Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/k4RhVXrbEGjiZOYP7Qtu5oNhWHw.roa
File: k4RhVXrbEGjiZOYP7Qtu5oNhWHw.roa (raw, json)
Hash identifier: Cg76hDGunkzLer0fqY2ebga2DVGO1ZFLLWgoOFga7mo=
Subject key identifier: 93:84:61:55:7A:DB:10:68:E2:64:E6:0F:ED:0B:6E:E6:83:61:58:7C
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 0185715E48482D25592B050E782FE4ED7EAD
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/k4RhVXrbEGjiZOYP7Qtu5oNhWHw.roa
Signing time: Mon 02 Jan 2023 07:24:42 +0000
ROA not before: Mon 02 Jan 2023 07:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38930
IP address blocks: 94.75.196.0/24 maxlen: 24
2001:1af8:4410::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:48:48:2d:25:59:2b:05:0e:78:2f:e4:ed:7e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Jan 2 07:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=938461557adb1068e264e60fed0b6ee68361587c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:47:35:81:6e:fd:be:6d:7d:c5:9c:9a:c2:bc:
6e:6a:c9:24:c5:fb:2b:c6:86:86:f1:4d:44:29:42:
f6:a3:51:29:1a:04:3a:7e:18:8c:96:f2:f9:46:f5:
84:1f:39:b5:78:03:bf:a0:98:6c:0d:46:ce:d3:5b:
c4:31:f9:51:81:42:27:8a:d1:db:fc:45:be:ba:48:
47:ed:b1:61:4b:75:96:32:65:cb:0f:67:a9:13:d4:
ee:ff:aa:52:80:a5:bd:b7:84:86:b0:59:1e:26:9a:
8a:ad:3d:aa:d1:97:ea:ef:de:81:7b:fb:64:f1:dc:
26:6d:07:e3:c9:b8:de:5d:12:13:cc:ca:c3:3f:ea:
c9:71:be:9d:73:f9:97:bd:72:89:bb:82:a9:18:7e:
c9:c7:0e:e9:98:88:cc:30:53:d4:d3:37:82:e0:7e:
01:f5:a8:46:df:d2:e4:08:79:97:f6:54:e5:06:8b:
86:ac:aa:f4:fb:cc:33:fa:31:ae:d7:a0:00:02:70:
d5:c4:97:5a:66:12:ef:14:45:c4:d8:71:d7:2d:a6:
21:a4:85:ad:4f:6b:73:ff:ff:ce:8f:0c:de:0c:eb:
f8:b5:1e:f1:8a:fc:0d:cd:f5:35:1b:13:43:31:ae:
d3:d6:99:56:88:20:14:b1:93:ca:4a:65:0c:c4:20:
d8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:84:61:55:7A:DB:10:68:E2:64:E6:0F:ED:0B:6E:E6:83:61:58:7C
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/k4RhVXrbEGjiZOYP7Qtu5oNhWHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.75.196.0/24
IPv6:
2001:1af8:4410::/48
Signature Algorithm: sha256WithRSAEncryption
a1:9c:42:f4:57:31:1b:b6:54:2e:eb:75:4b:34:83:c6:fe:94:
11:71:6b:f9:f8:fd:0e:d6:4d:d9:37:de:10:40:ef:60:20:23:
b9:ef:51:9c:a8:3e:cf:b8:74:e1:32:d4:72:3b:b0:15:bc:3b:
98:ed:24:0e:c0:bc:ce:f3:81:bd:82:07:1c:03:62:bf:7c:99:
32:23:40:7d:fe:52:75:78:00:4f:ae:24:15:9f:60:82:bf:e3:
c1:75:f0:a6:d9:21:1c:e5:a7:1a:5e:5e:95:3d:d4:19:b2:27:
78:85:f6:c8:28:86:e7:9b:c2:45:25:34:29:75:91:53:29:1c:
31:b3:fe:a9:ac:c9:b9:05:7b:2a:fd:5a:5c:f0:c7:20:7f:28:
76:e4:84:f4:c7:09:6d:ab:c5:bb:37:4b:96:f1:42:4d:06:cf:
ff:af:bc:2c:4f:ac:19:3d:cc:04:74:8a:41:53:54:e7:0c:c8:
ce:ff:85:12:f6:e2:dc:cc:c7:4d:3f:8f:7e:5d:c6:0d:dc:00:
da:3a:ff:74:c3:c5:2a:ed:13:2a:e8:2d:b2:e7:64:4e:06:49:
84:a6:c1:d2:33:67:fd:fe:c4:a0:03:e6:bb:45:33:61:45:8e:
f0:3e:8d:8b:02:20:66:75:d9:51:b6:63:bd:28:fc:41:08:18:
8e:52:60:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:51 2024 by rpki-client on console-fra.rpki-client.org