Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/esu7R6i6Cx0CNEix0JD3UUAr_H4.roa
File: esu7R6i6Cx0CNEix0JD3UUAr_H4.roa (raw, json)
Hash identifier: BZWiQk+E3rPqcE2AY89XPz6yB140xAGwhOvMFGA5Hwk=
Subject key identifier: 7A:CB:BB:47:A8:BA:0B:1D:02:34:48:B1:D0:90:F7:51:40:2B:FC:7E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01862749BF9DC2E1784C8394B41110F29C23
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/esu7R6i6Cx0CNEix0JD3UUAr_H4.roa
Signing time: Mon 06 Feb 2023 15:13:09 +0000
ROA not before: Mon 06 Feb 2023 15:13:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 94.156.14.0/24 maxlen: 24
164.40.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Mar 2023 07:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:49:bf:9d:c2:e1:78:4c:83:94:b4:11:10:f2:9c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 6 15:13:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7acbbb47a8ba0b1d023448b1d090f751402bfc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:6e:6d:0b:d7:2e:dd:48:bd:e9:cb:6a:cf:
50:77:07:26:8f:10:46:a4:73:98:42:89:ce:0b:d9:
0f:52:ea:82:be:79:8a:47:79:71:22:e1:aa:95:06:
1d:e9:17:46:03:e2:6a:03:0c:3b:72:65:15:78:08:
f5:b8:5e:4d:3a:4a:0f:56:14:21:72:6e:b2:fe:fa:
3b:aa:7a:83:67:6b:e7:51:2b:0f:05:44:48:f3:ab:
16:fd:e9:3e:73:07:3a:9a:e0:d5:2d:09:66:58:9d:
e1:5b:02:5e:f9:18:08:54:d0:1b:4a:b4:c3:3f:c2:
2d:17:1e:7b:76:15:8f:50:bc:0f:ee:25:81:26:11:
dc:79:86:27:50:4a:4c:41:7b:7f:03:e3:a4:97:61:
c7:97:97:18:1a:97:65:2d:5a:49:9b:0f:4c:6a:69:
07:ff:30:0b:53:24:2f:23:39:05:46:9d:7d:26:c2:
2b:4c:11:29:6c:07:0c:3a:34:19:c2:ba:8d:62:aa:
97:79:55:22:6f:1d:7a:fa:ea:f5:3d:a1:62:80:c8:
f1:d2:15:e4:31:53:c4:95:b1:3c:ae:a7:83:42:ae:
80:cf:4a:2b:fb:17:33:9a:4a:5f:75:17:76:2b:8e:
7c:4d:73:5c:ee:1b:9f:92:fc:39:49:f8:76:7a:7f:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CB:BB:47:A8:BA:0B:1D:02:34:48:B1:D0:90:F7:51:40:2B:FC:7E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/esu7R6i6Cx0CNEix0JD3UUAr_H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.14.0/24
164.40.185.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:d2:40:ee:f2:d0:11:b3:fd:03:76:95:01:cd:cb:d0:32:fd:
21:ed:73:51:40:e9:82:5f:08:e0:6b:fb:95:9c:f9:47:ed:07:
e5:11:0a:a7:b6:8e:7b:1d:ce:1b:f8:9f:d6:19:15:ec:2d:7c:
9e:76:76:2e:99:52:b9:3a:c5:1e:32:a3:40:94:55:01:92:bb:
f0:29:32:24:25:60:c8:58:a0:de:29:9e:69:87:1d:02:ce:7e:
b3:71:ad:17:52:f1:59:1c:92:be:dd:bb:8b:2c:ae:28:90:b8:
49:10:7a:71:e7:66:2b:41:13:4f:97:8f:b0:ec:71:11:9b:8e:
36:44:6c:64:0a:7a:a2:c0:0d:eb:11:27:f3:f5:7e:d9:ea:d0:
b9:a7:c4:d4:8d:c5:26:d1:93:1c:4b:85:9f:1c:30:71:92:d7:
47:df:d7:f4:b7:9e:cd:79:cc:92:9c:44:d1:d4:7a:29:fd:63:
d9:f0:17:d9:57:22:3e:bf:6d:51:7e:ed:21:71:81:22:09:48:
10:7d:0d:87:1b:26:99:f5:89:f6:b1:cc:73:0c:04:52:74:82:
5c:9a:97:7c:c7:6b:f1:40:d9:3e:3b:b3:e4:2d:24:20:71:ed:
22:ec:98:7d:97:e0:8d:79:3c:2b:5f:a1:71:30:8c:d1:e9:76:
be:44:41:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:15 2024 by rpki-client on console-fra.rpki-client.org