Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/uLDu2bXAHZ4efZ_ysCBNONeDOjI.roa
File: uLDu2bXAHZ4efZ_ysCBNONeDOjI.roa (raw, json)
Hash identifier: UPvakOMviqSU/qYDvcAo0Ctj8msaIBBtukg3jMu3BiY=
Subject key identifier: B8:B0:EE:D9:B5:C0:1D:9E:1E:7D:9F:F2:B0:20:4D:38:D7:83:3A:32
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018B00068218DBEB6421F942799F6E69EAF4
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/uLDu2bXAHZ4efZ_ysCBNONeDOjI.roa
Signing time: Thu 05 Oct 2023 13:28:28 +0000
ROA not before: Thu 05 Oct 2023 13:28:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 94.154.33.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:06:82:18:db:eb:64:21:f9:42:79:9f:6e:69:ea:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 5 13:28:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8b0eed9b5c01d9e1e7d9ff2b0204d38d7833a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:34:54:e6:bc:89:46:5b:5f:d0:31:22:2a:
ba:5f:97:65:ad:a7:85:08:26:8f:61:e7:4f:e8:b6:
56:a2:39:40:45:80:53:7d:79:84:6c:e6:6c:bb:74:
71:22:5f:d7:75:13:73:16:21:ee:0c:cb:c6:4c:8f:
72:34:89:fe:64:7a:18:46:17:33:27:55:cf:f8:ad:
ec:02:3c:63:5b:04:51:3d:fe:ba:b4:f9:4e:f6:40:
1a:35:4d:cd:f6:fa:99:7f:1e:d8:fa:10:a3:51:e2:
03:7c:50:87:c8:0c:26:74:30:ae:50:55:bc:ef:c7:
75:00:2f:1e:0d:7e:56:31:d2:ad:08:76:3d:e4:16:
60:bd:d1:66:69:95:2e:eb:ea:fd:bd:68:00:02:98:
04:28:7a:1f:42:1d:46:c5:14:75:f9:11:03:d1:19:
c2:08:d0:27:a4:e1:e9:7a:16:b6:36:c2:d4:82:ee:
11:b1:5a:02:03:72:fd:61:3a:d1:2e:ba:27:c2:09:
37:d8:b2:3e:31:1b:9e:09:5f:7b:9e:ef:e0:af:5f:
62:a4:1b:f8:80:88:6f:aa:60:cb:00:66:6b:85:5e:
d8:23:ad:d7:30:67:0d:ff:29:52:cf:22:a4:07:c9:
58:04:75:10:cf:fa:3b:61:6d:16:d6:0c:53:c6:79:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B0:EE:D9:B5:C0:1D:9E:1E:7D:9F:F2:B0:20:4D:38:D7:83:3A:32
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/uLDu2bXAHZ4efZ_ysCBNONeDOjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.33.0/24
94.154.37.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:de:3d:7b:40:9c:68:3d:de:5e:cf:ac:db:b4:b2:9a:1f:bd:
9c:91:39:2b:02:7c:c5:8a:98:0d:c3:f3:0c:93:e6:71:dd:1d:
04:de:3b:bb:1e:db:7a:54:6c:a9:88:e9:0d:6b:54:50:8c:d0:
09:ae:4c:1e:fd:41:01:8e:3a:60:ed:51:12:db:21:9d:a8:c6:
86:92:d9:32:82:f1:f3:7d:38:68:8e:a2:1c:ed:54:07:97:6b:
10:9e:0c:78:f1:41:ae:9d:f9:76:4d:98:ec:e5:93:7c:57:78:
5e:6e:3f:c0:19:50:60:29:a2:ec:ac:80:b5:ca:b6:6d:b8:44:
f4:05:f1:9d:cc:95:28:01:f9:98:b3:82:ae:b9:98:b0:24:70:
f9:ca:ff:8f:b4:31:54:ba:a5:a1:34:4e:d9:6e:1e:ba:bb:b5:
c8:e3:4f:8a:7c:17:4c:7b:85:04:8f:b7:cb:5c:b4:62:7a:5c:
2a:4b:cb:25:37:90:da:00:ba:65:d9:b6:46:69:47:69:fa:ee:
54:55:94:b1:41:e7:80:54:ff:f7:ec:2f:6a:3b:3d:e9:50:d4:
1e:5b:f2:e5:bd:f7:d0:8c:74:88:72:78:fe:69:7a:b0:1e:d4:
1e:23:38:13:14:18:eb:f3:68:6f:3b:b4:95:72:d1:c4:06:ab:
16:e5:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 09:46:21 2023 by rpki-client on console-ams.rpki-client.org