Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/9KV1tkEGq6PWmAPNjMLlI81Os10.roa
File: 9KV1tkEGq6PWmAPNjMLlI81Os10.roa (raw, json)
Hash identifier: tZc6JCGyDdNEnzdfR8qiqV/poG2YYJxoT0+loMSCy9I=
Subject key identifier: F4:A5:75:B6:41:06:AB:A3:D6:98:03:CD:8C:C2:E5:23:CD:4E:B3:5D
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018F816AB34BEBE7F3D1670B2877DA760C01
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/9KV1tkEGq6PWmAPNjMLlI81Os10.roa
Signing time: Thu 16 May 2024 12:40:04 +0000
ROA not before: Thu 16 May 2024 12:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.40.0/22 maxlen: 24
94.154.40.0/24 maxlen: 24
94.154.41.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 16:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:6a:b3:4b:eb:e7:f3:d1:67:0b:28:77:da:76:0c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: May 16 12:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4a575b64106aba3d69803cd8cc2e523cd4eb35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:ac:80:84:50:23:00:0e:e7:3b:35:46:fd:
ed:fb:1a:20:51:cd:4a:a6:a4:f5:11:4b:c5:9d:a3:
41:d9:c0:5c:84:4d:a4:1e:55:54:ed:ea:61:dc:16:
b4:6e:41:12:62:10:50:3b:9e:5d:1c:52:ab:d3:cd:
e5:d1:7b:32:2f:46:f1:8f:88:45:2e:b8:1d:da:f6:
33:72:d4:7e:23:44:72:27:49:4d:53:24:83:bd:89:
f8:df:e4:ac:33:f5:26:da:2f:aa:05:2c:a2:21:1b:
01:60:bb:98:d8:9c:7d:b1:18:21:8a:d4:f6:e1:c3:
19:e5:a0:47:6d:85:a9:2d:2d:99:5a:88:e6:66:7a:
2d:02:36:03:f6:c1:6e:c6:68:82:bb:4a:b3:5d:26:
5c:85:42:87:06:7d:ec:54:7a:f5:96:5b:66:80:fc:
cc:e9:5d:5f:8a:a9:28:c9:86:21:74:03:fe:6d:fe:
b6:ec:99:24:59:58:fd:ff:d5:fa:69:d1:d4:c9:12:
47:63:39:10:c6:d5:ea:7a:9e:5a:a6:a3:6b:35:d2:
6b:d0:69:fa:8f:f7:0b:ae:9b:47:60:50:6c:83:a9:
c6:d6:b1:7b:24:26:48:f0:c6:a8:19:dd:b8:5c:f5:
b1:0c:12:ed:3a:90:ce:06:91:11:fa:ee:9e:dd:ae:
d9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A5:75:B6:41:06:AB:A3:D6:98:03:CD:8C:C2:E5:23:CD:4E:B3:5D
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/9KV1tkEGq6PWmAPNjMLlI81Os10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
58:66:52:ae:9c:cc:78:4b:49:c7:3e:b6:f7:fa:e6:f6:4c:44:
1a:85:67:2e:45:d9:36:41:35:34:a8:ad:7b:1b:6c:d4:d6:40:
20:1a:90:e1:0e:60:4b:85:ea:e2:5b:da:b1:82:a2:e0:a5:cf:
0d:71:e8:8b:a6:36:d9:6c:89:0a:64:dc:14:e6:7e:0c:6d:bb:
20:ac:69:23:26:92:dd:17:c5:2f:db:6b:75:f4:56:88:86:d9:
59:05:97:c5:aa:a0:6c:b2:75:89:07:8e:9b:31:6c:3e:9f:88:
dc:6c:ee:28:10:e6:33:30:a8:68:73:17:06:b2:51:83:f5:d8:
c0:eb:79:ee:ff:29:eb:9c:8b:af:8d:7e:c3:07:c6:63:62:a5:
99:c3:08:98:42:dd:ed:4e:77:09:89:dc:f6:fd:b8:77:c5:6c:
52:f5:13:94:4a:b1:cf:7f:19:2f:3c:0d:11:5b:04:f1:96:35:
93:e9:6e:cb:e2:97:7c:fd:7f:28:d3:de:88:95:65:4b:02:6d:
ed:4c:73:92:e5:ee:4e:e9:de:81:34:6d:92:27:0e:80:ad:42:
37:d5:cf:fe:35:33:56:ca:97:ad:10:7d:53:d4:1d:de:83:1b:
b0:4e:d8:25:5a:12:08:96:39:cd:1c:4c:36:eb:42:e3:71:ea:
72:11:07:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:55 2024 by rpki-client on console-ams.rpki-client.org