Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/dV60J1cXrkq6Y4qpgwIjxkehvPY.roa
File: dV60J1cXrkq6Y4qpgwIjxkehvPY.roa (raw, json)
Hash identifier: HCk3eQdK7YncxrYaS0sKQC6YoOXsIAWJHJSCPPTwns8=
Subject key identifier: 75:5E:B4:27:57:17:AE:4A:BA:63:8A:A9:83:02:23:C6:47:A1:BC:F6
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018AFFE8AC7AFE32CDE29C1B0432495A1D27
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/dV60J1cXrkq6Y4qpgwIjxkehvPY.roa
Signing time: Thu 05 Oct 2023 12:55:53 +0000
ROA not before: Thu 05 Oct 2023 12:55:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.35.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ff:e8:ac:7a:fe:32:cd:e2:9c:1b:04:32:49:5a:1d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 5 12:55:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=755eb4275717ae4aba638aa9830223c647a1bcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e1:8b:6d:42:2f:f8:7d:84:6b:2b:99:ec:61:
44:de:cc:3e:11:17:9c:bc:6c:65:13:01:bd:9c:7f:
23:cc:d6:1a:76:8e:81:ef:d6:20:0f:3f:e3:b7:e2:
11:8d:0f:60:1a:f1:89:ae:a8:a3:ee:1c:fa:6b:56:
dd:fa:a1:60:55:19:88:c5:a0:36:f2:76:61:80:33:
c8:e1:36:90:48:cd:e3:08:52:a9:c9:cf:9b:f5:fe:
87:ad:8b:92:8c:a5:14:81:18:43:f9:58:0f:47:24:
e7:7e:7f:49:46:b9:7c:05:1f:69:99:46:2a:9b:2b:
2f:f8:b1:45:23:a0:05:d1:ec:45:12:fb:1d:2b:57:
67:ae:e9:42:e7:4b:e8:21:6a:0f:87:6f:6b:70:ba:
02:fd:15:8e:92:c7:a5:9d:ac:19:73:64:f2:ee:c2:
f6:ee:60:6f:d1:6d:38:01:6a:78:d3:6f:14:2b:5c:
20:7e:8e:ee:59:78:13:57:91:05:a3:78:d5:b9:19:
d1:7f:a7:7e:7a:f6:f5:2e:e1:52:1b:62:19:7a:13:
56:01:08:41:f7:6b:a3:9e:57:28:cc:8e:08:50:af:
76:1b:88:ad:e3:ad:6b:45:57:6a:84:17:e4:fe:c6:
1c:02:6c:7c:32:88:5a:46:94:3d:80:22:04:41:a8:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:5E:B4:27:57:17:AE:4A:BA:63:8A:A9:83:02:23:C6:47:A1:BC:F6
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/dV60J1cXrkq6Y4qpgwIjxkehvPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.34.0-94.154.36.255
Signature Algorithm: sha256WithRSAEncryption
5a:02:4b:b5:39:b1:35:f8:3a:58:7d:b2:6d:92:68:3e:6c:a6:
c1:c2:b4:71:63:e6:60:62:0e:57:01:b7:a8:f6:87:dc:37:da:
92:84:99:8b:06:d7:91:37:7b:b9:c7:0e:93:03:29:38:b9:c1:
6f:4d:bf:f2:de:1e:5e:a8:5e:f7:c2:35:78:6a:e8:62:76:71:
48:b3:c3:d3:80:4b:80:11:4e:ea:3b:1e:00:e9:ad:9a:ba:3c:
10:f9:9a:3e:15:b6:72:81:ca:9b:ac:ea:4f:d6:bc:eb:38:7c:
37:20:41:0d:de:72:c3:e4:be:e0:7a:9d:05:ba:69:55:c2:05:
26:3f:7a:e7:98:45:ec:50:88:6c:67:bf:ea:52:1b:c3:cc:8b:
89:3b:6b:46:96:c2:a5:df:52:c1:5b:db:d3:69:3b:cc:08:14:
94:46:b6:39:9b:28:ea:34:e8:df:14:8f:d4:47:f9:02:44:8e:
98:3a:e7:cc:1a:1f:f6:ea:c1:72:32:8b:04:cc:fa:6b:aa:09:
9f:26:01:9c:01:be:ea:a5:bc:3a:78:af:1b:80:8b:71:d7:3f:
06:34:a4:8e:f6:8c:62:37:5c:06:c2:0e:d2:c6:71:5c:d9:0b:
e0:ad:05:35:00:c5:d2:9b:a8:1f:0a:44:95:37:76:93:0f:20:
d9:0d:b6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 14:12:26 2023 by rpki-client on console-ams.rpki-client.org