Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/kyUmAeRtXllV7BpFbFGl29d9E1Y.roa
File: kyUmAeRtXllV7BpFbFGl29d9E1Y.roa (raw, json)
Hash identifier: KtfwOsBvz9+VS6PGKV1hHZUGZixBRwK8P8WpJJADlfY=
Subject key identifier: 93:25:26:01:E4:6D:5E:59:55:EC:1A:45:6C:51:A5:DB:D7:7D:13:56
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0189C0EFF3729EA80F726A35C2533B4A46E0
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/kyUmAeRtXllV7BpFbFGl29d9E1Y.roa
Signing time: Fri 04 Aug 2023 14:24:58 +0000
ROA not before: Fri 04 Aug 2023 14:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 94.154.44.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:ef:f3:72:9e:a8:0f:72:6a:35:c2:53:3b:4a:46:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Aug 4 14:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93252601e46d5e5955ec1a456c51a5dbd77d1356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4e:dc:f5:5e:f9:eb:b2:85:f4:8f:4d:3c:b5:
5c:f3:07:f8:16:7d:b4:3c:63:11:57:39:31:8c:f2:
93:1f:61:58:21:78:ec:d8:27:0b:5f:0f:2e:29:5b:
7b:98:34:9d:e4:94:d3:a4:d8:cc:a9:ff:d3:45:b1:
ad:74:68:4e:15:2c:59:b7:a1:bf:6d:68:23:fa:94:
48:ab:0e:6d:61:ac:2f:f0:64:58:5f:25:dd:3b:dc:
6a:41:25:a3:e3:50:49:6d:0b:e4:06:fc:35:93:e3:
10:01:8b:f4:cf:b5:2a:37:09:83:cd:f6:cc:b0:c5:
02:09:37:6d:db:69:77:6b:be:30:8e:b3:87:30:7e:
f9:72:5c:c2:3a:a6:f9:80:6b:8d:9f:3b:7f:fc:49:
ac:dc:82:9e:6a:3e:68:55:35:dc:4c:b7:18:8d:99:
c0:b5:73:3d:b3:bf:90:3e:39:5d:0d:4e:58:e2:03:
36:97:2a:17:7a:ff:f6:84:37:ae:81:a6:43:0b:70:
b8:b3:72:41:83:b0:a9:bb:96:13:7d:8d:bd:4d:85:
e2:35:ea:e0:ca:b0:72:2f:5f:65:6f:0f:92:4a:2e:
0b:f4:7f:61:eb:9a:6a:21:98:10:26:3f:6f:52:02:
a0:b5:73:24:30:50:1e:8c:d0:06:26:d6:64:76:4e:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:25:26:01:E4:6D:5E:59:55:EC:1A:45:6C:51:A5:DB:D7:7D:13:56
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/kyUmAeRtXllV7BpFbFGl29d9E1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.44.0/23
Signature Algorithm: sha256WithRSAEncryption
79:d2:02:51:fa:c5:e0:ac:da:99:7c:08:5c:24:e6:b8:6b:0a:
f4:a0:da:e1:d8:5d:6b:59:24:39:50:56:85:09:19:2e:6d:06:
80:45:1f:30:1c:24:b8:0c:4a:6d:c4:bf:77:30:df:eb:cc:29:
fb:9a:e1:c3:37:c0:f1:c9:70:e8:7d:a7:9f:51:f7:a4:69:12:
f5:18:b2:48:51:ed:9e:5f:d4:77:06:63:19:56:70:5b:b9:b7:
34:46:9b:a7:ff:2c:b6:42:2b:fd:a7:ce:04:a0:bd:51:49:6a:
bc:7f:bb:e9:30:04:2d:b8:86:19:24:90:b2:3c:d3:b1:77:4a:
70:86:dd:46:28:91:61:47:16:4e:42:06:0f:12:7b:27:bd:75:
46:f8:d6:73:b3:72:d8:32:d3:4a:0f:42:db:00:a9:56:93:6d:
46:88:9f:5b:02:e8:6f:cd:b7:41:19:cd:c6:ed:c0:49:a2:e7:
8a:0d:22:55:b4:33:02:ef:91:08:01:bb:4f:43:60:2f:74:83:
54:a2:23:48:fa:d3:7e:db:53:5b:b6:02:04:85:07:29:ae:85:
3b:82:3c:56:5b:f4:4d:ce:29:f4:9a:4a:e2:20:2c:4e:a9:fd:
a5:06:cc:fb:ad:92:04:38:77:1c:c9:6b:cb:8b:4a:88:b9:cc:
c2:c6:25:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 18:01:06 2023 by rpki-client on console-ams.rpki-client.org