Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/yL5LtIW3nt4zrgeq-k-a4gtZruw.roa
File: yL5LtIW3nt4zrgeq-k-a4gtZruw.roa (raw, json)
Hash identifier: ZEyjc5gfqDeY6J7Qg40hQBL1frG8/7V51E+s+whtqWo=
Subject key identifier: C8:BE:4B:B4:85:B7:9E:DE:33:AE:07:AA:FA:4F:9A:E2:0B:59:AE:EC
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0190347C87205658F2BCE002FFF6F5EB575B
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/yL5LtIW3nt4zrgeq-k-a4gtZruw.roa
Signing time: Thu 20 Jun 2024 07:11:34 +0000
ROA not before: Thu 20 Jun 2024 07:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 94.154.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jun 2024 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:7c:87:20:56:58:f2:bc:e0:02:ff:f6:f5:eb:57:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jun 20 07:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8be4bb485b79ede33ae07aafa4f9ae20b59aeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:9e:70:8f:86:e0:86:2e:67:e8:e2:a0:25:
4e:ac:6e:ed:1b:fe:fb:ed:fa:82:2e:a2:81:cb:d2:
4d:c3:b1:80:41:14:ad:d6:85:b3:e8:9d:a3:86:d5:
9a:a1:b9:41:75:4d:47:5f:38:17:c4:21:40:4b:5e:
ce:c1:85:25:38:b0:aa:fb:eb:5f:98:95:6f:51:a0:
3a:76:8b:05:14:f5:c1:52:33:2b:30:8b:86:91:94:
71:92:c0:8c:63:0f:f8:31:4e:ec:85:da:30:9c:10:
2e:f1:0e:c7:5d:49:27:ed:28:7c:b2:9a:c9:27:a3:
32:94:80:95:bc:d6:c5:6f:28:10:5f:5c:23:30:ea:
40:a8:a5:d2:95:b9:02:07:2f:28:2b:7f:fa:84:8e:
3c:3f:f3:96:5d:98:86:2e:4b:1c:72:03:1f:71:25:
bd:14:02:37:49:eb:56:17:fb:9e:74:d1:88:7c:d0:
c6:6d:31:05:6c:50:86:49:c1:37:72:67:26:d6:16:
e4:e8:14:1b:2b:9d:47:db:eb:76:a5:d6:8e:32:8f:
f8:6b:81:03:7f:2d:55:b2:92:01:40:12:97:51:ed:
45:e3:10:cb:06:bc:dd:0b:05:ac:9b:2f:7c:36:b5:
da:6c:44:ec:67:7f:d6:57:ab:7b:0d:64:3c:8a:57:
42:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BE:4B:B4:85:B7:9E:DE:33:AE:07:AA:FA:4F:9A:E2:0B:59:AE:EC
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/yL5LtIW3nt4zrgeq-k-a4gtZruw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.35.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d0:fa:87:c6:d8:52:cf:f0:4e:20:d3:a5:0f:55:a4:b7:fe:
0f:6b:dc:70:20:62:75:ea:62:53:63:f0:38:d1:f1:87:99:13:
ea:7d:02:94:e6:f3:3c:6f:6b:60:61:9b:7c:e6:05:8c:1b:5d:
4a:25:2a:1c:6e:fa:a2:73:aa:cf:23:ad:2a:22:b2:82:46:72:
55:16:62:39:d3:9e:f9:7b:d7:74:74:11:7a:b2:a3:f6:f0:ce:
a7:fb:99:ea:de:6c:e4:ae:f6:a0:01:57:18:15:7c:35:16:c3:
83:1e:18:35:5a:2c:c5:d4:82:bc:59:a2:85:f2:10:60:7d:f0:
e0:e4:c3:cf:a3:06:cf:e4:58:eb:f1:c6:22:67:36:a5:b1:74:
17:3e:93:cc:46:32:5c:8e:29:71:93:0d:25:b0:e3:82:51:24:
56:21:f0:da:1d:73:4d:e6:9c:c9:3c:81:2e:ae:be:14:41:a3:
f4:57:e6:33:af:e1:03:b4:ad:74:22:9d:dc:e0:92:29:64:a9:
73:1f:77:96:05:ae:bc:03:6e:e4:90:8d:09:93:2f:0e:ae:9f:
54:06:47:e0:7f:92:43:4c:1b:5e:4a:7f:3a:45:7a:ac:ec:a6:
c5:ed:fa:69:bc:62:58:1c:14:bb:5c:41:e8:ac:ff:14:37:b2:
be:83:8e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 13:47:34 2024 by rpki-client on console-fra.rpki-client.org