Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eXWmWteEaaCFRJndtPGI38UeUes.roa
File: eXWmWteEaaCFRJndtPGI38UeUes.roa (raw, json)
Hash identifier: tu0RyB83YuIWRJCy5wHns9q7yKRIGGeQIGc8oYrCGwY=
Subject key identifier: 79:75:A6:5A:D7:84:69:A0:85:44:99:DD:B4:F1:88:DF:C5:1E:51:EB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01916B52547F62CBFB873FDA70929F2DA7BC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eXWmWteEaaCFRJndtPGI38UeUes.roa
Signing time: Mon 19 Aug 2024 15:47:23 +0000
ROA not before: Mon 19 Aug 2024 15:47:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36666
IP address blocks: 94.156.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 20:16:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:52:54:7f:62:cb:fb:87:3f:da:70:92:9f:2d:a7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 19 15:47:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7975a65ad78469a0854499ddb4f188dfc51e51eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:f6:8b:d0:99:82:59:46:43:1c:d3:13:e6:
9a:77:dc:31:c2:eb:be:e0:2c:0c:63:6a:1b:d3:f4:
71:a5:b2:ec:60:89:ab:47:3f:20:73:95:20:80:9e:
69:f7:8e:1b:aa:66:93:e7:4a:a2:b7:5b:5f:b1:fc:
b7:3a:f3:db:81:66:e8:7c:b1:6f:67:bb:35:1b:7f:
b7:5a:3f:49:b9:fb:fc:35:4e:1f:a4:a4:5e:bf:6d:
88:ad:33:7f:01:0a:57:88:73:5a:c9:c5:34:fe:f7:
b7:85:c4:4f:e6:91:d5:98:c9:6e:c6:e8:7e:58:c5:
58:c1:fd:91:8e:74:39:05:04:62:3f:a8:dd:0e:d9:
dd:d2:47:18:e9:3c:df:a1:df:59:74:7c:40:fb:aa:
8d:29:3c:c7:05:fb:0a:e9:ac:0b:a1:04:96:d9:d2:
7b:7a:7c:ad:f9:01:07:43:6c:a6:6e:a5:fe:8f:1b:
4c:64:42:8c:26:39:fc:b2:b9:b9:25:ed:08:f5:fd:
fd:46:d9:1b:65:0d:73:05:72:ab:4a:0c:e5:58:78:
74:4d:c5:a4:3e:ea:d9:bd:7d:a2:86:04:a4:20:d7:
d7:0d:c0:91:b8:34:71:df:d8:3f:ca:9e:29:d3:73:
0d:25:67:d1:45:31:94:26:a4:fb:66:6e:25:df:72:
d9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:75:A6:5A:D7:84:69:A0:85:44:99:DD:B4:F1:88:DF:C5:1E:51:EB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eXWmWteEaaCFRJndtPGI38UeUes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.8.0/24
Signature Algorithm: sha256WithRSAEncryption
63:9d:83:00:59:31:47:32:30:de:ec:9b:dd:3d:99:cd:97:0f:
34:3e:68:33:b6:38:e2:45:10:9c:79:59:aa:6f:74:fb:be:25:
c2:bc:ca:d4:c5:92:21:c5:c8:d8:07:d9:39:0c:ff:0a:0b:4c:
ae:61:8b:18:70:eb:81:db:b0:03:7b:4e:9a:cc:2e:99:8a:a6:
93:70:7d:e0:53:b1:d9:1b:b7:12:7a:28:5b:69:8a:99:24:94:
61:65:7d:64:fe:49:ab:44:98:34:a0:e4:72:c4:2d:a1:92:7e:
a2:03:97:3d:c4:e3:b9:76:f6:db:2d:eb:ea:8a:d6:12:da:91:
7a:b8:33:d8:16:e5:3b:5e:69:e9:86:69:e3:11:09:a4:6b:92:
b9:d0:f4:d8:6a:56:2b:08:47:e7:0c:63:81:fc:fe:69:86:c9:
91:22:0f:38:fe:f7:f7:f0:d5:02:65:b1:3f:1d:34:ef:85:ec:
cb:0f:92:c7:e7:26:84:b3:0e:45:48:55:34:76:49:42:7e:c2:
67:6e:4f:fb:b5:3f:52:99:2c:f6:57:ab:e6:76:0d:27:ee:ff:
3c:27:de:81:2a:dd:bd:83:6a:9e:ff:fc:58:df:c6:62:c1:b6:
7c:1b:d4:ea:5f:b6:d3:34:bb:e5:94:6e:cd:00:22:62:8d:2d:
62:99:77:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 21:37:28 2024 by rpki-client on console-fra.rpki-client.org