Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/OjwZKp4fe3lK6pxo85JcmR10r3Q.roa
File: OjwZKp4fe3lK6pxo85JcmR10r3Q.roa (raw, json)
Hash identifier: VN3X9t8Nyd1tSG2nSgknhD2nzEyxNTgH5teBJdD0ZSc=
Subject key identifier: 3A:3C:19:2A:9E:1F:7B:79:4A:EA:9C:68:F3:92:5C:99:1D:74:AF:74
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018E48F95AAA1E9B80801D71C2012E938A86
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/OjwZKp4fe3lK6pxo85JcmR10r3Q.roa
Signing time: Sat 16 Mar 2024 20:34:44 +0000
ROA not before: Sat 16 Mar 2024 20:34:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.40.0/22 maxlen: 24
94.154.40.0/24 maxlen: 24
94.154.41.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 08:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:48:f9:5a:aa:1e:9b:80:80:1d:71:c2:01:2e:93:8a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Mar 16 20:34:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a3c192a9e1f7b794aea9c68f3925c991d74af74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:3f:99:d6:a2:e4:64:20:80:9a:67:ba:41:
e1:09:6e:6d:dc:0c:d0:12:18:59:04:40:8f:c9:f9:
db:17:45:b1:ca:d7:f8:da:92:80:9c:1f:60:47:97:
53:37:e7:79:d9:c6:08:d5:b9:cc:71:f5:4c:78:2d:
4f:43:fe:b9:19:b6:43:d3:dc:57:7c:46:b3:eb:94:
e2:bb:c8:3a:c7:2c:83:e7:23:8e:96:09:a4:f6:9c:
19:9b:39:97:7d:f9:b7:e1:97:10:d7:20:e9:7f:5c:
0b:19:e9:62:54:b6:35:6d:ce:91:f4:cb:b2:c4:1e:
ff:3f:5d:64:04:80:59:fa:2a:90:89:4e:82:94:a7:
66:eb:34:f4:fd:d5:1e:18:14:e4:58:6a:da:9b:24:
00:95:d8:a8:d1:3b:81:97:7b:58:4d:28:ee:ab:d9:
f7:87:e1:e7:a7:f6:b9:d8:85:8b:62:06:ea:68:2f:
c6:45:5f:35:21:14:6a:2c:84:f6:86:3b:53:36:c8:
d8:0f:2d:1c:57:5a:65:9e:fc:68:5a:41:e2:c9:0d:
58:fc:43:8d:d1:ca:14:14:0f:aa:44:c5:5d:55:5d:
c7:83:a1:0c:b3:9d:13:39:ce:5b:83:44:c0:6d:9c:
1d:50:c1:8f:56:fe:12:d6:37:ae:ae:b5:80:38:c5:
0a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3C:19:2A:9E:1F:7B:79:4A:EA:9C:68:F3:92:5C:99:1D:74:AF:74
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/OjwZKp4fe3lK6pxo85JcmR10r3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
3f:ef:14:ac:b4:04:a2:dc:4a:c1:2e:40:3f:55:d3:a9:c9:96:
ba:0c:a7:7c:f6:04:6a:d4:14:8d:1c:69:46:bf:b0:21:7c:48:
a9:28:c0:a9:88:91:bd:03:44:eb:46:af:3f:f1:ab:99:e4:54:
6b:3e:37:df:f8:27:70:57:04:52:b0:f5:e8:8f:72:7e:ca:70:
c3:e6:11:75:05:29:ea:2c:6f:7a:f4:71:b1:44:28:6a:18:b1:
e3:e0:d3:d8:29:d3:a2:f1:cb:7d:45:d3:76:04:9b:4a:80:c4:
8e:51:6d:7c:f4:1e:89:43:2e:85:de:2e:8d:5a:cc:50:15:53:
32:27:e7:db:48:52:dd:9d:73:14:cf:a3:bd:da:f1:ea:6a:6a:
cf:73:90:29:a0:52:8c:15:78:86:da:6b:df:a5:6e:a3:45:b5:
37:41:d6:c6:85:0f:9b:f9:1b:8c:0c:ce:06:64:dd:a2:4e:ee:
70:c4:47:87:3e:f5:30:04:d5:e1:bf:47:a4:52:dd:1c:83:4d:
a0:0d:e3:30:a4:ba:81:f1:1a:27:7c:77:85:ef:fb:16:ef:77:
7a:52:7e:c8:2a:46:24:65:60:93:aa:ce:1a:20:af:f0:0a:a4:
9b:99:06:0a:24:21:88:a8:97:f2:4c:91:d2:f8:5d:25:83:0f:
c9:7f:77:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 13:57:57 2024 by rpki-client on console-ams.rpki-client.org