Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/xyPW8ksd3N5JbMKFOK9h0hjaT7Y.roa
File: xyPW8ksd3N5JbMKFOK9h0hjaT7Y.roa (raw, json)
Hash identifier: k+TmN/6XX8B9DTENqpzuTBLgLoPdIiIARUTlbJXo4VM=
Subject key identifier: C7:23:D6:F2:4B:1D:DC:DE:49:6C:C2:85:38:AF:61:D2:18:DA:4F:B6
Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Certificate serial: 018CC26CFAE3F3B09DB2D0AC2F9045C1E806
Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/xyPW8ksd3N5JbMKFOK9h0hjaT7Y.roa
Signing time: Mon 01 Jan 2024 00:29:31 +0000
ROA not before: Mon 01 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5405
IP address blocks: 94.103.180.0/24 maxlen: 24
2a11:4140::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 04 Apr 2024 09:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fa:e3:f3:b0:9d:b2:d0:ac:2f:90:45:c1:e8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928
Validity
Not Before: Jan 1 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c723d6f24b1ddcde496cc28538af61d218da4fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c4:87:68:8c:74:de:ed:9d:b0:f8:89:6a:8f:
cf:b5:a7:51:ee:0e:0d:ab:25:87:8d:c9:20:01:54:
55:91:9f:e5:98:3f:7c:11:b9:14:12:9d:21:2c:ef:
5f:79:47:25:ae:7a:96:99:13:bb:01:e8:c6:ad:10:
48:f1:8f:7c:b4:62:ce:40:c0:f7:b3:7f:c7:86:37:
44:16:68:f3:03:90:5b:32:ec:65:a5:0d:77:ae:02:
8e:40:d9:ba:fa:10:e3:d7:28:e4:18:a5:a4:73:0a:
5d:86:f6:cc:d8:c5:a3:d9:47:d2:bd:81:3f:8a:f0:
e5:86:cf:82:53:63:af:40:6f:3f:dc:75:64:72:ae:
5e:3e:da:c9:57:68:3b:42:73:3c:12:ee:71:ee:8f:
02:86:67:3f:e1:2b:ab:c8:88:f4:21:f7:d4:3f:ed:
0b:4f:bf:c8:ce:e6:d1:b5:e9:40:64:68:65:17:50:
37:c8:61:26:e7:d1:db:fe:7a:6b:ee:a3:81:3e:a2:
27:80:d4:08:60:5d:da:3f:63:cd:f0:cc:4a:d9:7a:
58:7c:2f:ef:2f:51:30:e8:1c:0d:ac:7e:64:7f:21:
b1:c2:7d:73:a6:8d:3a:2f:e3:c3:21:56:f0:6b:87:
a0:e6:30:bf:fa:76:03:78:14:fb:64:72:83:25:36:
1a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:23:D6:F2:4B:1D:DC:DE:49:6C:C2:85:38:AF:61:D2:18:DA:4F:B6
X509v3 Authority Key Identifier:
keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/xyPW8ksd3N5JbMKFOK9h0hjaT7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.180.0/24
IPv6:
2a11:4140::/29
Signature Algorithm: sha256WithRSAEncryption
24:7f:8d:c9:db:31:8d:2f:16:52:49:4c:db:c7:0d:87:7a:f9:
37:e0:d5:44:68:63:e9:8f:04:c3:8f:32:53:52:d1:52:dc:dc:
cf:3a:e6:42:6d:56:31:e0:bf:3d:dd:c9:11:8a:26:c8:aa:9e:
f4:aa:6f:7c:3b:32:93:27:e1:97:ec:b5:99:c5:b3:39:5a:a7:
d4:02:d6:04:c0:9b:94:e0:0c:ce:4e:51:56:65:85:65:0d:b4:
a8:95:0b:44:9d:60:d9:e8:9e:20:1f:fd:dd:98:cc:85:4b:1d:
0a:90:a3:20:fd:25:7c:a8:c3:1e:69:12:d2:70:8b:16:64:4e:
0b:54:db:77:52:9a:25:c1:83:fb:9e:87:18:21:c7:47:ad:9c:
72:23:e2:90:cc:58:08:92:33:ba:ba:f4:7c:ac:bd:34:57:1c:
a8:d3:58:2d:72:b6:70:02:65:e4:5f:89:9a:9f:96:a8:83:4f:
1b:90:3a:75:31:5b:60:7d:0f:6b:83:1c:a6:2f:1f:ac:71:e5:
9c:e7:7f:cc:21:ff:22:0a:92:43:cf:9e:5a:fb:b1:2f:30:99:
16:24:ce:da:11:43:58:f2:bb:89:e0:20:8a:71:42:e7:4a:14:
89:26:79:e9:61:2b:87:7f:ae:e2:c3:1b:82:6a:73:84:ea:af:
fa:79:a7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:40:22 2025 by rpki-client