Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/39nIsSNtN_pLb62-L4UDt0NlDS4.roa
File: 39nIsSNtN_pLb62-L4UDt0NlDS4.roa (raw, json)
Hash identifier: E8VNXOUDdhLPE+U+OkrkcEqrxtl9ouiaIwWqG0QEIxk=
Subject key identifier: DF:D9:C8:B1:23:6D:37:FA:4B:6F:AD:BE:2F:85:03:B7:43:65:0D:2E
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0192922B6AFA3A5E26B9EAA87ED8C24731D6
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/39nIsSNtN_pLb62-L4UDt0NlDS4.roa
Signing time: Tue 15 Oct 2024 21:52:51 +0000
ROA not before: Tue 15 Oct 2024 21:52:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 394814
IP address blocks: 94.131.80.0/20 maxlen: 24
94.131.176.0/23 maxlen: 24
94.131.180.0/22 maxlen: 24
94.131.182.0/23 maxlen: 24
94.131.184.0/22 maxlen: 22
94.131.188.0/22 maxlen: 24
95.164.144.0/20 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 20:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:92:2b:6a:fa:3a:5e:26:b9:ea:a8:7e:d8:c2:47:31:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Oct 15 21:52:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfd9c8b1236d37fa4b6fadbe2f8503b743650d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:38:ff:3a:4d:b5:07:9e:48:85:72:71:b7:d0:
f0:7a:e9:d7:25:5b:bd:cb:3a:ea:b9:3e:cc:ef:84:
34:10:62:3c:1e:53:16:de:15:d4:75:5d:98:7d:5a:
fc:34:e9:18:ba:04:a9:13:a8:e6:bd:5f:ed:a4:28:
fe:a0:ea:e6:51:2d:2d:c4:c9:d9:fd:00:e5:ff:30:
5c:8f:bd:b0:81:0a:b0:77:49:74:eb:89:7a:6b:72:
37:69:70:28:3b:01:28:4f:6d:e7:aa:87:c5:9d:07:
d4:be:a6:28:c9:cd:ad:83:49:44:04:18:3a:79:00:
d6:b1:58:82:6b:f3:2f:60:b8:d2:82:de:61:15:0d:
3a:9a:bc:f7:ab:44:08:35:87:f0:9a:b7:8b:07:43:
1a:36:e2:b6:61:0e:63:b1:20:98:78:24:4e:5a:22:
66:33:69:92:76:f5:f1:ae:9e:46:5e:90:b2:6b:3d:
98:6d:96:d7:08:93:47:00:00:fe:d6:2c:13:dd:de:
6a:c4:3a:9f:08:f4:29:dd:55:49:29:47:2a:e2:a0:
f7:2a:7b:62:53:6b:ff:03:cd:76:81:ec:d0:90:0f:
93:c6:85:e1:de:5f:23:36:7c:9e:93:50:d7:e4:da:
ed:b1:86:c3:de:e0:8c:ff:79:62:6b:86:3c:e9:c4:
96:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D9:C8:B1:23:6D:37:FA:4B:6F:AD:BE:2F:85:03:B7:43:65:0D:2E
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/39nIsSNtN_pLb62-L4UDt0NlDS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.80.0/20
94.131.176.0/23
94.131.180.0-94.131.191.255
95.164.144.0/20
Signature Algorithm: sha256WithRSAEncryption
49:ab:74:ff:e0:13:29:fa:3c:b3:f9:51:00:c0:f5:53:b3:c4:
7b:ce:1b:0c:14:3a:36:64:da:b1:36:82:7c:20:a5:d3:e9:3c:
61:f4:3a:31:d8:0c:85:03:7e:e3:3a:6c:f2:8f:4a:de:ff:69:
2a:9d:b4:97:3b:bd:08:cf:91:6c:22:c6:fd:0b:07:4e:fa:30:
05:1a:c0:19:b2:a1:af:2a:60:11:65:bb:f9:75:d6:f0:14:08:
23:03:09:24:8e:2b:40:b8:37:d6:71:77:e0:af:35:45:77:d3:
8b:de:60:29:56:bb:7f:44:f6:66:db:40:53:49:ee:4d:94:a3:
21:9a:57:b3:cc:47:d6:9d:f7:8d:d6:41:5b:49:04:1e:8b:0b:
20:60:0d:91:65:71:2c:7b:e8:de:69:90:92:38:02:31:bd:04:
df:ee:1d:36:ed:ee:a3:90:80:56:4f:8d:8e:a6:c1:bf:3f:49:
f7:93:ea:22:c5:7c:9a:c5:e1:f7:4b:f2:29:44:a7:d1:d6:dd:
0c:38:e0:d9:95:e6:a6:18:7f:87:68:71:3f:9c:30:eb:db:88:
26:ff:eb:92:5f:7f:3c:12:41:84:d1:62:c4:02:67:36:00:94:
84:29:d5:29:62:69:48:03:ba:2c:57:ff:54:e8:51:4e:6f:f6:
b6:a9:2c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:34 2025 by rpki-client