Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/03fl7uQGmmlGcRjVN2RKgfwWGRk.roa
File: 03fl7uQGmmlGcRjVN2RKgfwWGRk.roa (raw, json)
Hash identifier: fJlgkdxRflQvZkluJey/2CZkNvkfxzR/yYWHTmTTB3I=
Subject key identifier: D3:77:E5:EE:E4:06:9A:69:46:71:18:D5:37:64:4A:81:FC:16:19:19
Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Certificate serial: 019006C1AE8374935C414E5EEE269494EDB8
Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/03fl7uQGmmlGcRjVN2RKgfwWGRk.roa
Signing time: Tue 11 Jun 2024 10:04:34 +0000
ROA not before: Tue 11 Jun 2024 10:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198252
IP address blocks: 94.250.37.0/24 maxlen: 24
94.250.38.0/24 maxlen: 24
94.250.39.0/24 maxlen: 24
94.250.40.0/22 maxlen: 22
94.250.40.0/23 maxlen: 24
94.250.42.0/23 maxlen: 24
94.250.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 07:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:c1:ae:83:74:93:5c:41:4e:5e:ee:26:94:94:ed:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8
Validity
Not Before: Jun 11 10:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d377e5eee4069a69467118d537644a81fc161919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:27:08:04:4c:61:6a:a6:9c:f9:f5:56:10:
8d:6d:30:c5:16:d3:d7:c1:ef:84:5e:48:4d:11:8f:
5e:09:49:7c:b8:88:25:e3:b8:55:6c:01:a7:de:44:
a4:c9:f5:0e:2f:72:17:16:dc:b1:8a:ce:90:7c:e0:
2e:ad:37:1c:7e:3d:9a:73:0a:68:c2:11:6e:93:eb:
08:b8:de:aa:4f:e7:bd:7a:8f:b0:80:30:d4:c7:a5:
bf:90:c3:db:fd:61:46:af:a2:7c:cf:d4:5a:58:f6:
c1:a3:fc:31:f8:2c:59:5d:54:2c:af:b0:9f:24:38:
40:91:e4:a1:7a:92:de:21:ec:e5:66:07:6c:12:9d:
e9:13:68:5f:32:bb:ce:e0:b6:26:bd:be:c7:e3:71:
19:0c:58:47:17:d5:a4:4b:1a:66:7a:76:f0:ed:ec:
30:4c:a5:83:b5:c9:bb:17:a9:f3:8b:c3:d9:49:55:
e3:9b:ea:00:80:8f:2f:a6:c8:7b:58:9e:81:21:2d:
87:a7:cc:3b:1a:66:52:ec:56:ea:0a:83:08:2c:8e:
3d:c2:11:20:b2:1d:7e:a1:03:ba:50:9b:3b:84:fb:
d6:de:f1:24:19:0d:de:09:56:c9:72:72:c9:e3:06:
f7:96:fc:ec:56:0d:56:f4:06:20:88:7b:a5:9f:d3:
a8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:77:E5:EE:E4:06:9A:69:46:71:18:D5:37:64:4A:81:FC:16:19:19
X509v3 Authority Key Identifier:
keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/03fl7uQGmmlGcRjVN2RKgfwWGRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.37.0-94.250.47.255
Signature Algorithm: sha256WithRSAEncryption
3c:bb:3d:93:13:98:a4:d9:fe:33:8e:de:47:0b:ae:3b:e5:a7:
bf:aa:ea:13:10:46:fd:74:28:6e:54:df:33:9f:7e:7f:7a:92:
85:ab:ac:b2:57:e7:0e:b0:24:4e:64:fb:46:0e:57:e2:42:66:
dd:11:d9:64:10:2e:6a:a8:d1:fe:55:a3:68:3c:5e:c3:f2:67:
17:34:62:65:4c:fe:6a:db:c6:88:26:32:bf:82:2d:c4:47:d2:
9d:f5:d4:a0:e5:e7:40:4d:ec:75:70:76:f9:20:1f:d3:98:18:
7b:64:60:15:21:af:c2:26:69:46:b1:f5:47:03:21:26:68:9c:
e9:6d:a8:38:41:fb:31:e9:57:90:38:7d:a3:11:69:37:36:d0:
07:70:7e:69:19:7b:fe:74:e5:df:d4:e2:ee:88:7d:c5:b5:d5:
6b:a5:b0:98:36:5b:9b:83:cc:dd:dc:ee:27:2e:97:83:f6:2d:
0a:ef:76:fc:3c:31:ad:8b:36:03:84:07:67:0e:d6:a0:b3:f7:
3b:3d:e1:b2:1b:0b:7a:65:ac:5d:f6:7c:e2:eb:31:92:5d:3c:
ce:38:7d:4f:39:55:a8:d6:a8:09:b8:d5:41:b7:81:e2:14:de:
31:3a:a7:12:81:46:5c:2b:51:99:89:c1:0c:93:f1:ce:67:35:
fb:75:93:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 09:50:49 2024 by rpki-client on console-fra.rpki-client.org