Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/rtzKIvR4dWdiX_Zq2UHAevJLaV0.roa
File: rtzKIvR4dWdiX_Zq2UHAevJLaV0.roa (raw, json)
Hash identifier: LYufOeLZ7I88HMMhcEyBxJ3rQDqpSGbO5hJAFLux0wI=
Subject key identifier: AE:DC:CA:22:F4:78:75:67:62:5F:F6:6A:D9:41:C0:7A:F2:4B:69:5D
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 018A2204E4DAC87BE53F31EC6EDE0CF6A568
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/rtzKIvR4dWdiX_Zq2UHAevJLaV0.roa
Signing time: Wed 23 Aug 2023 10:51:00 +0000
ROA not before: Wed 23 Aug 2023 10:51:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208537
IP address blocks: 94.101.104.0/24 maxlen: 24
194.102.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 07:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:04:e4:da:c8:7b:e5:3f:31:ec:6e:de:0c:f6:a5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Aug 23 10:51:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aedcca22f4787567625ff66ad941c07af24b695d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:fc:65:03:ce:38:27:84:81:fe:14:f6:3c:
6f:cf:a1:c7:f4:5a:73:1a:2b:1f:bb:b0:3f:e6:f4:
eb:6c:89:1a:70:ae:78:c4:cc:d4:a2:38:81:95:6b:
d6:84:60:91:6e:89:a4:65:9d:c4:1f:ab:5b:9d:6a:
ad:97:1e:32:45:4c:f0:da:2e:fc:56:08:22:bd:de:
0a:b2:be:5d:b5:af:12:82:79:6e:18:67:ad:47:12:
16:78:89:ed:59:f6:f9:3e:89:a6:3e:ec:16:94:4a:
70:1a:00:25:d8:77:5d:a8:a1:ee:ae:1d:b2:df:fd:
9c:4d:24:32:9c:e4:95:7d:31:f9:c1:65:5c:51:b1:
df:be:f6:a6:9f:53:6b:a3:69:a4:98:6f:06:bf:9e:
52:69:45:d8:e9:2e:68:7c:44:93:50:db:36:b5:0e:
b6:fc:16:cf:4a:25:fd:f2:a6:1c:38:f1:9d:b4:c7:
f9:ef:92:3d:fb:5d:c0:98:9d:9f:95:25:b6:11:30:
16:42:3e:b6:a8:25:82:59:72:ac:5b:b0:27:ad:ed:
02:38:d1:98:34:25:7c:79:b5:7a:30:c0:e4:fc:66:
21:15:50:80:c1:19:44:71:5d:96:b7:e1:0a:42:ef:
52:1f:fa:12:55:de:23:86:a3:52:7d:b2:ee:83:53:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DC:CA:22:F4:78:75:67:62:5F:F6:6A:D9:41:C0:7A:F2:4B:69:5D
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/rtzKIvR4dWdiX_Zq2UHAevJLaV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.104.0/24
194.102.239.0/24
Signature Algorithm: sha256WithRSAEncryption
82:af:b8:11:c2:a1:79:dd:29:a7:d2:f8:b5:b0:c5:f8:d9:d7:
92:2f:1d:14:e5:b3:5e:8a:4b:a5:f5:32:a1:a1:f7:78:11:93:
d8:89:00:45:31:e5:8a:6e:c4:e7:d4:fa:31:96:b9:77:b8:5e:
3f:9e:b5:1e:80:13:28:79:8f:73:85:99:16:c1:0b:9c:fc:e8:
f9:98:8f:8b:db:80:da:0f:79:93:cd:90:ad:e9:2c:ef:44:8a:
30:a1:a5:ae:4c:de:00:16:3c:66:1c:53:2e:dc:51:01:59:6d:
e5:a6:91:06:ee:4f:29:07:e8:9c:da:b6:09:97:b2:48:a0:ca:
cd:cd:9f:2a:d4:f5:0e:51:db:8a:86:27:1a:c1:28:4f:5c:03:
a3:0c:c3:e8:d6:40:f8:3d:fc:d9:40:6e:03:44:48:3b:e7:c0:
7f:23:7c:77:ed:a4:f4:d2:12:d3:85:a0:fb:34:19:2f:85:da:
70:72:86:54:c6:ed:08:02:0f:71:51:05:6b:e7:b6:1b:d6:e4:
90:04:b8:5d:38:d1:e0:e1:d8:2f:db:14:3a:a6:54:72:b9:64:
f3:1b:27:8b:64:ce:6d:6e:1f:e7:f6:7e:39:00:74:1e:b3:04:
49:4e:42:40:36:16:b3:3c:6a:dc:9c:d9:e0:8b:61:70:dd:08:
a1:59:6e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:17 2024 by rpki-client on console-ams.rpki-client.org