Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9BBtszM1KBX4Dv-RaDqS5_prZTo.roa
File: 9BBtszM1KBX4Dv-RaDqS5_prZTo.roa (raw, json)
Hash identifier: iyp84T3NZpAsFEIIzCcwPoRTVzxYXP0cFDmTWNyoIpE=
Subject key identifier: F4:10:6D:B3:33:35:28:15:F8:0E:FF:91:68:3A:92:E7:FA:6B:65:3A
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018ADFE6CEAF91DDFD0EE7B57F7760A618DA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9BBtszM1KBX4Dv-RaDqS5_prZTo.roa
Signing time: Fri 29 Sep 2023 07:45:59 +0000
ROA not before: Fri 29 Sep 2023 07:45:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 94.176.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 12:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:df:e6:ce:af:91:dd:fd:0e:e7:b5:7f:77:60:a6:18:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 29 07:45:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4106db333352815f80eff91683a92e7fa6b653a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:9c:07:6f:43:30:28:f0:e8:d9:0e:ef:dc:
7e:5b:82:16:8d:c9:fd:be:98:62:23:af:ed:ca:d1:
d6:b8:4f:47:5d:a7:27:0a:35:f0:3a:bc:41:86:cb:
e5:68:ad:08:e3:e7:14:c1:3a:bf:e3:33:98:ef:d1:
ff:b4:f1:06:d2:cd:fc:53:ce:53:2f:9b:87:cb:fb:
b8:7d:78:e1:85:08:56:3b:e6:ca:1d:5f:b7:23:34:
12:25:a0:ab:90:51:e7:1f:f0:cc:1e:d0:a7:ac:3b:
55:7a:42:09:67:ac:34:74:dc:00:ef:74:28:64:fa:
d1:af:e5:ef:9a:5b:d3:86:bb:25:90:3a:9c:c2:84:
ff:47:9b:d1:f2:63:03:0c:e6:2c:1e:7d:2d:3e:ba:
6e:4d:49:63:32:e0:04:28:b3:d9:8f:0c:96:d3:60:
91:4f:f2:ff:23:f6:27:3a:29:b2:cd:ea:b5:d1:c9:
20:15:32:95:55:9e:02:cd:98:0b:66:ad:9e:93:6f:
44:d9:e3:ae:96:1e:50:bc:3b:18:d6:94:09:ee:02:
93:14:1b:85:b9:89:37:67:f0:bd:0a:9a:69:b0:ad:
a5:88:c0:7c:9e:dd:68:bb:bc:48:3f:56:d9:23:22:
df:bb:d8:fe:ca:0c:90:c5:cb:df:a1:8f:37:65:e4:
13:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:10:6D:B3:33:35:28:15:F8:0E:FF:91:68:3A:92:E7:FA:6B:65:3A
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9BBtszM1KBX4Dv-RaDqS5_prZTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a9:dc:ff:78:af:92:18:ee:6a:d5:da:f2:69:3c:59:45:5f:
7b:6c:35:f4:97:e3:86:44:79:d2:4a:56:aa:95:88:e0:2c:41:
ec:c9:c4:78:2a:7a:39:4f:49:3f:9d:fa:e6:d3:83:87:e4:cb:
49:e7:7c:e7:dc:9f:a5:0b:34:3b:eb:d7:ba:ec:1e:24:1a:b3:
01:40:26:6d:41:f8:a7:de:6e:25:a1:74:a8:4e:a9:51:1c:52:
de:e4:ae:f6:78:b5:71:08:6a:92:34:0b:63:1c:27:d5:5e:6e:
d8:35:b8:d8:6b:31:00:e2:17:b0:24:28:f5:92:5d:3d:b8:29:
cc:f1:1e:9a:f1:15:e4:0c:57:a1:47:88:66:e7:9f:eb:00:c8:
a7:a9:61:d2:f4:0a:e4:ce:c7:0e:71:33:2f:c0:b2:cc:a2:2c:
a4:a0:ab:ee:0f:70:b0:d4:86:d8:00:3f:66:48:eb:4b:ba:92:
8c:af:74:c9:8e:4a:7d:ab:a0:64:27:3d:38:2f:30:7a:58:1c:
eb:70:e7:3b:52:eb:98:0a:d6:15:19:15:6c:fb:12:e0:3f:70:
54:e1:11:6c:4d:c6:a9:80:78:f4:46:95:00:21:fb:ba:14:c8:
8e:d4:7b:59:e2:11:8e:00:38:f7:86:4b:f1:3b:f6:30:a7:2c:
72:7a:29:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org