Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/7RmVqVZt6c5k42Ypnjy1DWZ4zfs.roa
File: 7RmVqVZt6c5k42Ypnjy1DWZ4zfs.roa (raw, json)
Hash identifier: Jcys0qMkgEitnpYrTafKCpnZFqSsFoPy/AlCA1/VWeI=
Subject key identifier: ED:19:95:A9:56:6D:E9:CE:64:E3:66:29:9E:3C:B5:0D:66:78:CD:FB
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DCDEC42ABA957F3742B5A14FC297C
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/7RmVqVZt6c5k42Ypnjy1DWZ4zfs.roa
Signing time: Sun 01 Jan 2023 20:55:02 +0000
ROA not before: Sun 01 Jan 2023 20:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34854
IP address blocks: 94.124.117.0/24 maxlen: 24
2a09:0:10::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 May 2023 10:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:cd:ec:42:ab:a9:57:f3:74:2b:5a:14:fc:29:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed1995a9566de9ce64e366299e3cb50d6678cdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:78:c7:4a:47:e9:3e:3d:7c:91:ba:e8:24:c0:
6c:32:7e:99:4c:0d:03:99:99:85:b2:81:d8:42:bd:
0d:8f:8c:ca:e6:d5:15:5f:fa:13:d8:98:ac:71:f9:
65:fc:84:8b:10:53:83:50:ce:91:54:82:6d:06:1a:
4a:85:6e:22:2e:e7:6f:07:2c:60:db:14:64:f9:69:
a4:56:33:af:fa:6a:1c:44:a7:9b:49:b9:58:11:85:
92:2c:eb:74:f0:87:b3:51:7a:b7:93:45:fe:fd:2e:
75:9c:9f:2f:a7:0d:25:3a:ff:05:8c:aa:ce:9a:18:
f9:11:75:3b:0a:0a:18:ed:74:66:ec:27:63:eb:ae:
fb:b0:89:d9:4d:62:88:7f:72:e1:21:08:e0:07:91:
d8:d5:ce:15:59:c3:3a:24:ef:e6:07:4f:8c:21:cf:
77:b0:cf:e9:c2:8a:40:0c:bd:f7:3a:db:01:9e:ca:
61:32:2c:fb:13:23:b1:62:99:ba:3b:1b:a7:e3:fc:
50:45:45:35:43:4b:f6:5a:01:51:ab:ba:fc:f0:8d:
95:22:4a:ca:25:a1:88:f2:4c:ed:56:3c:b0:86:99:
93:b9:9a:70:ab:9f:57:98:88:2b:a1:7d:0f:cc:14:
bf:d7:41:7f:94:c0:a9:6a:32:74:f8:1a:59:6a:83:
42:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:19:95:A9:56:6D:E9:CE:64:E3:66:29:9E:3C:B5:0D:66:78:CD:FB
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/7RmVqVZt6c5k42Ypnjy1DWZ4zfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.117.0/24
IPv6:
2a09:0:10::/48
Signature Algorithm: sha256WithRSAEncryption
47:42:b9:e1:8b:3c:b0:b1:b3:17:31:8c:23:64:4d:8c:85:8f:
ed:b7:fa:96:e9:9c:a1:40:3c:c5:ae:2c:3c:ca:d6:0e:f9:1f:
06:72:6e:9d:8a:ed:be:57:41:54:54:69:36:46:d5:29:df:1f:
98:fe:87:b8:54:a0:18:bc:ed:98:22:01:71:7f:6f:08:a5:0a:
e2:7e:07:a0:af:fa:e1:8a:d8:7a:e0:06:93:64:2a:1e:da:d6:
b7:3d:b0:d6:e3:7a:c3:e0:0a:32:18:42:64:ae:11:36:b6:51:
96:41:f9:a7:8c:2e:7d:fa:c7:4b:05:cd:02:b6:38:82:fc:9d:
05:f5:b1:1f:f6:f3:3c:f9:97:fe:29:30:67:48:f0:95:bd:84:
f5:6c:e4:22:ad:01:2a:60:81:76:48:52:96:f3:f3:c7:53:51:
f4:14:ad:7f:a9:3c:c6:55:19:d9:1f:63:02:64:5b:90:16:7d:
af:0a:42:28:00:90:77:1c:8a:ae:55:6f:43:1e:de:66:48:cc:
d1:7c:60:12:41:3e:08:00:05:56:d4:dc:9d:98:71:a6:ed:10:
fc:c7:8a:ea:79:53:51:a5:26:6c:48:56:5f:fe:17:87:2b:ff:
68:80:4f:59:8d:79:9c:47:a7:39:85:1c:be:84:ea:36:1b:3b:
06:24:b7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:46 2024 by rpki-client on console-ams.rpki-client.org