Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/7Au8nfBD-pJQ9T0y6GS0nnr7rVY.roa
File: 7Au8nfBD-pJQ9T0y6GS0nnr7rVY.roa (raw, json)
Hash identifier: isTHMabj8fZbVO2MRWbTEucYAOpf2S699bqrPKntVJs=
Subject key identifier: EC:0B:BC:9D:F0:43:FA:92:50:F5:3D:32:E8:64:B4:9E:7A:FB:AD:56
Certificate issuer: /CN=c50491092130dedd8466ffd5cc510576c894df6e
Certificate serial: 018572B430CD6981E1226E2BE346729ACFDE
Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/7Au8nfBD-pJQ9T0y6GS0nnr7rVY.roa
Signing time: Mon 02 Jan 2023 13:38:09 +0000
ROA not before: Mon 02 Jan 2023 13:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204455
IP address blocks: 94.154.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:30:cd:69:81:e1:22:6e:2b:e3:46:72:9a:cf:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e
Validity
Not Before: Jan 2 13:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec0bbc9df043fa9250f53d32e864b49e7afbad56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:68:17:22:fb:47:27:d1:29:74:90:0f:3b:03:
d2:af:2d:3b:e7:1a:68:25:a0:99:e0:4b:30:c2:cf:
05:a4:a5:1e:d7:5d:2c:aa:cc:7c:9c:1d:32:22:37:
37:79:83:c2:11:7b:31:fb:51:f0:7b:ac:01:14:e5:
6a:06:4d:8b:5a:96:34:6e:f4:6b:61:d2:28:80:49:
ed:06:80:ee:0a:9d:dc:b0:29:08:88:59:44:ec:67:
83:20:39:03:98:20:0a:66:ab:a6:70:17:1c:58:e1:
4c:40:c0:9d:d8:94:63:7a:ae:5c:68:02:1f:93:67:
e0:6f:cb:93:35:23:ea:67:1f:c8:4b:f5:fa:26:ca:
9c:4a:da:02:e1:bb:ac:32:8c:0d:45:91:c8:20:9d:
ad:a5:d2:7f:23:62:1a:ae:94:cf:a3:dc:14:29:48:
ea:7b:e7:0c:f6:ef:2c:44:3c:51:61:2d:a6:91:4a:
31:0b:eb:7c:42:64:d2:f8:f3:f8:ff:82:a6:f4:a4:
1b:76:66:f7:68:da:e5:d7:82:1f:27:8a:5c:70:b8:
da:61:13:e0:d9:ee:0c:42:1a:16:24:f2:12:32:9a:
93:c4:8f:df:f9:d6:46:fc:8c:9e:3c:fd:a7:a6:07:
d2:39:c1:ac:a1:19:ba:11:81:78:42:94:7f:5a:ca:
f6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0B:BC:9D:F0:43:FA:92:50:F5:3D:32:E8:64:B4:9E:7A:FB:AD:56
X509v3 Authority Key Identifier:
keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/7Au8nfBD-pJQ9T0y6GS0nnr7rVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.47.0/24
Signature Algorithm: sha256WithRSAEncryption
31:0d:95:9a:b7:5e:b8:27:66:eb:e6:70:0f:36:d7:a2:0a:30:
ea:d6:4a:5c:06:df:ad:ee:65:69:f1:a2:da:c4:01:c0:03:d2:
30:b5:62:e3:fd:04:e6:42:e9:f9:4a:8a:2e:91:83:18:be:c2:
1a:a6:7a:58:03:e5:13:53:4b:26:20:6b:ce:26:a3:5c:9c:2e:
e2:fd:d2:ef:a8:fa:d8:da:d4:dd:ad:a2:08:87:e8:bf:31:be:
cc:0b:45:da:25:b9:9b:ff:18:25:6a:00:44:d6:c7:51:cf:56:
24:e5:c8:e0:6f:b1:ac:33:b6:7a:01:1e:2d:53:a1:06:1b:93:
2f:46:fb:93:36:81:b8:d5:27:fa:88:b0:dd:81:33:e4:0b:1c:
24:79:dc:3b:95:be:7b:d8:b8:e6:98:22:53:ff:1a:ec:7d:bf:
81:ba:9b:6b:ec:3a:34:d6:80:bf:f0:8c:e1:10:00:b6:07:05:
58:95:eb:81:7e:65:bb:a8:7f:81:9f:4c:6d:d4:ba:3d:4c:37:
fe:68:89:15:82:79:5e:62:c2:b7:7a:ff:07:d2:77:97:f6:1a:
f8:65:62:bc:20:dc:df:cf:3a:ad:92:8f:21:b2:81:f4:27:9e:
68:9a:99:ba:da:a6:a9:8d:97:0d:b4:a8:c2:29:5a:10:c1:e8:
52:bb:6d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:21 2024 by rpki-client on console-fra.rpki-client.org