Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/4Fdd6aoKwjfKZIM_AcnPjA_qmKk.roa
File: 4Fdd6aoKwjfKZIM_AcnPjA_qmKk.roa (raw, json)
Hash identifier: dd83/u3Isc+M5SUbzbui/1PD1mnwxeS+ZHdVoBeh8sM=
Subject key identifier: E0:57:5D:E9:AA:0A:C2:37:CA:64:83:3F:01:C9:CF:8C:0F:EA:98:A9
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 018CC4923B72C70B4C6E3C8D320DCF8A98AD
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/4Fdd6aoKwjfKZIM_AcnPjA_qmKk.roa
Signing time: Mon 01 Jan 2024 10:29:26 +0000
ROA not before: Mon 01 Jan 2024 10:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62292
IP address blocks: 94.199.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 17:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:3b:72:c7:0b:4c:6e:3c:8d:32:0d:cf:8a:98:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Jan 1 10:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0575de9aa0ac237ca64833f01c9cf8c0fea98a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d0:2a:02:ea:0a:80:16:c8:5d:84:13:16:a9:
5b:f3:3e:82:78:8e:76:c7:dc:24:ce:b8:b4:d2:76:
8d:e7:d1:d0:e5:6b:5e:7a:51:05:ec:09:54:1a:55:
cc:76:86:a4:12:28:33:cd:54:e0:b4:6c:6b:bb:cb:
15:eb:72:99:27:bc:fc:b5:7c:87:fa:80:54:f3:cf:
a5:1d:2f:c4:32:7e:56:5c:07:24:80:b5:9b:00:ff:
e9:f1:aa:4d:e0:63:c8:ac:23:c7:c2:fa:53:03:55:
58:c9:70:5d:8d:f6:a2:23:d3:4a:8c:39:41:0f:4d:
6b:87:99:a9:b0:90:8c:f2:57:51:bc:d1:6a:46:24:
bc:55:c2:f3:57:9a:39:bd:3f:8d:45:99:4c:18:4c:
0b:b4:a6:8a:ff:96:3f:89:3e:fd:0b:b2:66:88:9b:
fe:f5:03:6c:1f:11:7f:d8:53:d9:ec:ce:0e:db:37:
f0:db:c6:0e:2b:7f:56:85:fb:ec:e7:60:40:e0:3b:
55:f0:c4:86:76:0d:d6:fe:38:07:e1:6b:71:a8:da:
8a:d5:d1:34:48:e2:94:d9:4c:45:49:40:a5:20:44:
70:b5:01:81:0c:34:0d:fe:07:10:c7:4a:02:50:ff:
1c:cc:0d:64:15:57:62:9b:6f:a2:76:23:ff:bd:43:
8a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:57:5D:E9:AA:0A:C2:37:CA:64:83:3F:01:C9:CF:8C:0F:EA:98:A9
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/4Fdd6aoKwjfKZIM_AcnPjA_qmKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.178.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:fb:2a:bf:c8:51:56:5f:77:bc:24:b0:dd:da:6c:aa:69:7e:
73:76:b8:06:86:ce:c1:4e:a5:72:85:ab:33:3f:e7:14:27:97:
66:17:9c:30:fa:a1:a8:fc:17:37:69:10:fd:3d:57:57:4c:86:
bb:59:c8:f6:e2:68:17:6d:1f:29:39:c4:10:75:8e:98:37:5d:
3c:e5:95:b4:4a:2c:f2:e3:62:fc:1d:d0:f8:e0:7a:93:77:33:
f4:d1:5b:da:bd:44:ef:32:ce:23:d0:bd:96:c5:1d:e5:02:59:
79:62:07:c0:f0:9d:aa:4c:70:05:b3:f8:cf:8c:f8:b0:cd:a0:
49:45:ae:d9:2b:51:2e:ca:cf:7f:7f:0a:bc:29:06:bf:1a:2f:
8f:b2:3d:36:2c:7a:73:6d:36:3b:ca:56:cd:3e:c0:2f:0b:40:
a7:6e:c2:30:25:ec:6b:b1:7a:9c:d9:6e:c1:b8:34:38:c3:67:
de:40:aa:8b:ff:7b:0e:ae:58:a1:d2:77:9a:b0:d4:85:82:b7:
3d:32:e1:9f:81:e8:c0:7c:c8:03:be:b5:1d:5f:8d:36:0c:ac:
91:4f:aa:03:d5:64:ac:d2:66:44:3b:3a:b1:02:1d:46:1c:8b:
05:d6:42:e4:71:f1:e2:02:46:ae:49:58:21:ab:9b:e8:85:09:
80:0c:c0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:32 2024 by rpki-client on console-fra.rpki-client.org