Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/4MttH_KVlqc5UX-JwFNd6L5QVJA.roa
File: 4MttH_KVlqc5UX-JwFNd6L5QVJA.roa (raw, json)
Hash identifier: VAb/icnNFDKngDmNhINeEJVIv492QVj6UyWX2E2pYuw=
Subject key identifier: E0:CB:6D:1F:F2:95:96:A7:39:51:7F:89:C0:53:5D:E8:BE:50:54:90
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018E34AB004D19D2C352065D1AA471A8B42E
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/4MttH_KVlqc5UX-JwFNd6L5QVJA.roa
Signing time: Tue 12 Mar 2024 21:56:45 +0000
ROA not before: Tue 12 Mar 2024 21:56:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.44.0/23 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 06:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:34:ab:00:4d:19:d2:c3:52:06:5d:1a:a4:71:a8:b4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Mar 12 21:56:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0cb6d1ff29596a739517f89c0535de8be505490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:6a:0a:c8:b6:94:ff:bd:8d:56:04:50:f2:
ab:69:df:e8:d9:39:ba:61:e2:fb:d6:b1:96:ab:29:
9a:1e:fd:ae:f1:3f:9c:64:8c:e2:48:4f:22:82:89:
0d:c7:3d:81:d8:1f:94:9a:48:11:73:82:d6:38:42:
1f:93:8a:52:ef:13:3b:c8:69:09:3c:eb:04:13:75:
f9:3f:3e:de:18:68:c3:03:ae:44:04:1e:cf:2e:cc:
b6:70:b6:2a:49:0b:b5:d7:13:4e:76:27:fe:52:6c:
68:f7:e5:95:53:98:53:8f:71:96:f3:9b:8d:5d:40:
f6:6a:d8:f4:02:39:dc:12:e4:74:55:1a:92:eb:6e:
3a:54:59:48:89:14:18:63:e1:f6:bb:a2:11:ad:4b:
c9:9d:70:15:6d:3f:cc:62:21:9e:92:ff:be:ef:2b:
b2:be:61:66:de:fd:9a:fa:21:b7:70:81:7a:c1:66:
01:cd:ee:8e:65:31:e5:88:b4:8e:d1:bf:29:3a:7a:
c2:a9:04:29:2a:7b:d2:05:b7:31:e6:ac:db:4e:89:
d8:29:2e:fc:e1:ac:bd:24:87:ff:1e:15:89:d4:b4:
71:81:7e:ee:f5:ae:0f:d3:f4:0b:65:e1:70:53:77:
00:4f:c2:21:96:c9:37:45:3c:0d:10:e0:54:3a:23:
63:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CB:6D:1F:F2:95:96:A7:39:51:7F:89:C0:53:5D:E8:BE:50:54:90
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/4MttH_KVlqc5UX-JwFNd6L5QVJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.44.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
a8:0f:e3:4a:e3:65:88:a2:90:03:ff:ae:11:93:f7:35:c9:cd:
6a:8b:3e:29:04:35:e5:aa:09:97:57:8e:29:02:47:8b:26:fb:
58:6b:b9:ad:23:79:b7:b4:c4:98:e1:e6:26:21:ae:48:cc:58:
57:25:86:99:a8:8f:ef:64:34:ce:b7:12:a7:c3:64:4d:58:94:
ff:c8:e7:96:3d:9e:65:01:1a:74:0a:9b:c9:46:d2:ab:1d:c6:
14:f1:dd:18:19:e4:c3:04:f6:33:e1:ca:51:16:61:94:f4:d4:
59:1a:e1:75:3a:01:85:a5:58:10:f3:0b:bb:d6:f7:bd:57:d2:
ec:34:b1:65:75:77:16:ec:34:24:d0:7a:ea:ff:2b:9b:0a:da:
f0:10:e6:85:e3:c3:3f:ab:cf:d6:97:16:41:66:7c:3b:18:90:
5e:ce:c6:84:8a:f6:9b:66:e6:e1:98:bb:f0:3c:8d:90:9a:75:
e8:f6:b8:0b:0a:d2:d0:91:cd:13:c4:b6:ff:d4:b1:f0:4a:9f:
f8:32:19:c9:9b:14:62:dc:30:e5:e0:06:c6:5c:d7:22:e9:7c:
83:bd:20:e2:80:88:7a:ff:fc:63:24:85:e2:66:db:d0:1e:23:
bd:c3:f1:14:7a:d7:62:c0:4f:3b:a1:a5:bf:ce:1d:31:b3:e8:
53:51:9c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:55 2024 by rpki-client on console-ams.rpki-client.org