Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Hv4DigQt11qgW6ARZVAQnVx6WPU.roa
File: Hv4DigQt11qgW6ARZVAQnVx6WPU.roa (raw, json)
Hash identifier: hD14r3xfxqR+7f/Mb8IrkHKmDlJRgiJbMrpzX3n5n48=
Subject key identifier: 1E:FE:03:8A:04:2D:D7:5A:A0:5B:A0:11:65:50:10:9D:5C:7A:58:F5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC49344067356B6503EBC60B056B75020
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Hv4DigQt11qgW6ARZVAQnVx6WPU.roa
Signing time: Mon 01 Jan 2024 10:30:34 +0000
ROA not before: Mon 01 Jan 2024 10:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399471
IP address blocks: 94.177.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 09:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:44:06:73:56:b6:50:3e:bc:60:b0:56:b7:50:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1efe038a042dd75aa05ba0116550109d5c7a58f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:98:84:f1:2d:86:bb:52:88:e6:ab:51:72:bf:
b7:fd:ec:62:b2:44:ba:47:21:ba:42:de:6c:af:e1:
5d:28:24:6b:1a:e8:7a:5f:c8:f0:f8:0e:70:19:11:
a7:7b:ee:fc:eb:38:76:0e:c1:c3:4a:ba:d4:78:71:
6b:af:c4:8d:d4:52:15:c2:c2:8a:28:2b:ee:4c:12:
37:bd:b9:0a:b9:a2:31:c4:f3:d6:20:ef:1f:60:51:
4a:df:a0:ff:b3:65:3f:1c:08:27:2f:42:e6:22:f6:
b1:7d:0a:ff:15:04:a8:9f:ce:e1:8e:01:44:49:c0:
6c:dd:c1:3e:86:1d:86:8b:ec:f1:96:f3:a3:da:7b:
aa:88:a4:7d:11:b2:b4:a7:a8:47:d8:bb:a5:be:32:
4b:e5:1c:19:11:eb:b7:de:0f:f5:7c:4d:8f:86:46:
47:3f:b3:17:2c:7b:ff:4d:6e:1f:dc:35:cb:42:06:
25:da:02:0e:e8:97:fd:e1:35:95:9d:e5:57:2d:37:
ae:09:76:20:a7:57:2f:93:d8:c0:cd:51:37:8d:e8:
34:0c:c5:90:34:3f:a2:7e:77:ab:ea:4e:5e:1d:b9:
35:68:f4:7e:06:2a:3f:53:cb:83:f3:23:ca:2b:af:
c1:06:39:02:54:75:85:ca:78:e8:0a:23:9a:db:c2:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FE:03:8A:04:2D:D7:5A:A0:5B:A0:11:65:50:10:9D:5C:7A:58:F5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Hv4DigQt11qgW6ARZVAQnVx6WPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.150.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fc:5b:69:6e:16:78:79:7a:96:bd:eb:d7:7d:94:7e:06:8a:
4c:1e:da:95:f7:0c:75:3c:62:2d:3d:a7:11:96:3b:05:3b:e9:
88:cc:13:8a:e3:f8:88:9d:7f:18:3d:8a:47:6c:8c:3d:14:8b:
97:2d:03:d4:e8:37:df:82:54:45:43:ef:43:66:6e:e8:70:b5:
ef:45:ce:87:8e:ca:2d:6b:01:3c:86:2b:58:92:b4:42:4b:ab:
33:39:d5:c1:78:a6:51:82:02:0a:8d:59:64:2f:8b:ec:bb:0a:
5c:12:1f:ba:fa:9d:6b:8d:74:eb:c1:88:c1:08:64:5c:f2:52:
61:40:85:99:f4:93:19:72:e4:50:45:d4:b0:cc:c0:47:83:76:
f0:15:60:bb:77:22:06:cd:56:88:c6:ba:65:68:0a:f2:41:17:
35:79:5e:a5:8e:6e:ea:81:51:58:b9:cd:36:05:2d:b3:ea:9d:
e4:48:91:5c:54:9e:de:3a:a5:1d:64:5d:fe:4f:a1:66:97:f2:
45:ca:22:88:f7:1b:4e:ec:06:47:5c:27:2e:44:fe:2e:8b:8d:
e7:91:d3:b6:1f:56:09:f7:ff:fe:ca:44:13:df:12:c4:f8:6d:
2c:27:a9:f0:a2:ea:58:d6:a7:f6:59:b1:79:14:ee:05:af:7c:
e9:1d:98:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org