Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/fpAkYjuQovSfkRB_r3fQwM6_uOM.roa
File: fpAkYjuQovSfkRB_r3fQwM6_uOM.roa (raw, json)
Hash identifier: CYdJEA650BZjaLttQpo3mFPcrKLnNOr+w4uQgtcyzh4=
Subject key identifier: 7E:90:24:62:3B:90:A2:F4:9F:91:10:7F:AF:77:D0:C0:CE:BF:B8:E3
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 019290D4181E40EFC13EE0E8552B3EB4AC56
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/fpAkYjuQovSfkRB_r3fQwM6_uOM.roa
Signing time: Tue 15 Oct 2024 15:37:51 +0000
ROA not before: Tue 15 Oct 2024 15:37:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215567
IP address blocks: 94.154.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 20:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:d4:18:1e:40:ef:c1:3e:e0:e8:55:2b:3e:b4:ac:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 15 15:37:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e9024623b90a2f49f91107faf77d0c0cebfb8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f7:f1:b8:f2:50:93:d6:ad:ce:5e:a6:f5:19:
0d:9e:93:30:95:63:d9:90:b1:0c:73:60:b5:c7:95:
a5:ec:75:ed:3e:17:2c:83:20:33:5b:ed:10:a7:a2:
99:cb:d5:b1:c6:02:8d:50:42:35:be:0b:be:11:fe:
31:85:e0:d6:c9:ef:a3:9d:df:2b:68:6c:1f:a1:72:
06:04:62:dd:91:5a:4b:6c:0b:93:c7:2f:d0:a3:7e:
1a:67:ef:3a:2d:f8:7e:58:83:3b:4f:51:06:ab:8f:
62:fa:fb:28:8c:84:d1:61:2c:98:b8:39:94:a9:5a:
92:ea:83:6e:40:f7:31:47:47:17:68:a1:50:97:53:
58:29:0e:d2:3c:dc:81:f0:a1:37:54:0d:f5:79:b4:
ab:69:f5:06:9f:90:b4:65:85:a5:c0:53:1f:f6:dc:
c5:76:9a:75:e6:2d:54:8e:f2:77:43:31:3b:31:3f:
12:52:23:21:77:03:21:46:09:01:18:dc:c8:77:69:
21:27:1f:79:4c:62:b3:b5:c7:01:1f:73:c0:28:8f:
06:71:b9:17:16:7e:6e:ab:d0:3f:77:7b:b5:c7:2a:
87:ef:04:19:af:9b:87:38:9a:fc:fb:de:30:50:17:
35:84:5b:3a:3e:76:3a:21:b4:d4:e4:cc:2d:7f:13:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:90:24:62:3B:90:A2:F4:9F:91:10:7F:AF:77:D0:C0:CE:BF:B8:E3
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/fpAkYjuQovSfkRB_r3fQwM6_uOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.35.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:03:4b:1b:38:14:95:5e:fb:5b:00:80:a6:65:69:4a:0d:e5:
fb:b2:be:d4:4f:95:4e:3f:12:ca:94:6a:cb:ad:aa:a4:7d:49:
de:03:c7:30:6c:d0:9d:4d:23:9d:58:c3:73:5c:59:56:79:7a:
fa:95:48:46:2d:0b:ff:35:e9:c0:69:38:b6:60:05:b2:9b:c7:
b0:15:83:22:b1:8e:63:4e:0c:6e:85:68:f0:f1:9f:ce:b6:df:
22:48:c6:98:87:07:af:34:43:1d:87:de:45:ab:d3:cc:6e:95:
ed:b1:4e:f6:db:c7:68:51:18:f3:ab:1f:d6:6d:d1:e1:c0:2a:
be:56:d5:68:6c:1c:b0:c6:18:a9:20:bc:2f:31:3a:9e:59:5b:
f4:7b:a0:57:c6:8d:be:2e:48:e2:9c:c9:56:7b:1e:92:6a:62:
3a:52:18:99:65:c4:d5:f6:df:c3:e1:7b:fd:f4:1b:51:e8:64:
6b:18:14:67:82:2d:d2:98:d1:f2:8b:8b:6e:9c:af:01:27:f9:
24:a6:34:fa:f3:96:18:56:86:09:30:4d:33:20:7a:f0:4a:9b:
54:2d:44:c4:cb:86:de:11:c6:c6:83:ce:24:d0:b8:ca:36:21:
65:50:b8:38:2b:17:b2:05:f9:3f:96:91:1f:06:2c:0f:03:6a:
af:b3:de:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 21:58:15 2024 by rpki-client on console-ams.rpki-client.org