Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/f8spkZy3MtGncb7_pKGRZaImfSo.roa
File: f8spkZy3MtGncb7_pKGRZaImfSo.roa (raw, json)
Hash identifier: jM874/DjDnWaZ9Nosgcg5+KkrnzKOzbgUyndD98BHV0=
Subject key identifier: 7F:CB:29:91:9C:B7:32:D1:A7:71:BE:FF:A4:A1:91:65:A2:26:7D:2A
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 01856FF9644336575BC52E324EFABF6AC89E
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/f8spkZy3MtGncb7_pKGRZaImfSo.roa
Signing time: Mon 02 Jan 2023 00:54:53 +0000
ROA not before: Mon 02 Jan 2023 00:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48191
IP address blocks: 94.230.72.0/22 maxlen: 22
94.198.72.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:64:43:36:57:5b:c5:2e:32:4e:fa:bf:6a:c8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Jan 2 00:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fcb29919cb732d1a771beffa4a19165a2267d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:97:7f:65:07:41:c6:f7:56:44:20:55:41:
2b:4b:17:62:80:c3:cb:f2:ba:88:f1:9f:0b:48:92:
2f:77:e7:b8:4b:6f:32:38:d6:3f:a3:bb:55:ae:1e:
33:c6:a4:e3:6d:84:42:d3:a3:1e:81:2b:47:96:5d:
f4:e0:ba:a6:da:db:80:59:8e:d1:ea:8c:41:98:94:
60:ae:54:47:5f:2c:0b:14:eb:6b:5f:09:e5:39:d0:
57:a3:54:e0:9d:62:ab:f5:58:5a:6a:f4:98:39:f1:
0e:26:e1:d6:4e:79:00:e3:b4:a9:28:60:32:75:db:
95:e0:cb:d0:a7:83:4b:98:21:0d:ab:cf:32:1c:1e:
0f:1d:ed:51:2a:bc:d5:be:69:1d:78:b8:00:df:c6:
1c:c2:70:6a:ad:74:65:1e:c5:d0:6c:80:92:e7:38:
e4:75:bb:0e:e8:77:83:f3:4e:9a:b1:c9:34:61:26:
77:2b:c2:9a:f2:3d:a5:83:ab:2a:2f:4f:89:0a:0e:
49:31:bc:35:2f:91:01:58:e7:d9:f1:90:41:77:77:
9e:59:8f:7a:20:9c:54:c8:12:8c:bd:e3:87:ae:c5:
b8:36:56:df:ae:ef:45:5a:4d:c5:d8:7f:a3:ee:ae:
17:1b:a8:86:93:cf:ac:8a:8f:b9:74:b4:7b:84:33:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CB:29:91:9C:B7:32:D1:A7:71:BE:FF:A4:A1:91:65:A2:26:7D:2A
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/f8spkZy3MtGncb7_pKGRZaImfSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.72.0/21
94.230.72.0/22
Signature Algorithm: sha256WithRSAEncryption
90:9c:ac:2a:52:d4:21:fd:6d:b0:b7:8e:6b:f9:4a:ba:4a:d1:
0a:5b:08:e3:61:7f:27:f4:67:7d:6d:76:30:b2:f2:ca:a1:ef:
08:8c:e4:47:64:14:64:37:03:ab:2d:98:d9:cc:ff:06:f2:69:
c5:c6:90:22:2b:ed:a2:01:07:1b:d7:94:f7:5c:8c:11:eb:ae:
a3:d2:6f:12:66:f0:8b:a3:9e:56:8f:7b:22:29:53:9a:15:03:
3e:73:29:af:9f:0a:f8:7a:09:85:58:1d:34:f0:b6:b3:1b:f6:
17:0f:1f:59:a5:fa:cb:7c:8e:6e:69:c2:60:9c:70:0b:39:0c:
6f:2c:40:4d:6d:43:fc:ab:b6:fa:22:ff:e4:2b:2d:56:19:2c:
26:98:33:9b:63:d4:5a:2d:e9:d6:2e:8a:e6:5e:a4:b9:90:08:
09:65:ab:0c:4e:88:c8:4b:c2:9f:30:31:ee:14:99:7d:52:34:
9c:f8:0b:b5:b4:16:7d:30:30:23:bf:53:0e:f6:5e:71:42:12:
98:28:4a:c7:a6:c3:7e:cd:15:23:8e:14:14:07:5d:da:ac:6a:
ef:8a:6c:19:8d:7e:f1:fa:f5:55:ca:68:95:5c:73:5e:46:65:
cc:53:25:52:66:4f:4a:71:c3:16:a1:7a:bd:97:18:cf:d2:f5:
d5:b9:15:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:25 2024 by rpki-client on console-ams.rpki-client.org