Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/TJEPXfCbKapYKLX3yA6esctD5-w.roa
File: TJEPXfCbKapYKLX3yA6esctD5-w.roa (raw, json)
Hash identifier: nx6Z74qwQS7x8iFxgXoUJfIw1x11xp8hXcqStw2QLjo=
Subject key identifier: 4C:91:0F:5D:F0:9B:29:AA:58:28:B5:F7:C8:0E:9E:B1:CB:43:E7:EC
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018AF1473BC2D39D5DA05BA42B5686BF3C29
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/TJEPXfCbKapYKLX3yA6esctD5-w.roa
Signing time: Mon 02 Oct 2023 16:44:51 +0000
ROA not before: Mon 02 Oct 2023 16:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.35.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:47:3b:c2:d3:9d:5d:a0:5b:a4:2b:56:86:bf:3c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 2 16:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c910f5df09b29aa5828b5f7c80e9eb1cb43e7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ff:03:f7:d3:ec:8d:14:29:91:ac:76:6a:1d:
29:85:1d:d7:68:eb:6a:62:20:13:9b:db:b7:d2:b3:
a4:ea:22:ce:32:ee:c1:be:38:77:e1:93:fe:3f:8f:
11:ab:0e:2b:88:34:68:28:de:6e:1f:e6:4b:06:67:
2d:8f:57:c6:8d:8c:a4:6a:6e:39:8d:dd:ca:82:e0:
d0:f5:79:62:88:2a:86:97:4a:6a:03:a6:ef:53:d6:
99:b3:0a:ca:f9:05:ab:35:31:b5:27:f7:02:39:7d:
f0:e9:e3:70:e8:d7:f5:7a:0d:38:48:ad:1f:eb:88:
ca:39:34:fb:c4:03:e5:f2:ac:04:a8:61:ba:6a:e8:
e7:9c:98:f5:4b:c4:c5:66:09:d4:10:d7:22:2c:c0:
14:81:9b:f0:34:cf:48:05:f5:13:1c:8a:e9:00:f4:
28:7b:0c:eb:98:e0:cc:e6:b5:09:ea:ef:1a:d4:db:
db:19:49:fb:9e:ad:4b:b2:9c:a3:19:9b:4b:90:d8:
3c:53:50:4c:79:e0:51:5c:3c:74:1d:39:3b:dd:30:
2c:b3:a8:b0:c6:6e:27:38:96:c2:35:32:88:56:c9:
3c:da:be:c3:64:54:0e:63:9e:dd:fa:e2:71:4b:90:
ab:c1:e6:a7:78:dc:59:79:a2:ef:15:16:e6:dc:c0:
d3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:91:0F:5D:F0:9B:29:AA:58:28:B5:F7:C8:0E:9E:B1:CB:43:E7:EC
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/TJEPXfCbKapYKLX3yA6esctD5-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.35.0-94.154.36.255
Signature Algorithm: sha256WithRSAEncryption
56:10:1c:54:b9:36:3e:12:3e:98:76:08:cc:98:09:0f:92:e6:
dc:e4:e6:b1:97:ea:3e:32:6d:e1:cf:5e:45:c2:12:b0:a7:e1:
6b:c6:8a:f0:1c:d3:e2:4e:6a:2c:29:7d:d9:a4:b3:a3:bb:5f:
8a:fb:ef:eb:8d:a6:8f:c5:1f:b9:47:34:2a:2e:31:34:e6:89:
4e:6b:e8:74:22:93:f9:0c:ae:dc:62:c3:59:6f:31:4b:f5:83:
37:26:13:a8:e9:37:59:0b:72:e3:6d:e4:09:0f:20:0b:2b:cd:
e3:ee:4e:e5:a4:02:6e:82:90:d5:10:d5:db:cc:60:0a:d6:cc:
1c:76:e2:65:9c:e0:64:5f:89:02:c6:9f:4c:d2:48:a1:8e:8e:
16:df:69:75:c4:c1:fb:05:1b:b2:d3:96:6b:04:74:42:a1:5c:
2f:b7:a6:c0:1a:08:06:66:64:ad:8a:a1:c0:4a:b8:45:6d:1a:
c0:9c:8d:e7:06:62:4d:46:f7:19:12:de:e7:31:09:16:0b:0d:
b1:13:1c:23:6c:1d:67:13:9c:1b:bd:b6:06:8c:c0:cf:6e:0e:
3f:3b:5b:f6:c6:e0:e0:64:97:f4:3a:0f:86:10:8a:5a:4d:77:
56:e5:e5:c5:8e:f5:1b:8f:ee:cd:58:58:44:a7:73:39:7c:c8:
68:e4:83:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 13:40:34 2023 by rpki-client on console-ams.rpki-client.org