Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SLlBw5WeE-DSxikL7UZsggHduJY.roa
File: SLlBw5WeE-DSxikL7UZsggHduJY.roa (raw, json)
Hash identifier: hIPz8xkGGOTMC581QWfBfLBMHb3rdJcThRtQGUbQeP4=
Subject key identifier: 48:B9:41:C3:95:9E:13:E0:D2:C6:29:0B:ED:46:6C:82:01:DD:B8:96
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CE8E0E189898466C859921DEF0E418163
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SLlBw5WeE-DSxikL7UZsggHduJY.roa
Signing time: Mon 08 Jan 2024 11:41:41 +0000
ROA not before: Mon 08 Jan 2024 11:41:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 94.156.112.0/24 maxlen: 24
94.156.116.0/24 maxlen: 24
94.156.117.0/24 maxlen: 24
94.156.113.0/24 maxlen: 24
94.156.118.0/24 maxlen: 24
94.156.114.0/24 maxlen: 24
94.156.115.0/24 maxlen: 24
94.156.124.0/24 maxlen: 24
94.156.120.0/24 maxlen: 24
94.156.121.0/24 maxlen: 24
94.156.122.0/24 maxlen: 24
94.156.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 08:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:e0:e1:89:89:84:66:c8:59:92:1d:ef:0e:41:81:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 8 11:41:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48b941c3959e13e0d2c6290bed466c8201ddb896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:77:53:1d:d1:b3:8e:a2:d3:f3:cc:2d:cd:
2e:83:e3:ff:30:7a:ba:54:dd:7e:c3:fc:f7:3e:38:
2f:fe:b3:1e:7e:5e:72:39:8f:5b:56:12:e8:56:b7:
d2:8e:d7:18:0b:80:12:1f:20:18:e3:6c:b4:da:e2:
3b:96:64:73:d4:32:b5:07:e0:c3:03:cc:04:af:c7:
a6:ac:21:98:2b:63:4b:b1:10:ef:b2:5b:05:1d:15:
5e:c2:d1:94:dd:f3:41:db:64:57:dd:ed:4d:7c:5a:
ba:d8:47:4f:79:e6:94:3b:73:62:ad:07:75:43:73:
51:80:88:ea:00:a8:ae:fc:b1:43:26:35:ce:7c:d4:
7e:b9:73:1e:c1:e6:3c:fd:bb:00:39:1c:56:53:30:
50:13:63:d5:33:ad:69:cb:a3:de:e9:2d:1d:95:de:
23:27:3b:b3:04:64:e8:23:e0:2e:41:b1:c4:75:04:
2a:97:28:19:ac:2b:b0:03:e7:9d:b7:1e:24:c3:90:
f3:dd:4d:f6:f1:f6:31:a4:2c:85:62:a5:e4:e2:49:
c5:f9:2d:63:6f:76:61:32:0c:3b:f4:2c:99:98:b5:
2c:bb:b0:1d:00:27:a2:f5:46:7d:84:1e:31:19:6a:
d4:b2:2f:da:98:f8:74:b9:f5:ca:c8:44:cb:12:c9:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B9:41:C3:95:9E:13:E0:D2:C6:29:0B:ED:46:6C:82:01:DD:B8:96
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SLlBw5WeE-DSxikL7UZsggHduJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.112.0-94.156.122.255
94.156.124.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c0:e2:a0:d3:07:31:3a:a9:5f:ec:f1:a7:f7:95:2b:c0:35:
55:67:2f:cc:80:60:f6:d3:11:a6:88:65:06:57:14:ca:75:45:
79:2b:0e:df:2a:4c:fc:4c:cf:af:4a:91:d6:1d:0d:3c:78:de:
ef:ef:05:19:1e:b8:9d:0c:a6:35:82:61:20:cf:73:15:54:37:
de:9e:ee:cd:73:fe:4a:0b:79:a3:14:74:ca:4d:76:18:94:52:
e4:0b:83:f3:10:80:a8:da:46:63:51:b5:4a:11:ac:82:3b:a9:
c0:74:80:d5:35:9a:60:63:df:13:4e:0d:38:f2:18:1b:08:63:
6f:ce:be:6c:93:76:28:cc:b6:37:40:80:28:e3:6c:2c:3e:dd:
60:f3:bd:c5:1b:5a:72:2c:70:07:33:21:47:5a:c8:64:54:89:
9a:ab:bc:92:d8:89:a6:e9:08:d5:0e:fa:53:19:93:e1:29:47:
01:eb:0f:52:3e:a0:3a:df:e9:8a:65:ce:2a:57:3f:b1:7a:92:
03:6c:f0:64:f6:32:cd:35:a5:64:6a:45:44:6f:67:60:d3:b3:
e9:a8:40:37:d6:91:08:6b:2b:f4:ad:6f:1f:55:23:c4:62:49:
fc:27:7c:1c:33:3c:4f:17:ef:03:9f:98:5a:1c:b3:4c:16:c5:
a8:4f:72:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Mar 5 10:22:23 2024 by rpki-client on console-ams.rpki-client.org