Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/T2U64Y5rQ76Nwu9IRdn9nJ_THBc.roa
File: T2U64Y5rQ76Nwu9IRdn9nJ_THBc.roa (raw, json)
Hash identifier: k2hxWx3wnndp+RnL8cy+9/aMzqkkBto7yvsS9XQAnF0=
Subject key identifier: 4F:65:3A:E1:8E:6B:43:BE:8D:C2:EF:48:45:D9:FD:9C:9F:D3:1C:17
Certificate issuer: /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial: 019109C8DEE842C4C5A72D6FDA31695FF249
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/T2U64Y5rQ76Nwu9IRdn9nJ_THBc.roa
Signing time: Wed 31 Jul 2024 17:14:04 +0000
ROA not before: Wed 31 Jul 2024 17:14:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215133
IP address blocks: 94.231.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 20:47:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:09:c8:de:e8:42:c4:c5:a7:2d:6f:da:31:69:5f:f2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Validity
Not Before: Jul 31 17:14:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f653ae18e6b43be8dc2ef4845d9fd9c9fd31c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:2b:5c:81:7f:f6:ab:5a:52:37:6e:31:49:
75:89:71:96:a7:a1:21:cb:a8:de:dc:14:56:f7:f4:
6d:47:96:d7:3f:98:05:8f:b2:76:a2:b8:d3:dc:53:
70:a5:1b:b0:16:45:15:59:3c:22:f6:9d:7f:21:61:
a8:e9:c9:cf:31:89:c0:1a:39:11:c1:f2:0a:62:16:
3f:b3:eb:e3:27:a3:e2:22:81:91:05:1e:e7:6e:10:
57:f1:06:59:01:de:0f:79:e3:f2:2e:4b:46:a5:fc:
c0:d7:01:cd:3e:1a:0a:31:cc:da:ce:7c:22:ed:00:
22:28:57:d5:a8:75:a8:0a:da:85:ce:89:7e:54:72:
51:4f:b5:5d:c2:21:b7:b7:ea:63:2c:c8:35:9c:3f:
6e:be:df:8f:2d:ff:34:f1:4f:22:82:a5:1e:f8:de:
a7:5c:ff:ed:f3:a2:9b:e1:0e:81:fc:ea:f2:00:3e:
48:68:c9:da:37:cc:e1:aa:ec:51:78:03:95:af:3d:
a1:b2:14:8a:e0:03:81:44:bc:ac:cc:33:85:24:23:
cd:8c:39:1a:09:ea:b4:96:d7:35:eb:e9:22:6c:5f:
cb:18:7f:5b:17:3a:fb:b7:fb:1f:5e:2c:db:47:46:
69:d2:27:e7:d9:ee:c0:dc:68:e4:35:86:17:5a:51:
7c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:65:3A:E1:8E:6B:43:BE:8D:C2:EF:48:45:D9:FD:9C:9F:D3:1C:17
X509v3 Authority Key Identifier:
keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/T2U64Y5rQ76Nwu9IRdn9nJ_THBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.215.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a6:e1:fe:77:df:9b:1e:91:43:05:ce:80:0a:eb:ae:68:75:
6b:d8:e0:ba:c7:bb:a2:0d:fc:f3:e7:d2:25:52:7e:fe:80:9c:
36:88:56:c7:ce:b7:39:21:03:73:51:f2:82:e1:ad:33:1f:2c:
84:78:ad:21:2e:c2:93:e2:95:07:73:15:df:d1:68:2e:f6:90:
5c:f7:35:92:18:0d:0e:33:33:0f:a9:b4:88:cf:ed:e2:f8:71:
be:c8:e5:8d:36:ea:ed:08:aa:0f:8f:cf:b8:80:00:5a:f0:e3:
20:7f:5b:df:75:7d:e2:fa:ec:15:c8:f3:56:03:8e:a3:03:5d:
c4:5c:65:09:8e:a7:e0:d5:c6:6e:2d:57:f7:0d:4d:1f:87:b8:
f8:25:8b:9f:fd:32:b5:26:70:fb:fc:57:d1:76:b1:70:45:40:
2e:d1:1a:09:f5:55:d6:29:a4:f0:52:15:47:e2:29:da:8f:cc:
28:c7:18:ea:ba:a7:ab:14:2b:0d:aa:73:cd:8f:c8:1b:43:29:
16:d7:58:a9:2e:93:88:bb:5e:b6:31:41:cd:07:cd:ea:0c:f5:
b5:f7:99:35:02:0b:f7:22:30:c6:ec:90:31:48:29:1a:2f:30:
73:29:c5:f2:2d:4e:61:9c:97:1f:2f:6b:54:b4:9a:da:8a:ac:
89:c3:9b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:31 2025 by rpki-client