Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/X8AvU01GRh01YzJg6IyYzQaryWY.roa
File: X8AvU01GRh01YzJg6IyYzQaryWY.roa (raw, json)
Hash identifier: ApOMnD78iHMZmkgEpwsu3gVbitwHYulPAqjcIfMdDsI=
Subject key identifier: 5F:C0:2F:53:4D:46:46:1D:35:63:32:60:E8:8C:98:CD:06:AB:C9:66
Certificate issuer: /CN=7b8254253dc0213fe58a7aff4b82463e47978063
Certificate serial: 0186DBDCA05BBC61C96DDEE4A13EC7A03968
Authority key identifier: 7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/X8AvU01GRh01YzJg6IyYzQaryWY.roa
Signing time: Mon 13 Mar 2023 16:45:14 +0000
ROA not before: Mon 13 Mar 2023 16:45:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213118
IP address blocks: 94.154.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Sep 2023 07:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:dc:a0:5b:bc:61:c9:6d:de:e4:a1:3e:c7:a0:39:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8254253dc0213fe58a7aff4b82463e47978063
Validity
Not Before: Mar 13 16:45:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fc02f534d46461d35633260e88c98cd06abc966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:e4:de:75:fa:e8:10:d5:d9:db:1b:d7:57:
b1:63:32:24:f9:1c:27:a6:23:20:d3:dc:6e:77:9c:
34:e0:cc:f4:95:6d:74:aa:7e:c6:ca:8c:ac:dc:51:
19:48:2e:c4:74:57:a7:22:8d:6e:58:06:6f:ff:0c:
07:de:63:da:91:58:ff:ec:41:53:00:33:0b:0e:0e:
2a:0a:1f:83:12:f8:ab:95:0d:ba:86:9d:43:79:9f:
c4:76:56:a6:4d:28:ec:b5:7a:fb:a2:00:a2:86:b5:
64:ef:3b:15:d2:77:68:2d:da:7a:c8:71:d3:79:4b:
ce:5f:15:01:eb:1b:b2:52:1f:fd:2e:62:71:76:c1:
2f:e0:3c:ac:f4:9d:90:21:32:17:69:81:b6:68:9c:
2d:6b:f9:eb:1e:3a:2c:d3:49:50:2e:64:e1:83:3d:
25:c6:4b:7c:71:02:d5:30:7f:e1:6b:ae:e2:f8:1e:
2d:45:6f:7f:d3:dd:5a:97:93:d3:0c:0e:c1:24:b2:
15:14:73:ac:14:7f:b4:fb:d6:bf:32:6e:e6:6e:87:
c6:4c:bb:dd:f3:d4:7c:67:05:2a:d3:69:16:f3:86:
6e:15:a4:c2:41:ec:b8:f7:59:62:8a:21:0f:b9:ee:
f1:25:a1:2c:bc:c5:c7:8e:68:37:3d:9d:aa:b3:17:
83:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C0:2F:53:4D:46:46:1D:35:63:32:60:E8:8C:98:CD:06:AB:C9:66
X509v3 Authority Key Identifier:
keyid:7B:82:54:25:3D:C0:21:3F:E5:8A:7A:FF:4B:82:46:3E:47:97:80:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4JUJT3AIT_linr_S4JGPkeXgGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/X8AvU01GRh01YzJg6IyYzQaryWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ab7a04-ffe1-4a05-a5ef-8f539b64b8db/1/e4JUJT3AIT_linr_S4JGPkeXgGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e7:27:2f:01:a0:2e:03:49:eb:36:49:f5:7e:39:ed:fe:4d:
c1:4f:e0:33:67:bd:09:18:c0:c2:3e:b7:30:47:54:db:d9:c2:
07:71:11:c8:8e:72:54:46:94:9c:79:8e:05:71:b3:79:1e:48:
da:e1:e9:6f:c9:78:54:86:7b:8c:74:a0:bb:96:1f:d0:75:f3:
02:92:68:2e:01:04:da:e9:2d:03:b4:76:c6:9b:ef:9d:01:15:
c1:b9:2e:6c:42:45:9c:81:e1:b7:2c:20:1a:de:5f:08:d4:c8:
85:10:fb:cf:f0:96:85:f1:f1:4e:f3:b2:39:9c:9c:24:fa:cf:
bf:7f:33:c8:66:57:2c:86:a3:2f:2d:5e:f4:f6:cc:98:77:c6:
a7:d6:47:1d:cb:ac:09:a4:cc:57:8e:88:a4:df:87:c8:64:36:
6d:ac:f2:f7:29:ad:75:73:e5:95:16:eb:03:4c:cb:bc:88:40:
e7:c6:37:57:3c:a4:ae:f6:37:91:c8:bf:ff:34:a8:7c:5e:e3:
ab:3e:d3:ae:c8:92:ab:15:e8:f3:03:f7:69:52:49:78:36:08:
a3:3b:bf:4a:ca:b2:9b:df:16:88:c3:37:70:b1:6c:b3:f5:e4:
aa:3e:df:12:e8:eb:67:b5:86:80:cd:0a:69:62:c8:51:9a:7e:
fa:b9:b3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:48 2024 by rpki-client on console-fra.rpki-client.org