Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/xXzw7oIel-0tK3VOp7Dvl8e5XOc.roa
File: xXzw7oIel-0tK3VOp7Dvl8e5XOc.roa (raw, json)
Hash identifier: h4cBS/1P8frcxreR5/XivAa0s/ny2QlAbhzW0x7alNc=
Subject key identifier: C5:7C:F0:EE:82:1E:97:ED:2D:2B:75:4E:A7:B0:EF:97:C7:B9:5C:E7
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D589E0D0407EB5787758504306F17
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/xXzw7oIel-0tK3VOp7Dvl8e5XOc.roa
Signing time: Mon 01 Jan 2024 00:29:55 +0000
ROA not before: Mon 01 Jan 2024 00:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44309
IP address blocks: 94.236.164.0/24 maxlen: 24
94.236.165.0/24 maxlen: 24
94.236.166.0/24 maxlen: 24
94.236.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:58:9e:0d:04:07:eb:57:87:75:85:04:30:6f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c57cf0ee821e97ed2d2b754ea7b0ef97c7b95ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:43:dd:38:95:f9:fb:b0:77:b5:bd:bb:fd:
d8:41:49:ce:be:10:26:b0:b2:1c:d9:45:09:7e:32:
13:76:ff:0c:05:31:f6:c6:f9:27:a7:72:99:e3:c9:
30:94:34:68:ee:98:fa:b1:64:8e:8f:1e:aa:0d:34:
2e:fe:77:9b:86:9e:73:a5:20:06:32:de:88:84:96:
c9:90:a7:85:ad:c5:6e:ba:13:3d:0a:91:73:1d:59:
d0:4b:39:3c:e3:3f:b8:a1:cb:ba:c2:19:d2:11:ca:
f1:33:58:a8:52:78:15:e8:3d:a7:73:b2:30:e7:7c:
39:36:8d:e2:b6:dd:98:aa:e4:f3:f5:8b:e7:c5:e7:
63:8d:de:01:7b:48:95:9d:94:1b:e7:e8:73:85:a4:
c6:d0:1d:af:68:6f:15:0a:19:15:c1:6f:7e:ac:50:
a7:75:eb:7d:88:e8:b3:f1:fc:63:52:36:e4:4f:62:
86:28:e4:61:e0:54:96:c2:4f:8d:64:13:e1:0e:61:
73:87:9b:ff:6d:4c:51:4b:f2:54:16:92:2f:63:91:
70:81:32:8c:ff:ed:45:08:c8:7b:d8:a4:6b:be:0d:
f5:56:49:fd:9c:8e:ca:d0:7f:1e:72:17:18:f0:5b:
e2:ca:44:30:32:82:5a:12:0c:b8:34:99:10:c9:73:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:7C:F0:EE:82:1E:97:ED:2D:2B:75:4E:A7:B0:EF:97:C7:B9:5C:E7
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/xXzw7oIel-0tK3VOp7Dvl8e5XOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.236.164.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:b7:8a:c2:9c:16:f4:84:93:8e:7d:b0:d8:68:df:76:6a:cd:
4f:0a:7f:70:21:5b:86:60:eb:a8:fd:92:ee:3e:76:52:a9:c3:
5c:37:4e:97:81:f3:f1:96:06:33:dc:31:70:ab:d2:61:2d:68:
46:e8:b3:94:3c:92:95:4a:99:ff:89:44:9c:d1:0a:c4:f7:d3:
9c:33:05:88:d1:ec:6f:7f:7e:69:88:ad:db:69:3b:3b:bf:d6:
63:80:0a:7d:57:ca:e5:18:f4:43:46:80:00:e2:82:92:b8:3a:
a9:7b:bf:53:c9:99:13:d0:5d:a9:69:6a:e1:be:13:98:55:bf:
a7:d0:ac:86:11:cc:31:d6:95:a3:2b:da:33:a1:55:20:06:41:
74:92:ad:75:69:89:8c:a1:17:f0:94:32:c0:e9:48:8a:f7:d2:
5b:ff:d4:c7:3a:a0:10:c4:68:e5:cb:a9:00:19:75:2a:26:1c:
23:c7:93:21:6c:6d:f3:33:fd:8c:06:b0:68:56:b5:4b:63:3c:
e0:e7:ca:c8:5e:4f:d5:40:2e:97:cb:01:2a:5a:c4:d3:3b:40:
99:45:0c:47:0f:32:5a:2c:b5:d3:90:66:0e:39:07:84:8a:fc:
c9:4c:65:9b:91:a0:cf:ce:dc:85:39:e9:f0:77:b2:21:e6:6b:
94:5c:35:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:22 2025 by rpki-client