Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Nms1BUxtuS0ry2V8Ck4c4s4q1L4.roa
File: Nms1BUxtuS0ry2V8Ck4c4s4q1L4.roa (raw, json)
Hash identifier: aGju1oSK8zrR234ajobtplw5JsfZi4Eb5Cbtcib3ExY=
Subject key identifier: 36:6B:35:05:4C:6D:B9:2D:2B:CB:65:7C:0A:4E:1C:E2:CE:2A:D4:BE
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018A6A72F8F11A5EB57DADE7EA15FE6F4A49
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Nms1BUxtuS0ry2V8Ck4c4s4q1L4.roa
Signing time: Wed 06 Sep 2023 12:23:54 +0000
ROA not before: Wed 06 Sep 2023 12:23:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 94.154.34.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:72:f8:f1:1a:5e:b5:7d:ad:e7:ea:15:fe:6f:4a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Sep 6 12:23:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=366b35054c6db92d2bcb657c0a4e1ce2ce2ad4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:b4:2d:db:d6:4a:9a:36:37:60:01:ca:df:
2a:d6:2e:88:34:34:13:5b:8b:1c:e1:1e:17:5c:d2:
71:15:f0:ba:a3:b0:5f:39:84:35:66:26:db:2f:66:
05:fe:26:91:0b:7e:84:fa:fc:04:9e:50:74:56:9b:
bb:cc:da:23:d0:1a:2d:58:51:9a:95:e8:87:0f:bb:
6b:7e:98:75:27:3d:9c:0a:25:ab:8d:11:b8:90:13:
98:3d:05:0c:9c:6a:a5:2f:2e:c4:76:7f:f1:77:c4:
a7:c4:de:28:25:12:c2:39:91:26:ee:a4:4a:05:10:
46:03:f8:4c:f0:0a:7e:53:59:6f:93:2c:23:9c:42:
be:70:86:da:97:54:aa:4c:3c:4f:03:b2:49:e3:4c:
1e:a7:b8:53:10:5b:a8:08:36:18:00:de:a6:30:b2:
a4:68:3e:66:91:0b:99:5a:dd:4b:f6:de:73:53:a2:
48:75:6e:49:97:f0:c9:7d:34:6d:2f:b9:3c:e1:73:
da:e0:60:c8:9b:dc:45:ed:6b:10:ab:69:b4:0e:72:
a5:2f:84:85:9c:be:17:a0:04:0b:c2:6c:bf:24:c0:
ca:41:bb:8d:dd:6b:d0:a0:d5:10:77:9a:ef:a0:94:
06:50:e8:51:95:1a:2a:c7:64:1d:e6:08:c8:ac:26:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6B:35:05:4C:6D:B9:2D:2B:CB:65:7C:0A:4E:1C:E2:CE:2A:D4:BE
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Nms1BUxtuS0ry2V8Ck4c4s4q1L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.34.0-94.154.36.255
Signature Algorithm: sha256WithRSAEncryption
1e:a9:58:91:a5:a7:48:f2:fb:28:d7:b9:f3:90:31:b3:55:89:
b7:f1:da:79:4b:3f:f6:dd:2a:f0:25:09:61:43:23:1b:b3:d9:
cc:82:75:9c:57:28:1d:59:f5:99:7a:eb:28:14:8e:6e:38:a8:
33:a1:10:a1:ec:d4:ec:de:9e:98:d3:5e:78:de:c3:37:b3:19:
a8:d2:83:d3:40:ca:89:18:49:c9:3a:c4:1d:f3:34:4d:8a:a1:
25:bd:b5:fe:2c:6d:b9:b5:44:e5:73:20:89:53:e8:b7:8d:a3:
33:95:28:57:07:12:a1:37:33:b8:03:cc:06:90:21:96:a9:20:
df:7a:f8:9c:95:83:f0:e0:67:0c:f8:67:c5:34:67:52:e9:23:
71:52:f2:5f:f0:c6:bd:84:c3:22:b3:2e:5b:f1:43:7b:25:5e:
10:94:7f:54:0a:0f:d9:e4:ce:83:08:19:b1:a9:06:c1:c0:dc:
e5:78:b7:1e:51:df:d0:32:e4:e1:a9:70:b9:02:86:47:da:67:
00:f2:ef:7e:32:ef:50:38:b8:85:95:4b:fd:7f:c1:85:c5:21:
6f:7e:b2:75:1d:25:fa:d1:8f:21:01:4a:9d:ef:20:f2:02:b0:
69:4f:57:f5:aa:43:07:61:3c:a7:30:a9:2a:cc:35:a2:d7:2f:
aa:26:35:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 12:09:01 2023 by rpki-client on console-ams.rpki-client.org