Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XZVO8l2iqt7y12Xn-eIDdOV-GOE.roa
File: XZVO8l2iqt7y12Xn-eIDdOV-GOE.roa (raw, json)
Hash identifier: FVBWpNom6dzLbKgpXPPzZADtmTHASIBYjnZW19GrcGA=
Subject key identifier: 5D:95:4E:F2:5D:A2:AA:DE:F2:D7:65:E7:F9:E2:03:74:E5:7E:18:E1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0190653A0267468373FD24BD1C1FCA1772DE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XZVO8l2iqt7y12Xn-eIDdOV-GOE.roa
Signing time: Sat 29 Jun 2024 18:20:18 +0000
ROA not before: Sat 29 Jun 2024 18:20:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215740
IP address blocks: 94.177.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 05:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:65:3a:02:67:46:83:73:fd:24:bd:1c:1f:ca:17:72:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 29 18:20:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d954ef25da2aadef2d765e7f9e20374e57e18e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:96:2e:9b:73:62:37:ab:bc:66:fe:0a:01:1d:
8d:bb:ec:cb:7c:c1:4d:75:bb:ec:40:aa:cf:6c:38:
92:39:9c:63:dd:dd:6f:df:5a:0b:56:ab:69:15:dc:
ff:3a:45:9c:7d:85:84:88:f3:bc:64:9c:21:2d:98:
4d:64:c0:6f:20:a8:74:18:92:ef:3a:99:fe:b2:55:
c3:c2:52:00:f8:f9:ab:5a:72:97:e4:be:d2:5a:90:
13:17:91:72:3e:01:15:1d:97:89:6f:4b:33:e8:20:
a9:da:a8:98:75:90:95:b7:a5:ee:a4:8b:91:f3:91:
99:c0:5f:25:fa:35:03:a5:e2:9d:cb:d7:da:9d:c4:
ce:44:72:80:fe:b5:a9:b5:aa:b7:f0:52:d4:be:7a:
ee:59:d6:8c:98:8e:b6:e2:50:42:2c:ea:e4:54:7d:
49:01:3b:f0:8d:6b:1a:57:83:d9:71:e3:7d:df:15:
64:b1:3c:7b:6c:fc:5a:a2:c0:7c:07:f6:ea:21:30:
1a:e7:c5:0d:c4:14:d4:c0:5f:59:17:31:64:8d:dd:
f4:0e:26:47:c1:e3:c9:a0:f1:57:f3:27:6f:d9:4c:
a7:78:d1:f5:a7:93:2f:d7:52:87:4a:52:db:25:8a:
07:a2:1a:5c:c8:a6:a1:38:43:92:4e:46:6a:5b:82:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:95:4E:F2:5D:A2:AA:DE:F2:D7:65:E7:F9:E2:03:74:E5:7E:18:E1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XZVO8l2iqt7y12Xn-eIDdOV-GOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.106.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f6:8b:39:67:ce:de:7e:aa:88:23:37:ed:94:95:14:6d:57:
44:27:c9:c4:b5:39:34:85:89:75:d1:df:44:e1:ec:0d:e7:17:
fc:bb:fb:08:2b:96:fd:bb:37:b1:17:76:9a:65:c6:00:11:ee:
cf:cb:b7:10:b7:68:ad:ee:87:c4:cc:59:11:bb:4f:e2:23:be:
43:3a:c9:96:88:92:6f:ea:df:bc:52:bd:90:b1:06:b2:1c:2b:
0c:76:b6:72:44:69:d2:7c:08:bb:ff:db:f6:91:93:8d:c1:84:
27:ce:52:1a:f2:ba:09:46:a2:83:85:f4:9a:ec:50:06:d4:fe:
42:86:4e:6b:fd:61:ec:fd:53:e8:81:55:4c:1f:89:4a:ec:4b:
12:26:c1:6d:4b:70:04:c3:9e:11:d6:60:ed:85:f6:d1:89:a3:
b7:cc:d2:d2:16:59:b5:b9:72:88:8d:bb:59:26:8b:9a:ea:cc:
d7:89:15:c1:92:28:00:7e:a7:9a:c8:ba:21:ed:4f:95:64:85:
54:44:5a:f7:ae:45:7a:61:e8:d2:20:eb:56:1c:e1:ea:e3:5b:
98:5d:8c:62:74:0e:9d:c3:78:da:1f:19:04:da:d3:0a:a5:7d:
ae:1b:fa:96:a4:79:39:ef:08:04:ac:f6:44:c4:36:f0:73:68:
ae:8f:2b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 07:59:16 2024 by rpki-client on console-ams.rpki-client.org