Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/_tdcw2L1Ji3m0mnhsO15-0PgNNg.roa
File: _tdcw2L1Ji3m0mnhsO15-0PgNNg.roa (raw, json)
Hash identifier: lVEnLDnQsmkOgp2Ng5M4Bkqbd1sefyBmGbck6IsgirI=
Subject key identifier: FE:D7:5C:C3:62:F5:26:2D:E6:D2:69:E1:B0:ED:79:FB:43:E0:34:D8
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 01856B811F36156EE83E425719C89F7F27E8
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/_tdcw2L1Ji3m0mnhsO15-0PgNNg.roa
Signing time: Sun 01 Jan 2023 04:05:02 +0000
ROA not before: Sun 01 Jan 2023 04:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200361
IP address blocks: 94.155.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:81:1f:36:15:6e:e8:3e:42:57:19:c8:9f:7f:27:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Jan 1 04:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fed75cc362f5262de6d269e1b0ed79fb43e034d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:90:07:78:87:10:2a:86:61:18:22:1a:f1:
68:22:41:8d:2c:e1:d9:3a:2c:2f:eb:55:2a:a4:c9:
da:6f:42:e1:ea:c1:b4:b7:a8:3a:30:c0:f1:42:65:
66:6a:80:79:85:b7:5f:76:db:37:4f:dc:e5:98:ec:
ef:68:f5:a8:2e:71:f7:3c:ba:b7:bc:12:09:7b:59:
41:a4:4b:c1:2f:bd:2f:85:46:cd:3e:51:fa:72:7c:
8f:9a:ae:fb:f2:71:35:f7:72:c4:d2:b6:c2:fb:8a:
77:c4:fa:32:1b:ae:0b:94:7e:78:ed:11:22:9b:19:
06:0e:b2:8a:e8:0e:bd:a4:e5:dc:99:f7:cb:0e:4e:
eb:bc:0a:0f:82:04:66:43:65:0e:b0:32:83:c2:e0:
ce:32:05:0b:4c:d3:cd:4e:07:b4:d1:fb:73:5e:1e:
19:14:15:94:97:5d:a1:dc:16:0f:89:b3:43:a0:1f:
cb:8f:8e:cd:4a:d4:6f:15:6d:03:f1:a6:84:1c:4c:
7a:d9:7c:14:f5:7a:49:86:b6:c4:02:84:61:3c:2a:
51:5d:7f:21:18:98:b7:10:bf:77:99:20:c0:30:3d:
27:ba:32:a1:f9:4c:df:03:b9:9f:9b:a0:98:4b:03:
48:62:cc:0b:e3:4a:96:62:8c:c4:e8:4b:f2:a3:f2:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D7:5C:C3:62:F5:26:2D:E6:D2:69:E1:B0:ED:79:FB:43:E0:34:D8
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/_tdcw2L1Ji3m0mnhsO15-0PgNNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.155.148.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:9f:eb:f1:38:4b:0a:20:e4:05:19:58:c3:77:85:a6:0d:4d:
72:4d:f5:f8:2a:67:07:ef:52:b1:2c:cd:4c:2a:96:2b:45:c0:
89:bd:d5:15:bb:71:3a:56:ec:c9:6c:53:03:18:6d:0f:f8:f2:
af:83:c1:19:f7:3e:62:a1:a0:69:0d:43:b6:65:88:0d:b7:1d:
87:a8:89:05:c2:4a:51:c5:53:85:a6:e8:78:53:5d:48:a6:cf:
9c:0e:f8:32:b0:ae:5e:32:71:af:13:db:2a:5f:fa:54:b8:8f:
0e:17:78:4e:1b:1e:1a:37:3e:09:8e:da:1b:93:ad:3b:4d:fc:
7b:d3:38:42:26:e2:6e:9c:61:98:8b:4d:a2:df:a5:04:87:b9:
73:7f:73:89:7e:06:ad:b1:9e:46:e9:da:ea:0a:e5:39:e8:86:
05:17:a4:c2:20:20:c2:ea:10:d6:de:9f:5a:d5:0f:a1:8e:e8:
93:0c:29:86:1c:0e:bd:bb:e2:ac:ca:b6:f7:35:4f:66:4e:80:
17:28:be:90:78:7e:41:e7:ec:90:b7:50:a0:92:1f:41:8f:f5:
1f:87:75:8b:54:ff:2f:c3:32:8b:88:47:89:7f:30:24:59:fb:
73:c2:94:cc:1a:fa:72:ce:17:01:88:f5:2f:73:f6:37:3e:37:
cf:17:0d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:48 2024 by rpki-client on console-fra.rpki-client.org