Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sGVJryPLL9lawLXzxzIUJW5DwrE.roa
File: sGVJryPLL9lawLXzxzIUJW5DwrE.roa (raw, json)
Hash identifier: QaTzDf+eibGds/+UwI32p5MFeFocHOTKQytRXqRl6cM=
Subject key identifier: B0:65:49:AF:23:CB:2F:D9:5A:C0:B5:F3:C7:32:14:25:6E:43:C2:B1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DCB98CC1B0950EE8A67F57C5DD4D79CAA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sGVJryPLL9lawLXzxzIUJW5DwrE.roa
Signing time: Wed 21 Feb 2024 12:16:45 +0000
ROA not before: Wed 21 Feb 2024 12:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215450
IP address blocks: 94.156.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 17:21:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cb:98:cc:1b:09:50:ee:8a:67:f5:7c:5d:d4:d7:9c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 21 12:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b06549af23cb2fd95ac0b5f3c73214256e43c2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:ae:61:46:1a:b9:60:33:d5:9e:02:fe:23:
03:68:f4:24:ff:08:49:d9:69:12:cf:4c:ca:67:59:
01:cc:4d:00:85:96:23:27:ca:56:6a:30:1d:1d:8f:
e1:a7:fe:d1:1c:05:fe:78:db:f3:45:07:03:07:36:
b9:fb:58:cf:31:17:d4:d1:da:87:9d:3e:6f:10:19:
9a:a7:eb:a1:2e:fe:ab:a5:57:e8:65:84:86:8f:59:
b0:83:d4:ea:63:45:45:f1:56:bd:c2:31:b5:71:ec:
28:4e:7f:63:d7:64:c9:20:b6:03:f4:28:99:3a:f1:
31:59:00:27:a7:04:98:00:da:7b:11:32:13:62:5f:
43:3c:c6:17:9a:20:92:2b:44:d1:2e:39:1c:fd:1d:
b8:81:b4:56:a5:69:4c:e8:e0:08:53:e0:43:cc:35:
3c:45:f1:50:2b:62:93:73:e6:b0:22:ac:f0:ca:be:
b8:af:96:77:5a:d5:13:d6:e2:ca:2b:6d:e8:8a:ca:
9a:d1:58:08:76:26:18:e9:22:49:90:2a:25:89:f9:
6f:2d:b3:82:cd:0e:72:17:46:10:76:10:f8:b6:40:
a2:1f:c8:6b:44:2b:ca:de:e8:d6:04:cc:99:d2:11:
f5:a2:2a:b2:0a:81:eb:be:c2:5f:73:ea:10:e2:e4:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:65:49:AF:23:CB:2F:D9:5A:C0:B5:F3:C7:32:14:25:6E:43:C2:B1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sGVJryPLL9lawLXzxzIUJW5DwrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:bd:bc:19:24:e6:60:33:9f:bc:23:e2:a7:2c:1d:6c:d4:bd:
6a:bb:89:52:64:ec:e2:d7:2e:78:bf:6d:66:96:2e:43:6c:ea:
c1:07:e4:4b:4e:1f:e4:f1:69:d7:e5:2f:ef:12:9b:9e:e2:3c:
c7:77:04:5b:bd:1c:5e:87:81:d8:5b:dd:fc:91:b7:d7:3a:fc:
1a:03:d5:c4:35:f8:71:b5:59:33:b5:38:45:53:51:a3:40:c0:
cb:c7:db:cb:af:43:03:48:a1:d7:dd:e2:0f:e3:a7:b2:a3:d1:
cb:b8:b1:f1:24:1d:24:e8:24:ec:28:bb:53:dc:ab:1f:60:5d:
a2:9e:81:c5:a7:dc:ae:79:c2:12:c3:80:75:fa:92:43:cb:45:
12:71:19:11:c6:6b:f6:d0:c7:18:77:ac:b3:6b:a3:f4:ad:b6:
5c:47:4b:7b:51:96:91:fa:92:5a:c3:77:f6:37:de:b0:f1:ff:
8a:d8:36:27:bb:cd:df:05:a6:66:60:53:fb:18:a5:0f:23:f3:
e4:cc:eb:05:48:6c:e9:bb:1a:0f:0b:1c:e3:49:61:69:36:ad:
27:40:48:ae:2d:c3:d0:df:ea:98:9b:08:65:6b:c1:ce:71:e4:
89:91:8d:51:af:3e:92:49:d5:34:52:64:e3:80:b2:f0:0b:73:
46:4a:69:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 19:58:04 2024 by rpki-client on console-ams.rpki-client.org