Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/h7US2BnKZ9pRwE19joGk56Vock4.roa
File: h7US2BnKZ9pRwE19joGk56Vock4.roa (raw, json)
Hash identifier: QNi0WiBCYlGdx2izVogaVewxqEWWI86LPuXL7td1I7c=
Subject key identifier: 87:B5:12:D8:19:CA:67:DA:51:C0:4D:7D:8E:81:A4:E7:A5:68:72:4E
Certificate issuer: /CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Certificate serial: 01869DF7D281A1D33FF35EF7D2DA1B19BA37
Authority key identifier: 77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/h7US2BnKZ9pRwE19joGk56Vock4.roa
Signing time: Wed 01 Mar 2023 16:18:29 +0000
ROA not before: Wed 01 Mar 2023 16:18:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 94.154.9.0/24 maxlen: 24
2a0f:f0c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9d:f7:d2:81:a1:d3:3f:f3:5e:f7:d2:da:1b:19:ba:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77001bcc69a16503421b88851f47aa16c5cf2dbc
Validity
Not Before: Mar 1 16:18:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87b512d819ca67da51c04d7d8e81a4e7a568724e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:3f:4f:99:46:b2:26:58:8d:ab:43:22:70:
47:22:64:ab:87:d1:5d:b2:3e:31:c5:22:4e:14:5e:
f1:bd:26:7a:88:f4:da:64:d2:f1:2f:32:72:42:51:
f5:76:75:ae:c3:29:6a:58:ff:4e:c3:89:37:6e:d7:
d2:c9:d8:98:d2:db:04:ed:23:c6:14:da:d9:8e:20:
ec:a1:ba:2b:9d:af:56:47:c1:35:84:4f:cd:f7:3c:
b9:50:22:ce:f0:2d:6a:cc:8a:12:a8:92:b6:a3:a8:
4b:ca:a6:60:92:51:2f:6d:42:f9:cb:73:d5:d2:21:
1b:1a:8c:7e:51:ef:59:c6:e5:69:ad:f0:18:6b:26:
e5:4a:72:74:cb:99:a8:7d:33:d8:51:98:44:93:f4:
fc:b8:64:6f:32:cb:54:49:70:39:88:7e:fc:9c:9a:
1f:21:fb:c4:73:37:11:c7:e2:2e:78:7b:30:64:07:
9d:e2:0e:35:b6:c3:87:03:59:c5:24:62:66:1a:0e:
b7:90:e9:dc:55:1a:6d:1c:8c:cc:92:43:56:d6:cc:
62:7f:f3:a3:eb:52:7a:a0:8c:02:a8:e0:a8:79:cc:
27:bd:09:b6:32:27:68:be:4b:30:04:cf:51:b4:7e:
a8:46:54:b7:78:dc:ef:0f:ee:b6:0d:39:8f:3a:8c:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B5:12:D8:19:CA:67:DA:51:C0:4D:7D:8E:81:A4:E7:A5:68:72:4E
X509v3 Authority Key Identifier:
keyid:77:00:1B:CC:69:A1:65:03:42:1B:88:85:1F:47:AA:16:C5:CF:2D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwAbzGmhZQNCG4iFH0eqFsXPLbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/h7US2BnKZ9pRwE19joGk56Vock4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/6ff230-e012-4531-866c-0a8bd2f36c72/1/dwAbzGmhZQNCG4iFH0eqFsXPLbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.9.0/24
IPv6:
2a0f:f0c0::/32
Signature Algorithm: sha256WithRSAEncryption
02:e9:ad:74:5b:4a:8c:59:76:88:eb:ea:62:4e:4e:99:4e:e0:
aa:b4:cf:9f:b8:28:fe:da:39:00:b0:25:45:a6:fe:c8:01:40:
d8:6b:a2:0f:27:3a:34:02:4e:84:1f:ef:13:9b:5e:cf:b7:a5:
30:77:66:a8:d6:21:f8:7f:9c:4e:ab:1d:4f:98:39:3c:e0:f3:
63:18:6f:63:63:d9:a5:76:ea:c7:8f:5c:56:df:04:ab:ed:73:
9c:4a:34:33:b0:91:51:64:66:ab:45:54:59:07:3c:fb:49:83:
56:d1:60:66:7f:fd:ef:1a:ee:13:e1:04:67:16:24:86:56:c9:
ab:d4:31:62:bc:43:f8:c4:35:bf:3e:5f:db:53:34:8c:ae:66:
ca:0d:4c:f4:22:bf:89:eb:e1:5b:66:f6:8e:53:f3:c1:50:2c:
76:56:c0:c1:65:9f:e9:3b:55:79:b4:bc:a9:ee:37:c6:65:71:
73:dd:16:f3:b5:7c:0a:13:77:83:94:16:14:c8:2c:17:a9:d7:
68:fe:0e:f2:82:89:c4:77:05:d6:2c:27:21:c2:d1:2c:2c:34:
25:3d:e3:95:14:ca:27:9e:0c:5c:67:80:59:9f:f3:35:70:03:
f7:41:9a:b5:28:f6:80:3d:9f:60:bc:4d:f3:9d:e5:fc:34:d4:
28:81:5a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:11 2024 by rpki-client on console-fra.rpki-client.org