Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/iSaR6uk1jo_bPm7eT-AbrBVhj_Q.roa
File: iSaR6uk1jo_bPm7eT-AbrBVhj_Q.roa (raw, json)
Hash identifier: hGDBZoFar+qPz/Cl0NEs7cKspztA67aaWJaCWf/8S2Y=
Subject key identifier: 89:26:91:EA:E9:35:8E:8F:DB:3E:6E:DE:4F:E0:1B:AC:15:61:8F:F4
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 018DA75FFC29F11974A48C05C17815484AC6
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/iSaR6uk1jo_bPm7eT-AbrBVhj_Q.roa
Signing time: Wed 14 Feb 2024 11:28:22 +0000
ROA not before: Wed 14 Feb 2024 11:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211163
IP address blocks: 94.188.180.0/23 maxlen: 23
94.188.180.0/24 maxlen: 24
94.188.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:5f:fc:29:f1:19:74:a4:8c:05:c1:78:15:48:4a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Feb 14 11:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=892691eae9358e8fdb3e6ede4fe01bac15618ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d7:c3:ff:b8:a2:02:93:b3:80:d0:c2:2f:5b:
d1:ed:e4:4e:00:36:00:02:2d:c2:f1:1b:4d:a6:19:
40:c9:8c:ba:88:c2:f3:15:b9:73:9d:db:db:55:1e:
ee:a7:65:e0:65:11:cb:06:94:10:ca:39:c5:6f:5f:
a9:e1:22:dc:1b:30:a7:f2:40:b0:fa:f1:75:49:a5:
8a:cf:25:08:97:10:22:b1:b2:dd:fa:cc:04:dd:f2:
54:ee:c9:e3:7d:d7:aa:f1:95:88:f8:18:b0:9e:4c:
77:ed:50:14:6b:00:3d:bd:bd:4a:e8:91:48:80:2b:
af:6f:88:95:97:58:f5:e2:d1:82:a0:5e:fd:1f:a1:
ce:b7:36:2b:3a:de:c3:9a:af:7e:bd:6b:d5:b2:12:
b2:82:15:9e:87:fd:a4:2d:93:2d:59:ae:bd:47:08:
37:6e:cb:82:c2:69:5e:f1:69:1b:bc:1c:a7:dd:77:
9e:62:12:57:74:9d:08:58:65:2c:8d:f6:d4:e1:a9:
dc:89:2d:91:b3:bb:0b:af:8e:6f:9f:ad:0f:4f:8c:
b2:37:68:9e:2f:de:cf:1f:67:00:d2:52:1a:ad:fe:
b5:0b:5b:aa:bf:06:2d:a3:a0:e1:0b:9e:d9:93:23:
0b:78:3a:03:ae:9b:05:a8:cb:db:78:5d:26:a8:f6:
72:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:26:91:EA:E9:35:8E:8F:DB:3E:6E:DE:4F:E0:1B:AC:15:61:8F:F4
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/iSaR6uk1jo_bPm7eT-AbrBVhj_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.180.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:f8:82:47:ae:c5:ec:ad:7b:2c:4d:ff:b8:c0:6e:d8:2e:f3:
d8:aa:5e:e8:e9:c0:f1:3b:ca:7e:01:89:43:b2:35:2d:1c:93:
00:6d:05:2f:a6:8e:1a:c2:d6:e6:0c:0b:58:07:9c:3d:2a:bb:
f2:97:fe:73:25:0d:c9:90:b3:fb:7d:47:ac:87:9b:2f:b4:5e:
a5:6c:11:9d:ab:02:f6:72:66:1a:f7:ad:91:1f:6e:26:92:aa:
6a:1f:fe:c8:4f:ab:a5:5c:f4:e0:2f:d9:4f:53:2d:ad:d0:cb:
dd:8f:8d:32:72:eb:ed:29:cd:95:77:45:fe:d4:4f:01:c7:04:
05:0d:01:01:55:87:d3:a3:c8:5c:11:87:5b:8d:94:8e:3c:aa:
4b:47:27:38:9e:25:db:6d:b2:0c:8f:4d:d0:b1:0a:d2:bb:80:
f4:c0:8c:0f:08:53:f8:b2:db:78:35:c0:03:f0:bb:3d:6e:f4:
d9:b0:6e:8f:ee:9f:0e:00:af:20:32:43:0d:af:3e:b4:3c:46:
06:2a:b3:c1:99:50:11:ed:32:b7:03:2c:95:d3:76:ec:a6:92:
a4:e5:64:0e:52:52:7f:af:b2:50:c6:44:01:ce:ce:73:bb:b2:
17:67:e8:60:03:dd:2c:3e:27:c5:4f:b5:93:a9:30:89:2a:b9:
5c:c7:36:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:40:53 2025 by rpki-client