Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/L71-p7xA4PVxofofzC8LbSVCjyc.roa
File: L71-p7xA4PVxofofzC8LbSVCjyc.roa (raw, json)
Hash identifier: VjV1WTVKgmqVHbET0fBrR06IMIuhE0zZvtn0WWgSrMI=
Subject key identifier: 2F:BD:7E:A7:BC:40:E0:F5:71:A1:FA:1F:CC:2F:0B:6D:25:42:8F:27
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0190B1393387F24A9E358B7248A11C9B95B1
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/L71-p7xA4PVxofofzC8LbSVCjyc.roa
Signing time: Sun 14 Jul 2024 12:30:34 +0000
ROA not before: Sun 14 Jul 2024 12:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.40.0/22 maxlen: 24
94.154.40.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jul 2024 18:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b1:39:33:87:f2:4a:9e:35:8b:72:48:a1:1c:9b:95:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jul 14 12:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fbd7ea7bc40e0f571a1fa1fcc2f0b6d25428f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:61:69:b3:79:98:ac:22:c2:85:a3:99:ea:67:
cb:86:a4:e1:f1:5f:27:4a:d0:80:7a:3a:b9:83:5f:
58:2b:35:44:19:4a:6e:4a:74:ba:38:79:d4:2e:62:
76:25:16:57:be:00:36:60:8b:28:54:cd:7c:80:85:
e6:ef:e0:b3:8a:4f:4e:b8:f4:9b:6d:ac:b3:1b:11:
2f:21:64:3b:58:ac:ad:86:22:e0:af:7c:72:91:9e:
b5:22:d6:ce:d5:0b:6e:96:98:9f:25:bf:ca:3d:5b:
86:bc:99:5a:e9:27:d4:94:db:f0:04:15:ab:56:25:
ed:e4:06:8a:16:c6:11:ba:9f:5f:83:f4:c6:eb:61:
7f:5a:dc:b7:66:c9:0e:7a:61:8f:d3:f8:a3:91:6d:
9b:c9:34:4c:9e:42:46:67:f1:1d:01:df:00:b1:62:
08:55:9b:04:c2:84:a2:b8:0c:a9:a9:76:2e:e7:3f:
b0:03:91:5b:23:c2:11:90:01:bd:88:57:0a:b9:4e:
a2:77:bf:35:d2:1d:7f:07:f0:74:b9:65:b5:e2:25:
11:e4:43:1d:d3:51:ef:b5:cb:b1:c1:90:5f:b1:0e:
d0:f7:ec:3f:ee:59:97:e4:a3:95:2f:8c:e5:d7:13:
ba:4a:dc:c4:2e:da:cd:41:50:dd:47:7b:a0:4e:11:
27:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BD:7E:A7:BC:40:E0:F5:71:A1:FA:1F:CC:2F:0B:6D:25:42:8F:27
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/L71-p7xA4PVxofofzC8LbSVCjyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
8e:08:fa:b8:67:2e:e4:87:1a:e3:7a:f3:ae:88:fd:04:46:e9:
51:f3:f7:96:8c:c8:7c:b2:6b:d7:d0:1f:33:0c:77:2e:d7:31:
7b:d5:48:3c:d1:7c:29:ae:fb:9b:bc:14:5f:10:33:b1:e1:6f:
7f:7d:8e:26:4a:ea:7d:f4:0d:3b:a8:f9:86:f3:9d:db:a0:73:
87:d1:bb:47:f5:53:e1:bd:71:b5:3a:d6:0a:49:63:8e:7e:25:
1c:b3:b5:89:07:28:d1:1c:33:45:db:21:1c:81:10:be:d9:d4:
fe:8a:79:d1:21:30:cf:92:b5:97:cc:6f:f6:f8:ee:55:cb:83:
5c:e0:8f:69:7b:53:e3:db:64:af:40:70:62:08:1c:c9:aa:5c:
b1:d8:ac:9a:58:8e:65:ee:5a:00:5c:b9:9a:2b:4f:6d:55:26:
9c:fd:78:fa:ee:a3:53:a3:39:07:71:b2:56:b5:21:a2:10:90:
f6:ce:eb:87:f9:63:c8:8b:d2:7e:0d:04:49:49:58:71:2b:51:
91:90:42:e8:f8:a4:ae:30:70:17:b7:a3:8b:5e:9d:10:de:58:
ca:32:b1:70:72:3a:a2:39:f8:06:84:2a:89:fc:a7:37:98:d4:
23:0b:c4:e3:96:cc:3f:f7:09:7d:4d:37:08:7e:14:ba:09:62:
d7:75:2d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 20:31:11 2024 by rpki-client on console-ams.rpki-client.org