Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/hQhL_v4CNrWF524ys_c-CVAfYPM.roa
File: hQhL_v4CNrWF524ys_c-CVAfYPM.roa (raw, json)
Hash identifier: P15xfDuj/yJak+YsOANEV1/20VKcBRQcONaGb07iIXg=
Subject key identifier: 85:08:4B:FE:FE:02:36:B5:85:E7:6E:32:B3:F7:3E:09:50:1F:60:F3
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 019373AFEE5FFCEAA429E1D7D16450987B79
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/hQhL_v4CNrWF524ys_c-CVAfYPM.roa
Signing time: Thu 28 Nov 2024 16:52:09 +0000
ROA not before: Thu 28 Nov 2024 16:52:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.40.0/24 maxlen: 24
94.154.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Dec 2024 18:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:af:ee:5f:fc:ea:a4:29:e1:d7:d1:64:50:98:7b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Nov 28 16:52:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85084bfefe0236b585e76e32b3f73e09501f60f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:b2:2a:d8:4b:56:35:62:b0:64:e0:fd:40:
97:18:52:39:bf:a3:4d:be:d7:12:60:0e:02:f1:16:
24:87:9e:f4:23:16:dd:52:81:41:b2:57:8a:30:10:
70:32:a2:eb:9a:37:ab:9c:cd:72:21:13:0d:d2:49:
93:3b:af:23:24:3a:c1:ac:cb:d1:3b:18:fe:e7:1e:
e1:4a:b9:05:2f:01:bd:5e:83:d4:cf:10:d0:76:4d:
0c:3a:52:36:01:6e:91:ff:83:d8:21:08:58:2b:b8:
da:a0:44:30:1f:1b:ea:75:98:e0:bb:62:7f:f8:52:
fa:46:61:e5:9a:a4:1e:a3:cd:fb:e9:cb:29:ae:e0:
e3:01:7d:9e:0c:8f:8a:41:86:20:4a:c1:d7:2c:d4:
d6:50:4b:90:88:f5:28:14:4a:dc:8f:13:70:5b:6e:
ef:5f:20:41:a7:06:77:4b:ab:5e:42:e9:19:61:bf:
f5:bd:15:bf:ef:74:1f:0a:c8:69:56:e3:75:bd:db:
ff:4e:81:61:37:d1:03:d1:fe:2d:5a:8f:29:5e:9d:
7d:f6:ba:9f:f2:4d:ee:a1:da:eb:af:26:c0:f4:59:
33:51:85:3d:24:80:9f:8e:5b:fe:af:49:11:ad:4d:
ce:11:d1:72:cf:28:91:2d:bb:5f:f3:f8:ad:e6:97:
6f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:08:4B:FE:FE:02:36:B5:85:E7:6E:32:B3:F7:3E:09:50:1F:60:F3
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/hQhL_v4CNrWF524ys_c-CVAfYPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0/24
94.154.44.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:f8:61:62:60:d2:02:5a:41:18:08:99:61:93:1d:c0:d1:42:
30:33:eb:3c:7a:27:40:ef:e6:a8:9d:66:a1:c4:0c:61:f3:cc:
97:36:c7:be:ff:59:ef:9c:a3:87:bf:b2:e9:94:8e:51:66:35:
a6:3a:3d:6f:0d:78:44:4f:dc:64:aa:d3:69:2f:ea:b3:03:89:
90:b2:47:80:d5:1f:b7:f5:fc:11:ac:b0:3e:3b:f8:65:b9:8b:
8c:b2:29:bc:c5:be:b8:c3:99:22:b1:54:e2:3b:6b:ff:bf:71:
47:a9:34:f3:4d:41:b4:ed:44:76:79:e7:4c:dd:50:c9:d5:56:
84:0b:36:b5:5a:9a:41:75:c7:26:8d:a5:a6:d8:bf:91:f8:f1:
70:f9:5a:76:df:b6:d8:52:59:e9:f3:94:f2:66:7c:d3:dc:e7:
c9:41:f2:f9:5c:ae:82:b9:c8:4e:7d:f8:22:71:35:da:9d:4f:
d1:f1:ad:d2:a3:6b:c9:d3:43:bb:1b:95:1e:07:41:b0:9a:a6:
9c:38:c1:40:41:e2:c5:60:37:1b:a4:c5:95:15:c7:ff:dc:de:
71:67:98:98:72:93:ff:8b:13:14:ea:da:64:8c:f5:02:83:23:
fd:6a:de:42:5a:49:8d:4f:31:73:45:47:ae:48:b5:41:d0:a1:
9f:bb:83:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:48:54 2025 by rpki-client