Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/bP9ZxrTfGRTF7hxuyXe3MMmwr2U.roa
File: bP9ZxrTfGRTF7hxuyXe3MMmwr2U.roa (raw, json)
Hash identifier: MWTrB9ICW/qXhr47hklqA2SW9GYGsF932hbneXPA6BI=
Subject key identifier: 6C:FF:59:C6:B4:DF:19:14:C5:EE:1C:6E:C9:77:B7:30:C9:B0:AF:65
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018CC5DC5D9C3B680F83A948A9EB53AC0343
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/bP9ZxrTfGRTF7hxuyXe3MMmwr2U.roa
Signing time: Mon 01 Jan 2024 16:30:02 +0000
ROA not before: Mon 01 Jan 2024 16:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.41.0/24 maxlen: 24
94.154.40.0/22 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 21:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5d:9c:3b:68:0f:83:a9:48:a9:eb:53:ac:03:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jan 1 16:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cff59c6b4df1914c5ee1c6ec977b730c9b0af65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:05:16:a8:43:ab:90:bd:56:e7:f0:24:de:e8:
20:83:40:c5:e0:7a:cf:fc:92:88:d3:f9:5b:d8:85:
b0:1d:44:59:b4:84:9d:1f:cd:a9:08:12:d1:71:31:
72:15:3e:42:ed:a7:da:4a:76:f8:03:b0:ef:cb:eb:
b3:18:a9:2f:75:76:51:56:70:07:a7:81:ae:99:ed:
d8:7e:18:b2:04:93:3e:96:23:ea:6d:af:d3:aa:5e:
28:bd:fc:37:87:98:91:41:5e:39:29:8f:a2:da:19:
86:27:ce:09:66:57:40:a3:51:ed:d8:2c:c0:3d:b4:
2a:d0:f0:ef:9b:40:5d:2c:5b:e9:d3:4a:c7:89:46:
d7:43:7f:93:35:dc:76:56:14:db:fe:4a:18:1f:6f:
06:fe:e4:70:e0:57:0b:28:34:2f:35:7a:97:c0:c2:
1a:d0:9c:22:7d:a4:f5:c2:1f:7a:ea:ff:af:b0:ee:
24:bf:8c:4f:1f:ee:25:8c:ec:0f:20:39:60:a5:7c:
6c:0f:68:1b:7c:bb:9a:b6:82:b2:03:6f:81:33:65:
e9:51:97:fd:e4:38:38:74:69:da:08:7a:a0:f8:1f:
d9:01:9d:66:cd:ec:5c:e5:71:61:66:3c:40:4e:13:
a0:5a:92:1c:61:66:3a:9c:0c:82:d4:cd:f5:68:8e:
9c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FF:59:C6:B4:DF:19:14:C5:EE:1C:6E:C9:77:B7:30:C9:B0:AF:65
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/bP9ZxrTfGRTF7hxuyXe3MMmwr2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
5c:c3:68:c0:89:36:74:fe:d7:2c:94:a5:85:9c:75:62:34:1b:
a6:c1:c7:9c:f0:ad:8e:24:7a:67:ea:00:97:06:84:0e:43:0c:
5d:c3:4b:9a:64:6b:65:a9:c1:b8:07:c3:10:ee:73:62:34:4f:
af:12:32:8b:77:ae:eb:c7:82:87:75:d9:c8:9a:70:0c:41:a8:
be:60:e1:3f:b2:06:48:dd:e4:7a:5b:1f:bb:77:77:f4:8c:30:
0f:a7:55:fb:e2:91:f9:64:24:e9:7c:8b:51:ff:8c:02:43:8b:
93:f9:da:4d:e1:d2:76:82:ce:24:1b:2d:c0:27:e0:bf:0d:39:
8a:82:ac:a1:e0:5a:87:82:27:02:73:8d:3e:ae:c4:93:e0:fd:
96:76:39:d0:63:19:f7:a3:5e:99:c6:66:64:d9:79:ff:0e:eb:
8f:82:b3:48:1a:d0:ec:64:bc:b4:61:bf:2a:7b:3d:11:40:2b:
b3:78:26:07:32:00:cb:30:c4:1a:e9:6f:44:35:48:b8:8a:44:
41:75:dd:b1:49:ff:80:41:6a:83:18:6c:ee:56:7f:87:16:03:
eb:93:48:7f:32:d8:32:33:93:5b:70:97:9a:b6:57:f6:ce:6a:
dc:4e:27:36:74:7c:ea:6c:8b:0b:13:11:0a:d5:d5:bf:78:ed:
47:d4:74:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 00:46:59 2024 by rpki-client on console-ams.rpki-client.org