Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/wJEfgXDMNZd8dBaynvD3U-UZBjE.roa
File: wJEfgXDMNZd8dBaynvD3U-UZBjE.roa (raw, json)
Hash identifier: e0VQ5oCi3jEIy569zbbpDqqVYXcwXnJDuVBGev6YzEA=
Subject key identifier: C0:91:1F:81:70:CC:35:97:7C:74:16:B2:9E:F0:F7:53:E5:19:06:31
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 01856BCA3A7611D0E183A3E3E5193D2915AE
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/wJEfgXDMNZd8dBaynvD3U-UZBjE.roa
Signing time: Sun 01 Jan 2023 05:24:53 +0000
ROA not before: Sun 01 Jan 2023 05:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5405
IP address blocks: 94.103.180.0/24 maxlen: 24
2a11:4140::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Feb 2023 16:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:3a:76:11:d0:e1:83:a3:e3:e5:19:3d:29:15:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Jan 1 05:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0911f8170cc35977c7416b29ef0f753e5190631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:85:d9:e7:18:e7:02:45:76:4d:3e:72:c3:
98:d7:30:22:89:a5:1a:a5:40:cd:a3:07:61:1a:0c:
57:10:cc:54:07:dd:f8:ad:cd:4d:2b:e7:0c:5f:b4:
f0:76:ce:2d:ff:42:e5:c2:d0:d9:37:80:46:ef:a7:
c2:80:56:53:a1:57:68:dc:06:f4:e2:86:8f:1e:48:
46:e9:a9:db:b3:e2:71:59:b5:e3:1b:0c:af:5f:5b:
b7:76:40:e8:87:be:c6:b9:bf:42:87:23:95:6d:61:
b3:0d:42:8c:8f:68:3a:b3:2a:e6:e9:97:f1:27:a3:
37:7f:ad:e9:0e:14:c4:35:7e:56:17:d8:09:6c:7d:
85:7f:69:40:38:3c:5e:1c:a8:b1:25:44:30:c7:0a:
9a:cd:c0:70:3d:6e:fe:90:ae:e2:48:03:66:6b:d8:
5c:01:cd:eb:c1:1b:ac:c5:d1:4a:47:f1:60:8d:68:
76:41:ba:d1:e5:23:a2:2a:2f:55:e8:82:49:af:80:
ef:52:dd:cd:25:36:0c:72:3c:3e:0d:5c:17:99:ad:
bb:82:9d:40:e4:09:92:80:09:bc:c2:2f:8e:0a:8e:
c1:34:17:c0:b5:d1:20:1a:1a:b1:0e:be:7e:41:4a:
bc:40:48:57:24:5a:f5:47:04:3b:3d:18:5f:87:de:
82:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:91:1F:81:70:CC:35:97:7C:74:16:B2:9E:F0:F7:53:E5:19:06:31
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/wJEfgXDMNZd8dBaynvD3U-UZBjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.180.0/24
IPv6:
2a11:4140::/29
Signature Algorithm: sha256WithRSAEncryption
80:d2:82:5a:a6:e3:7e:1d:42:f4:ed:dd:a0:48:4d:03:6b:9b:
f5:49:fd:32:5b:35:3e:ee:71:60:24:b3:18:aa:ca:7a:09:ae:
a1:93:53:1f:74:2c:38:ef:fc:7c:1f:2d:58:71:fe:e6:3d:25:
59:95:37:0c:80:5a:96:b7:c0:47:a4:ae:32:c0:8d:49:49:9d:
09:f3:f9:ac:c2:d3:32:05:56:53:0a:6a:e1:af:a5:73:63:39:
5f:b1:8e:4c:0a:69:fa:63:bd:29:c2:db:bd:b1:4f:87:bf:9e:
09:e3:b8:df:8e:30:a9:f7:64:ec:fa:2b:07:86:37:ed:b0:88:
b2:fd:57:80:e7:3b:d6:1f:b9:58:71:cd:6e:da:bd:d8:fa:0d:
bf:44:cb:56:9e:7a:db:f0:5a:e6:be:c1:9f:91:ca:e3:d7:a7:
c2:9c:fe:4d:78:29:8f:b7:b0:93:42:3c:41:26:b7:16:91:5e:
aa:86:c5:83:6e:59:59:8c:72:a2:27:b8:16:ba:ae:3f:e3:e9:
b9:0d:42:7a:29:0f:c9:e5:a5:d8:47:a3:6f:d0:84:ea:be:9e:
cc:0a:ab:f1:cc:60:e9:24:5e:ae:99:c2:40:33:36:19:d4:58:
5b:d2:7b:d3:07:e9:3e:86:04:8e:c7:a5:cd:8b:33:99:d0:b2:
64:03:b1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:13 2024 by rpki-client on console-ams.rpki-client.org