Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RsxnE2p7tZervyqHHoSeIlqieDY.roa
File: RsxnE2p7tZervyqHHoSeIlqieDY.roa (raw, json)
Hash identifier: 6W57iNtrBahJL6YG4pM2UO9WPti43GpKgwWhr6bu8bk=
Subject key identifier: 46:CC:67:13:6A:7B:B5:97:AB:BF:2A:87:1E:84:9E:22:5A:A2:78:36
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191C0C5F2A444378262057E49E85BFBAC21
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RsxnE2p7tZervyqHHoSeIlqieDY.roa
Signing time: Thu 05 Sep 2024 06:01:23 +0000
ROA not before: Thu 05 Sep 2024 06:01:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48584
IP address blocks: 94.156.104.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 10:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c0:c5:f2:a4:44:37:82:62:05:7e:49:e8:5b:fb:ac:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 5 06:01:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46cc67136a7bb597abbf2a871e849e225aa27836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:13:72:18:47:84:cc:5f:40:b1:0f:30:97:
97:6b:7e:1a:5c:ad:f2:c0:d4:9e:42:22:09:f3:bd:
43:27:1d:15:c3:e6:6d:bd:6b:43:e0:45:75:4b:1c:
1b:08:86:3a:a5:7d:68:c2:4a:22:d9:29:bb:72:fc:
45:70:a6:9d:3b:19:e0:7c:76:20:75:5e:0a:68:41:
16:fe:50:3f:7e:ac:80:f3:6b:92:65:36:74:95:da:
8a:d6:97:45:57:f2:ef:42:47:7d:7e:ce:53:b0:86:
07:23:ac:d8:6c:de:fc:2e:64:7b:cd:e1:1b:89:75:
cf:91:19:f1:91:2e:76:64:8b:c6:7d:fd:c1:71:28:
43:79:de:5f:1a:75:51:94:02:62:45:29:07:e2:c5:
61:47:8b:9f:b2:6e:3d:3c:c0:a2:e1:cc:fa:e2:73:
58:2b:a3:35:09:5a:6c:6c:b1:87:dd:d8:65:19:0a:
22:df:0c:4d:5a:8f:38:f8:41:ce:a7:13:0a:33:0b:
95:7e:53:eb:56:fb:dc:93:47:f4:15:bb:14:6d:2c:
5a:22:1e:d3:6d:4e:03:9f:32:ce:d4:78:90:8d:19:
3b:7a:3f:93:84:ad:61:19:f9:c7:32:19:28:3b:04:
16:0e:89:7d:25:c4:31:b0:a4:b1:60:64:b3:46:86:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CC:67:13:6A:7B:B5:97:AB:BF:2A:87:1E:84:9E:22:5A:A2:78:36
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RsxnE2p7tZervyqHHoSeIlqieDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.104.0/23
Signature Algorithm: sha256WithRSAEncryption
51:92:b8:cd:5d:4c:fe:02:4e:23:8e:17:74:61:0e:27:69:6d:
ca:c4:72:57:54:00:48:19:68:cb:50:5f:3e:97:4c:00:14:9c:
a0:99:69:a3:6c:e6:bf:0b:e9:d0:ae:e9:21:62:73:97:2a:56:
dd:a3:01:83:9c:32:92:a5:e5:18:7d:3d:56:f3:12:12:65:a0:
83:8f:bc:06:bd:9f:26:7d:cf:41:33:0c:69:4f:82:c0:2d:20:
7e:35:6a:97:c5:0d:01:ff:17:36:f4:76:1b:31:07:47:2b:26:
e4:16:c0:3e:a0:31:d5:bb:bd:81:5d:81:60:97:35:4b:08:ea:
f5:0e:23:48:84:dc:49:d7:46:de:92:c4:b8:c4:af:91:e5:d0:
aa:dd:8f:da:ce:29:01:6c:86:b8:db:23:61:22:ae:77:81:10:
bc:d6:a6:36:7e:10:4c:df:71:2b:a6:6d:6c:24:65:47:1b:0b:
f4:b8:84:5e:08:38:4e:f7:9f:1f:76:c3:df:fc:06:88:21:72:
2a:c6:2b:00:54:5e:1a:43:f1:e3:1b:fc:1a:72:27:b6:4b:f4:
93:79:8d:b8:9b:b1:d3:a3:1e:8a:a9:c4:b3:f8:58:a1:a1:18:
86:9d:16:d9:22:83:46:c0:59:6c:f7:e3:fd:76:fc:5b:38:71:
d8:04:f4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 15:59:07 2024 by rpki-client on console-fra.rpki-client.org