Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/m8yAETkshiv49h_-Ga97A685BmQ.roa
File: m8yAETkshiv49h_-Ga97A685BmQ.roa (raw, json)
Hash identifier: IF+jTmpe+y5oR4xs19jjw+yZ93R5EHlaZaD0tR8cM3c=
Subject key identifier: 9B:CC:80:11:39:2C:86:2B:F8:F6:1F:FE:19:AF:7B:03:AF:39:06:64
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018D896071E01F52029B00D7F5E4B943A535
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/m8yAETkshiv49h_-Ga97A685BmQ.roa
Signing time: Thu 08 Feb 2024 15:40:15 +0000
ROA not before: Thu 08 Feb 2024 15:40:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 94.241.164.0/23 maxlen: 24
178.253.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 19:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:89:60:71:e0:1f:52:02:9b:00:d7:f5:e4:b9:43:a5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Feb 8 15:40:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bcc8011392c862bf8f61ffe19af7b03af390664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:30:02:b5:c1:73:8c:f4:3a:b8:d0:62:6e:88:
fb:77:94:42:45:b7:f2:9a:10:ff:b9:34:6f:a5:67:
63:d6:35:5e:2e:a8:8e:20:9b:97:bb:8e:3e:d8:da:
7f:33:58:4e:2b:09:86:23:44:12:a4:e2:ac:42:dc:
5e:aa:7f:eb:95:37:c8:b5:9d:41:b4:68:94:c6:fe:
71:1f:aa:c6:13:6b:06:30:8c:97:e4:c8:36:49:60:
bc:a2:b7:d0:70:92:ae:94:17:45:0f:16:c8:87:6d:
42:08:ff:fc:8a:4e:6c:cf:d8:ec:a9:ec:59:1a:87:
bb:8f:e2:bf:ed:ef:17:2f:83:50:e2:db:d2:7b:d6:
77:5d:af:d7:3c:b3:39:49:55:8d:54:24:23:db:7a:
6b:e9:92:4a:57:b6:7d:d0:bd:8d:1e:05:65:35:65:
2c:ee:6d:9b:8a:e9:af:06:cc:a6:58:a0:23:f3:57:
40:d9:eb:93:38:2c:90:92:83:f8:68:50:f4:ee:d6:
e1:c3:aa:0c:a2:20:c6:f5:0b:18:c3:c4:36:45:7e:
19:4d:de:d5:5f:f4:25:b9:77:cb:08:2e:df:9a:a6:
c9:d1:42:1e:58:ed:0e:6e:ff:bd:38:4a:bd:ab:42:
e7:06:a3:14:6d:2a:2b:e3:51:4f:b7:08:39:0f:cc:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CC:80:11:39:2C:86:2B:F8:F6:1F:FE:19:AF:7B:03:AF:39:06:64
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/m8yAETkshiv49h_-Ga97A685BmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.164.0/23
178.253.44.0/23
Signature Algorithm: sha256WithRSAEncryption
56:d2:22:9a:66:a0:77:9e:5a:22:a4:0b:54:f6:42:45:b8:eb:
19:66:4b:cb:05:e9:52:a9:24:6e:03:45:4b:16:64:3d:c2:95:
1a:94:27:bf:1c:63:67:3b:95:c8:4c:0e:c4:e8:e4:2d:2a:0b:
c4:8f:18:45:29:24:71:bc:33:69:54:5e:83:6a:5c:72:90:57:
e3:8e:79:72:69:0d:2a:28:be:5e:99:64:d2:16:15:12:05:39:
3c:fd:85:9d:a2:53:b5:be:4f:04:fa:94:6f:c0:c8:42:13:48:
7a:ec:48:a3:a8:d9:c9:52:f2:b8:e1:5e:ca:10:75:00:ec:68:
00:0b:19:25:b5:ca:61:fb:45:0b:2a:75:c6:62:df:63:36:eb:
aa:2a:e5:3e:a2:a4:3f:88:80:32:87:d1:7f:5f:ec:6c:f8:43:
fd:4a:13:8e:af:83:17:7d:5d:dc:89:c9:1e:ee:0f:4c:20:4b:
10:e0:2d:13:03:9b:7a:a2:bf:34:3e:bb:05:0d:93:57:c7:7f:
dd:72:bf:3e:9b:8b:53:4c:41:68:b3:aa:ae:99:78:78:ba:22:
e6:9c:eb:9d:1c:bc:20:db:25:07:45:c4:70:d0:2d:60:2a:d3:
83:1c:2e:42:d4:03:6d:70:f4:5e:06:3e:4b:48:63:60:76:39:
1a:c2:62:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 00:00:38 2024 by rpki-client on console-fra.rpki-client.org