Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IxeNA6fOSJdFDblQ2hGsMCtuOvw.roa
File: IxeNA6fOSJdFDblQ2hGsMCtuOvw.roa (raw, json)
Hash identifier: OowB68fF1HPV4m8qU7Yy1NMR8yDRmOW+lFXAfk8BsY4=
Subject key identifier: 23:17:8D:03:A7:CE:48:97:45:0D:B9:50:DA:11:AC:30:2B:6E:3A:FC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01877CC55CA434F063ABB04B15A97082CD05
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IxeNA6fOSJdFDblQ2hGsMCtuOvw.roa
Signing time: Thu 13 Apr 2023 22:38:41 +0000
ROA not before: Thu 13 Apr 2023 22:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 94.177.150.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Apr 2023 23:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7c:c5:5c:a4:34:f0:63:ab:b0:4b:15:a9:70:82:cd:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 13 22:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23178d03a7ce4897450db950da11ac302b6e3afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d8:81:1a:9c:84:45:a8:4b:4c:38:6c:c2:99:
35:5c:99:cd:52:4d:24:f7:dc:2e:8e:8d:1e:39:65:
98:1d:a1:50:e7:9b:54:f6:9c:f5:12:1f:69:f5:d9:
a3:ec:43:1b:54:69:24:91:7c:b2:d4:ed:b1:dd:17:
db:f8:87:6e:da:55:40:a1:1d:f9:64:4d:be:3b:38:
07:5c:51:2a:14:23:08:ed:11:82:c6:37:c8:7c:2c:
f9:22:07:5a:e5:2c:95:ee:1a:b7:93:52:c4:75:0c:
29:86:1c:26:33:38:9a:e7:52:1d:09:84:61:85:d6:
58:e1:86:c4:71:d7:fb:87:9d:f7:ae:01:f5:e2:07:
e5:9d:a0:3f:21:98:26:17:17:9d:ae:5e:68:30:b5:
8a:1a:2e:38:56:43:8c:2a:9f:b7:73:60:33:20:a4:
0c:d9:bb:c0:44:68:a0:0b:db:8e:c4:f9:db:25:b5:
31:25:18:49:60:cc:8f:f3:ee:98:1f:f2:cf:03:1e:
40:61:0e:99:82:4a:17:3f:85:37:0f:f7:a7:b1:14:
99:ab:4b:0d:25:b1:e7:56:72:f3:04:c2:70:9c:b1:
01:d2:66:fa:8e:14:8d:4b:a7:d5:85:4d:97:ae:97:
af:71:d7:ac:89:ac:a0:7f:47:87:f0:7e:fc:0d:54:
18:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:17:8D:03:A7:CE:48:97:45:0D:B9:50:DA:11:AC:30:2B:6E:3A:FC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/IxeNA6fOSJdFDblQ2hGsMCtuOvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.51.0/24
94.177.150.0/24
Signature Algorithm: sha256WithRSAEncryption
68:8b:69:e0:f0:ff:d9:63:d7:9d:66:9d:88:73:8d:a0:bc:3e:
88:ac:8c:ec:ac:3c:2a:aa:7b:18:85:ff:08:b7:fc:e0:50:bb:
d1:96:47:5e:e2:70:71:ec:2b:38:1a:ea:a0:73:46:f9:b8:3c:
e6:cf:88:55:4a:1a:25:55:04:6a:ea:d6:a6:e5:3a:03:9f:0d:
08:74:90:f6:80:f4:3a:cd:dd:4f:8c:40:02:57:4f:96:a9:55:
67:c8:8f:8e:e8:00:c9:3e:80:95:d4:bb:37:7a:e4:a3:54:d7:
fb:80:3f:4d:b3:a2:0f:4b:d4:55:41:69:83:f9:fd:97:d6:8d:
de:d2:76:20:14:29:96:46:6c:a7:67:00:24:bf:a5:ad:d4:59:
51:94:65:ad:6c:b2:64:24:5c:a4:8f:c2:32:83:68:1c:51:9e:
34:cf:a3:a3:3e:73:2a:9c:8a:74:38:dc:5b:2a:11:f5:27:f2:
e4:1b:5d:75:dc:31:55:2d:e4:3d:f8:26:c8:df:e6:f2:41:d6:
a8:17:a0:5f:3f:aa:21:34:15:f5:4d:9a:78:d1:05:3e:65:88:
aa:fe:6d:88:0b:6f:44:2b:9b:fa:70:ab:06:49:01:88:0c:c0:
df:52:31:59:f1:43:6c:34:59:18:0e:2e:c1:0b:76:18:f6:aa:
6d:89:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org