Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/zugjDkFBYas3v-YIOmpPqLtWgHA.roa
File: zugjDkFBYas3v-YIOmpPqLtWgHA.roa (raw, json)
Hash identifier: 4YgD03WlHX6A1lDns34vucFU0MqzXNKlTdLhNEzsW64=
Subject key identifier: CE:E8:23:0E:41:41:61:AB:37:BF:E6:08:3A:6A:4F:A8:BB:56:80:70
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018BA622BD479A9D2E4306C8E1EF6359AD8D
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/zugjDkFBYas3v-YIOmpPqLtWgHA.roa
Signing time: Mon 06 Nov 2023 19:36:16 +0000
ROA not before: Mon 06 Nov 2023 19:36:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 94.154.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 11:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a6:22:bd:47:9a:9d:2e:43:06:c8:e1:ef:63:59:ad:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Nov 6 19:36:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cee8230e414161ab37bfe6083a6a4fa8bb568070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:90:8e:df:43:2d:a4:72:f3:5c:5e:e4:a6:b3:
98:6e:93:00:7d:80:27:be:14:77:c4:9f:bb:37:4e:
60:d0:d6:29:e9:3b:53:c9:43:06:ad:6a:b3:02:81:
8d:73:8d:ab:11:00:e6:f2:da:92:8e:f2:e4:6a:96:
20:11:10:7b:40:45:c2:1f:9d:e5:df:44:02:3d:47:
fe:43:84:eb:2f:be:bb:b7:9d:3e:e8:ec:b4:93:f5:
d4:54:c9:1e:de:c9:cf:1e:31:94:f0:ca:4f:66:6e:
cf:b2:37:f3:de:49:a8:7d:df:30:51:2a:14:21:9f:
5b:de:eb:d1:a2:6a:d6:c8:bf:11:dd:cd:a6:2b:ca:
e5:be:b1:7f:e1:ba:93:0f:02:20:e3:e7:55:5a:bb:
e6:dd:4b:1c:17:2e:1d:ff:01:46:e0:90:ab:1d:d4:
11:0b:49:70:99:27:67:90:4a:ff:27:98:0f:53:9f:
a2:df:5f:96:d1:fb:14:6f:20:27:b3:86:11:55:a9:
1b:96:dd:f9:4f:c1:ac:f7:78:c1:fb:ad:4c:a3:64:
d8:35:c8:c8:26:1b:08:af:6e:31:ad:83:4e:23:a8:
b2:cb:c5:9f:8e:ea:79:e4:c7:d6:cb:66:bf:ad:c9:
3f:24:42:00:15:8f:33:6f:ae:62:cb:c2:8e:78:73:
64:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E8:23:0E:41:41:61:AB:37:BF:E6:08:3A:6A:4F:A8:BB:56:80:70
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/zugjDkFBYas3v-YIOmpPqLtWgHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.43.0/24
Signature Algorithm: sha256WithRSAEncryption
15:41:a3:9f:9d:0b:68:76:f9:c1:76:63:91:b2:b3:56:b6:60:
d4:1f:47:1a:ff:04:be:a3:23:a7:49:9f:bf:e3:23:14:69:bb:
b6:15:66:dc:23:b4:4f:5c:99:ca:75:db:af:f3:69:67:77:59:
d5:0d:8f:85:e0:b5:d4:bc:f5:73:fc:47:fa:9c:7c:1f:da:55:
d8:02:90:09:c2:b6:5e:09:62:73:40:d8:33:9e:cc:97:5d:7a:
8b:36:b9:7a:76:fb:47:1e:15:be:0c:9e:50:4b:5b:38:84:38:
0a:9d:fa:77:3f:cd:a6:5f:76:41:c1:0a:1a:c0:13:59:e5:b1:
51:ba:ff:bb:d5:9f:73:63:b9:d0:17:df:ac:95:71:83:cb:5a:
e9:bb:e5:29:3b:49:82:c9:c1:0a:30:66:db:88:ed:95:e4:25:
78:1f:93:ea:a4:e1:b8:06:53:7a:ee:eb:af:37:43:a1:0e:6c:
8a:78:48:17:ea:6c:9a:77:a2:5a:59:49:ec:c3:21:77:d1:54:
05:dd:75:24:54:2d:39:87:0a:d0:08:51:05:29:a0:f6:71:88:
ea:af:90:cf:b5:f6:ab:83:6d:11:b3:1c:ce:ab:5c:24:2f:29:
eb:cf:6a:f9:53:73:27:6d:c6:6d:a7:63:07:50:c9:67:71:20:
c2:30:be:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:31 2024 by rpki-client on console-fra.rpki-client.org