Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/P6_j_7JueM2qX2DNLkJ4xd-mfqw.roa
File: P6_j_7JueM2qX2DNLkJ4xd-mfqw.roa (raw, json)
Hash identifier: 1KgrsOGNmdES+TtPo2lySGKvcVuiKi0oflOciITx8bw=
Subject key identifier: 3F:AF:E3:FF:B2:6E:78:CD:AA:5F:60:CD:2E:42:78:C5:DF:A6:7E:AC
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018D37A91D67F10CEF179C08DA1A5784D71A
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/P6_j_7JueM2qX2DNLkJ4xd-mfqw.roa
Signing time: Tue 23 Jan 2024 18:50:46 +0000
ROA not before: Tue 23 Jan 2024 18:50:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 94.103.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 14:05:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:37:a9:1d:67:f1:0c:ef:17:9c:08:da:1a:57:84:d7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 23 18:50:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fafe3ffb26e78cdaa5f60cd2e4278c5dfa67eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:33:44:34:82:50:2c:b4:a0:ca:a9:d8:6a:
94:37:d0:71:07:e4:2d:0a:cb:00:7d:b5:a9:03:ed:
11:40:58:ee:f9:73:bf:f5:d4:b9:c8:a4:d3:1b:70:
90:6e:a8:90:01:57:81:de:5c:20:7a:85:3a:f0:43:
a8:6e:92:63:b1:be:0d:7d:c8:0a:e2:fa:6f:69:84:
c0:08:14:ef:2a:fa:e9:03:0b:df:92:26:08:f6:f0:
e2:93:49:56:a7:ea:9c:f8:36:33:5d:f2:30:8f:2f:
d7:14:5e:d4:16:61:9f:82:34:91:63:5d:c8:08:11:
c8:2b:2e:f0:6f:9b:9f:be:b6:b9:e6:56:cf:87:45:
2c:5c:2b:77:3c:61:d9:83:0e:5d:b0:5b:0a:bd:0d:
7e:19:f5:01:73:3c:db:cd:3d:e1:94:c0:89:d0:7b:
e8:23:a6:d0:68:84:76:e5:56:61:a1:e1:35:60:52:
2c:3e:a6:a8:71:12:60:b4:79:a1:7c:6b:08:f5:a1:
00:55:64:e5:25:d5:43:77:e8:ba:e8:be:9d:60:16:
16:0f:f0:06:71:7f:d1:e2:87:7c:d6:9b:92:15:18:
01:f0:3e:59:09:e5:d8:ce:a7:bb:80:b0:ec:7a:ca:
22:ee:50:3f:7b:25:56:db:84:a4:8c:bc:b5:82:32:
22:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AF:E3:FF:B2:6E:78:CD:AA:5F:60:CD:2E:42:78:C5:DF:A6:7E:AC
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/P6_j_7JueM2qX2DNLkJ4xd-mfqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:4a:c0:ff:a1:fb:b8:e8:b1:5b:e9:de:a6:0f:b2:98:53:b0:
40:b1:40:ea:f1:e9:71:12:32:7d:d5:04:e6:00:1f:56:7c:c5:
b1:7c:7d:4f:29:11:5b:c3:4c:8a:c0:45:92:79:8a:48:f1:85:
ff:da:35:6c:98:1a:31:99:5e:34:1f:2c:47:54:1e:5b:58:83:
d4:c4:6c:e5:01:de:35:1a:db:21:6f:ac:4e:91:5d:a1:57:36:
f9:76:a7:33:48:e5:2c:20:db:d1:2c:e1:6c:b1:c4:2f:70:77:
36:07:43:93:7a:84:3f:62:f5:df:aa:42:25:e5:1e:ac:df:94:
da:a6:d1:2e:cf:8c:dd:24:58:b8:b9:ff:01:26:26:64:9c:e0:
5c:b8:9c:ac:4f:59:1a:98:70:da:4d:15:51:39:a5:9c:4c:e4:
b5:ff:01:9f:16:f2:e3:55:37:1a:f4:1a:fb:fb:4e:69:ed:ea:
8d:62:d7:62:d6:58:15:26:21:36:ae:65:76:f4:a4:f4:38:ba:
75:99:eb:99:2f:e1:19:5d:5b:17:67:20:12:ed:06:6c:ab:61:
58:9c:9c:5c:50:ce:3f:67:1e:8c:d8:c1:64:75:37:6b:ab:9c:
43:43:a3:c7:8a:0c:5c:8b:70:01:41:86:12:7e:9e:d0:6d:d7:
91:bf:3f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 19:49:52 2024 by rpki-client on console-ams.rpki-client.org