Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/lv4i5x6AkW5f_XbCodwOnkBCrGk.roa
File: lv4i5x6AkW5f_XbCodwOnkBCrGk.roa (raw, json)
Hash identifier: JKHfnFx/J4gFyN3itMZlGR16fpYWrEaBUt0F7k9pJT0=
Subject key identifier: 96:FE:22:E7:1E:80:91:6E:5F:FD:76:C2:A1:DC:0E:9E:40:42:AC:69
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018A6F6E4D1715D794F030560C95DE669FE1
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/lv4i5x6AkW5f_XbCodwOnkBCrGk.roa
Signing time: Thu 07 Sep 2023 11:36:54 +0000
ROA not before: Thu 07 Sep 2023 11:36:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47757
IP address blocks: 94.154.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:6e:4d:17:15:d7:94:f0:30:56:0c:95:de:66:9f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Sep 7 11:36:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96fe22e71e80916e5ffd76c2a1dc0e9e4042ac69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7a:45:90:ea:66:51:0a:38:88:e2:15:e1:94:
bc:96:c9:9e:b7:b7:dc:69:32:3f:1d:87:70:31:55:
bc:b1:11:2b:e8:84:13:30:9f:7c:e2:0b:72:18:08:
70:d2:87:40:00:e8:32:cb:27:e1:1f:b5:cc:b2:59:
85:9c:6a:20:91:8a:78:b5:de:fc:0d:fc:9c:ee:1e:
91:a4:59:d4:bb:61:87:d1:00:71:8e:9c:93:23:86:
6d:0e:40:38:a7:f2:e8:b8:62:11:77:2b:ae:e2:c0:
a2:a1:23:e4:6f:12:2c:71:93:1c:12:bc:d1:99:cb:
48:ea:4f:81:68:00:e0:ad:38:82:cb:d7:7c:a3:09:
c1:52:ea:ee:74:8e:fb:e5:9f:08:2f:3d:62:19:34:
8c:41:72:74:da:c5:c6:69:8a:9e:fb:1a:5d:7a:ad:
c4:76:88:4d:6a:e2:1e:f4:84:35:0b:21:93:5a:8c:
94:41:b3:dc:9e:e3:6d:f1:71:f6:f1:ce:a6:a4:b0:
10:7c:9b:c6:52:da:4c:1d:06:d7:26:62:70:09:34:
8e:62:ff:7f:70:ec:a0:4b:a2:72:c6:17:91:63:05:
3b:08:0e:19:b3:74:29:a3:27:b0:68:06:75:83:42:
d9:63:10:98:ec:d3:ed:c4:50:2d:87:e8:8b:93:8f:
10:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FE:22:E7:1E:80:91:6E:5F:FD:76:C2:A1:DC:0E:9E:40:42:AC:69
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/lv4i5x6AkW5f_XbCodwOnkBCrGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.34.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:91:4c:76:e1:5a:24:85:29:89:40:db:6d:0f:67:3a:62:a7:
70:70:4d:75:a9:ca:93:89:d5:45:96:f7:da:b5:15:6c:b1:0a:
89:29:9e:7d:b5:89:5e:22:fb:cb:06:23:d2:95:cd:35:1d:0e:
05:b0:f3:46:1c:40:4d:c2:0c:00:d7:0a:ed:ed:07:31:43:f5:
00:00:68:d5:28:84:57:f8:ca:6e:09:bc:0f:a1:eb:57:bf:ba:
eb:55:c8:45:93:a4:6e:63:04:d6:d2:19:6a:4e:a9:97:48:80:
2a:c4:a6:1f:0e:dc:9d:c1:f7:6e:68:58:8a:9f:33:60:9b:d4:
9b:90:59:c9:f0:e5:2c:07:6c:34:3e:35:45:47:79:e7:b4:1a:
9b:34:1d:7d:3f:14:09:85:29:82:f4:93:5d:c1:90:a4:c9:21:
77:b8:d4:25:15:33:d5:7c:40:f1:42:7b:9c:d9:28:53:4c:c5:
72:98:53:dd:61:f7:9b:18:a4:47:bb:09:17:82:07:14:a4:d3:
32:f6:30:b3:2c:6e:d1:be:ad:2d:fa:0a:28:71:0c:c8:59:c3:
ff:f5:71:f0:f9:c9:d0:7f:91:6a:df:cb:6f:54:9b:71:fc:68:
d9:4c:3f:b9:5f:e0:cf:38:38:cd:bd:c5:ac:e2:22:b2:7d:82:
f7:42:6d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 13:32:36 2023 by rpki-client on console-fra.rpki-client.org