Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/rbxCcD5jzdOgpcKHcaRVhtT1XZ8.roa
File: rbxCcD5jzdOgpcKHcaRVhtT1XZ8.roa (raw, json)
Hash identifier: LGJ4mWf25CctizlNjTDRyRxEE45kUKFfo0aFWolDl/w=
Subject key identifier: AD:BC:42:70:3E:63:CD:D3:A0:A5:C2:87:71:A4:55:86:D4:F5:5D:9F
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 01856DDD3BE37D74F17F87F0CC3EE449995A
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/rbxCcD5jzdOgpcKHcaRVhtT1XZ8.roa
Signing time: Sun 01 Jan 2023 15:04:53 +0000
ROA not before: Sun 01 Jan 2023 15:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.40.0/22 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:3b:e3:7d:74:f1:7f:87:f0:cc:3e:e4:49:99:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jan 1 15:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adbc42703e63cdd3a0a5c28771a45586d4f55d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:14:ef:e5:1a:60:d9:67:2a:c6:09:72:13:
8c:ad:d7:cd:f5:5a:7b:6d:0c:75:51:c1:a1:89:46:
96:97:a1:44:f1:c7:16:d7:2b:9e:2b:69:d6:85:96:
cb:a2:3f:35:33:1c:0b:8a:ce:8f:23:1e:d0:b3:cc:
f1:66:07:9b:00:e1:96:e6:c6:f1:7c:09:ac:c3:6c:
0b:c9:c6:66:b2:68:9b:e7:99:33:7d:d5:b1:4e:0f:
99:35:29:73:db:e2:e4:50:78:70:3d:bf:dc:3b:b4:
09:b3:a4:69:2f:5b:a5:a9:64:00:14:58:48:ff:03:
21:85:62:c7:3b:b9:85:d1:6e:41:b2:c9:bf:d9:4e:
24:6f:2a:8b:c8:23:fa:0a:cc:4b:c2:da:cb:95:0c:
4b:d2:9a:0c:42:16:2b:39:1a:c1:93:02:91:80:ae:
b1:cf:3c:36:ec:85:36:1a:08:95:68:61:52:e0:13:
f9:6c:a1:e9:f3:bb:b9:d5:df:0f:2c:9d:27:74:da:
d2:8f:80:d5:8f:a3:fc:98:69:b3:0c:97:3f:28:0a:
2a:39:26:27:d5:90:af:52:b7:b3:92:23:a6:16:eb:
69:34:84:3f:32:cd:f8:5f:ec:00:66:6c:00:74:81:
01:0f:b5:5f:d9:d4:5d:67:44:ea:d9:c0:09:0b:c5:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BC:42:70:3E:63:CD:D3:A0:A5:C2:87:71:A4:55:86:D4:F5:5D:9F
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/rbxCcD5jzdOgpcKHcaRVhtT1XZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
a6:92:26:51:e0:05:90:86:89:fb:18:9d:f1:b5:27:33:03:f2:
90:a5:13:1c:d7:a8:2e:2a:ee:ee:c4:24:83:2b:61:b3:93:a9:
5e:b5:f6:32:d7:c2:3d:ad:02:2b:17:c5:20:1b:c5:75:84:24:
36:5f:e2:a3:1c:52:4b:07:b1:98:66:86:af:23:aa:eb:70:c7:
90:52:ab:b6:a0:83:a4:1c:7e:b5:60:7d:f2:12:ac:a8:6e:e3:
76:53:9a:14:b2:0c:f8:c5:da:21:7a:e1:da:c4:e5:f4:86:01:
a1:ea:8a:9f:67:dc:e0:c8:d2:a2:e7:8a:55:98:2e:91:5b:9d:
f2:8f:f4:1e:c0:8c:5f:b3:85:bb:ec:7b:ed:f1:ae:60:25:b0:
e1:52:3c:22:df:ad:23:0f:60:84:e9:e8:4f:ec:e0:1e:43:17:
c8:e0:e1:89:ca:a6:28:ad:a8:99:14:d8:3e:38:28:3d:20:13:
5a:7b:17:7f:49:9d:91:82:36:ec:58:0e:30:6e:99:fc:bd:d3:
31:62:bf:a9:d3:07:d0:68:c3:62:cc:53:88:de:ba:4a:ef:41:
13:34:9b:ce:97:2f:62:08:fe:08:8e:5a:ac:8f:65:71:71:4d:
95:1c:e7:e5:a3:e8:fc:fd:cf:ef:96:3e:29:48:48:40:dd:7f:
fb:ce:ec:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 10:29:14 2023 by rpki-client on console-ams.rpki-client.org