Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/f80crxjSrYGX15mGvIjBC_n_Xu8.roa
File: f80crxjSrYGX15mGvIjBC_n_Xu8.roa (raw, json)
Hash identifier: 5Lrg/CbhB6okN2cGVjzUGGJXrJOXwXNUTj/b4wDjxzc=
Subject key identifier: 7F:CD:1C:AF:18:D2:AD:81:97:D7:99:86:BC:88:C1:0B:F9:FF:5E:EF
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01856F42B00B51CD523CCDEBA2C0A58EBA27
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/f80crxjSrYGX15mGvIjBC_n_Xu8.roa
Signing time: Sun 01 Jan 2023 21:35:19 +0000
ROA not before: Sun 01 Jan 2023 21:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 265827
IP address blocks: 94.131.16.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b0:0b:51:cd:52:3c:cd:eb:a2:c0:a5:8e:ba:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 21:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fcd1caf18d2ad8197d79986bc88c10bf9ff5eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:b2:df:5d:2a:d1:62:94:6e:cf:f4:02:2d:
7a:7b:be:5e:61:4a:8b:e4:36:09:eb:d7:93:2e:ac:
80:c3:76:88:7f:7a:f1:42:29:6d:9a:81:83:8d:9d:
b3:60:8a:31:03:05:f1:9a:97:1f:d4:22:7d:3d:8c:
c6:77:fc:f0:bb:ad:3d:8e:b4:34:07:3a:8e:bf:3e:
30:9b:60:9e:50:84:05:5b:95:57:f8:23:06:10:9f:
d0:0a:bf:b2:84:75:af:31:bb:61:6d:dc:0a:cc:4c:
cc:62:e6:ec:c3:9a:d2:47:8e:c6:6a:10:f1:b8:12:
95:af:26:0d:2e:cc:f2:0e:c3:f0:33:96:18:06:dc:
98:85:f5:a9:9f:a4:2f:90:18:fc:95:57:41:4d:d2:
d3:7a:ca:fb:95:a8:16:2e:55:3b:db:74:6f:40:d5:
93:24:58:21:be:37:9b:bf:a6:4c:f0:10:62:b7:1a:
ea:7a:27:a1:95:ba:d3:5f:35:4f:e5:69:48:75:e7:
c2:a2:b1:ac:1c:94:0a:fe:8f:2f:91:e7:3b:2d:01:
b0:fa:35:25:af:90:40:07:81:5d:9b:da:19:8c:0c:
d9:71:8a:d5:39:28:13:25:c6:6a:96:f6:85:d0:7a:
26:18:3c:6e:62:ca:61:56:75:5f:78:49:b7:60:97:
88:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CD:1C:AF:18:D2:AD:81:97:D7:99:86:BC:88:C1:0B:F9:FF:5E:EF
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/f80crxjSrYGX15mGvIjBC_n_Xu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.16.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:e6:22:3b:0f:e6:c4:5d:f9:c1:f4:2c:26:74:af:24:cd:8a:
99:ba:92:72:d8:37:4e:85:be:15:8d:91:26:04:97:62:2d:dc:
01:60:bc:85:f8:0f:13:46:69:69:c0:aa:39:5a:29:af:fc:22:
61:c6:ae:a1:18:16:19:b2:f4:dd:6c:1b:b1:77:f8:49:9f:05:
a5:08:5b:b7:b1:4f:40:8b:3e:06:4a:fd:81:3e:6d:f4:19:7c:
2e:99:7d:75:4a:49:ef:dc:74:b1:37:7d:6d:13:c4:f8:15:8f:
50:8f:1e:81:69:29:d5:f2:69:41:15:34:26:11:12:7f:e3:1b:
7c:dc:86:f8:7a:b1:49:3d:ed:e1:78:75:14:8f:6c:d8:f1:1a:
59:95:8a:da:d8:7a:4c:15:14:79:83:09:6e:94:36:94:28:e9:
28:0e:15:dd:b1:cd:d2:96:b9:5c:46:6a:e5:76:6e:84:9a:3e:
af:1f:69:10:ef:e5:3f:b1:88:28:e0:53:eb:71:5e:df:b8:4b:
2c:1c:c9:bb:55:a7:4d:cc:f2:0a:c0:72:ff:68:e1:f2:c4:5f:
49:ff:00:16:f6:89:44:83:bf:0a:2f:bd:62:0b:32:56:f9:04:
71:7c:e6:4f:4c:7f:96:bc:0e:f8:b3:d8:d5:c0:c5:19:de:e0:
18:4c:7c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:58 2024 by rpki-client on console-fra.rpki-client.org