Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/71bI5bpZiy-G6H5qAXVYvVEiQNw.roa
File: 71bI5bpZiy-G6H5qAXVYvVEiQNw.roa (raw, json)
Hash identifier: coSc2mEqtIvdj98B/M8EXHJ7HsrG2G9fzFo7nj/ds3s=
Subject key identifier: EF:56:C8:E5:BA:59:8B:2F:86:E8:7E:6A:01:75:58:BD:51:22:40:DC
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 01907A87CDD8C86BBC5E473FEF47CC5000C8
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/71bI5bpZiy-G6H5qAXVYvVEiQNw.roa
Signing time: Wed 03 Jul 2024 21:37:18 +0000
ROA not before: Wed 03 Jul 2024 21:37:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400909
IP address blocks: 94.241.162.0/23 maxlen: 23
178.253.26.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 04:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7a:87:cd:d8:c8:6b:bc:5e:47:3f:ef:47:cc:50:00:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jul 3 21:37:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef56c8e5ba598b2f86e87e6a017558bd512240dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7a:4d:97:8e:06:86:31:03:02:d9:30:2c:30:
3b:7b:da:04:d5:06:b7:11:51:74:03:d6:f1:1f:d4:
ec:03:22:3d:63:e6:91:12:09:01:cf:1d:28:6b:c7:
a5:be:6e:3b:9f:87:91:84:e1:12:6e:4f:de:73:16:
3c:ab:c6:17:a2:51:ad:3c:cb:93:bb:ca:34:6b:ca:
ca:2f:84:30:7e:28:91:e5:ec:51:b0:02:86:79:5b:
fd:a7:44:fb:9a:1d:e6:00:1a:89:64:03:50:ba:85:
9c:e5:ef:c4:ed:0f:d6:7c:61:53:8c:48:98:30:91:
03:67:cd:35:c6:53:0f:98:13:97:ff:3d:17:23:76:
b5:fa:80:e3:3b:c9:af:f8:af:1f:0b:0f:a2:f4:66:
a9:e4:d7:a2:9f:a2:38:02:c7:91:b3:02:94:37:b3:
76:07:83:ec:0b:9b:a7:cc:20:8f:8c:fd:7e:b3:5a:
50:e8:8e:11:ab:72:3b:97:4a:ea:26:d8:61:6c:84:
97:11:06:8a:f6:2f:6c:39:f5:b3:60:c2:46:c1:67:
23:77:8d:9e:10:bf:2a:de:61:84:a0:0f:40:23:5c:
49:28:c5:10:e1:f2:03:91:b1:e0:6c:74:7c:12:46:
50:b5:31:00:3f:bf:94:e4:6e:01:34:fc:ea:d7:f0:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:56:C8:E5:BA:59:8B:2F:86:E8:7E:6A:01:75:58:BD:51:22:40:DC
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/71bI5bpZiy-G6H5qAXVYvVEiQNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.162.0/23
178.253.26.0/23
Signature Algorithm: sha256WithRSAEncryption
04:58:9a:90:97:2e:28:83:7e:a9:57:83:a9:1a:bc:04:14:52:
55:e2:6e:8f:b4:62:85:f8:6b:b7:8b:c5:cd:89:44:ab:2e:a0:
db:14:cb:28:3a:71:eb:97:8c:7d:15:77:e0:ae:15:81:8c:77:
aa:00:07:19:98:4a:00:e9:15:88:35:92:bc:43:c1:ea:ae:c6:
c4:e6:33:b1:81:3f:f9:4e:e7:b5:03:2b:7e:c8:11:a6:6f:43:
0b:5b:95:89:36:b8:19:52:bd:94:c2:3e:fe:5c:57:10:39:71:
91:66:ab:d4:ea:78:6f:68:ca:d4:0e:1b:6b:f4:b1:75:64:66:
c9:c5:67:17:5d:5c:40:ee:a5:5e:ac:ee:00:3e:d0:9d:8e:78:
05:92:50:3c:bf:53:84:3f:f5:96:dc:0b:15:a1:32:bc:c5:5e:
d0:c2:10:df:c3:99:20:77:96:59:a9:5d:91:38:77:d9:d7:22:
ae:d2:65:50:e8:1c:be:c2:6b:50:48:18:98:5d:9a:11:65:b6:
63:cc:69:68:a1:6d:ee:5a:8d:af:1f:8e:ff:16:d6:e0:97:35:
71:64:fe:b9:52:29:c9:57:ec:58:3d:58:07:4a:f4:27:f2:c3:
2b:d2:60:1a:68:7d:09:8a:a0:88:64:0b:d1:0f:4e:4f:a7:af:
89:1d:16:fb
-----BEGIN CERTIFICATE-----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Generated at Thu Jul 4 06:10:47 2024 by rpki-client on console-ams.rpki-client.org