Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/N83wZ4gvTRLqZ919ZT8lC-DJEUg.roa
File: N83wZ4gvTRLqZ919ZT8lC-DJEUg.roa (raw, json)
Hash identifier: 2JfLaktDxXPWnfktNNy2X4Icg8EzRo9BZefQ+FN9wjM=
Subject key identifier: 37:CD:F0:67:88:2F:4D:12:EA:67:DD:7D:65:3F:25:0B:E0:C9:11:48
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 018D7D1EF0753A75D011F75FAE2C29366CD2
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/N83wZ4gvTRLqZ919ZT8lC-DJEUg.roa
Signing time: Tue 06 Feb 2024 06:33:16 +0000
ROA not before: Tue 06 Feb 2024 06:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211824
IP address blocks: 94.188.217.0/24 maxlen: 24
94.188.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:1e:f0:75:3a:75:d0:11:f7:5f:ae:2c:29:36:6c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Feb 6 06:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37cdf067882f4d12ea67dd7d653f250be0c91148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:47:fe:c7:cc:6c:d7:2b:3f:2f:64:57:ed:61:
1d:53:f9:e1:70:8a:0f:18:65:b9:e2:95:fd:f5:84:
4d:c1:6b:77:2b:10:06:a2:2f:62:1c:9f:2b:1d:3d:
1b:33:d8:5a:7a:22:29:e5:fa:c7:39:2f:3b:5c:10:
20:1e:91:2a:4f:0c:ba:24:ab:a0:3a:a2:04:c4:07:
7d:a3:7d:7e:d8:dd:26:bc:7c:bc:aa:94:12:bb:6b:
d5:8c:4b:5e:df:a2:31:2d:91:93:07:ca:b2:1b:d7:
64:1a:da:00:89:e8:a5:c2:f4:50:48:cc:39:fa:24:
6b:59:4e:0d:2e:a0:f9:e9:09:f7:e7:e1:15:15:21:
32:10:fc:07:92:4d:9f:5e:61:3a:f8:5a:c8:b7:8c:
8c:6b:6a:61:49:fb:4f:7c:94:1b:b1:ca:19:2d:7a:
bf:4f:2f:32:cd:a1:e0:28:77:d2:51:b6:40:78:54:
28:c5:c5:63:fc:e6:c9:e5:f7:2b:b7:b1:ca:30:9c:
28:d8:63:e3:81:b9:e8:73:68:32:1d:0f:7a:bb:0c:
8b:43:c6:3f:57:a3:f7:5d:b6:9a:5e:50:fe:fa:e6:
ce:99:85:9c:4c:08:65:0e:7d:cf:f6:eb:83:49:15:
2d:17:ef:c7:28:25:4a:c7:d8:d3:50:90:eb:68:96:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CD:F0:67:88:2F:4D:12:EA:67:DD:7D:65:3F:25:0B:E0:C9:11:48
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/N83wZ4gvTRLqZ919ZT8lC-DJEUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.217.0-94.188.218.255
Signature Algorithm: sha256WithRSAEncryption
14:f7:5c:b4:23:a3:e8:3e:3d:84:b2:8b:e6:ba:96:08:d0:88:
01:e6:e1:f5:6e:be:0b:22:14:4b:90:58:cd:6b:f6:66:aa:ca:
b9:ab:89:5a:4c:fa:b0:bf:ab:25:ea:9b:cf:51:d5:48:fe:6e:
1a:35:e5:ab:58:03:a5:d6:58:20:12:29:bf:6d:1f:67:ab:25:
49:57:be:22:25:c1:dd:ee:d9:83:b8:37:25:ca:2f:be:99:62:
e1:04:ba:fd:82:aa:56:b8:0b:28:8c:d7:0a:fd:0c:ca:e1:70:
dc:2e:a4:41:cf:3b:9f:5f:b3:35:eb:36:4b:9a:84:89:a1:4d:
ee:f5:73:b5:64:1d:ba:93:fe:3f:c0:e3:c9:e0:41:21:0f:ab:
67:6e:de:df:74:32:4b:f3:aa:f1:f6:04:e7:6a:50:b6:91:c6:
3d:9c:84:40:6d:91:c0:b8:28:f3:42:a8:a6:73:da:e5:7d:e1:
64:b6:ca:7b:64:7d:55:ce:02:92:fd:08:48:1e:88:47:ef:ef:
a7:a5:c4:54:60:49:a5:93:a7:cc:42:b9:be:af:06:0f:59:88:
7c:08:ed:79:40:3a:4e:f9:c6:56:9e:81:b5:e7:45:bb:40:b7:
74:b8:fd:bf:68:bc:46:75:85:9a:c1:c6:ce:b3:5d:f2:ee:54:
ea:ce:6b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:47:11 2025 by rpki-client