Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/t0svYpvPdXfZRk2EWp7xTR-eKZc.roa
File: t0svYpvPdXfZRk2EWp7xTR-eKZc.roa (raw, json)
Hash identifier: pv8wJT+bd+X9Mqmmci7YrsRsOtyKw0YQEVs0MtGrwiU=
Subject key identifier: B7:4B:2F:62:9B:CF:75:77:D9:46:4D:84:5A:9E:F1:4D:1F:9E:29:97
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0190498DE59D2DEDB2DD44D36D72FB80B5AE
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/t0svYpvPdXfZRk2EWp7xTR-eKZc.roa
Signing time: Mon 24 Jun 2024 09:22:34 +0000
ROA not before: Mon 24 Jun 2024 09:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 17:04:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:8d:e5:9d:2d:ed:b2:dd:44:d3:6d:72:fb:80:b5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jun 24 09:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b74b2f629bcf7577d9464d845a9ef14d1f9e2997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:5d:7b:a8:68:9e:8e:74:b8:2e:ec:5f:a7:
cb:b3:1e:ec:df:06:8b:db:fd:c3:c7:bd:6e:90:6c:
88:2b:54:42:a3:06:0e:c5:3d:63:26:b6:70:7a:d2:
92:61:58:21:9b:11:41:53:2c:65:9c:ef:60:96:2c:
83:e7:aa:ae:98:b7:04:2c:1a:59:e6:ca:3b:cd:40:
23:e0:c0:0c:3f:42:63:76:2b:82:01:af:b5:fa:b1:
be:23:7a:df:7d:63:4f:87:5d:28:74:34:d3:63:de:
68:e2:5b:e5:cf:49:e9:34:2e:d1:68:75:1a:d3:80:
97:cb:1d:80:26:8d:5d:d0:f7:af:72:1b:b8:59:2f:
56:8e:08:6e:7b:12:5e:c6:ee:6b:37:71:20:07:e8:
d1:e5:8b:d8:a0:83:bd:37:7e:40:06:2e:12:87:cd:
37:00:83:b6:08:4d:dc:f3:71:45:62:af:40:72:b9:
11:d3:06:19:a9:b8:2e:a9:76:14:78:9e:68:53:fa:
9f:28:18:27:0e:23:58:08:d5:db:0b:08:5b:97:91:
a9:0b:0f:6b:31:47:dd:f4:91:b2:ea:42:b5:5d:18:
5c:21:c8:cd:a1:00:87:43:f1:96:96:18:37:0d:ba:
45:2f:1d:4c:e9:11:f6:c6:5d:1d:7b:1d:29:64:ea:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4B:2F:62:9B:CF:75:77:D9:46:4D:84:5A:9E:F1:4D:1F:9E:29:97
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/t0svYpvPdXfZRk2EWp7xTR-eKZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.44.0/23
Signature Algorithm: sha256WithRSAEncryption
20:77:7c:aa:69:c7:bc:8a:01:f9:10:b8:e1:d4:b0:d7:5e:73:
5e:ac:e4:b2:93:6e:f8:6b:19:e9:0e:6d:66:00:fb:e4:56:9c:
d5:41:f5:cc:8b:3d:45:0f:39:30:1c:e5:e2:6d:28:b8:85:80:
a6:9e:1d:de:c6:2c:22:b3:65:e5:b3:54:3d:46:39:13:7a:56:
04:a9:25:5f:45:d3:f8:64:7e:fc:4a:52:83:95:f4:b6:91:dd:
e2:dc:f3:59:22:08:6c:45:64:83:16:63:50:50:f1:1b:98:a7:
61:57:4b:8b:d0:a2:b1:42:c7:33:3b:f8:d0:30:05:63:f1:48:
66:31:c6:0b:b6:8c:91:71:de:01:ce:6e:36:d6:16:0c:ca:4c:
76:76:8c:10:4e:ba:92:20:cd:c7:79:e5:b3:c1:86:4b:0d:82:
71:14:d9:64:08:3c:fe:67:cf:5e:4b:4a:b5:10:ba:a4:41:2e:
a5:2b:9f:78:92:f7:1e:58:7d:e5:60:ea:74:68:22:3b:5d:49:
be:43:71:75:66:8e:f5:51:fa:98:0f:4d:e9:d7:25:dc:34:82:
68:31:a0:05:65:ec:51:ab:96:81:3c:74:ec:df:71:27:d1:5d:
07:29:62:32:d3:7b:2f:85:95:32:c5:8a:7f:9e:b5:c2:66:9d:
0c:28:e8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 19:40:48 2024 by rpki-client on console-ams.rpki-client.org