Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OQVzUTdouiEUDWYaOQahBSD_2LU.roa
File: OQVzUTdouiEUDWYaOQahBSD_2LU.roa (raw, json)
Hash identifier: ntV7cARcnRxr+wZidtQ7hrDmXX5j3SAfc4JZoMSDa9g=
Subject key identifier: 39:05:73:51:37:68:BA:21:14:0D:66:1A:39:06:A1:05:20:FF:D8:B5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FE8CB4A31FC89338AE3CA1968FF7A0D87
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OQVzUTdouiEUDWYaOQahBSD_2LU.roa
Signing time: Wed 05 Jun 2024 14:26:27 +0000
ROA not before: Wed 05 Jun 2024 14:26:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15731
IP address blocks: 94.156.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 08:57:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e8:cb:4a:31:fc:89:33:8a:e3:ca:19:68:ff:7a:0d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 5 14:26:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=390573513768ba21140d661a3906a10520ffd8b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:2a:07:37:b7:0b:71:79:e4:11:40:44:d7:
74:0a:2b:6d:12:0c:20:c1:b3:65:2b:ed:a2:ca:49:
a5:9a:1d:c9:84:e9:80:cd:93:32:17:c2:b3:70:0d:
04:aa:ed:3d:6c:f0:97:6a:05:f7:98:45:13:b1:f2:
4c:24:e9:bf:13:60:9f:78:82:33:1a:13:8b:8b:bd:
67:b4:03:e5:87:85:2b:0d:b0:05:dd:f8:3d:bb:d2:
ea:61:10:c7:5a:95:2f:16:dc:ba:87:5a:96:05:83:
c3:92:1b:ca:a0:42:a4:8a:d5:f8:54:91:bb:97:f7:
99:51:3a:6f:e0:eb:a2:0d:88:5f:1c:3f:9e:91:78:
49:4a:64:1c:88:fd:eb:5c:03:5e:43:52:b3:90:94:
e3:ed:5c:aa:a2:47:75:62:8b:1d:dc:14:3c:89:cf:
62:b3:d2:e2:8f:29:4d:00:86:0e:82:6b:9c:10:2e:
2f:29:8f:23:e9:2b:c3:46:00:ea:f6:fd:1c:ca:33:
41:11:46:0e:ad:64:5c:08:b8:22:e1:c4:3f:a8:47:
96:44:3d:81:a6:0c:45:65:03:c2:92:9b:d9:5f:fb:
a0:d4:65:7f:1c:59:b2:cf:d0:53:f6:27:9f:72:a3:
f1:58:e9:18:67:52:88:8f:b5:af:b5:a9:9b:36:9e:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:05:73:51:37:68:BA:21:14:0D:66:1A:39:06:A1:05:20:FF:D8:B5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/OQVzUTdouiEUDWYaOQahBSD_2LU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.116.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c9:9b:2f:51:e6:65:2c:40:86:46:9b:9a:4c:c8:b9:20:c6:
3b:f5:45:40:fa:45:3d:73:52:d9:f8:32:56:03:4d:5e:be:df:
3a:92:97:94:8b:c2:2c:b3:2c:89:e1:bd:11:86:2c:b2:47:b3:
e7:6d:ae:10:1d:98:1a:4d:d9:cd:0d:f0:21:76:b1:2f:c4:d2:
dc:7a:7f:3d:1f:5c:32:b5:19:6a:6a:3c:8c:e1:18:49:7c:f3:
23:4b:d2:51:42:9e:0d:04:0e:22:80:b3:06:e2:ae:51:a2:77:
7b:47:b3:2a:d0:92:ec:02:ce:0c:7c:cc:9b:a7:2d:24:82:42:
58:36:de:b5:4c:a3:e8:12:f4:5c:a2:fa:05:5b:ef:74:ba:05:
45:a0:a3:81:ab:cf:3d:fc:36:91:2e:40:76:c2:e8:62:95:f6:
e4:23:cf:23:b9:78:ad:02:1c:74:a0:b2:7e:39:1f:44:f3:71:
2b:b1:2d:ff:a1:fb:f3:3e:e0:2f:df:15:c0:cd:93:b7:50:47:
36:97:94:cc:c8:da:e6:7a:b2:e4:d0:29:cf:9e:72:69:d7:51:
c8:01:b6:fa:43:89:eb:41:09:eb:9a:82:77:46:e3:19:77:a8:
64:4b:f2:22:fd:e2:2d:8a:fc:c0:0b:87:ce:85:b5:b7:4a:76:
b5:71:ed:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:31 2024 by rpki-client on console-ams.rpki-client.org