Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/biULhZ0UazclSXJdvi3dkNa91rU.roa
File: biULhZ0UazclSXJdvi3dkNa91rU.roa (raw, json)
Hash identifier: Ww/6inqodC8veWVTPjPP6YGLSWXpXmiIuwQ1h/U2b1s=
Subject key identifier: 6E:25:0B:85:9D:14:6B:37:25:49:72:5D:BE:2D:DD:90:D6:BD:D6:B5
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0185C5CACDB82998F3A7F6B263B488559A70
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/biULhZ0UazclSXJdvi3dkNa91rU.roa
Signing time: Wed 18 Jan 2023 16:51:20 +0000
ROA not before: Wed 18 Jan 2023 16:51:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 94.154.40.0/22 maxlen: 24
94.154.44.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:ca:cd:b8:29:98:f3:a7:f6:b2:63:b4:88:55:9a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jan 18 16:51:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e250b859d146b372549725dbe2ddd90d6bdd6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a6:2c:a4:4e:4c:32:bd:1b:8c:31:50:fe:7a:
f8:65:98:50:9a:56:f0:2a:0a:ad:e2:19:0f:cf:39:
87:dc:55:55:7c:49:6b:4c:cd:59:46:ea:70:d3:78:
4b:2d:76:c2:fc:08:9d:9d:60:2d:0d:c0:56:72:a9:
d5:bd:78:e7:86:38:3f:bc:f7:43:da:e7:72:94:d0:
28:a7:1e:5e:2d:4f:54:7d:43:c6:03:bd:d4:e7:91:
31:8c:0c:e6:31:6a:f4:91:a9:51:7d:90:11:15:e3:
ec:11:88:55:42:03:58:1d:b1:27:3c:9e:5e:d6:25:
3c:b4:42:5d:43:72:45:21:92:28:87:1a:6c:a6:6f:
cb:a7:8f:61:60:9d:6a:03:c2:4e:e6:7d:18:8d:d7:
ae:80:94:82:fc:48:5c:5a:4e:dd:ba:b7:14:58:b6:
0c:f9:1e:df:2d:66:67:63:3a:5b:8d:bd:c1:26:2d:
d9:f1:9f:fe:80:3f:32:31:83:34:be:06:27:3e:c4:
8a:15:35:7b:64:0d:17:79:01:84:a4:a5:84:5d:14:
59:5d:78:6c:cc:e5:02:7c:af:a5:d3:2d:75:29:b0:
eb:bd:c3:e6:4a:b4:1c:89:f2:65:7e:4d:5d:0f:a7:
ff:c9:3f:f8:9e:5d:a2:13:44:1a:18:62:fd:17:a1:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:25:0B:85:9D:14:6B:37:25:49:72:5D:BE:2D:DD:90:D6:BD:D6:B5
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/biULhZ0UazclSXJdvi3dkNa91rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.45.255
Signature Algorithm: sha256WithRSAEncryption
4f:da:db:f3:9a:c2:55:0c:7e:52:2f:86:49:5b:d3:b3:2f:ef:
85:09:22:7c:0c:df:8a:fe:37:95:62:f2:6e:73:27:05:60:5d:
71:74:30:72:1c:a5:ca:43:39:11:90:6d:d2:14:e7:d7:39:c2:
f3:1d:ed:a2:9c:8f:b5:52:56:91:36:f9:85:50:11:e6:df:01:
d0:22:1b:d3:33:77:eb:b1:00:30:aa:d3:d9:4e:99:d8:fb:8e:
5c:43:95:a0:19:84:79:49:11:8c:54:0b:e6:83:80:1d:db:7c:
28:72:dc:24:4d:e1:27:fe:b2:68:9d:98:c0:37:49:4f:94:e8:
19:48:e7:a6:b4:a3:3b:78:dd:49:7a:38:bb:d9:ef:7e:e4:ea:
ad:10:b2:b5:ee:23:a2:f5:82:d8:f3:4b:50:8f:53:70:d8:b6:
bb:a3:fe:12:f5:df:36:4b:2b:07:f2:9c:80:31:33:1f:99:55:
76:dc:9a:02:d2:7c:b7:7c:b7:45:e8:b2:1f:37:81:d1:31:81:
7c:6c:7e:99:04:f8:b3:88:45:63:0f:6e:78:e0:18:fc:85:27:
da:2c:db:81:98:4f:da:88:a3:97:44:ec:b2:13:37:c7:0a:0a:
d8:85:ff:cf:b2:e6:18:db:36:18:e9:d6:b6:69:3b:6b:3d:df:
e7:71:7c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:59 2023 by rpki-client on console-ams.rpki-client.org