Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/4N-LPkXfNiXiFi4QCZCF5UDzZpQ.roa
File: 4N-LPkXfNiXiFi4QCZCF5UDzZpQ.roa (raw, json)
Hash identifier: RvM/573ap2oTeO+O8S8RrAp/QZMIyTe8iXqjG2+TeJw=
Subject key identifier: E0:DF:8B:3E:45:DF:36:25:E2:16:2E:10:09:90:85:E5:40:F3:66:94
Certificate issuer: /CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Certificate serial: 01856BC11A6C2F2B6F0936DEE1B59EAACCC6
Authority key identifier: DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/4N-LPkXfNiXiFi4QCZCF5UDzZpQ.roa
Signing time: Sun 01 Jan 2023 05:14:55 +0000
ROA not before: Sun 01 Jan 2023 05:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209839
IP address blocks: 94.154.152.0/22 maxlen: 22
94.154.152.0/24 maxlen: 24
94.154.154.0/23 maxlen: 23
94.154.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:1a:6c:2f:2b:6f:09:36:de:e1:b5:9e:aa:cc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db14e7a6be97cec6f5bc1a678a76ea6d1619c306
Validity
Not Before: Jan 1 05:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0df8b3e45df3625e2162e10099085e540f36694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3f:06:be:1f:fd:e5:63:24:9a:ee:fe:03:5d:
6d:57:51:2a:4e:e2:91:77:b3:ad:0c:ab:41:f4:a5:
06:44:bc:c7:8e:28:3e:c7:34:f0:92:c9:bc:39:09:
65:9d:57:39:c1:fb:4f:d8:56:51:6c:e8:02:bb:c0:
bb:9a:a9:3c:ef:5f:68:a3:a3:bd:ef:32:f7:66:71:
12:ff:3e:5e:56:26:6a:5c:75:e0:49:1d:1d:9c:5c:
e4:ad:c7:ed:21:6f:f9:c0:40:26:a8:d2:e7:16:75:
07:66:5c:8c:3d:b7:fa:56:08:0e:f3:70:67:e8:04:
da:36:50:9d:2f:46:36:8a:bf:cb:1a:3a:2b:53:4d:
c1:9e:b5:9d:75:82:89:84:02:8b:c2:bb:ed:08:e5:
bf:26:04:45:d9:6a:4f:f8:83:a7:c7:8d:83:b7:fa:
65:a3:37:d4:87:78:1a:96:66:1a:dd:91:69:93:d4:
d4:c0:87:e1:67:07:b2:4f:4c:47:de:2c:71:49:df:
d5:1f:a3:ea:24:bc:ed:ba:27:c2:af:5c:4a:b4:bf:
6c:04:82:09:f8:fd:a0:e1:30:88:37:6b:dd:0e:3b:
dd:cd:9b:17:ef:d8:33:af:99:f4:30:bb:d8:f9:7a:
be:a2:81:93:87:bd:d9:ae:5b:03:6a:2e:2c:a7:e8:
46:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DF:8B:3E:45:DF:36:25:E2:16:2E:10:09:90:85:E5:40:F3:66:94
X509v3 Authority Key Identifier:
keyid:DB:14:E7:A6:BE:97:CE:C6:F5:BC:1A:67:8A:76:EA:6D:16:19:C3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2xTnpr6Xzsb1vBpninbqbRYZwwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/4N-LPkXfNiXiFi4QCZCF5UDzZpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/10645d-3542-4e5d-8e70-11f91d0739c9/1/2xTnpr6Xzsb1vBpninbqbRYZwwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.152.0/22
Signature Algorithm: sha256WithRSAEncryption
00:89:fa:51:74:60:11:a8:47:89:b1:01:2e:6d:fc:64:6f:89:
90:3c:a1:25:0a:e6:53:62:e0:ae:a5:40:a5:f3:24:df:8b:ea:
e8:6c:2a:ad:74:06:f0:7b:e7:b4:56:30:52:b5:05:0d:e4:03:
68:42:f9:e0:01:b3:33:ae:bb:72:77:b2:9d:a0:29:78:3b:18:
05:aa:a1:2d:34:dd:a0:be:00:a8:e3:bb:13:8f:b9:23:92:e4:
7c:f1:ef:f0:a7:de:9c:02:b7:7e:87:55:ec:a2:04:41:f5:3c:
81:50:1f:5e:49:2d:5f:f1:61:c8:d9:e8:66:98:8d:fc:8b:78:
6b:cd:4f:fb:89:9d:a1:77:6b:55:08:a7:69:50:c5:27:1f:5f:
16:39:17:5c:d6:5f:31:a2:72:76:29:04:7b:d0:21:ef:18:51:
de:58:c2:9b:c2:dc:54:c1:f2:9c:11:f8:31:1c:54:00:df:b3:
7d:00:02:57:28:3f:a4:e2:25:5f:49:32:df:7d:87:f9:0e:fd:
b7:d5:e5:0d:b1:ec:92:da:36:13:75:b1:be:5d:74:02:6d:c7:
ea:ce:d8:cc:af:0f:4e:ad:13:4f:94:41:e4:66:fc:c7:57:a8:
62:af:e6:da:49:52:c0:6a:7d:e4:25:09:35:6d:fe:93:9d:87:
33:0c:f5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:30 2024 by rpki-client on console-fra.rpki-client.org