Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/m3n6sKY_cl7Bo9XdNeAlrge7HH4.roa
File: m3n6sKY_cl7Bo9XdNeAlrge7HH4.roa (raw, json)
Hash identifier: 6+Rfqr+Pk6Ah/5xP2fxP83W83DTnmr+vydN+8Vyy098=
Subject key identifier: 9B:79:FA:B0:A6:3F:72:5E:C1:A3:D5:DD:35:E0:25:AE:07:BB:1C:7E
Certificate issuer: /CN=36b413e536d99353f0b050ee746ffdd24edb5930
Certificate serial: 01856E6FA91A0626D584F1C6D22755F76B56
Authority key identifier: 36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/m3n6sKY_cl7Bo9XdNeAlrge7HH4.roa
Signing time: Sun 01 Jan 2023 17:44:49 +0000
ROA not before: Sun 01 Jan 2023 17:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 94.125.226.0/24 maxlen: 24
94.125.224.0/24 maxlen: 24
94.125.225.0/24 maxlen: 24
94.125.227.0/24 maxlen: 24
94.125.228.0/24 maxlen: 24
94.125.229.0/24 maxlen: 24
94.125.230.0/24 maxlen: 24
94.125.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:a9:1a:06:26:d5:84:f1:c6:d2:27:55:f7:6b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36b413e536d99353f0b050ee746ffdd24edb5930
Validity
Not Before: Jan 1 17:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b79fab0a63f725ec1a3d5dd35e025ae07bb1c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:96:07:fe:04:f0:d5:bb:52:ec:45:3d:b3:
ad:0e:89:2b:49:05:21:75:28:38:4b:eb:a1:d4:bc:
e8:a8:9d:0b:f0:12:cc:d2:bd:58:fc:23:bd:15:c6:
df:7f:28:1d:5d:e4:b8:5a:75:04:c6:2c:68:4d:e4:
79:88:37:10:ea:89:14:ef:6a:21:16:fa:11:f4:ff:
84:c0:44:22:9c:6f:7f:59:84:eb:2b:f9:87:fe:8e:
3c:50:ab:a9:03:da:8e:90:b7:ea:df:36:47:02:9b:
21:58:89:f7:ac:ad:69:ae:40:18:d3:70:e0:7e:91:
c1:fe:27:68:2d:ea:b4:e5:73:32:93:b7:4a:83:7c:
6c:96:2b:3a:93:47:bf:50:c0:c5:e1:17:54:02:27:
12:d3:bc:d0:fd:ec:ed:51:4a:9a:42:62:28:83:0d:
d1:cc:de:bb:2a:c9:62:49:9b:db:6c:69:21:dc:a7:
7c:66:97:6f:91:57:4f:6c:f4:61:f9:b7:d9:73:44:
88:79:3f:b3:c4:3c:1f:63:75:bf:ae:ba:4d:0e:14:
46:97:9c:58:34:2b:34:0e:df:8e:a1:a4:bd:01:11:
6a:de:86:6e:1b:ec:ef:32:6f:70:54:75:d4:c6:ce:
b6:18:04:45:16:b1:1b:53:de:3b:7d:48:cd:4f:0a:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:79:FA:B0:A6:3F:72:5E:C1:A3:D5:DD:35:E0:25:AE:07:BB:1C:7E
X509v3 Authority Key Identifier:
keyid:36:B4:13:E5:36:D9:93:53:F0:B0:50:EE:74:6F:FD:D2:4E:DB:59:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrQT5TbZk1PwsFDudG_90k7bWTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/m3n6sKY_cl7Bo9XdNeAlrge7HH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e66296-0479-4c52-9cea-a1f573d069da/1/NrQT5TbZk1PwsFDudG_90k7bWTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.224.0/21
Signature Algorithm: sha256WithRSAEncryption
c0:4d:93:01:22:1f:d6:ea:35:c1:46:81:65:c4:63:5b:af:1d:
6f:e6:7c:56:ce:8b:ab:3c:1c:cb:fc:18:be:c1:9b:22:0a:81:
32:a3:ec:cb:2f:99:78:27:45:30:51:e6:40:e6:37:09:42:2f:
cf:36:e2:d5:75:2b:39:3a:97:d3:6b:a9:8f:c7:5f:ce:8e:f3:
97:26:44:97:a6:94:d4:9d:fb:5a:1a:ae:62:e8:9b:5f:8a:a7:
f4:63:df:a9:d9:25:d1:f1:69:5a:6c:3c:87:3a:22:40:d0:e7:
d1:d1:f0:24:d0:f8:fc:f5:01:fd:c3:fc:c8:34:e7:f5:19:3c:
7c:5b:fb:07:b4:5f:7b:27:9c:e4:77:22:94:3c:3c:62:7d:79:
38:aa:68:0d:67:aa:e3:06:f7:54:e7:9f:3d:6a:19:c4:b1:06:
fb:19:24:94:01:cd:b7:b8:2e:23:16:6b:bd:73:36:87:5c:56:
97:1b:9f:36:6b:b9:fc:62:fc:a0:8d:c5:d6:66:6a:8b:d8:5b:
96:e8:bf:00:e9:cb:2a:a8:50:67:24:59:80:fe:cf:a3:64:53:
36:03:d3:4b:63:2f:91:43:3f:75:9e:f5:bd:a0:16:e8:22:21:
0c:40:01:78:c2:f0:57:95:80:fc:bf:05:a8:7f:18:a3:35:6e:
7a:74:93:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:25 2024 by rpki-client on console-ams.rpki-client.org