Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/tujjZ5J9LL_NN5Du9zdyMWgyKbE.roa
File: tujjZ5J9LL_NN5Du9zdyMWgyKbE.roa (raw, json)
Hash identifier: D7PdxlrRf7Csv2trv5o1X8cXqnyJ8sTJLge6geWJAzg=
Subject key identifier: B6:E8:E3:67:92:7D:2C:BF:CD:37:90:EE:F7:37:72:31:68:32:29:B1
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01856F42A72F997D3BD6CB0D2A0AF66DCB75
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/tujjZ5J9LL_NN5Du9zdyMWgyKbE.roa
Signing time: Sun 01 Jan 2023 21:35:17 +0000
ROA not before: Sun 01 Jan 2023 21:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43624
IP address blocks: 94.131.97.0/24 maxlen: 24
94.131.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:a7:2f:99:7d:3b:d6:cb:0d:2a:0a:f6:6d:cb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 21:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6e8e367927d2cbfcd3790eef7377231683229b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:78:38:ed:ed:3b:9f:44:1b:17:1c:85:f9:68:
c0:92:6c:f1:6e:ae:ea:9a:e1:ba:5a:54:1b:5d:bd:
eb:ce:00:67:fc:99:c6:f5:6f:a1:7d:f6:eb:c2:82:
f8:8a:e9:bd:2f:a9:3a:1e:36:62:b5:83:b3:c2:03:
50:5a:fc:18:8c:67:18:a6:94:ff:3a:42:6f:9d:c3:
b3:92:78:6d:78:b8:ae:e5:3b:30:38:fc:c9:f6:b3:
36:57:1a:21:3b:26:77:e5:13:73:1c:23:9e:59:75:
4f:c0:02:b5:1d:a8:52:c7:3b:67:26:63:51:61:c2:
a6:d5:51:17:70:c0:e2:b2:fd:1a:09:3a:73:b3:39:
34:59:da:75:65:1d:8c:f6:f0:dd:b3:ad:19:da:5d:
2a:98:31:8d:a7:bd:79:ec:25:f1:a0:c4:85:05:7a:
8f:ee:ee:fd:a4:46:13:2d:1c:a9:0d:77:02:f8:86:
c6:e2:db:da:7c:a3:c2:1d:50:dc:7f:20:86:7b:6c:
37:45:0c:b3:0b:ab:43:f2:b8:05:49:6b:06:04:57:
74:5d:72:ae:df:3b:dc:4a:0c:73:05:d7:75:af:2e:
e9:cc:be:46:1f:1d:5b:0d:c6:3a:7e:5a:1e:c1:1d:
62:d2:6a:1e:0d:67:fe:f8:6a:c7:48:d6:cb:e8:e4:
4e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E8:E3:67:92:7D:2C:BF:CD:37:90:EE:F7:37:72:31:68:32:29:B1
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/tujjZ5J9LL_NN5Du9zdyMWgyKbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.96.0/23
Signature Algorithm: sha256WithRSAEncryption
05:0a:a6:a5:de:8d:57:08:ce:06:dc:84:09:c1:b6:f9:2c:79:
2d:6f:6e:d2:28:e5:51:08:f6:96:a8:b5:eb:ca:51:63:44:54:
40:f1:3e:e4:b4:79:ac:19:f2:c9:2c:1f:8e:45:7a:77:c2:51:
8d:5e:93:39:d3:d5:c2:9d:7a:a5:0e:ab:8f:17:fe:21:91:2f:
7a:4d:d7:50:48:9f:c4:76:81:40:9a:8a:c3:cc:12:05:47:ab:
da:ec:91:39:c7:e0:d9:18:cc:ea:e4:ff:c6:5f:b3:05:da:15:
65:56:b1:a5:5a:94:7f:f1:d1:18:7a:f3:26:19:91:c1:64:00:
49:e9:8b:dd:8a:f9:60:63:c8:6a:b2:6b:50:12:f0:35:5e:06:
11:c0:46:fa:0c:03:19:b6:9b:cd:cb:07:5b:06:8f:0b:ae:d6:
8e:a0:c0:f6:23:43:99:aa:02:0c:97:de:99:ba:fd:80:bb:1a:
cb:37:13:d0:dd:a8:06:1d:5b:81:3a:54:0d:7f:0b:d5:0d:41:
e8:17:fc:4c:a2:9f:0a:5e:9f:9c:61:b4:cf:47:bb:d5:f0:81:
c4:68:1a:c2:b0:18:79:7c:4e:42:37:1f:c6:99:34:b1:a8:e6:
a8:64:8e:7f:74:1b:99:36:e5:04:7b:8e:3f:93:38:b9:ff:c8:
a7:63:cb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:58 2024 by rpki-client on console-fra.rpki-client.org