Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/n_SVeSfTlJ34zGaZ-2Ypv0Qt7_Y.roa
File: n_SVeSfTlJ34zGaZ-2Ypv0Qt7_Y.roa (raw, json)
Hash identifier: LMM4NFr3e37LAJ47owsFPSbgIvrq2V5ZxVKVNYmmfek=
Subject key identifier: 9F:F4:95:79:27:D3:94:9D:F8:CC:66:99:FB:66:29:BF:44:2D:EF:F6
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01857139CFC381E3BF184104E302080F40CC
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/n_SVeSfTlJ34zGaZ-2Ypv0Qt7_Y.roa
Signing time: Mon 02 Jan 2023 06:44:52 +0000
ROA not before: Mon 02 Jan 2023 06:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60638
IP address blocks: 94.184.140.0/22 maxlen: 24
94.184.140.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:cf:c3:81:e3:bf:18:41:04:e3:02:08:0f:40:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 06:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ff4957927d3949df8cc6699fb6629bf442deff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:04:21:c3:ad:9a:e0:99:44:da:b0:64:fc:
2e:ee:09:7b:e9:80:51:4f:ac:00:01:b7:72:90:6a:
bb:97:ca:cc:ef:c7:d7:cd:b3:7b:6e:bc:d0:52:a8:
50:23:3c:00:f2:39:eb:24:26:78:67:65:07:9a:e5:
9a:85:2a:1e:7c:19:96:8a:b6:7a:c6:b9:c9:39:21:
13:98:e3:01:af:79:78:d9:de:2c:80:36:e2:4a:50:
64:5d:a5:1d:be:9b:2a:f4:12:f5:74:d1:e2:81:e3:
06:d5:94:f3:fa:0d:09:a9:9f:15:3a:da:a8:71:e0:
9a:16:50:5e:02:ce:8d:ae:c7:df:26:07:3e:c4:0d:
bd:65:8a:de:42:94:ee:c6:b2:da:46:95:f4:15:69:
28:13:2a:8f:eb:78:3a:b4:f2:4c:f9:c0:a6:e3:96:
89:46:e8:4a:56:d6:42:1e:3a:e7:2d:47:9c:fa:1d:
2e:c9:59:11:3d:f3:06:13:09:38:bc:f9:74:e6:33:
b1:d0:0b:ac:b4:22:81:a0:a2:f7:c0:63:ff:61:e0:
27:b4:f8:0c:26:b6:56:83:88:ff:cc:bd:91:dd:29:
2b:21:fc:ca:53:c0:57:17:79:51:d3:ce:24:c2:8b:
ff:54:01:9c:ce:98:ac:50:1b:f7:18:c2:3d:48:fe:
5d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F4:95:79:27:D3:94:9D:F8:CC:66:99:FB:66:29:BF:44:2D:EF:F6
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/n_SVeSfTlJ34zGaZ-2Ypv0Qt7_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.140.0/22
Signature Algorithm: sha256WithRSAEncryption
37:be:cb:ba:36:36:3c:07:39:90:de:ea:d0:40:7d:ce:f0:2b:
5f:d8:50:e3:d4:a4:71:00:41:1f:7c:9d:c9:5a:74:20:de:5a:
7a:ef:d6:f7:96:ed:53:6d:f6:02:0b:fa:38:e8:ae:55:20:2d:
c4:ad:45:c2:4c:81:32:c4:07:5c:02:e7:ce:17:6d:f1:af:cb:
fe:52:e7:ec:95:f6:d2:16:37:2d:e6:5d:be:86:7a:a3:2d:94:
b9:2e:ac:b7:ae:86:91:08:bc:49:25:4e:ca:5a:44:68:7c:57:
49:7c:44:83:a2:0f:de:64:06:11:6f:45:9b:22:d3:68:41:69:
a5:53:52:dc:fb:98:93:25:02:e1:13:f7:cf:53:06:81:49:f2:
6d:1d:98:c0:bc:a9:e4:85:cc:1c:36:8e:02:d2:36:8f:4a:0b:
f2:3c:cf:7a:6d:2c:c3:f9:fc:e5:9d:46:7b:5c:a4:6a:22:e2:
07:42:d3:b7:a6:ae:d6:18:c3:f1:48:6d:86:17:df:8f:13:a9:
44:c0:9f:90:c9:6a:26:3b:1d:23:2d:c8:f5:f6:53:85:d4:9a:
02:f9:c0:8a:f1:1e:c8:27:f8:d9:be:bf:89:c8:c5:2b:99:b9:
7b:06:a7:36:56:36:88:f2:b1:7a:2d:e1:1e:4d:49:a8:47:06:
1c:ef:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:11 2024 by rpki-client on console-ams.rpki-client.org