Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/zHwHqVJ1PnhPqZI_doejeaKBSy8.roa
File: zHwHqVJ1PnhPqZI_doejeaKBSy8.roa (raw, json)
Hash identifier: +KqdnoecwjvMP8naTdOatqYIdAo9tUDp15TnPdMN2ZA=
Subject key identifier: CC:7C:07:A9:52:75:3E:78:4F:A9:92:3F:76:87:A3:79:A2:81:4B:2F
Certificate issuer: /CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Certificate serial: 0186D57EF70F134FA92E49A5DC6EB647C1E2
Authority key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/zHwHqVJ1PnhPqZI_doejeaKBSy8.roa
Signing time: Sun 12 Mar 2023 11:05:13 +0000
ROA not before: Sun 12 Mar 2023 11:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48197
IP address blocks: 94.127.152.0/24 maxlen: 24
94.127.152.0/23 maxlen: 23
94.127.153.0/24 maxlen: 24
94.127.156.0/22 maxlen: 22
94.127.156.0/23 maxlen: 23
94.127.157.0/24 maxlen: 24
94.127.156.0/24 maxlen: 24
94.127.155.0/24 maxlen: 24
94.127.154.0/23 maxlen: 23
94.127.159.0/24 maxlen: 24
94.127.154.0/24 maxlen: 24
94.127.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Mar 2023 13:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d5:7e:f7:0f:13:4f:a9:2e:49:a5:dc:6e:b6:47:c1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Validity
Not Before: Mar 12 11:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc7c07a952753e784fa9923f7687a379a2814b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b4:fd:da:3e:43:54:01:24:c3:a1:01:c8:dd:
a0:68:5f:6d:75:87:fa:d8:37:ae:09:cd:d7:6f:67:
93:07:ae:ec:7b:18:6e:3b:76:5b:5c:4c:3c:77:df:
ea:4e:84:ba:91:ae:b6:32:74:24:ed:6b:de:c4:57:
ff:c5:1c:f0:a0:78:6e:65:d2:70:31:55:d8:5c:2e:
81:a6:dd:1f:b5:16:d5:a5:a9:18:53:77:f7:97:75:
66:62:a7:1e:7a:a1:47:46:ea:c2:55:3c:0a:ae:00:
0d:90:b6:24:6b:c5:f9:d6:4f:da:e7:e2:82:24:42:
88:5e:df:7e:94:e3:3c:b1:26:a3:90:ff:36:ac:14:
61:26:55:ad:71:cb:10:6a:56:90:9d:88:76:e1:c5:
0d:cf:67:8a:c3:cc:31:38:c0:2e:b9:27:44:10:2d:
4f:7b:e4:c1:1a:41:4f:b3:5e:0e:fc:d8:27:3d:45:
6a:54:07:b6:fd:95:e9:cc:fb:55:01:b8:b8:e2:b9:
d2:71:19:4d:62:c4:38:ab:a5:1e:50:85:6a:79:40:
e1:ff:92:b4:99:a2:c2:82:72:6a:e4:35:c0:63:fd:
ec:12:0d:23:83:23:10:1e:af:f6:fc:01:0a:a6:1e:
a0:31:42:62:db:98:cc:e6:c0:ca:3f:e8:76:2f:f5:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7C:07:A9:52:75:3E:78:4F:A9:92:3F:76:87:A3:79:A2:81:4B:2F
X509v3 Authority Key Identifier:
keyid:4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/zHwHqVJ1PnhPqZI_doejeaKBSy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.152.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:6f:15:e4:63:3d:14:34:eb:d7:0b:8f:91:99:85:d2:20:36:
a5:bb:17:18:56:f8:78:b5:3d:85:1d:0f:59:96:b7:f3:96:af:
b5:9a:f0:75:52:2f:2b:bd:e3:80:ae:d8:19:ea:0c:ad:ed:1f:
6a:3f:4c:9e:78:04:5c:0a:5e:58:46:96:29:0f:72:76:b4:d6:
04:5b:8f:c5:12:97:ff:92:e1:95:6e:0d:73:d3:66:29:9e:e1:
d8:84:d1:5d:3f:5b:c2:15:f8:9e:4a:22:e8:da:71:83:da:de:
2d:89:31:4e:1f:9d:1b:31:08:8b:4e:66:31:db:5e:d2:f1:4f:
38:7c:db:10:05:44:b9:d0:83:36:a4:f3:73:f1:f2:8e:01:ae:
af:37:c8:87:7d:36:14:d1:45:24:13:ab:35:c8:65:1d:7c:d5:
c0:ed:79:37:d3:3b:a8:66:bc:e0:1e:45:d3:4e:18:38:30:66:
52:0c:72:d4:aa:cd:e1:9b:87:ba:a8:45:66:d3:f4:25:c1:60:
0c:94:5b:a6:99:0e:42:e7:6d:11:a0:a9:21:77:47:e9:3b:22:
ac:d7:ea:e1:27:ff:27:12:a3:86:93:56:e1:11:00:9e:20:7d:
67:91:7e:51:23:62:9a:c3:33:5b:1b:01:e4:a5:8a:95:99:6d:
a5:44:76:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:03 2024 by rpki-client on console-fra.rpki-client.org