Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1DMpI_m3-zBvYGXnDln7h3294P0.roa
File: 1DMpI_m3-zBvYGXnDln7h3294P0.roa (raw, json)
Hash identifier: b77q7AubrLsHBpf9qtjkJkxZSmb+BXgmdTlbyUT3BvM=
Subject key identifier: D4:33:29:23:F9:B7:FB:30:6F:60:65:E7:0E:59:FB:87:7D:BD:E0:FD
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0189BD21D3ABF6DFE66DA76F1587BBD677E0
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1DMpI_m3-zBvYGXnDln7h3294P0.roa
Signing time: Thu 03 Aug 2023 20:40:57 +0000
ROA not before: Thu 03 Aug 2023 20:40:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 94.241.168.0/24 maxlen: 24
94.241.169.0/24 maxlen: 24
94.241.170.0/24 maxlen: 24
94.241.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Aug 2023 20:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bd:21:d3:ab:f6:df:e6:6d:a7:6f:15:87:bb:d6:77:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Aug 3 20:40:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4332923f9b7fb306f6065e70e59fb877dbde0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:99:91:8a:55:a2:10:4e:6d:b2:20:4c:80:1d:
d8:c2:f4:19:dc:07:3a:cc:80:30:92:54:16:0a:5b:
66:08:a3:f1:c0:99:aa:fd:ce:88:17:ac:3e:ab:04:
ab:c8:0a:16:34:a2:58:65:79:3b:7d:d2:16:9d:bd:
2d:37:b6:36:3d:65:5e:41:ce:dd:91:c5:30:73:af:
79:aa:23:7b:79:f6:88:bc:5d:e9:04:ae:80:60:85:
c2:59:50:7a:5f:ed:64:54:1a:e7:c4:7c:7a:9b:a5:
9b:28:45:6b:db:d9:6a:fa:41:63:e7:7d:28:bf:f1:
c4:b2:92:c3:32:5e:b3:37:80:73:60:fd:b4:f9:69:
75:08:b5:4a:cd:36:67:6e:9e:05:77:6a:22:a7:29:
8b:12:22:9a:39:42:c3:00:6f:6e:51:b3:58:e3:7a:
ff:03:65:92:2a:71:01:68:cc:46:49:14:4c:14:7c:
fc:7c:92:b2:6d:1c:90:b8:40:0f:1a:30:4d:ae:5b:
78:70:8d:5f:9e:ea:13:5e:fc:eb:6f:06:8b:a9:1c:
f5:1e:de:ce:55:90:88:19:ed:72:ff:42:ab:fe:2b:
74:cc:f5:6a:ad:fc:99:84:7e:55:e7:fa:61:5c:9c:
e0:7f:f3:5c:68:de:83:01:aa:e0:2c:b7:d7:85:52:
c0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:33:29:23:F9:B7:FB:30:6F:60:65:E7:0E:59:FB:87:7D:BD:E0:FD
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1DMpI_m3-zBvYGXnDln7h3294P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.168.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:3e:70:51:41:78:db:48:7c:41:b9:6e:a0:4d:d8:d8:85:f5:
3d:4d:35:a1:94:b3:0e:84:bc:fd:18:32:82:8a:88:ab:d3:3b:
24:86:d3:af:fb:78:e4:26:e5:ec:87:f2:b4:bc:7b:ae:fb:11:
54:ba:58:57:97:b8:4f:14:82:01:96:aa:5c:7a:98:f1:84:c0:
0b:19:ae:8c:f3:32:90:95:18:18:0c:9a:11:e0:bb:63:47:f6:
18:4c:f3:bd:7d:25:e4:18:94:ac:8f:64:59:c6:fd:c2:dd:b0:
e7:42:45:80:4d:5c:ac:b6:39:d8:ae:d4:b8:ec:80:17:fa:77:
bd:7f:4e:d7:c2:d3:54:d2:2d:c5:9e:f7:97:5f:99:a8:d4:8d:
97:37:5f:8a:ed:2f:d5:89:8d:bd:54:cc:72:e9:c2:5e:6d:dc:
73:50:99:7d:e6:67:a7:4a:37:6d:c1:e0:16:c1:9e:cd:97:39:
cc:ce:ed:ea:e1:45:5f:fe:b0:c5:4b:dc:08:96:2c:55:41:e0:
88:12:b1:7e:ce:15:5d:ee:5f:ee:9a:9b:e6:81:ac:20:27:c0:
4d:5f:50:bd:6c:d0:6e:f0:e8:72:9b:0e:4a:94:85:54:bd:1f:
78:31:df:e0:bd:6a:48:9f:37:08:02:0c:0e:40:60:5b:6b:46:
1b:71:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org