Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c9Qt3U28_RU-T-TuDXslc7lpGDw.roa
File: c9Qt3U28_RU-T-TuDXslc7lpGDw.roa (raw, json)
Hash identifier: 87bMatIaG+PWdxl1Mm3SDJNS5yLlvQF3LuZTRmRUmJQ=
Subject key identifier: 73:D4:2D:DD:4D:BC:FD:15:3E:4F:E4:EE:0D:7B:25:73:B9:69:18:3C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D9DB9E4142D7348AFD9365B99901CD7DB
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c9Qt3U28_RU-T-TuDXslc7lpGDw.roa
Signing time: Mon 12 Feb 2024 14:30:21 +0000
ROA not before: Mon 12 Feb 2024 14:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203446
IP address blocks: 94.176.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 15:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:b9:e4:14:2d:73:48:af:d9:36:5b:99:90:1c:d7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 12 14:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73d42ddd4dbcfd153e4fe4ee0d7b2573b969183c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:5a:44:75:da:0e:00:25:21:5b:03:fe:6d:
a3:16:b7:9f:45:f5:9b:89:ee:cf:db:a8:6f:d0:fe:
92:48:54:cf:e7:0f:9c:9e:6d:70:43:4f:11:82:a2:
23:89:62:2d:b0:a0:9c:40:40:6d:03:b0:86:cf:66:
62:c6:bf:97:8a:22:64:b6:90:7b:bb:2c:83:79:51:
d8:23:55:14:1a:48:58:be:49:c8:c2:38:01:6d:e3:
f7:11:aa:16:98:27:b3:23:01:29:8b:19:89:7c:b3:
36:05:0f:53:7d:5c:b4:b0:2d:33:52:96:96:87:c8:
fe:f4:f4:8d:2d:ec:f0:14:d7:e1:69:a8:fd:5f:28:
84:39:99:d9:a4:77:a7:be:01:9e:36:06:0b:6c:53:
a4:1f:d4:2c:ac:33:7d:35:09:d5:1a:40:61:76:50:
9d:c3:d1:03:03:95:dc:21:b4:78:c1:78:6d:ae:21:
13:2a:24:fd:74:3f:1a:e1:1c:10:4b:db:a7:b9:9e:
7f:92:cb:f7:09:60:f7:2a:5a:e6:a3:d8:8f:1b:8a:
44:91:78:9b:7d:95:e1:4d:41:13:76:e9:a6:d8:2b:
4b:5f:0b:0b:4e:a0:34:4e:e6:7f:58:f1:be:79:8a:
bc:07:88:01:09:e7:ca:f7:91:a1:5a:57:52:c9:96:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D4:2D:DD:4D:BC:FD:15:3E:4F:E4:EE:0D:7B:25:73:B9:69:18:3C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/c9Qt3U28_RU-T-TuDXslc7lpGDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.214.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e5:9e:42:c9:bf:4f:9d:fe:8a:db:0d:ff:d4:bb:c7:d8:a1:
07:35:9f:dd:3e:fa:fc:99:8f:1c:10:89:3d:12:19:7d:a0:8d:
e6:52:b9:d0:a3:36:7a:a3:5f:dc:aa:4f:a0:c5:5e:45:70:ac:
f9:79:b7:64:2e:8c:04:6c:dd:39:f5:14:01:2a:a6:62:ea:ad:
2f:9a:81:71:8d:db:89:cf:a3:f9:55:ae:be:73:c6:af:e3:65:
c7:41:38:4b:61:20:cc:f4:e5:f3:a0:77:40:4e:dd:fe:f9:2d:
33:1e:ce:f2:92:6f:ed:1b:d2:7f:53:6d:a4:db:35:56:8d:de:
64:8e:b1:16:4e:52:a0:44:7e:4c:44:90:23:e1:f6:cd:ba:8f:
01:35:1f:69:27:6e:ae:e2:fb:1e:13:04:30:49:75:b2:71:20:
e0:61:41:05:cc:89:46:89:5c:f4:7e:48:82:d7:93:94:9f:09:
4e:65:cd:29:9a:01:fe:48:51:af:b7:b7:16:61:d5:f2:ac:0d:
7e:a6:ab:47:22:88:1c:e7:46:8e:a7:42:36:21:2b:95:7f:0c:
86:28:a6:e2:d5:84:67:90:d2:9b:af:4d:22:6c:c1:23:03:db:
5b:8b:e4:2c:ed:f9:4b:5b:56:22:93:3d:f1:1d:80:1f:b9:53:
a2:87:77:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org