Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/g7YIVCKemA8zLgZri6sLShf01MM.roa
File: g7YIVCKemA8zLgZri6sLShf01MM.roa (raw, json)
Hash identifier: IBymtulKr5ufK8LiMmGRGPf1YsV4T2rotNnJLN1Pxkw=
Subject key identifier: 83:B6:08:54:22:9E:98:0F:33:2E:06:6B:8B:AB:0B:4A:17:F4:D4:C3
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018FE1C61BCFE671DF9A6D00FC41B55EAA34
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/g7YIVCKemA8zLgZri6sLShf01MM.roa
Signing time: Tue 04 Jun 2024 05:43:27 +0000
ROA not before: Tue 04 Jun 2024 05:43:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 12:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e1:c6:1b:cf:e6:71:df:9a:6d:00:fc:41:b5:5e:aa:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jun 4 05:43:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83b60854229e980f332e066b8bab0b4a17f4d4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:7f:d2:52:0c:c9:98:35:78:8e:df:e5:a9:
1f:6b:df:6e:72:18:72:59:d9:ed:ea:b5:6c:3f:9e:
c3:45:b8:87:1b:5a:7d:40:be:e3:ad:23:36:22:2c:
70:1d:f6:79:b4:19:98:c9:22:34:a7:ef:6f:3a:90:
d7:8f:9e:cc:b3:ae:4c:1e:1a:07:dd:a1:e3:53:e4:
8b:66:80:5e:d1:3c:ea:6e:ba:ac:7f:dc:30:b9:30:
f5:81:da:96:18:15:a8:03:ed:69:41:a7:2d:45:c0:
5c:a7:f5:7b:2f:68:86:61:d2:e3:33:1b:66:8a:95:
d1:1b:57:9f:99:b5:8c:a1:7b:84:cc:ff:38:76:30:
2c:7a:32:73:92:54:fc:4d:76:b3:af:37:52:41:d8:
2d:70:54:f1:f9:1c:ce:ae:8c:b2:28:0a:48:e7:f6:
77:68:0c:b5:a7:6d:cf:2b:49:92:0c:08:52:39:73:
f5:d8:ec:95:7f:fe:51:51:dd:69:84:ac:7d:a5:67:
32:94:4f:7b:1b:98:aa:b4:b8:3a:33:e5:ea:86:be:
25:db:84:d9:17:39:25:a0:55:90:5e:f5:f3:01:4a:
db:37:c6:48:37:db:a8:60:f6:04:67:0d:77:d5:d3:
24:66:05:3c:80:27:72:33:89:ef:6a:6f:13:16:3a:
94:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B6:08:54:22:9E:98:0F:33:2E:06:6B:8B:AB:0B:4A:17:F4:D4:C3
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/g7YIVCKemA8zLgZri6sLShf01MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.36.0/24
Signature Algorithm: sha256WithRSAEncryption
83:9d:ae:7a:60:2e:e7:18:4b:5e:7e:6d:7f:03:20:9b:8c:9f:
57:93:28:40:0a:3b:68:16:86:c8:53:52:43:95:cf:e4:01:9e:
6b:47:bd:95:f2:b0:e5:f0:44:59:8c:50:8a:64:a6:54:b4:e5:
45:d8:ca:24:38:37:bb:d0:e6:3d:83:33:c9:3c:55:b9:7a:53:
b1:3a:65:6e:ce:6a:37:10:98:24:9b:3e:1f:84:63:92:55:3f:
63:07:e4:f4:70:22:4e:31:29:49:c1:4d:a3:1e:a5:3b:a3:05:
2c:b7:a5:05:85:16:08:13:55:34:38:db:76:8a:f4:47:4b:15:
14:c5:40:61:1a:a9:ec:8d:3b:34:c5:b2:91:86:0d:94:17:99:
54:30:33:4f:c1:f8:7a:ca:89:e0:81:dc:2e:b2:8c:c1:09:fd:
d9:5c:2d:ee:42:aa:c9:ac:33:37:51:74:f2:d8:04:93:be:d5:
f0:ed:04:a0:9c:a8:1c:df:0e:99:61:9a:cc:69:78:80:24:e6:
d9:72:9b:d0:b7:a6:4a:e1:93:c0:dc:ca:2b:36:84:aa:02:ee:
aa:66:65:ac:cd:d4:3e:7d:df:dc:26:a7:91:43:bb:fe:16:1f:
db:15:e9:7e:a5:07:a0:fe:7d:46:f6:cb:9f:ae:de:09:42:9c:
42:44:70:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 15:28:51 2024 by rpki-client on console-fra.rpki-client.org