Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ESgIAb9k8wD6uacX-Z4Sn29MAnQ.roa
File: ESgIAb9k8wD6uacX-Z4Sn29MAnQ.roa (raw, json)
Hash identifier: /mOBwFF+bTCKAXklLYr1RnmENUEbwkYV1f2J1Sd5sWo=
Subject key identifier: 11:28:08:01:BF:64:F3:00:FA:B9:A7:17:F9:9E:12:9F:6F:4C:02:74
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCF429D78A84A5B88824D7333989EC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ESgIAb9k8wD6uacX-Z4Sn29MAnQ.roa
Signing time: Tue 02 Jan 2024 06:29:32 +0000
ROA not before: Tue 02 Jan 2024 06:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60701
IP address blocks: 94.156.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 09:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f4:29:d7:8a:84:a5:b8:88:24:d7:33:39:89:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11280801bf64f300fab9a717f99e129f6f4c0274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:08:6a:ee:40:99:c4:9d:4d:20:83:a2:40:3d:
1d:53:42:95:4f:d3:77:08:9f:0e:d8:3d:a2:d7:cd:
0f:a7:b1:4d:d1:b6:95:e9:7e:98:8a:13:50:56:73:
2b:aa:47:4f:05:25:ab:97:d2:45:57:8c:6d:04:3c:
6a:b2:95:06:b2:3f:d3:b5:c4:c5:88:2d:b8:e0:d2:
80:47:c0:a1:1d:c3:de:41:ae:9c:c0:00:ce:09:68:
45:e1:58:59:32:22:4c:c5:8d:dd:58:0f:cc:cf:a5:
08:64:3b:32:02:76:47:50:25:35:21:6f:6d:0e:f3:
b0:e8:94:a4:06:a6:16:77:1a:e8:23:af:b3:52:16:
e6:fc:50:ea:54:a4:41:2c:d0:b8:4c:cb:ed:c4:e8:
f7:25:5b:10:1b:d7:0a:33:49:f0:a5:d6:41:13:37:
3e:f4:fe:73:19:28:76:b4:98:a6:85:50:8f:61:9d:
d6:ea:e2:dc:b5:da:86:9e:db:ef:cb:9c:6a:02:dc:
25:13:c3:ab:b2:7e:22:b5:8b:90:0d:a8:98:85:fd:
60:29:dd:ee:b4:ca:b6:96:26:7c:d2:ed:d7:9f:cb:
78:5d:65:93:cb:c8:3c:56:1d:d1:bc:ab:4e:2a:5a:
01:79:89:94:80:e4:1a:af:0b:b8:8d:43:9e:4d:cd:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:28:08:01:BF:64:F3:00:FA:B9:A7:17:F9:9E:12:9F:6F:4C:02:74
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ESgIAb9k8wD6uacX-Z4Sn29MAnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.103.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:93:28:cd:d0:e5:62:c5:f6:a6:d9:58:19:a1:f4:1e:02:81:
fa:56:46:d7:e1:3d:eb:a5:19:23:04:97:e4:20:c9:66:3a:48:
7e:87:83:88:ae:12:02:36:bb:76:b2:d7:8b:41:02:ff:ab:0c:
96:a9:c9:72:93:52:b3:f0:39:4e:72:6a:e4:9d:a1:19:78:72:
22:33:5f:1b:8c:a2:b2:47:1d:4d:aa:05:5a:7d:7c:cf:ca:67:
39:74:ac:d3:d4:aa:79:88:d8:d9:50:45:70:85:5d:a4:2e:bb:
05:08:d5:d6:77:21:b8:20:9c:e2:19:9b:2d:6c:c0:37:b7:3b:
d8:2a:58:f0:a6:3d:36:21:21:e1:96:ef:cf:77:97:e1:49:98:
51:67:61:e6:c3:ca:99:b6:7d:b6:19:c6:33:87:8b:c3:63:17:
eb:ae:f5:4e:1d:53:61:3c:07:34:c0:4c:84:97:2e:e8:fc:dc:
3b:fb:61:41:39:b7:45:e5:99:72:4d:6a:0a:f8:6b:33:79:ca:
ce:be:e7:87:06:49:22:c1:4e:23:06:7a:60:49:2f:50:e5:e9:
f1:28:33:cd:9b:e1:b3:0b:b7:3e:3f:72:8d:9e:00:f9:bb:66:
95:35:49:84:34:d2:7f:69:c1:c6:34:80:98:07:9e:8a:d3:28:
6e:be:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 11:36:18 2024 by rpki-client on console-ams.rpki-client.org