Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/bRg_Oboj4fe_N9UwbpF9JsOlrvc.roa
File: bRg_Oboj4fe_N9UwbpF9JsOlrvc.roa (raw, json)
Hash identifier: kh/SMfwhQwP8VJfod3U3wQ9AuqIWlq3TaDBwFVL9MA8=
Subject key identifier: 6D:18:3F:39:BA:23:E1:F7:BF:37:D5:30:6E:91:7D:26:C3:A5:AE:F7
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018EA01A5966DADF878AAD2453481483D2AD
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/bRg_Oboj4fe_N9UwbpF9JsOlrvc.roa
Signing time: Tue 02 Apr 2024 18:37:45 +0000
ROA not before: Tue 02 Apr 2024 18:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.34.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 21:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a0:1a:59:66:da:df:87:8a:ad:24:53:48:14:83:d2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Apr 2 18:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d183f39ba23e1f7bf37d5306e917d26c3a5aef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:d9:4a:8a:33:f7:9a:e8:bd:57:38:e9:80:
0d:d8:d1:34:14:4c:42:32:47:2a:8e:e1:92:97:d8:
a1:74:df:66:ca:fc:91:e6:13:76:71:53:d2:28:be:
a7:5e:f5:59:53:cd:1e:4c:b2:cc:92:80:02:28:77:
1c:74:81:84:38:0a:9d:c5:fa:14:5d:21:7d:44:46:
dc:42:e2:e6:3f:9a:36:02:2f:4c:f9:3f:6b:59:df:
8d:b7:cf:91:c4:90:37:4b:d1:2e:d7:1a:de:3e:26:
af:49:ad:79:80:25:28:9b:e1:af:4a:70:72:00:ce:
aa:52:4b:a4:a3:b9:4c:4e:16:c8:b2:a9:02:41:2a:
22:b8:42:df:88:6a:9c:2c:ff:7c:17:67:8c:ce:bb:
2a:de:e0:8c:90:02:da:f2:47:00:ce:f8:ae:ba:2d:
32:87:21:9c:27:22:4e:1d:d5:f4:43:11:cd:10:7f:
1e:d2:32:22:b9:71:ff:5e:e5:74:64:fb:31:f6:28:
55:c3:03:3f:67:fc:f1:f8:02:31:a0:73:29:67:7c:
ec:f2:cd:49:2e:6f:5e:98:41:cb:ec:94:a6:bc:42:
de:15:f8:d1:d7:c7:b3:98:bd:28:29:d7:bb:d0:fe:
31:71:bb:bc:d2:f2:5a:01:83:5a:fb:57:75:9e:57:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:18:3F:39:BA:23:E1:F7:BF:37:D5:30:6E:91:7D:26:C3:A5:AE:F7
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/bRg_Oboj4fe_N9UwbpF9JsOlrvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.34.0/24
94.154.36.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:aa:46:5b:25:4b:c9:c6:20:f3:a0:22:04:61:9d:2b:50:cc:
a3:16:cd:e6:63:af:1b:4d:39:d9:8b:58:f0:2f:fb:27:1f:dd:
06:ed:2f:35:94:e2:e2:5d:61:72:ee:b6:0f:07:b9:af:88:a4:
bb:b5:d6:43:53:d2:1d:2d:a6:21:b7:7d:e1:ff:53:2a:82:21:
85:03:98:62:d1:97:90:a4:37:73:9a:75:b5:9e:0c:ad:d9:a0:
0f:a6:95:03:79:ad:54:80:ac:be:20:eb:a9:1e:45:2f:f7:3b:
ce:37:a0:64:36:f8:9a:f3:1f:5a:ec:51:a9:e4:31:af:ba:d8:
b8:b0:da:f9:46:61:ef:dd:23:67:71:5b:42:07:ab:fb:7e:9b:
c9:a3:8c:46:99:c3:59:12:b0:5d:e0:b6:0b:92:8c:64:31:19:
a5:6c:3d:59:cc:d7:35:2c:2e:e7:bd:bc:f9:0c:58:6b:14:a7:
c3:c6:72:14:4d:65:fe:69:d5:cc:0e:a1:76:f1:13:40:3e:32:
86:92:fd:b7:39:75:e2:d7:81:47:dd:eb:d4:7b:1f:98:e5:db:
62:d9:62:cd:f2:95:dd:e0:c0:16:73:58:d4:21:e5:a4:18:9b:
c9:26:e8:47:cb:27:24:ae:ff:13:1b:32:69:2f:10:c0:4f:44:
ca:ac:32:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 01:40:07 2024 by rpki-client on console-ams.rpki-client.org