Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/ORdsHqq_bM0oWAbNCmnIBX4XBTg.roa
File: ORdsHqq_bM0oWAbNCmnIBX4XBTg.roa (raw, json)
Hash identifier: MTjwBKCgg047XyMUXuKpIl8Smpiz8eLXEp4X7JygA9Y=
Subject key identifier: 39:17:6C:1E:AA:BF:6C:CD:28:58:06:CD:0A:69:C8:05:7E:17:05:38
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 01937836FDF2DACC477F0153999AF4E36340
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/ORdsHqq_bM0oWAbNCmnIBX4XBTg.roa
Signing time: Fri 29 Nov 2024 13:58:09 +0000
ROA not before: Fri 29 Nov 2024 13:58:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 329007
IP address blocks: 94.154.40.0/24 maxlen: 24
94.154.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Dec 2024 18:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:78:36:fd:f2:da:cc:47:7f:01:53:99:9a:f4:e3:63:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Nov 29 13:58:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39176c1eaabf6ccd285806cd0a69c8057e170538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:f0:59:30:ee:92:c3:88:ce:e2:b9:94:a1:
76:6c:55:9f:a5:b8:cf:11:8f:93:2f:78:d1:36:93:
cd:eb:5f:84:49:32:f5:ee:b4:52:f5:24:fb:06:ca:
61:6d:91:ff:cb:c3:13:12:00:c4:0e:a8:fe:8a:89:
b5:a3:39:4f:a7:7c:5c:f6:a3:7a:a6:8a:d3:19:aa:
c2:a9:fd:0b:d8:2c:e8:56:b0:39:74:46:b7:78:71:
d6:33:98:7b:3b:31:c8:29:45:a1:a9:38:64:7e:ce:
0c:9e:73:95:b3:60:19:12:a6:a7:83:fe:4e:a5:b0:
91:69:82:57:f6:3d:e9:6e:c8:24:04:0e:6b:de:94:
90:95:a1:79:b9:89:98:c5:e6:06:24:36:fa:07:13:
2e:fa:6c:92:aa:de:1d:03:93:e6:bf:ad:c9:8b:a4:
14:88:1d:e0:f8:3f:8e:79:40:72:02:0f:e8:a8:e6:
80:e6:fa:3a:e7:8b:d2:a6:ed:2f:9d:62:3c:c5:dd:
2e:c9:19:f3:ce:a6:f4:09:a9:93:9a:e9:57:b3:64:
ee:63:72:5b:09:89:d8:3e:7e:37:fa:ba:ab:bc:c1:
b6:75:84:4d:ed:39:28:09:b0:4f:1d:9e:fc:c9:5b:
8c:d4:5f:46:f5:fa:ed:23:2d:b8:47:94:d1:4b:c0:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:17:6C:1E:AA:BF:6C:CD:28:58:06:CD:0A:69:C8:05:7E:17:05:38
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/ORdsHqq_bM0oWAbNCmnIBX4XBTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0/23
Signature Algorithm: sha256WithRSAEncryption
38:ff:74:63:e2:34:ae:b0:2c:ab:07:44:14:4b:94:ef:45:7b:
48:58:03:d4:0a:cc:1a:ed:e6:b7:14:3f:46:78:74:e0:af:f0:
d2:d9:35:d4:8a:15:d5:14:03:d6:e6:db:50:4b:34:4c:aa:ff:
ba:8d:36:97:93:2f:cb:86:47:cc:54:55:d1:94:5b:37:16:9f:
cf:e5:f2:d1:60:21:e2:be:fb:0f:3e:12:fa:76:23:16:7f:41:
5a:0e:86:54:43:89:a1:b6:36:44:c6:f1:12:22:be:a6:84:5c:
b1:b3:02:d2:d0:c8:83:82:2f:21:e1:7f:e3:12:a9:74:01:e5:
a4:d0:be:6d:22:e3:22:11:64:b1:97:f2:ae:1b:bd:2b:b1:de:
d1:55:c4:85:45:63:4d:6b:44:3c:44:08:6b:43:68:28:53:bc:
b7:b9:08:23:0e:eb:31:50:d7:01:5c:73:d9:90:9f:07:9c:a7:
53:7c:45:02:67:88:53:db:68:30:2e:af:d0:b0:02:03:59:d2:
ca:44:a1:3a:e0:79:83:8c:4b:db:0d:9b:82:11:0e:2b:d0:45:
2c:c9:8d:30:af:55:58:c7:d3:bd:29:67:26:64:17:aa:49:43:
99:c4:7c:3a:31:c2:6c:97:33:4c:6e:fa:47:fe:8f:d5:68:27:
7a:22:16:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:56:03 2025 by rpki-client