Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ajbxzEBlVx4QI5Rl89D8oLEyuyM.roa
File: ajbxzEBlVx4QI5Rl89D8oLEyuyM.roa (raw, json)
Hash identifier: 9M4/vYUvhKe9P/tcbfcUUpYXF+1b7PoVT1ftUvZf9HU=
Subject key identifier: 6A:36:F1:CC:40:65:57:1E:10:23:94:65:F3:D0:FC:A0:B1:32:BB:23
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018D8F6C995EC778F7B07AD4CD4841C59EBD
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ajbxzEBlVx4QI5Rl89D8oLEyuyM.roa
Signing time: Fri 09 Feb 2024 19:51:15 +0000
ROA not before: Fri 09 Feb 2024 19:51:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 94.241.162.0/23 maxlen: 24
94.241.164.0/23 maxlen: 24
178.253.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 21:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8f:6c:99:5e:c7:78:f7:b0:7a:d4:cd:48:41:c5:9e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Feb 9 19:51:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a36f1cc4065571e10239465f3d0fca0b132bb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:55:be:86:cf:a2:ea:fc:55:8f:9a:65:52:
59:3e:90:0b:bc:cc:40:83:34:4c:c1:33:8f:88:81:
54:34:84:3d:d5:05:ee:72:34:00:b3:8f:fa:26:58:
fe:c4:bd:b2:a9:60:c8:4c:ad:02:7a:95:b4:e2:4e:
05:a6:1e:33:7e:0b:0c:31:19:42:52:2e:6f:e7:73:
18:26:7e:65:16:20:39:4e:89:15:59:e5:f8:ff:dc:
8e:4a:32:02:43:00:ea:c2:dd:50:77:14:f4:79:2c:
6a:6b:de:20:e6:7b:d9:c9:89:f1:9a:16:70:bb:73:
d6:a4:55:bf:6c:74:5a:f3:e2:22:cd:09:bc:62:6a:
9a:c8:c3:18:97:e7:d8:55:ff:15:6c:da:39:6e:d1:
78:8f:c4:01:8b:e1:27:fd:e2:27:7a:99:fb:97:19:
1a:54:c9:22:bb:6f:1c:eb:d2:23:ea:32:24:e9:10:
30:e3:d7:3b:55:d8:96:cd:27:91:ca:54:5d:7d:fc:
98:26:96:5f:a2:9e:51:55:b8:68:8b:9b:7b:27:17:
b6:ff:10:c4:34:84:e0:39:97:9d:7d:e8:87:e2:48:
78:05:32:a2:b3:8c:d2:10:20:65:a1:6c:0c:a0:ba:
1c:cc:62:7f:49:b0:01:0f:c8:e9:bc:46:38:71:34:
08:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:36:F1:CC:40:65:57:1E:10:23:94:65:F3:D0:FC:A0:B1:32:BB:23
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/ajbxzEBlVx4QI5Rl89D8oLEyuyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.162.0-94.241.165.255
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:e1:ea:25:89:16:c1:0b:d7:14:be:ee:18:5e:5e:7f:cb:33:
60:ae:90:97:f3:48:a1:4d:e1:86:e7:ab:72:1a:5d:a4:d3:5c:
74:f3:5c:16:db:57:3a:63:e5:c6:ac:dc:f5:5b:e5:20:ef:32:
0a:b9:03:a4:4a:01:8f:de:9e:db:1f:a8:f6:37:06:91:86:4c:
01:c2:4d:c7:b4:08:42:30:4e:fb:6d:c7:ed:5d:38:48:9a:0a:
2b:90:ab:c3:97:a7:4a:db:55:5b:0f:05:90:5b:4a:d6:43:0b:
6a:ef:32:a5:93:ee:00:4b:18:c7:cd:5d:17:2f:73:08:63:ae:
ba:f7:ca:ec:37:2a:4d:45:a0:fe:e1:da:a7:8a:85:46:43:31:
69:66:96:22:43:3f:b6:c7:db:6f:de:92:a9:c7:b2:fc:66:4b:
18:bf:66:0e:37:7a:eb:39:5e:3e:65:a2:be:80:f7:d9:e9:5a:
cf:8b:11:5b:93:92:ba:b8:e4:16:d2:61:3c:11:f0:1a:20:d0:
68:10:f7:5b:6b:a6:23:53:bb:e5:55:ff:b9:77:c4:32:c8:38:
e4:30:ca:7e:67:25:9e:a7:19:b9:e9:d4:73:79:de:f9:02:8f:
98:c0:c9:bc:7e:31:86:53:42:b0:51:c2:d9:6c:91:4f:c5:83:
7e:02:a0:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:09 2024 by rpki-client on console-fra.rpki-client.org