Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/s31oA6HIjmaMTLqJKiuU1-fVh7Y.roa
File: s31oA6HIjmaMTLqJKiuU1-fVh7Y.roa (raw, json)
Hash identifier: a3NDIUC7/1nl7hIP5NVz8gGepVUFnwZ89k35dIp/fcI=
Subject key identifier: B3:7D:68:03:A1:C8:8E:66:8C:4C:BA:89:2A:2B:94:D7:E7:D5:87:B6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01856CAF240230E1658EE676B355A77BE34C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/s31oA6HIjmaMTLqJKiuU1-fVh7Y.roa
Signing time: Sun 01 Jan 2023 09:34:55 +0000
ROA not before: Sun 01 Jan 2023 09:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 94.176.214.0/24 maxlen: 24
94.176.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Feb 2023 04:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:24:02:30:e1:65:8e:e6:76:b3:55:a7:7b:e3:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 09:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b37d6803a1c88e668c4cba892a2b94d7e7d587b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:71:f6:5c:bd:a5:f6:2c:d1:61:b7:b9:78:7b:
a9:a8:55:71:88:ce:87:d5:41:df:be:ed:61:4a:30:
f4:05:67:6c:92:58:8c:aa:9d:ed:52:42:93:35:35:
67:bc:a4:7e:10:6a:b8:36:c4:46:e4:19:a8:6b:5e:
2e:96:05:4f:9e:cf:8e:83:8b:cc:09:3b:aa:0a:ee:
39:39:ab:1b:6f:9d:96:e8:fc:b4:7b:c9:f0:0d:47:
6c:35:0a:ed:9a:b6:7b:0f:6b:39:77:68:71:b7:a4:
87:c3:23:24:a5:82:1c:55:1f:34:82:e7:b1:ac:b1:
e4:19:f8:1c:de:06:66:a6:d6:c1:3b:06:7b:64:8e:
e4:f8:20:fa:4f:19:37:96:a6:8d:71:79:d5:cc:d0:
fc:5e:d1:a2:8a:b1:7e:1f:56:02:4c:0a:65:ed:70:
d6:20:ea:fc:3f:1a:f9:37:dd:1c:79:88:df:45:73:
9f:8a:61:89:82:e5:fa:82:f7:96:94:1b:4b:c6:f3:
0b:85:77:9f:93:99:4f:89:03:e2:21:6e:e4:80:13:
86:ec:b9:a0:41:59:05:73:3b:50:3b:b8:8c:ea:1c:
a3:89:7d:f7:fe:b7:44:75:91:99:5f:03:ca:9b:3f:
55:36:94:d0:ac:e9:00:1e:f0:d3:96:9b:bf:a9:52:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7D:68:03:A1:C8:8E:66:8C:4C:BA:89:2A:2B:94:D7:E7:D5:87:B6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/s31oA6HIjmaMTLqJKiuU1-fVh7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.214.0/23
Signature Algorithm: sha256WithRSAEncryption
01:af:8e:2a:7a:0f:aa:5c:f5:6a:34:81:ab:a1:3e:a5:d8:4e:
86:69:58:e0:9e:ee:22:5c:3f:7c:99:52:7c:94:b7:6a:ec:32:
2c:6a:af:50:14:15:c8:18:d7:5e:c0:2d:b9:c5:c3:d3:b9:be:
b8:11:3a:73:ff:02:55:6d:b2:c8:9a:71:45:3f:37:0d:81:4c:
d0:52:4e:dc:ae:e8:69:9b:d1:74:de:18:8e:c0:03:89:94:99:
05:fc:b6:ac:e6:67:34:14:22:8a:ee:55:30:33:5c:a8:21:a3:
a7:4c:82:ad:b0:12:27:6d:07:77:07:79:3a:bf:1b:ce:8b:6d:
db:28:ad:35:b4:6f:09:41:99:5a:98:fe:70:df:a4:0a:15:66:
89:2e:21:a4:e4:32:a1:65:f8:6f:0e:23:bc:dc:d6:84:6a:00:
ae:8b:5b:a4:b0:af:15:12:11:b3:6c:16:af:a7:1f:0f:ae:65:
08:43:0a:6d:fd:65:6d:2b:a7:5b:ad:cb:f4:54:ab:9c:cc:50:
b6:8b:e9:fe:6a:76:39:9c:70:d3:4d:61:98:e3:bd:08:d7:ce:
0d:15:27:71:68:0c:c2:07:56:37:08:83:88:7c:d2:ed:70:6a:
20:4b:07:93:91:fa:49:2f:81:d0:8a:bc:ea:63:8e:a2:bf:f3:
2b:62:ac:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org