Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/pfGLo0RGeVgUOMrUL3PaMQAQfn8.roa
File: pfGLo0RGeVgUOMrUL3PaMQAQfn8.roa (raw, json)
Hash identifier: dXWKLUS7plsK7MTHuUe7smzdLkuO/8iiEgGNtWu8ERo=
Subject key identifier: A5:F1:8B:A3:44:46:79:58:14:38:CA:D4:2F:73:DA:31:00:10:7E:7F
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018E40DDDB5A98550F439165AD008C41EFEF
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/pfGLo0RGeVgUOMrUL3PaMQAQfn8.roa
Signing time: Fri 15 Mar 2024 06:47:45 +0000
ROA not before: Fri 15 Mar 2024 06:47:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 09:23:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:40:dd:db:5a:98:55:0f:43:91:65:ad:00:8c:41:ef:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Mar 15 06:47:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5f18ba3444679581438cad42f73da3100107e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:f1:24:b3:ad:1b:1e:e7:49:2d:cd:72:86:
10:1c:af:61:f9:cc:92:ee:4b:7c:d7:47:bf:66:0e:
06:ee:ea:a0:1c:19:15:0c:2d:ad:38:c7:2b:65:43:
16:dd:1e:12:8a:86:39:98:3f:15:79:72:1b:31:9f:
23:db:1f:7a:73:34:03:e4:4e:8f:a9:95:25:56:5e:
fc:cb:f3:90:27:bc:3d:05:98:58:ce:ec:86:35:2d:
2a:32:0c:00:09:b6:cc:c3:a5:75:8f:65:99:a4:ed:
bb:52:95:91:7b:85:5a:f9:9d:41:29:f1:dd:0f:87:
b4:23:65:22:5b:ec:23:44:64:29:29:77:48:df:7c:
f4:a3:36:4a:b2:cc:55:c1:07:a4:c6:4c:02:60:cb:
f3:ca:be:04:b4:42:20:5a:ec:ed:31:ad:27:ba:e1:
88:0e:cf:d0:73:83:89:19:95:5e:71:6f:b8:cb:1a:
d0:d9:21:8d:17:14:15:82:c0:73:94:46:49:a8:41:
95:ca:80:76:72:df:97:ad:3b:30:6f:98:c0:e9:42:
48:60:21:b9:df:de:85:ce:21:d2:66:96:83:d2:de:
04:c2:1e:ea:c0:b5:ec:e7:cf:85:c5:25:e4:bb:50:
53:1e:76:8e:12:98:15:1a:64:c6:0a:ba:ec:b6:d1:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F1:8B:A3:44:46:79:58:14:38:CA:D4:2F:73:DA:31:00:10:7E:7F
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/pfGLo0RGeVgUOMrUL3PaMQAQfn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.44.0/23
Signature Algorithm: sha256WithRSAEncryption
68:d0:3b:99:5a:fd:dc:d2:17:fa:db:78:76:b2:f9:e3:cc:a5:
c6:b6:54:25:26:ac:d0:90:b9:e8:10:75:79:32:e9:1f:40:a4:
95:36:f5:6b:3c:97:e9:4e:e3:5f:eb:c6:8b:ab:5e:84:87:47:
4b:ae:15:fe:18:d9:5d:62:d5:4d:84:08:89:51:75:b7:a5:1f:
46:43:32:a8:2a:66:07:28:4d:20:bd:6e:5b:ca:a7:fc:3f:25:
7e:fb:82:6e:32:a7:34:2a:82:43:ca:82:e1:6d:ed:8e:0d:b8:
f4:53:14:fc:b5:36:27:f3:cd:48:32:b9:cf:9d:13:a0:1a:fa:
51:70:62:06:d4:8f:b1:8a:53:39:4d:c9:f8:c1:4b:1c:66:e3:
d1:19:b3:79:04:f3:22:8d:ce:bd:d8:9a:1f:50:ec:ca:d1:bf:
64:41:94:e8:db:bd:3e:d4:76:27:97:eb:c0:14:12:c4:6f:ec:
7f:91:f5:f4:70:82:c1:f5:16:37:2d:5d:3c:0d:b1:ee:0d:52:
45:0b:b5:35:bb:ec:61:57:9c:b0:8e:3e:39:48:8a:b0:69:2b:
84:8e:57:95:ef:e7:67:61:2b:7b:6b:c5:0b:c6:42:13:7b:02:
b6:bb:b0:68:6e:f2:78:bb:d0:a1:cb:5d:bb:d4:cc:ec:ba:f1:
c7:2c:83:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 13:23:07 2024 by rpki-client on console-fra.rpki-client.org