Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/DqVbuRmjT978G5LM6XAEjxC6IQc.roa
File: DqVbuRmjT978G5LM6XAEjxC6IQc.roa (raw, json)
Hash identifier: C294DwGc21/pNpWrz3CG1go8WwU2AgfioYfWuj4PDaI=
Subject key identifier: 0E:A5:5B:B9:19:A3:4F:DE:FC:1B:92:CC:E9:70:04:8F:10:BA:21:07
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018E5DCE4EC1CDF0AE97E0B9882917281691
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/DqVbuRmjT978G5LM6XAEjxC6IQc.roa
Signing time: Wed 20 Mar 2024 21:39:45 +0000
ROA not before: Wed 20 Mar 2024 21:39:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212744
IP address blocks: 94.154.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 13:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5d:ce:4e:c1:cd:f0:ae:97:e0:b9:88:29:17:28:16:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Mar 20 21:39:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ea55bb919a34fdefc1b92cce970048f10ba2107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bc:bd:71:1f:b3:fa:5b:75:9e:b3:97:73:76:
72:8b:38:0c:05:64:73:38:c1:2a:dc:51:00:98:d3:
e9:0e:4d:ce:fd:79:f9:b5:aa:2a:2c:54:3f:d9:d4:
ee:99:27:ae:c7:b6:a1:05:cf:e3:f4:21:fa:6a:72:
81:b0:9c:0b:3b:ba:4c:cf:b6:81:0b:d1:83:87:62:
fc:e6:d0:f7:85:1e:04:78:54:03:83:77:20:86:a3:
06:f1:b3:54:db:20:b0:11:ea:4b:7a:7f:93:c2:3b:
31:d0:f8:5e:1f:94:7d:fa:4e:d3:c2:e4:83:45:f4:
8e:af:12:c3:9f:db:c4:4c:05:c2:d0:a7:10:59:29:
a2:19:0a:ee:d0:7d:a6:35:1d:1d:f2:20:57:45:dd:
61:f4:1b:c5:02:b3:1c:d9:c7:8a:63:9a:dc:05:25:
77:ac:95:66:98:47:73:cd:89:55:ed:e7:17:41:1f:
d6:5c:61:69:43:3a:c0:08:1d:39:7e:3f:91:e7:bb:
2f:de:4a:80:37:5a:d7:25:85:f5:a6:af:c8:97:a7:
8e:fc:12:68:3e:9b:93:51:35:cb:af:13:21:c1:1e:
40:8a:57:41:f2:d7:6b:98:cb:60:66:0d:b9:ad:2f:
14:66:9b:48:99:13:4c:cd:f8:15:78:3e:33:1b:8b:
38:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A5:5B:B9:19:A3:4F:DE:FC:1B:92:CC:E9:70:04:8F:10:BA:21:07
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/DqVbuRmjT978G5LM6XAEjxC6IQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.41.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f6:5c:89:05:5f:3d:88:48:b7:cc:80:34:5d:34:c6:c9:64:
bb:c5:98:06:80:8e:bd:f3:b7:06:45:15:84:a6:c6:98:a3:74:
f7:74:ce:bc:50:5e:2b:9b:01:2e:6f:bb:79:16:e0:91:72:9a:
12:ff:d4:65:56:ea:9e:ad:43:6f:41:ad:40:b6:61:8b:fb:e9:
cb:ab:29:1f:ec:24:62:a4:a9:64:5b:ff:c9:50:ab:33:1d:70:
be:da:6c:86:4b:2b:e4:b6:98:47:b7:e3:c1:e4:b2:9e:dc:c6:
c4:b5:17:8d:2d:b7:d4:15:39:d8:7c:4c:88:cd:60:eb:8f:1f:
50:8f:2d:47:8f:97:b1:ce:7d:47:eb:d2:3e:27:28:48:df:e0:
00:cb:ec:b6:ce:02:1a:d8:52:07:7d:9c:df:8d:47:51:8d:c0:
96:14:1f:97:73:69:26:f9:4f:bb:f4:8d:fb:e0:ba:6e:b4:b8:
8e:99:5f:5d:9c:4b:3d:b6:df:a3:77:b9:d9:3e:51:b0:de:48:
1b:b4:eb:ef:9f:1e:09:04:26:86:bb:ce:ba:62:86:17:0d:a3:
46:53:16:38:10:f8:5a:05:fd:ae:67:33:d6:86:16:57:c6:32:
37:d3:4b:4e:81:bb:31:04:43:49:00:1f:20:54:22:f0:18:dc:
d3:80:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 16:36:44 2024 by rpki-client on console-ams.rpki-client.org