Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/1-kARfR3FWSb0XKPthS1WPmJfiug.roa
File: 1-kARfR3FWSb0XKPthS1WPmJfiug.roa (raw, json)
Hash identifier: ySVETQduQoPo9azUo98w54UXLM4KL+r7XkNHs3B6wNk=
Subject key identifier: FA:40:11:7D:1D:C5:59:26:F4:5C:A3:ED:85:2D:56:3E:62:5F:8A:E8
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01883E38BA6A5134508B0C7E0168636DEBB3
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/1-kARfR3FWSb0XKPthS1WPmJfiug.roa
Signing time: Sun 21 May 2023 12:11:25 +0000
ROA not before: Sun 21 May 2023 12:11:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51961
IP address blocks: 94.228.168.0/24 maxlen: 24
94.228.169.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 May 2023 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3e:38:ba:6a:51:34:50:8b:0c:7e:01:68:63:6d:eb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: May 21 12:11:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa40117d1dc55926f45ca3ed852d563e625f8ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:44:b8:a5:fe:f5:94:6c:d2:3e:81:57:2b:
a6:88:20:8e:7c:63:19:d1:15:ae:cf:c0:a5:cc:1e:
42:ac:12:1f:7b:54:30:fc:98:c9:d3:40:78:7a:00:
61:7f:52:99:88:d0:6d:d4:3a:03:5a:38:8a:b3:e1:
86:a6:10:16:3e:e7:a6:f3:5e:be:1b:c7:b9:d8:a2:
0b:f0:85:33:87:62:1e:49:90:5b:eb:f2:05:3c:fa:
9a:28:bb:95:23:1a:dc:02:b2:70:dc:09:76:7b:20:
83:3f:49:7e:41:10:56:20:64:a1:0f:92:af:5f:d9:
28:ca:e1:94:e1:a8:94:96:52:ca:41:93:79:16:de:
b3:00:8d:fe:4b:af:a0:52:31:85:2c:5d:27:ea:60:
6a:79:59:4f:52:d6:ef:90:04:bd:69:12:bf:67:d4:
b4:ed:2b:f2:1f:91:34:77:db:09:b5:a7:7f:f3:60:
d8:58:3c:7e:66:98:13:4e:39:cb:d5:04:06:c2:32:
fc:1d:da:45:0b:3f:00:40:d4:71:9b:ca:9b:86:22:
ae:3e:14:b6:a0:09:6d:d6:d4:1f:91:fe:31:49:79:
d2:b6:de:cd:7c:8a:d8:c1:23:58:bd:2a:1b:fc:56:
ad:0d:30:f0:86:fb:30:ad:cf:b4:2d:0c:2f:e0:42:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:40:11:7D:1D:C5:59:26:F4:5C:A3:ED:85:2D:56:3E:62:5F:8A:E8
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/1-kARfR3FWSb0XKPthS1WPmJfiug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.168.0/23
Signature Algorithm: sha256WithRSAEncryption
61:26:e7:a8:3f:34:90:a1:7b:4a:c4:2c:3b:ea:de:9c:43:b2:
ee:60:74:0b:f8:7a:38:36:60:e8:24:4f:77:5d:a7:5c:7c:e2:
cf:a0:11:38:19:7c:87:47:00:f9:3d:80:0b:7d:af:80:e4:9f:
57:e2:c7:1a:d0:65:18:4f:3e:81:78:f9:e7:83:84:01:be:84:
d6:f7:25:34:a4:c3:07:39:12:5f:a3:c2:7e:a0:00:1a:92:9d:
68:fe:fa:18:54:1b:19:22:cf:ca:54:45:bf:3d:1b:20:76:66:
97:06:da:64:06:ac:36:7a:a4:4d:e9:d3:26:6f:ee:f0:60:44:
14:bf:de:ec:07:2b:8d:25:4b:40:9c:0f:44:b7:b5:b2:23:65:
96:6a:93:4f:9c:58:48:c9:d2:54:1a:f1:d5:b7:2e:ae:f4:ca:
38:93:95:2d:f4:27:a7:b0:3b:e8:b4:dd:b8:1e:ad:4b:4e:3f:
f9:b7:f2:ea:10:57:ea:ba:8d:3a:a9:d8:78:ce:66:0b:03:a4:
09:43:4d:c7:f9:94:dc:48:4d:14:74:b4:16:5a:e3:ba:f8:48:
aa:80:7f:2c:f8:64:e1:6a:05:45:72:b7:3b:f4:4a:fb:2e:83:
2a:a4:b4:7d:a4:ea:36:d3:45:75:d6:c1:2a:74:e1:03:3e:54:
4c:de:80:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:16 2024 by rpki-client on console-ams.rpki-client.org