Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/s4AW9iWVLudVl5AMSz1JchI6NGo.roa
File: s4AW9iWVLudVl5AMSz1JchI6NGo.roa (raw, json)
Hash identifier: 7XxVrsjRLz9ecwZu+jUuBMENMzMo8hvMWjLbz4G8ntw=
Subject key identifier: B3:80:16:F6:25:95:2E:E7:55:97:90:0C:4B:3D:49:72:12:3A:34:6A
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 018570D5585DB33393333F9631AB6A4A8691
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/s4AW9iWVLudVl5AMSz1JchI6NGo.roa
Signing time: Mon 02 Jan 2023 04:55:08 +0000
ROA not before: Mon 02 Jan 2023 04:55:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 94.158.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:58:5d:b3:33:93:33:3f:96:31:ab:6a:4a:86:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 2 04:55:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b38016f625952ee75597900c4b3d4972123a346a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:db:de:58:ea:5e:3f:1b:64:dc:e2:78:98:
c6:da:69:3f:9b:09:1b:09:03:70:20:9f:53:d8:a9:
81:85:9a:44:5f:3a:76:d5:2a:f8:2e:45:32:ef:0a:
12:87:68:e7:1f:e2:3f:a6:72:98:9d:9e:1f:26:cc:
f9:b6:29:ea:42:bc:1e:fa:db:e6:62:46:d0:54:bc:
0c:4c:9d:a7:94:16:aa:b0:c3:64:fb:37:4a:6b:fd:
ab:b6:1b:46:24:ce:13:3d:23:0a:b2:e1:80:c2:c0:
38:78:af:9d:0e:55:a8:67:b2:2e:cb:dd:4e:3a:e1:
f5:68:67:3b:e1:e1:c7:02:04:c9:7d:b0:10:c6:d1:
c1:fb:89:18:eb:3e:b1:03:24:5f:c8:be:8c:1c:77:
72:e5:e0:74:4e:f1:65:d9:eb:b6:a4:e6:40:36:16:
26:9c:87:2e:c2:e0:df:95:f8:00:80:37:2e:82:8f:
dd:8f:97:be:89:e9:f8:f1:e9:1c:e5:0d:37:ba:64:
7e:ad:16:61:9b:33:df:26:84:fb:0b:cf:03:30:f9:
0d:ae:a5:26:68:77:70:19:42:71:71:87:00:ea:02:
37:ec:15:d2:ad:c8:cc:62:11:42:a1:6b:83:94:99:
51:56:a5:67:45:d6:35:ce:bd:76:b7:b6:72:95:1b:
ab:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:80:16:F6:25:95:2E:E7:55:97:90:0C:4B:3D:49:72:12:3A:34:6A
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/s4AW9iWVLudVl5AMSz1JchI6NGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.21.0/24
Signature Algorithm: sha256WithRSAEncryption
31:1d:04:0e:66:33:2d:7f:56:be:d3:01:23:a4:41:91:4b:1b:
b1:f0:86:46:d7:89:94:db:79:ca:ee:c5:1b:d1:64:80:ad:30:
b2:bd:64:f8:77:8a:a5:01:23:99:cf:0f:e6:bb:12:a6:7d:47:
a6:79:08:8e:0e:fc:65:a5:ca:83:d2:5b:39:aa:90:1d:36:04:
28:88:35:a3:4b:57:ef:4c:47:85:b9:ac:29:25:2a:8d:8b:81:
70:19:b0:22:54:68:e6:fc:7c:05:4f:ba:44:7c:5e:27:9d:38:
47:0d:9e:2a:0b:ab:83:26:f8:79:4a:97:38:97:48:c4:ee:51:
10:ba:b5:b1:32:4b:7e:f4:94:ef:34:57:75:0c:11:90:98:ff:
65:c1:0d:85:0d:e5:c0:4e:d2:9f:24:3a:34:85:eb:dc:ac:85:
d8:35:5a:c1:0c:44:d7:18:da:ad:88:53:31:05:b4:14:0e:58:
9d:2a:6b:ca:fd:e7:b5:51:47:16:6f:18:c2:3c:9f:74:51:c2:
02:5f:b2:5d:f7:d0:4c:cf:85:df:70:b0:13:8f:16:4b:ea:30:
52:fb:bc:9a:a6:07:c6:99:9b:65:85:26:df:4e:01:8e:23:54:
80:c3:b9:7c:1d:a0:83:2b:57:ae:52:65:54:b3:a7:fb:cb:62:
8c:f8:c4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org