Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V5LtSM_mXT8fHAt70jefnx_2q2s.roa
File: V5LtSM_mXT8fHAt70jefnx_2q2s.roa (raw, json)
Hash identifier: 6Ki03UzaZ/APrlo9QPOnL6cVJAB7pFnGUMdZyB+22pg=
Subject key identifier: 57:92:ED:48:CF:E6:5D:3F:1F:1C:0B:7B:D2:37:9F:9F:1F:F6:AB:6B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018AB7CD91D8A907A1CA6B8EFDFBA335D64B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V5LtSM_mXT8fHAt70jefnx_2q2s.roa
Signing time: Thu 21 Sep 2023 12:53:37 +0000
ROA not before: Thu 21 Sep 2023 12:53:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216394
IP address blocks: 94.177.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Sep 2023 12:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:cd:91:d8:a9:07:a1:ca:6b:8e:fd:fb:a3:35:d6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 21 12:53:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5792ed48cfe65d3f1f1c0b7bd2379f9f1ff6ab6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ac:a4:88:9f:9f:17:66:43:ac:dd:cf:96:1d:
24:ce:8b:8a:90:41:11:d3:b8:fb:86:b5:a0:30:95:
cb:e2:4d:8a:24:87:ac:f3:c0:7c:ec:8e:13:02:9e:
28:c2:b0:2e:58:63:e2:95:36:41:b3:71:0a:31:cd:
ca:ee:1a:ab:c7:e4:43:01:00:ea:8f:c0:e0:dd:9f:
8a:60:d9:27:94:c4:5f:3f:a1:93:52:6a:dc:eb:f8:
ba:63:d2:76:04:40:b3:76:d0:54:77:d9:42:46:03:
f0:19:a3:ce:af:3d:8b:9e:80:6f:1a:e4:a8:88:32:
95:37:78:76:fc:f5:d5:47:1f:28:4d:98:06:e9:95:
63:d9:d9:cf:83:71:ea:d9:37:06:9f:fd:a1:70:7a:
4d:a3:2b:7a:7e:6e:57:7b:1e:fe:3c:44:d5:f7:2f:
6b:97:04:49:82:60:e1:9e:33:43:d1:e3:d8:9f:02:
96:be:77:37:3e:d2:c0:f5:e0:44:a8:9c:b2:4f:e9:
4c:7c:48:b1:1c:87:c8:12:19:6f:04:2e:fb:13:66:
9f:bf:1b:81:d8:02:35:64:86:eb:71:e9:5e:05:0f:
b8:68:88:17:8f:b6:3c:74:f9:d0:97:7b:5c:9b:f6:
be:b9:e0:43:86:c2:91:76:47:4e:e7:e0:96:cc:f1:
ef:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:92:ED:48:CF:E6:5D:3F:1F:1C:0B:7B:D2:37:9F:9F:1F:F6:AB:6B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/V5LtSM_mXT8fHAt70jefnx_2q2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.150.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:2d:64:1d:e1:c6:2d:0c:87:03:6b:e7:59:91:76:0c:77:e6:
4b:eb:63:f8:92:da:b4:b6:74:1f:48:b6:2e:06:8f:4e:71:2b:
ae:05:0d:2e:98:ed:f0:43:2d:bb:c2:14:f3:8b:00:d1:5a:94:
91:57:b6:09:1e:23:08:99:9c:91:db:a5:84:fc:db:b9:c9:73:
94:e5:25:02:05:17:75:ba:99:25:79:8a:e9:63:64:5d:17:69:
f1:92:37:4e:32:1c:5e:18:b9:02:4f:23:67:0b:ac:aa:59:4b:
e9:18:12:84:d3:45:e6:ca:10:46:59:fe:52:79:01:b7:29:06:
5a:d6:1a:3a:b6:c9:35:87:05:16:53:9d:fd:e9:4c:95:6e:44:
e0:6b:89:54:44:61:32:28:f3:a4:c9:ce:71:43:93:4f:9b:c0:
e5:59:ef:cc:0e:ed:54:c2:1b:7d:76:85:2e:43:06:5e:20:3f:
3e:5c:84:15:a1:16:7a:df:dd:14:3f:3d:4d:c6:a4:9f:9f:1d:
80:f4:b4:0c:11:e4:0a:50:4d:f4:fc:9d:f4:17:fe:36:e7:d7:
b1:c0:3d:ad:95:ee:66:b2:40:62:8d:f5:93:ec:78:c9:b4:b2:
b5:ba:12:b9:99:31:31:7a:88:db:b3:14:23:66:2d:91:08:7e:
a0:bc:da:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org