Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/4IH8KVknMgc7JscPb0om9d3_Yp4.roa
File: 4IH8KVknMgc7JscPb0om9d3_Yp4.roa (raw, json)
Hash identifier: oqcCyTcmV4mozAvkGTT+p1DnxfkYfBfmQwE7Dg3lkmA=
Subject key identifier: E0:81:FC:29:59:27:32:07:3B:26:C7:0F:6F:4A:26:F5:DD:FF:62:9E
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01876A0C94D4CE6A824B3ADE88525E77B5D1
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/4IH8KVknMgc7JscPb0om9d3_Yp4.roa
Signing time: Mon 10 Apr 2023 07:23:42 +0000
ROA not before: Mon 10 Apr 2023 07:23:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49433
IP address blocks: 94.139.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:0c:94:d4:ce:6a:82:4b:3a:de:88:52:5e:77:b5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Apr 10 07:23:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e081fc29592732073b26c70f6f4a26f5ddff629e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:3d:06:28:63:63:86:46:b8:0f:27:b2:cc:
49:ee:43:86:8d:ad:34:83:34:06:40:17:ad:55:f3:
fb:bd:d8:18:5c:b3:ee:6c:50:32:54:ce:26:5f:a8:
2b:e7:68:01:16:64:86:0a:01:8d:84:e8:fe:c8:29:
2e:a1:df:f6:6f:2e:bb:31:64:45:15:56:5f:7d:85:
f9:b2:98:27:73:9c:31:e7:c0:6e:03:b3:3a:98:7a:
68:1e:c0:f4:cc:6e:8f:8b:28:42:ee:46:4e:ba:82:
fa:66:74:d8:b3:91:8e:16:80:7a:a6:60:2e:7f:0f:
8e:2c:94:03:a9:76:18:db:5e:4d:19:a4:c9:7b:5b:
2e:66:c9:4c:f8:fb:36:45:da:c0:3a:c4:56:91:db:
8d:76:3e:a4:f8:5a:9a:3f:37:42:42:54:a1:70:8f:
06:de:b6:0c:64:c1:7c:94:07:14:ec:4c:50:da:65:
7c:05:9c:b3:c4:4a:49:bb:77:d4:65:be:bf:e1:ce:
aa:b5:8e:54:0b:d5:c9:86:aa:ae:f7:1e:4d:23:d2:
4d:70:71:af:5d:09:32:e7:27:31:f5:f2:19:da:a6:
4b:07:a5:2f:76:a3:fe:46:d3:2e:96:d7:80:0c:85:
1e:29:85:19:c1:98:9d:fe:62:b1:6f:31:c2:2f:71:
8e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:81:FC:29:59:27:32:07:3B:26:C7:0F:6F:4A:26:F5:DD:FF:62:9E
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/4IH8KVknMgc7JscPb0om9d3_Yp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:11:3f:56:69:bd:d2:f0:e5:c0:a2:2b:4e:13:48:20:e9:11:
71:ed:0d:6d:c1:a3:85:a1:cc:aa:d4:16:6d:7d:f5:7f:cd:38:
6c:84:55:87:6e:b4:5c:4d:af:4c:c6:e9:ac:55:d0:17:02:92:
60:17:43:ea:aa:3f:cc:df:a4:a1:7b:6d:9a:e4:67:33:4e:be:
0e:23:c2:b1:77:c6:94:52:32:58:4a:dd:53:e6:62:45:33:1d:
e8:03:83:f2:9c:eb:72:61:05:ab:93:31:69:9b:c5:6a:d3:2c:
ce:2f:15:92:5e:67:bf:43:6e:c0:65:1a:4b:e3:1f:ec:7c:84:
53:8e:17:e6:0c:0b:97:5e:9f:7e:db:1c:15:e2:9a:17:3b:7b:
34:1d:b0:5a:ab:a8:f6:52:ed:61:3b:f9:59:a7:20:f3:e0:2c:
44:8c:f3:44:c2:73:f6:2f:af:d3:7b:2b:d2:4e:97:3a:89:75:
90:d3:9f:92:44:59:51:cf:2d:84:1b:57:54:b3:25:9c:4c:60:
23:d0:0d:1d:35:58:53:8a:1b:2d:a9:97:59:f8:fa:0b:35:a7:
4a:fd:87:22:84:c8:08:cd:02:6d:3b:2f:cf:7b:b6:19:d0:d4:
ee:80:d4:59:f2:06:fa:58:60:d6:60:24:fc:8a:1b:e0:f7:b9:
3c:76:3f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:21 2024 by rpki-client on console-fra.rpki-client.org