Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/1-_0jota5auwBslBe4Z3wBPc1Dds.roa
File: 1-_0jota5auwBslBe4Z3wBPc1Dds.roa (raw, json)
Hash identifier: /d1a7N/a6gC6c4ega6wRbm2TgQRvD/BShjbLuIBOWYA=
Subject key identifier: FB:FD:23:A2:D6:B9:6A:EC:01:B2:50:5E:E1:9D:F0:04:F7:35:0D:DB
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018B9AF4CB6DC8051F537DBAB33BBFDFC6D1
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/1-_0jota5auwBslBe4Z3wBPc1Dds.roa
Signing time: Sat 04 Nov 2023 15:30:16 +0000
ROA not before: Sat 04 Nov 2023 15:30:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205733
IP address blocks: 94.154.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 10:27:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:9a:f4:cb:6d:c8:05:1f:53:7d:ba:b3:3b:bf:df:c6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Nov 4 15:30:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbfd23a2d6b96aec01b2505ee19df004f7350ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:e8:e2:f6:a7:63:0f:30:ef:14:29:33:a2:
0e:be:4d:99:82:6c:61:0f:c4:8e:dd:35:9e:85:58:
b8:98:42:70:ea:22:f6:e2:40:36:d4:5d:7f:ea:c6:
d9:7e:4a:49:6c:0c:c4:80:e3:10:e8:94:28:3c:ac:
98:bd:a5:07:03:43:b1:82:12:a2:f1:aa:6d:b8:79:
3c:b1:51:0d:ed:10:72:f1:22:1e:f9:3a:6d:fd:05:
27:86:6c:fd:a7:73:d8:09:a1:44:3d:f1:11:1f:59:
ac:14:c1:3d:90:fb:86:9e:32:6d:4e:bf:fe:2e:94:
2e:fc:a0:00:6f:01:2b:90:bc:ec:b6:22:85:fb:cd:
6a:28:f6:01:f6:5f:88:23:d2:6b:32:88:d5:4f:da:
e7:e9:57:2f:33:29:d4:60:46:b9:08:f1:a7:ce:02:
64:7f:e2:d5:b3:00:77:f8:d5:32:a3:d7:ce:23:98:
a3:8c:b5:6c:81:b6:42:0d:d2:ff:bf:64:d5:e7:ef:
de:27:2f:3b:6e:f0:52:07:f7:65:0a:d9:1c:c0:cb:
3f:6c:e5:5a:17:0e:b3:d9:db:a2:1a:79:e5:9d:68:
28:e0:fd:77:0e:4b:8d:23:21:f5:b4:71:f6:6d:30:
ec:87:75:c0:3b:83:d9:ed:05:27:2f:28:d8:ec:f2:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FD:23:A2:D6:B9:6A:EC:01:B2:50:5E:E1:9D:F0:04:F7:35:0D:DB
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/1-_0jota5auwBslBe4Z3wBPc1Dds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0/24
Signature Algorithm: sha256WithRSAEncryption
58:20:a8:a7:75:49:52:0d:0c:a1:a3:68:ae:95:9a:83:b3:b7:
27:c6:98:d0:54:e2:74:a0:2b:51:dc:18:72:68:e5:62:3b:03:
18:16:c8:09:6a:d1:1a:cc:0c:49:b8:5d:61:a2:a5:04:70:89:
b5:43:4f:83:d0:7e:21:34:21:37:f3:49:ec:0c:c7:91:e6:f0:
68:a1:1c:c7:cb:f2:ea:88:dc:88:ab:04:8e:82:8f:ce:0a:1d:
e4:43:ee:d9:87:21:d8:71:a0:ca:4a:b4:3f:b4:c2:a0:60:f7:
f7:a0:59:b0:1a:29:73:2e:48:fc:2f:67:6f:b3:e1:a7:99:05:
87:06:a3:c6:5b:b6:5e:79:7b:10:1c:98:5c:8f:ed:90:3b:91:
70:ef:47:3b:cd:e9:2b:81:6b:52:0b:e3:c8:cc:15:b0:51:44:
3d:96:97:fe:91:f6:d4:88:55:60:ef:b1:4c:bf:b8:8f:3f:c4:
2d:6b:d7:f9:12:41:d6:71:3f:1d:b9:9a:3e:9f:9b:19:ab:a6:
db:b8:72:76:e6:df:55:af:84:c8:2d:3d:ba:78:79:a0:f8:55:
98:41:04:49:3e:d9:09:85:7a:d9:30:33:0a:7b:ad:df:68:40:
88:c6:b9:d9:cd:18:fa:08:eb:d2:75:74:d7:0b:a4:b9:2f:c2:
d3:bf:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:31 2024 by rpki-client on console-fra.rpki-client.org