Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/r2LbIw-Qu5YnT3ZrYcoOoEj26tY.roa
File: r2LbIw-Qu5YnT3ZrYcoOoEj26tY.roa (raw, json)
Hash identifier: EahodueSJVLF0mfohHtzBM4tadW3+FxNXMdR+HjznjI=
Subject key identifier: AF:62:DB:23:0F:90:BB:96:27:4F:76:6B:61:CA:0E:A0:48:F6:EA:D6
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018BCD407C3F98F17B4EDF877D313CEAA40F
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/r2LbIw-Qu5YnT3ZrYcoOoEj26tY.roa
Signing time: Tue 14 Nov 2023 09:53:57 +0000
ROA not before: Tue 14 Nov 2023 09:53:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.41.0/24 maxlen: 24
94.154.40.0/22 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 12:42:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:40:7c:3f:98:f1:7b:4e:df:87:7d:31:3c:ea:a4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Nov 14 09:53:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af62db230f90bb96274f766b61ca0ea048f6ead6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:17:fa:72:8b:00:f7:30:5e:1f:ca:fd:e7:
67:29:f0:cf:3e:ee:e4:4f:8b:f3:d4:5f:41:5b:40:
c2:8f:5b:6f:2b:41:d0:82:57:4b:9f:0b:2b:5f:34:
e4:18:27:e0:63:af:67:a9:d7:cd:58:ed:e6:f3:42:
cc:cb:1e:6a:5b:7b:ad:6c:1f:34:b8:d7:15:5a:26:
d9:ea:25:a7:31:4b:cb:99:3a:df:fe:b6:0c:da:84:
11:25:be:2e:cb:0f:55:e8:1c:02:f1:85:4f:96:d0:
09:14:2d:18:2d:1a:0a:59:b2:d3:78:4f:fa:01:f2:
ae:a1:fd:e9:78:9b:c9:ec:4f:96:55:8e:27:dd:33:
9e:49:51:8e:39:67:23:89:1d:83:dd:27:62:6e:0c:
d9:5f:07:a8:14:1a:e3:c2:bc:e6:33:ed:3c:fb:e4:
88:b9:81:73:99:bb:a4:35:b6:47:9d:6e:8f:ed:15:
ad:9c:aa:5c:93:7f:91:76:5f:20:74:7d:55:18:b8:
f9:70:e2:c4:67:9a:77:a7:16:68:0c:e4:29:ca:5c:
34:c1:12:4f:06:cb:33:e7:a4:eb:2e:24:26:ea:31:
47:85:12:13:34:36:16:e5:a0:35:91:58:3d:45:06:
80:66:06:54:06:cf:31:f6:fc:5a:3c:32:82:0f:34:
82:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:62:DB:23:0F:90:BB:96:27:4F:76:6B:61:CA:0E:A0:48:F6:EA:D6
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/r2LbIw-Qu5YnT3ZrYcoOoEj26tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
7e:5e:99:87:a9:39:b9:6c:cb:77:ab:89:5a:7f:1c:22:34:0a:
e9:2b:33:e0:94:e1:7f:d6:28:1c:db:78:70:0c:10:c9:de:9e:
8d:e4:a6:b0:3a:04:b6:c3:87:62:d9:27:5e:8f:40:7f:b0:e4:
c3:61:df:77:f2:9e:43:84:78:91:b1:8b:c5:14:1b:1d:4f:a5:
fa:c0:04:56:78:b9:37:db:54:27:f6:23:88:7c:85:28:cc:17:
67:54:9f:42:75:dd:e0:54:2b:e0:38:68:80:56:04:3a:9d:31:
61:c2:65:d7:34:ea:f7:8b:db:a3:39:fa:64:ee:09:5a:bc:80:
4d:44:09:9b:3a:57:6a:ca:c2:1e:e2:b3:ff:6f:0a:8c:33:ab:
7b:7e:d2:ff:42:06:50:26:26:de:97:5f:83:e3:29:db:f9:13:
73:ab:68:5c:23:1c:ed:15:43:ae:3f:4b:58:f5:87:f2:80:42:
ac:84:0d:af:0a:ee:ac:0a:be:b1:7d:53:1e:35:57:26:dc:71:
0d:19:7b:ac:8f:a7:f4:e5:5a:b5:4e:0a:b8:e7:b7:b8:e5:12:
17:50:13:35:df:3c:05:51:b8:eb:b2:c6:a6:14:66:59:b5:da:
dd:60:7a:cc:0e:f9:73:44:34:4f:ee:8c:c7:75:ec:4d:5e:ce:
02:7e:0d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:31 2024 by rpki-client on console-fra.rpki-client.org