Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/14GAneE6p7r9B_P6br40a7laV7I.roa
File: 14GAneE6p7r9B_P6br40a7laV7I.roa (raw, json)
Hash identifier: CRyh3ulRdeIp7EhdCF01vWhHt9TRhWgt5tDsnPoynbY=
Subject key identifier: D7:81:80:9D:E1:3A:A7:BA:FD:07:F3:FA:6E:BE:34:6B:B9:5A:57:B2
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 01856B811AE7242785887E0B516DBD0338AD
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/14GAneE6p7r9B_P6br40a7laV7I.roa
Signing time: Sun 01 Jan 2023 04:05:01 +0000
ROA not before: Sun 01 Jan 2023 04:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48458
IP address blocks: 94.155.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:1a:e7:24:27:85:88:7e:0b:51:6d:bd:03:38:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 04:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d781809de13aa7bafd07f3fa6ebe346bb95a57b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:de:db:bb:67:e3:48:15:66:a3:f0:25:3f:
bd:5c:44:1a:64:b7:a6:e6:4d:54:ec:d3:4d:81:de:
8e:c7:d1:77:56:53:05:7d:64:c0:e2:7b:b6:9c:f5:
2b:65:8e:b8:a8:be:f0:fe:5b:97:43:00:8b:c6:68:
58:4e:59:3b:89:dc:9b:da:d2:08:7b:4e:f0:a0:56:
eb:02:1f:70:c9:b3:f3:3d:c5:ac:eb:b6:81:96:4e:
ca:25:77:ec:5d:14:e3:40:48:85:e5:b5:56:47:96:
77:d0:f7:40:6a:93:a6:76:63:14:b0:ab:98:8f:22:
a0:72:69:48:d6:d3:52:3e:69:bb:01:34:26:e5:d3:
12:96:1e:0f:d2:e0:ce:a9:75:d8:a4:8a:8d:2f:0b:
83:22:e4:d3:01:f1:41:c9:10:2c:22:9c:76:92:16:
1e:3a:7b:63:b6:ca:af:84:03:cb:3f:7b:5b:21:79:
30:10:e3:aa:bc:d7:d6:84:3f:04:21:26:82:00:94:
fc:07:e6:63:be:e7:14:08:d9:92:6c:51:51:1f:db:
14:f6:a9:c1:36:b8:54:1c:a7:01:7a:bb:c2:9c:23:
cd:4a:12:80:e1:67:c7:ab:f9:73:a6:12:33:be:05:
74:cc:b3:b2:1c:15:8c:ba:fe:42:e6:f2:97:56:34:
32:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:81:80:9D:E1:3A:A7:BA:FD:07:F3:FA:6E:BE:34:6B:B9:5A:57:B2
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/14GAneE6p7r9B_P6br40a7laV7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.155.11.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:05:f8:39:29:2c:49:a7:dd:e2:42:52:be:8a:67:61:1e:6a:
65:a4:50:fb:64:dc:98:c7:4a:36:97:67:d6:a5:e8:c5:e8:83:
42:2f:bd:02:85:69:a0:ad:79:fe:a5:41:61:82:6b:e3:49:dc:
22:d9:fc:5d:30:f7:1f:85:f4:76:26:c5:41:1b:34:4d:87:3e:
1e:cf:8c:a7:58:b2:14:be:2a:a7:ff:4d:8c:09:ec:2f:7b:b9:
b4:b0:b9:1f:44:6d:ed:d3:9d:d9:af:36:43:ce:f6:c1:32:fd:
60:fe:73:1b:04:2e:05:34:7d:a1:47:ad:5b:fe:f7:5c:5c:29:
82:6a:18:08:db:c2:07:4d:38:2f:ff:f6:31:77:10:0e:aa:0d:
e8:b1:b1:b8:7e:a9:11:0a:4b:47:e4:b8:61:df:39:f0:c1:bb:
8b:96:44:6c:91:62:d4:b6:cf:96:e6:ee:85:cf:d1:d2:85:76:
0a:2f:4c:71:1b:e9:b9:01:83:b9:c6:7e:a1:aa:18:6d:af:2b:
cd:0d:50:c5:1a:66:a1:14:e5:aa:78:5e:15:a7:2b:92:12:dc:
0c:98:2f:1a:5a:78:b0:b2:33:a3:fd:a5:db:3d:37:15:68:3b:
f0:3a:61:9a:ce:ca:9d:e8:56:ed:64:56:8a:e0:3b:a3:80:bd:
91:86:7d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:46 2024 by rpki-client on console-ams.rpki-client.org