Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/1-tiWLfyn-c9NGMbrMz4QVXIhqGQ.roa
File: 1-tiWLfyn-c9NGMbrMz4QVXIhqGQ.roa (raw, json)
Hash identifier: Ro73o5ukzRWbVAfw3SiSCS3Qb8HUTFBDEInbR3rsxCU=
Subject key identifier: FA:D8:96:2D:FC:A7:F9:CF:4D:18:C6:EB:33:3E:10:55:72:21:A8:64
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018DA7F8E12367110F1B6DF6E39B2C0CAD40
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/1-tiWLfyn-c9NGMbrMz4QVXIhqGQ.roa
Signing time: Wed 14 Feb 2024 14:15:22 +0000
ROA not before: Wed 14 Feb 2024 14:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212744
IP address blocks: 94.154.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 13:10:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:f8:e1:23:67:11:0f:1b:6d:f6:e3:9b:2c:0c:ad:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Feb 14 14:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fad8962dfca7f9cf4d18c6eb333e10557221a864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a7:fa:c0:8f:f6:bf:99:7e:5f:25:37:6f:9f:
c9:08:44:c7:11:bf:19:6f:8e:2c:88:c0:2a:e9:fb:
ff:e6:fe:cc:54:66:e1:22:62:fb:e5:cf:f5:00:8f:
be:19:8a:e9:df:24:3e:db:97:fd:96:78:5b:2e:4c:
08:cc:61:1d:71:d7:fa:30:c4:83:57:4b:0a:a4:2c:
84:d8:0a:02:89:81:18:eb:e9:e5:1a:d1:e3:ae:e6:
0e:c0:b9:5d:4d:50:31:3f:88:80:00:50:05:34:57:
52:6c:9d:cf:ec:2d:c0:b4:87:4e:03:ab:58:b1:e8:
f0:d4:b1:d9:fb:23:6e:a6:26:63:9f:8a:49:29:db:
dc:92:03:86:97:bc:ab:42:c3:e0:d7:89:3c:cb:2a:
e0:d7:80:a4:8c:31:15:05:9c:46:09:16:e7:43:c6:
c1:a4:fd:31:f5:ae:ee:57:b9:09:fa:70:91:0a:d1:
b3:28:de:5e:90:90:45:02:a0:42:c2:de:0b:f1:af:
ae:09:1e:6a:65:aa:65:f4:06:e8:bf:fb:b9:ce:4f:
0e:8a:d6:d0:35:cc:c4:01:68:17:3c:57:a8:ca:51:
8b:e6:0f:94:a7:df:95:c1:33:9c:c5:9e:b7:65:c4:
f0:42:6a:69:89:6a:5d:d3:d3:ee:1f:3d:bf:05:68:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D8:96:2D:FC:A7:F9:CF:4D:18:C6:EB:33:3E:10:55:72:21:A8:64
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/1-tiWLfyn-c9NGMbrMz4QVXIhqGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.35.0/24
Signature Algorithm: sha256WithRSAEncryption
61:23:05:ee:9d:8a:8f:01:25:6a:bd:71:0f:fc:f5:5b:1b:4f:
73:d7:d6:6d:7e:ac:cf:90:da:07:63:74:fe:3b:90:76:76:0a:
10:f8:7d:88:92:74:23:99:1c:24:d5:e5:0c:8f:e9:b6:45:34:
fa:26:af:2f:e3:d7:42:28:8a:23:a1:ea:24:c1:2f:98:1d:ea:
57:d0:11:e3:d1:10:dd:cc:00:cd:43:9b:4b:9d:02:ca:0c:d8:
b2:eb:e9:93:11:c1:bc:8e:fb:62:95:c6:ab:85:d7:a6:e1:16:
8a:b4:f0:77:ac:6f:91:d2:c4:2b:d7:26:1a:9e:ef:5c:0a:37:
dc:5c:81:d6:9a:eb:93:31:01:2c:84:98:04:51:1d:ef:7a:92:
9a:80:34:45:a2:6d:e9:40:5a:ba:a1:be:68:1c:da:28:ac:23:
26:6e:e8:87:40:31:ff:7e:41:0b:cc:13:5a:ed:a9:08:48:f9:
82:71:84:cd:c8:c6:db:da:56:48:d8:99:f1:fe:a5:1f:22:43:
61:a1:42:da:b2:df:63:8c:aa:78:d7:1d:f7:12:d2:3b:2e:46:
2b:87:ec:49:31:3c:ab:72:58:25:c6:66:45:cc:3a:65:f4:72:
22:62:16:e1:8f:9d:c8:1a:a3:3e:8c:79:19:94:32:84:a5:ab:
96:31:cb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 16:36:44 2024 by rpki-client on console-ams.rpki-client.org