Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/hHyu1NNsojXIqCkVUEi5PXGkEVM.roa
File: hHyu1NNsojXIqCkVUEi5PXGkEVM.roa (raw, json)
Hash identifier: 15F5A9FyoqIxnLX23yN3DGcAgt6rpWlMhrLtokAfsXg=
Subject key identifier: 84:7C:AE:D4:D3:6C:A2:35:C8:A8:29:15:50:48:B9:3D:71:A4:11:53
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 01856DDD3ADBF8F2D97BCEDEB019F1CF8F18
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/hHyu1NNsojXIqCkVUEi5PXGkEVM.roa
Signing time: Sun 01 Jan 2023 15:04:53 +0000
ROA not before: Sun 01 Jan 2023 15:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:3a:db:f8:f2:d9:7b:ce:de:b0:19:f1:cf:8f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jan 1 15:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=847caed4d36ca235c8a829155048b93d71a41153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:ca:bc:41:55:57:33:b5:0f:fe:75:95:85:
76:39:34:8a:b9:28:84:6d:3c:1e:e2:e1:78:6d:1e:
55:4a:a8:96:3c:64:8b:7c:32:8f:e1:52:ad:6b:9a:
d8:97:48:1c:26:38:ba:9c:c4:7a:d5:a3:36:a4:e6:
87:df:03:5b:98:21:5e:83:9b:55:84:01:d4:98:b5:
df:94:e1:7a:9b:65:2e:86:61:73:df:d5:21:6a:19:
0a:52:56:45:4f:eb:ca:59:b1:54:6c:df:25:e0:97:
89:71:e7:97:0b:42:57:41:1a:8e:fb:f0:35:d4:a7:
d3:82:0f:39:7e:4a:a1:45:2b:51:06:17:8c:44:23:
7b:72:28:a7:a6:fd:94:8a:b6:3e:00:dc:38:b0:a5:
22:99:60:51:44:cf:5a:7a:7e:d5:94:3e:f6:4f:ab:
25:f6:fa:d4:f9:f1:bc:68:9b:95:44:bb:6c:db:cf:
0d:b9:50:d6:1c:10:62:e2:d2:e5:80:9b:9a:a9:47:
95:11:54:57:7a:90:72:31:a0:f6:a0:52:31:2c:55:
f9:93:a4:e1:8d:69:63:45:de:c9:bc:18:04:05:f1:
17:b8:40:6b:07:33:f3:e3:14:1b:8b:9c:10:ed:0f:
94:26:d0:84:27:4f:4f:9b:a5:e1:7f:1b:16:e7:09:
3b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7C:AE:D4:D3:6C:A2:35:C8:A8:29:15:50:48:B9:3D:71:A4:11:53
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/hHyu1NNsojXIqCkVUEi5PXGkEVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.46.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:1c:b6:51:10:1b:a3:47:a4:cd:c4:c0:37:53:65:a9:60:ce:
36:de:b8:19:83:49:28:7c:e9:4e:97:9c:a5:84:98:e3:62:8c:
f4:3f:20:c5:5b:aa:fd:ef:f5:29:1a:ad:6b:53:52:5f:33:fa:
6d:52:16:6c:1f:da:58:65:21:25:d1:9c:37:f3:7a:f5:78:07:
94:ea:5f:3e:72:6d:36:f4:5e:7d:14:e1:12:e3:d0:a2:94:c3:
7a:64:83:b7:bf:45:89:f3:70:ed:83:02:c5:5a:c0:65:ef:00:
6c:f9:0a:94:81:09:7b:6e:20:f8:05:a5:0a:10:7e:ed:9c:cb:
9c:ab:04:5a:69:91:96:9f:0d:75:81:31:01:cc:43:6f:5d:f1:
a9:5a:71:e4:e3:95:38:4d:1f:4b:69:e2:85:75:3c:61:96:97:
76:de:6e:19:06:50:9c:11:c9:48:73:2c:6f:8f:e7:37:3d:b8:
7e:12:89:b7:9b:06:13:37:d0:53:5c:36:0e:9d:b9:c6:fe:cb:
5b:b3:33:b9:77:e8:a0:c6:22:08:49:c0:cd:6e:d3:be:01:3c:
e7:94:f1:70:0c:a2:f4:78:c2:c9:ef:1d:3c:5e:af:2e:37:16:
90:a6:1a:08:38:53:d8:50:05:e9:3b:40:fb:fa:5a:74:c2:98:
62:2b:a1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:55 2024 by rpki-client on console-ams.rpki-client.org