Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Cf0YxtMFghkNq9yk4YCR3xk5wEg.roa
File: Cf0YxtMFghkNq9yk4YCR3xk5wEg.roa (raw, json)
Hash identifier: 40kurMswqbA0PJwU8QhaboIZVj/Tfs8RJbEbzCGwGdk=
Subject key identifier: 09:FD:18:C6:D3:05:82:19:0D:AB:DC:A4:E1:80:91:DF:19:39:C0:48
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018998DB2A4CFA7B31E0C08DDE1DFCC6A07D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Cf0YxtMFghkNq9yk4YCR3xk5wEg.roa
Signing time: Thu 27 Jul 2023 19:37:27 +0000
ROA not before: Thu 27 Jul 2023 19:37:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 94.176.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Aug 2023 07:39:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:db:2a:4c:fa:7b:31:e0:c0:8d:de:1d:fc:c6:a0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 27 19:37:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09fd18c6d30582190dabdca4e18091df1939c048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:bc:59:f8:29:a2:36:92:fa:de:64:e4:38:89:
33:ca:87:4d:a6:22:34:d8:8c:ff:fa:55:b9:24:b9:
3c:19:1e:c6:96:c9:22:19:7a:c7:cd:24:24:68:eb:
9b:af:f6:bf:65:fa:94:98:34:9c:29:99:b9:56:a2:
e2:5e:de:0b:3c:cb:9a:31:41:a1:c5:3e:6e:f5:30:
45:77:4a:e6:1b:0d:75:49:23:08:92:af:b6:8b:5f:
f8:c8:20:e3:f2:6f:f0:8c:0d:c1:a2:ec:4c:4d:17:
c3:39:ee:49:cf:54:77:da:89:0b:ff:5c:d4:42:67:
9e:53:23:9b:7a:00:e1:c0:69:7f:65:c0:3a:4d:fa:
1b:d5:d7:4c:4d:52:ca:f7:e5:20:35:b9:a9:4a:39:
6d:9d:c7:c5:d4:ff:02:02:dc:1b:e3:fd:b0:8c:06:
17:76:0f:33:fd:7e:58:12:d0:31:bb:86:15:56:67:
af:58:c3:84:68:b5:f7:2e:8f:b4:27:d7:02:62:6c:
dd:4d:77:81:b3:fa:c0:ac:c9:ef:da:f1:b2:cd:bd:
f7:d9:d4:9b:98:e7:59:66:43:1a:b4:25:d4:01:08:
01:dc:6f:52:f7:1e:04:8a:6e:b6:74:c4:6a:83:1c:
6e:0b:90:0e:cc:2a:58:f8:62:5e:72:f2:78:30:fc:
47:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FD:18:C6:D3:05:82:19:0D:AB:DC:A4:E1:80:91:DF:19:39:C0:48
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Cf0YxtMFghkNq9yk4YCR3xk5wEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.214.0/24
Signature Algorithm: sha256WithRSAEncryption
25:46:5f:c1:fe:a3:0b:84:ef:99:6a:5f:2c:6d:54:d0:69:77:
63:bc:17:aa:4b:73:7d:f9:99:86:46:82:7f:a2:7b:b9:48:e0:
5a:3a:76:62:b1:42:ae:d2:15:ad:f5:35:c3:b1:78:f1:82:5d:
9b:b7:2a:eb:4c:b7:0b:91:e8:fe:e8:29:5a:13:10:cc:45:bc:
e3:b0:e4:d5:39:4f:bd:d7:4d:7d:c0:a7:5d:74:d0:e9:2a:6d:
00:5b:6a:96:e3:d7:21:27:15:33:c5:3d:56:e8:e6:fb:d2:3c:
57:15:f0:04:ea:ce:ea:2c:e2:d7:d9:89:56:3c:52:8b:56:b2:
a1:4b:a7:14:e2:9a:71:7d:56:5b:2a:16:c5:d4:2c:f7:45:83:
54:e7:8c:b6:50:4a:82:2e:5c:60:4d:5c:32:0f:6f:1d:61:cb:
c7:6a:44:b5:0e:6d:4e:57:2a:69:32:27:dd:70:f5:b9:42:e5:
f1:e5:dd:d8:e1:08:24:ca:66:6a:2b:4a:ed:4d:9d:fa:02:3c:
30:00:41:8a:51:cb:64:a0:1f:af:b7:37:48:88:fe:58:8d:39:
71:68:47:c8:8f:4a:8d:e3:23:1d:94:b1:f5:d5:b7:fd:c2:7d:
94:d7:5d:3d:a8:a4:cc:1a:5b:b2:b7:ef:60:20:db:5a:3d:a5:
74:aa:e9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org