Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Ys6Xp3nNBDBCRb0ZHSB2YkoWnfw.roa
File: Ys6Xp3nNBDBCRb0ZHSB2YkoWnfw.roa (raw, json)
Hash identifier: 0BCdhMuxp5n3BBlGb3zHSdZ2d3MIRkUxVqglKrS3ASU=
Subject key identifier: 62:CE:97:A7:79:CD:04:30:42:45:BD:19:1D:20:76:62:4A:16:9D:FC
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018CF499FA93FD0D231B1DC40356DFE2E05D
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Ys6Xp3nNBDBCRb0ZHSB2YkoWnfw.roa
Signing time: Wed 10 Jan 2024 18:19:40 +0000
ROA not before: Wed 10 Jan 2024 18:19:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215761
IP address blocks: 94.154.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 12:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:99:fa:93:fd:0d:23:1b:1d:c4:03:56:df:e2:e0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 10 18:19:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62ce97a779cd04304245bd191d2076624a169dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:09:d6:ee:d8:c6:23:cb:97:c7:d1:78:4d:
be:b6:44:04:80:8b:da:d9:ab:0c:4f:60:92:63:97:
43:92:be:9b:9c:b2:a1:b5:b9:51:f3:9f:fd:4b:b1:
81:01:d8:d2:ea:7b:dc:a7:46:f2:2e:32:fe:9c:4f:
3d:22:b2:30:d8:88:0e:23:cf:b2:07:12:3e:48:e2:
9b:ec:8a:e0:2d:16:14:82:ad:b4:f8:b6:7b:c7:5d:
d2:17:20:04:cf:00:d4:99:5e:f5:59:d2:f5:71:19:
31:f3:0f:a0:fb:8d:bb:e6:00:25:35:08:44:4b:f9:
20:30:75:ff:e9:f4:d2:e3:35:d7:21:f6:ce:26:b0:
7d:b7:a9:9d:96:73:4f:d0:a8:74:bc:99:78:aa:21:
51:64:03:20:9a:a4:8d:3d:fa:40:4d:9d:b9:7c:84:
44:68:56:60:75:dd:0e:da:cb:7d:af:b1:39:5b:14:
c2:48:0b:15:63:13:e8:63:f5:f8:66:35:8d:9f:2a:
07:02:a6:00:2e:05:ef:c8:d8:2c:9a:3a:31:90:c8:
ca:2a:09:d3:92:b4:ec:d8:56:95:69:c6:c7:1c:89:
50:52:2c:1c:1b:63:ca:20:e2:70:85:4a:3a:c5:b4:
ea:df:df:7b:ad:6b:00:d7:23:cc:29:a1:ae:f5:ab:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CE:97:A7:79:CD:04:30:42:45:BD:19:1D:20:76:62:4A:16:9D:FC
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Ys6Xp3nNBDBCRb0ZHSB2YkoWnfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.33.0/24
Signature Algorithm: sha256WithRSAEncryption
71:57:5a:f6:95:a6:45:03:f8:05:a2:d6:b9:fb:91:9c:8f:58:
dc:72:7a:45:3b:49:95:cf:69:de:92:be:f4:3c:b0:44:f8:bb:
61:24:9d:ba:20:be:86:df:6c:6e:20:81:d5:73:9f:88:5d:58:
97:9d:29:37:9b:24:79:7b:b5:76:7e:e7:d1:e6:46:01:d9:3b:
18:7e:3f:03:f5:a6:8a:4c:10:be:61:90:e5:ac:62:e6:c1:1f:
ee:fc:49:02:00:d2:60:93:4f:0b:79:15:6d:dd:3f:51:21:4b:
5a:9b:ab:11:20:17:d2:e9:16:78:83:9f:34:a1:90:70:14:d2:
e0:9e:ce:01:0e:bb:e0:e1:0a:13:87:6c:83:0b:b4:94:8a:e8:
ed:96:ad:bb:4d:e2:1d:b2:c8:10:ba:ef:5f:15:17:94:b8:77:
d2:cc:c7:a6:87:28:2e:fd:e5:4d:64:84:39:24:99:be:50:76:
46:51:ef:48:08:af:65:e3:7b:9c:d5:ef:a7:8c:9a:6d:b9:99:
6f:97:03:30:a4:6e:0a:e9:fb:50:3d:de:0d:8a:b9:7e:0e:19:
65:d8:97:7e:94:3a:5c:be:59:c6:12:90:55:07:3f:8f:3a:33:
09:c9:25:95:85:99:a6:d0:90:89:3b:56:bd:23:38:07:77:22:
ad:21:4e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 16:15:08 2024 by rpki-client on console-ams.rpki-client.org