Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/yJpL5Luo_ClOYeI5RLFHxOotBfg.roa
File: yJpL5Luo_ClOYeI5RLFHxOotBfg.roa (raw, json)
Hash identifier: FwQGARQVfWpN7r8hlDucwE8KXUA2kT3ytBSNA1gGEwc=
Subject key identifier: C8:9A:4B:E4:BB:A8:FC:29:4E:61:E2:39:44:B1:47:C4:EA:2D:05:F8
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018C90B87C4E02DCFE2758D695651AFC7CC2
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/yJpL5Luo_ClOYeI5RLFHxOotBfg.roa
Signing time: Fri 22 Dec 2023 08:50:58 +0000
ROA not before: Fri 22 Dec 2023 08:50:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 94.154.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:90:b8:7c:4e:02:dc:fe:27:58:d6:95:65:1a:fc:7c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Dec 22 08:50:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c89a4be4bba8fc294e61e23944b147c4ea2d05f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5b:b0:32:c8:ca:18:6c:7e:7b:69:4d:99:9e:
16:5f:2b:c6:4f:fb:cb:eb:50:ac:b1:75:4f:1d:65:
5d:d4:72:b2:ae:05:79:db:32:2c:71:69:a5:42:b1:
0e:58:09:e3:31:b8:61:b4:44:72:08:e1:e2:65:86:
fe:61:bb:a7:13:56:70:1d:e8:e5:5c:8d:f7:0f:cd:
4c:03:21:96:71:60:b3:f8:5d:9e:7c:d8:f9:94:6d:
c4:41:5f:1e:dc:67:89:5d:03:ba:1b:38:27:4a:71:
fc:1e:f4:ca:8b:ee:35:84:9e:6b:84:e1:a5:a2:e7:
29:77:e6:9d:cb:a0:10:ea:bb:81:53:99:f9:3a:6e:
ee:ea:b9:b1:10:5c:1c:c2:af:4a:18:82:08:5e:94:
f9:b7:bb:d0:7d:2d:92:d4:fb:9c:7d:c0:28:72:fd:
4d:cd:85:f7:61:d2:d6:b1:8a:7c:ea:e3:b9:c7:d7:
7c:fe:40:56:6e:51:60:dd:54:9e:e0:be:e7:c3:3e:
c8:6b:f6:08:4e:a0:81:6a:c0:ca:7f:fd:2c:41:d2:
d9:7b:f3:e6:51:d5:89:2d:2c:3b:5f:b5:ed:dc:51:
dd:3f:d7:d8:0f:64:85:f0:4b:81:31:45:2b:69:a2:
57:8d:8c:5b:f0:5c:06:13:cd:02:42:de:99:9f:2d:
c2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9A:4B:E4:BB:A8:FC:29:4E:61:E2:39:44:B1:47:C4:EA:2D:05:F8
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/yJpL5Luo_ClOYeI5RLFHxOotBfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.43.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f2:74:1a:41:23:b1:24:ec:ed:73:52:33:7e:de:d2:7c:b9:
83:de:d4:15:58:ce:3d:e9:d4:c8:cf:b2:86:f3:b2:16:1b:ff:
3b:1a:f2:5b:26:02:9d:4a:02:ae:04:4c:0b:a3:f1:77:96:2b:
97:fe:04:fe:c2:2b:41:f7:a7:be:92:3f:47:81:a1:5e:c3:03:
72:87:66:ac:f2:37:b1:5e:40:9d:3a:b9:94:e9:74:04:b4:04:
10:44:ac:82:1a:c7:05:5d:a5:0b:d8:84:0f:8d:2a:8f:46:5f:
57:c2:db:7e:89:3d:c8:c8:98:df:25:f7:a2:05:a0:e2:73:b4:
dc:ac:e2:20:cf:c0:93:c2:a5:59:40:4d:57:f1:38:a8:46:4f:
51:cd:26:f3:99:14:89:d6:94:ff:eb:14:db:3a:53:ca:96:9b:
32:4f:8b:4e:57:e1:b5:24:d2:e6:5e:2a:9e:65:c0:18:12:9b:
b2:45:4b:cd:b1:a9:3a:8e:77:1b:c2:ca:33:58:a0:43:e2:8a:
01:3d:89:52:f2:0c:a3:44:60:1a:38:46:0d:b4:f0:10:3c:d5:
a6:bc:2d:98:2f:14:22:b9:a6:70:e2:ea:da:a4:be:5d:e7:05:
05:5f:d3:cd:e9:06:cb:70:90:67:d9:83:4b:48:60:b5:27:02:
ac:af:08:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:37 2024 by rpki-client on console-fra.rpki-client.org