Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Hxb4_XeWzDqhEmvrTmGoa_pEdVU.roa
File: Hxb4_XeWzDqhEmvrTmGoa_pEdVU.roa (raw, json)
Hash identifier: gNjgV4ZtJyOwc0hmlHKFcdzCN7/wCq5JuqfbhhbTUQo=
Subject key identifier: 1F:16:F8:FD:77:96:CC:3A:A1:12:6B:EB:4E:61:A8:6B:FA:44:75:55
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018CCBBD6D7C7BE971BFE51AD96E016D809B
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Hxb4_XeWzDqhEmvrTmGoa_pEdVU.roa
Signing time: Tue 02 Jan 2024 19:53:58 +0000
ROA not before: Tue 02 Jan 2024 19:53:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203511
IP address blocks: 94.154.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 17:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cb:bd:6d:7c:7b:e9:71:bf:e5:1a:d9:6e:01:6d:80:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 2 19:53:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f16f8fd7796cc3aa1126beb4e61a86bfa447555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:66:82:35:67:ff:69:12:dc:60:9e:b5:4b:
40:77:cd:f4:7f:1a:73:7c:10:61:46:94:2c:1c:15:
ad:62:d1:0b:55:92:1a:ed:b4:08:62:41:89:e1:08:
0a:90:6b:eb:dd:92:7c:c9:8e:ac:54:1e:b6:6e:88:
86:e5:86:5c:e9:35:d1:51:f9:d5:14:ca:ca:cb:f7:
43:f9:b6:2f:58:3d:0d:f6:63:7e:4d:c4:0c:71:e0:
24:74:4f:e9:0c:6a:94:3e:1d:b1:bf:03:95:ff:50:
32:42:7d:4c:33:51:4f:e1:16:10:80:bb:20:d0:df:
20:6e:1e:ac:da:c0:de:c7:02:ae:fc:00:b5:f5:c2:
6b:28:08:ed:e1:f3:a2:74:61:02:13:c1:08:6d:23:
11:8c:47:d9:12:b7:53:9e:e7:bb:37:e1:82:48:13:
fe:ea:5f:58:f2:95:d4:73:c0:e1:77:80:26:4a:05:
57:d4:01:a9:14:0e:14:1e:25:b5:ab:d1:b9:01:33:
d0:29:0a:d4:8e:31:71:58:bc:e8:ea:eb:62:3c:c9:
e8:70:b7:51:3a:4f:e2:a3:cc:1d:83:b6:df:7e:16:
51:8a:51:79:d7:93:43:cb:f0:a8:03:2f:6a:65:7c:
f7:06:67:5b:bf:b5:40:88:be:6c:b8:44:40:02:46:
9c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:16:F8:FD:77:96:CC:3A:A1:12:6B:EB:4E:61:A8:6B:FA:44:75:55
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Hxb4_XeWzDqhEmvrTmGoa_pEdVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.37.0/24
Signature Algorithm: sha256WithRSAEncryption
72:38:ae:09:da:41:15:f0:12:bf:3f:bc:b2:05:e0:ad:40:ba:
17:56:a4:7c:48:db:91:8d:74:2c:bf:2d:c6:c7:fb:4b:a8:6f:
a7:02:eb:c2:27:3d:bb:fe:4b:43:06:72:42:5e:78:1a:09:62:
3d:d5:f8:cb:58:42:82:b6:22:20:3e:84:fe:5d:c8:c0:8e:bb:
ba:89:4b:d9:b6:b6:b0:26:ea:14:59:49:51:a7:d8:2b:e8:b1:
11:e9:47:9e:90:9c:03:83:7e:02:b0:e2:b3:c7:27:71:58:4e:
53:be:ed:8d:ec:08:da:ef:a7:54:0a:fe:0d:86:fc:f9:23:46:
94:aa:30:56:26:2b:21:30:2e:40:b7:54:5f:dc:78:2f:31:57:
cb:e5:db:be:1e:52:84:8c:c4:19:b0:84:5b:09:88:58:ba:7f:
b6:f3:9b:7d:6c:9a:7b:20:5b:22:ea:f7:72:21:3e:2f:79:68:
17:e2:ea:3f:52:4b:ed:9c:55:1a:e9:df:0b:aa:f9:96:e6:55:
c7:12:da:b2:2d:03:8e:e0:ad:77:2c:55:51:57:b1:5d:54:98:
92:0d:62:9c:a1:96:0d:21:74:02:61:1c:05:98:70:2d:b2:8b:
8d:fc:df:c1:b8:1a:2a:47:75:e2:a1:67:a1:ef:9a:27:ac:d6:
f1:94:6f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 22:32:55 2024 by rpki-client on console-ams.rpki-client.org