:10:8a:5e:4b:86:39:61:b7:a2:84:35:4d:1f:c1:eb:18:27:
5c:9b:fb:c7:81:f4:6b:08:18:16:00:ba:69:f6:d1:a2:31:1b:
14:d2:56:f7:70:86:5b:94:0b:34:1f:1f:1c:02:64:86:8d:32:
d5:e8:bc:2e:12:84:b7:e5:42:1d:8a:c4:d2:17:d2:42:fc:f6:
41:6d:5f:8b:49:fd:aa:15:9d:43:6b:4b:57:7c:9c:5c:11:f3:
34:f5:e6:10:ba:8c:88:46:f9:c9:46:08:b4:39:f9:40:8a:33:
9d:83:5d:b2:f7:55:97:ca:23:1e:92:3a:6b:76:44:e8:21:85:
66:bf:91:da:ce:77:6c:5b:6a:cb:36:55:7a:51:bc:3d:2c:51:
b9:e2:cd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 08:16:42 2024 by rpki-client on console-fra.rpki-client.org