Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/fFpxTUejr4zD4yPN4Yd4tfw0Oco.roa
File: fFpxTUejr4zD4yPN4Yd4tfw0Oco.roa (raw, json)
Hash identifier: WtVu0OTdVryQf+jyn+UpAb3j4vlF9leb8uWbR663J/0=
Subject key identifier: 7C:5A:71:4D:47:A3:AF:8C:C3:E3:23:CD:E1:87:78:B5:FC:34:39:CA
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018B1DFE20D6A39219EFE3A383CBEBC801CB
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/fFpxTUejr4zD4yPN4Yd4tfw0Oco.roa
Signing time: Wed 11 Oct 2023 09:07:55 +0000
ROA not before: Wed 11 Oct 2023 09:07:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 94.154.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:fe:20:d6:a3:92:19:ef:e3:a3:83:cb:eb:c8:01:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 11 09:07:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c5a714d47a3af8cc3e323cde18778b5fc3439ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:31:2f:17:98:6f:01:d0:cb:b9:ef:71:27:
e9:59:9c:8b:18:da:b0:25:5a:e3:b9:c7:18:7e:3f:
9c:ea:c4:ba:d1:dc:15:a5:15:a2:0d:44:89:cd:7d:
58:7b:31:29:0b:69:f1:13:dd:b0:3e:40:3d:08:e9:
d7:b6:b3:3a:b7:b7:e2:f5:59:59:cb:a6:dc:0a:fb:
70:5d:c2:3a:ae:5f:e5:dd:a5:7f:3f:96:af:e6:fa:
64:cf:83:95:97:6d:f0:34:c7:b2:e0:92:f1:cc:23:
6a:8f:cc:d3:a9:17:67:66:ae:ae:d9:38:cc:35:22:
c0:83:6c:20:59:b3:e8:4b:19:4b:8a:6e:d2:c6:de:
00:d9:f9:5c:ae:f2:eb:31:d3:29:13:5f:d8:eb:52:
b7:f9:58:71:b6:d0:16:62:45:cd:50:61:09:df:8f:
64:a3:14:be:01:76:ef:65:6d:c3:60:13:63:0c:ef:
5f:26:84:3a:5a:21:a6:cd:4e:b4:fc:32:e6:33:e0:
88:dc:23:e5:4f:9d:06:2c:c1:70:a7:ed:1e:f0:ca:
db:8a:df:7e:cd:20:71:29:d0:d4:58:17:f2:46:35:
76:f3:67:7a:4f:77:70:bb:9b:a8:7c:b2:92:fb:0e:
0d:b3:d9:2c:0d:70:00:9e:f1:dd:37:ae:e0:43:2c:
a2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5A:71:4D:47:A3:AF:8C:C3:E3:23:CD:E1:87:78:B5:FC:34:39:CA
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/fFpxTUejr4zD4yPN4Yd4tfw0Oco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.37.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:a0:e6:c4:be:5d:83:d9:1d:7b:a5:1e:64:a2:72:23:fe:f0:
67:50:e4:d5:28:4c:e7:8c:f1:9a:c1:f2:63:78:49:00:45:27:
62:95:95:d7:1d:4c:9a:59:e9:5a:f1:f8:32:88:77:89:22:2e:
ac:ad:f3:14:17:d3:15:cc:0d:fb:b9:c8:23:4a:c8:e9:17:7e:
52:a6:35:a7:88:c4:3b:21:18:7c:e4:38:6c:1b:df:9b:cb:b8:
c2:26:9d:1b:81:6c:92:36:46:2a:8f:5b:c1:02:b9:c9:bf:3a:
de:ec:20:4d:f2:8b:8b:d0:b6:1b:c5:12:12:69:5e:c3:0f:11:
a1:ea:c5:1d:5b:cd:7a:e6:e1:84:55:a0:ed:25:17:b4:10:13:
39:b4:c4:bd:a2:55:91:8c:6f:49:e2:7b:2e:09:7e:bc:e3:85:
34:c5:57:ee:f5:e2:bb:48:3f:c7:83:28:81:c1:c6:1b:98:78:
ba:c4:d1:33:5f:6b:55:69:23:c0:58:06:4b:83:af:6e:ee:b3:
b3:24:b6:65:18:3d:9f:69:d6:c2:40:70:31:75:af:aa:78:16:
f1:ab:0c:5c:58:4c:8e:39:3c:a1:9e:cb:e0:1c:19:e4:3c:dc:
92:f2:97:03:03:2e:68:2f:69:ae:8b:ff:97:17:91:4a:2f:a6:
03:27:94:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 25 22:43:40 2023 by rpki-client on console-fra.rpki-client.org