Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/CcR4P8qN0wnmzYpxpjHK_2wMnnk.roa
File: CcR4P8qN0wnmzYpxpjHK_2wMnnk.roa (raw, json)
Hash identifier: 4Y5NwCYJphGIvtzDCOj7RUFmtO8vOh4foXmF1/J+k3Q=
Subject key identifier: 09:C4:78:3F:CA:8D:D3:09:E6:CD:8A:71:A6:31:CA:FF:6C:0C:9E:79
Certificate issuer: /CN=55d5dc9e220112a27c152bc32389038974ae4572
Certificate serial: 01856F4B6CC71D215C6F5B8F657A113EC937
Authority key identifier: 55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/CcR4P8qN0wnmzYpxpjHK_2wMnnk.roa
Signing time: Sun 01 Jan 2023 21:44:52 +0000
ROA not before: Sun 01 Jan 2023 21:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12586
IP address blocks: 94.100.130.0/24 maxlen: 32
2a01:6780:8::/48 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:6c:c7:1d:21:5c:6f:5b:8f:65:7a:11:3e:c9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d5dc9e220112a27c152bc32389038974ae4572
Validity
Not Before: Jan 1 21:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09c4783fca8dd309e6cd8a71a631caff6c0c9e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:bd:aa:c7:bf:35:ce:c8:9a:74:4b:3c:39:
87:a9:ee:d2:c0:8e:5b:e7:19:a6:be:89:9f:dc:67:
ec:41:55:a0:97:4b:85:e9:2c:de:4d:3e:b3:6d:b7:
c2:90:60:2d:e3:df:02:4a:fd:dc:a4:a6:60:67:81:
66:8b:48:82:81:9d:76:c0:e7:be:b0:5b:f4:31:95:
db:1f:be:8c:a9:2c:93:51:9a:5c:07:07:13:4e:79:
53:a0:9e:97:e3:90:81:32:c6:6d:16:ac:30:b7:ed:
51:68:2a:52:51:89:e5:e9:e0:e7:18:aa:45:b7:3a:
09:5c:68:09:0a:78:3f:f7:de:fc:a0:70:85:f1:3f:
13:a0:b2:0d:36:f6:ae:ed:e5:93:8c:56:e3:f8:ce:
b3:72:18:24:a2:b3:a2:be:4f:6c:76:e0:1a:28:65:
ad:34:84:fd:d6:06:f6:de:53:89:1a:ad:47:68:6a:
dc:be:52:ff:00:fd:ae:1e:f8:da:a1:12:60:2e:05:
70:3c:f8:10:5c:de:ff:9c:d3:cf:8d:00:6b:5f:ad:
b6:4d:42:99:5b:37:e6:a4:e3:bd:38:d0:fb:5e:ba:
f9:a5:ba:6e:95:2e:1c:de:df:7a:31:cf:cb:70:b9:
3d:b0:59:bc:0b:e0:88:d3:67:57:ac:e4:ae:0d:d6:
8e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C4:78:3F:CA:8D:D3:09:E6:CD:8A:71:A6:31:CA:FF:6C:0C:9E:79
X509v3 Authority Key Identifier:
keyid:55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/CcR4P8qN0wnmzYpxpjHK_2wMnnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.130.0/24
IPv6:
2a01:6780:8::/48
Signature Algorithm: sha256WithRSAEncryption
b9:b6:2a:97:72:f2:73:1b:a2:c0:6e:e4:18:7c:af:98:7b:af:
55:e9:26:7b:56:34:0c:e3:b4:c5:e6:f6:51:e4:f9:7f:55:f2:
64:38:e1:c2:98:05:9e:e8:31:1d:58:4a:a4:a0:74:e1:ef:41:
b6:05:ea:6c:a6:1e:91:2e:b9:5c:06:e5:8e:b0:ba:c9:58:d7:
66:92:24:f4:87:6b:74:cc:fe:b0:6f:95:e3:ba:45:22:ca:e8:
06:d0:22:92:57:e7:af:9a:92:3d:05:18:8b:bc:6c:a9:ca:71:
d1:6f:61:46:09:0f:fb:d2:0e:1f:66:84:87:4a:37:8d:a5:2c:
1e:db:5e:af:db:d2:3c:6a:1a:f9:db:47:bc:2f:d9:74:48:09:
26:4a:00:ae:2d:d3:0c:7c:cc:b5:f9:e9:24:e4:39:99:99:a4:
da:94:00:00:d6:a8:7d:b8:ef:cb:5d:88:35:94:ec:68:63:9d:
b8:fe:bd:f9:cd:64:97:80:2a:ff:49:24:95:90:aa:cf:40:04:
82:6a:5b:16:3a:60:0e:80:ad:94:8f:ac:db:bd:34:a9:82:99:
b8:35:77:aa:2f:ef:08:e6:a1:d9:c7:db:86:60:20:25:cb:ea:
d4:f9:a2:d8:eb:6a:29:9e:c3:5e:40:a2:36:6c:4f:38:5e:26:
f7:e8:15:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-fra.rpki-client.org