Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/p25ARckV9PM4ZHnw7KxHDMk-xeA.roa
File: p25ARckV9PM4ZHnw7KxHDMk-xeA.roa (raw, json)
Hash identifier: kTw1eBXpOq03DNOiGlcPbqj1MwXg43UiIn/v90EP+x0=
Subject key identifier: A7:6E:40:45:C9:15:F4:F3:38:64:79:F0:EC:AC:47:0C:C9:3E:C5:E0
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018ED6462C9A8F58FDB158CA17BE5913DBB4
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/p25ARckV9PM4ZHnw7KxHDMk-xeA.roa
Signing time: Sat 13 Apr 2024 07:05:06 +0000
ROA not before: Sat 13 Apr 2024 07:05:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215761
IP address blocks: 94.154.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 May 2024 20:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d6:46:2c:9a:8f:58:fd:b1:58:ca:17:be:59:13:db:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Apr 13 07:05:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a76e4045c915f4f3386479f0ecac470cc93ec5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:73:65:05:29:5a:c4:05:ae:f3:87:17:59:4c:
f7:d5:ee:fc:12:83:c4:5f:f0:5c:0a:42:f2:a5:45:
8e:d3:88:da:ec:c2:2c:87:28:1a:36:33:71:53:b7:
8a:7d:3d:fc:ad:a5:98:a5:b8:3d:a7:a6:6f:b3:00:
ce:bd:0d:73:54:ae:af:30:84:14:15:c9:df:ed:de:
a3:d4:9e:da:9d:06:99:ee:f2:ab:ab:78:b2:54:b3:
80:c2:25:4c:08:f3:24:1e:af:7b:e8:21:04:73:8f:
69:1a:47:34:af:a2:24:dc:a1:df:db:80:26:d2:4e:
e5:3d:1f:77:a7:8e:05:bb:bc:c6:bb:cd:6b:78:76:
76:49:77:06:b8:38:16:65:e8:83:71:9a:50:20:7c:
3d:a3:e3:62:3e:c3:bd:64:dc:8a:34:b0:1c:10:6b:
c3:04:ef:b5:89:36:f5:fc:9e:f0:dd:67:1a:b9:84:
a4:44:0f:cf:43:79:a9:bd:62:1a:76:57:16:42:c7:
b4:0c:a3:e6:b5:88:21:ea:c9:61:6b:17:bd:5c:29:
d2:8b:e4:e5:fc:71:c2:52:73:6e:9d:fb:22:81:d1:
5f:4b:88:dc:dc:60:49:4e:35:c1:98:89:a9:5c:70:
99:57:5b:d8:35:48:03:30:40:50:87:7c:84:f4:62:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6E:40:45:C9:15:F4:F3:38:64:79:F0:EC:AC:47:0C:C9:3E:C5:E0
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/p25ARckV9PM4ZHnw7KxHDMk-xeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.33.0/24
Signature Algorithm: sha256WithRSAEncryption
21:91:a6:8d:7c:83:dd:c6:c3:a5:29:46:8c:3f:60:e5:18:49:
59:18:2f:d6:ba:52:d2:bb:26:bd:cb:53:f5:e4:aa:3d:27:69:
d2:9e:f0:87:ce:a3:4c:1e:b9:b7:23:b5:0c:b6:53:11:30:2f:
92:31:64:81:11:af:2b:50:39:78:ef:88:d7:a1:02:e7:96:19:
6a:3e:ae:a9:e0:82:25:50:ca:d1:1e:f2:45:6a:2f:0c:96:15:
f6:e4:c6:5f:34:9d:0f:28:36:4d:6a:06:61:c1:4c:1c:81:b5:
1e:75:ff:d5:17:bb:7b:54:c2:3a:f9:9d:79:17:1f:9d:5d:b0:
fc:44:4c:63:1b:d3:74:3b:c2:63:73:2f:1a:8f:d4:b7:b8:b7:
a9:61:4e:74:09:c1:78:11:79:9d:47:26:3c:51:c2:40:44:f1:
f0:fe:32:cd:eb:5a:67:ac:11:5a:5c:7f:81:92:bf:54:c6:43:
f6:42:59:08:c1:d6:c6:7b:0e:8e:d7:87:30:af:4e:3c:e2:a3:
9b:d9:0c:32:1a:bd:52:08:ed:0b:16:ed:a7:84:c4:5c:bf:c6:
23:70:96:7a:f0:8c:03:cf:1a:f0:aa:f2:4e:88:c9:6e:cb:54:
3d:da:69:d2:d3:0e:4a:27:4a:4e:6b:43:8b:1d:23:50:ef:40:
24:c7:ea:a2
-----BEGIN CERTIFICATE-----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Generated at Wed May 15 22:00:45 2024 by rpki-client on console-ams.rpki-client.org