Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/growjuS4LOhZhJ0gZ9zSTx_7k08.roa
File: growjuS4LOhZhJ0gZ9zSTx_7k08.roa (raw, json)
Hash identifier: 9sqGunJ8JKBatRNda/k4UhPfiilruSPhgC6rIF3xDbE=
Subject key identifier: 82:BA:30:8E:E4:B8:2C:E8:59:84:9D:20:67:DC:D2:4F:1F:FB:93:4F
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 018BAE8AD9E9209BAFF88E924376AA4D725A
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/growjuS4LOhZhJ0gZ9zSTx_7k08.roa
Signing time: Wed 08 Nov 2023 10:46:57 +0000
ROA not before: Wed 08 Nov 2023 10:46:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211178
IP address blocks: 94.176.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:8a:d9:e9:20:9b:af:f8:8e:92:43:76:aa:4d:72:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Nov 8 10:46:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82ba308ee4b82ce859849d2067dcd24f1ffb934f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:e8:2f:8e:fa:09:1b:c4:c0:0a:25:74:fb:
8b:ac:71:bb:11:09:53:32:91:5b:83:3c:de:ac:7d:
ed:69:45:ce:fe:19:04:d9:59:b0:2e:6d:f8:84:ed:
e3:7a:5e:c6:b6:73:18:40:84:24:65:19:ee:83:9d:
67:1b:98:ac:20:0b:45:a2:7b:cd:7d:0d:e8:51:bd:
27:5b:92:91:cb:4a:48:e6:e0:e7:c8:ba:be:e3:56:
27:c5:71:6a:4e:b2:57:fa:bc:42:b7:4f:7f:5a:a0:
aa:21:52:8c:0e:58:fe:50:6f:f2:7e:b8:4b:76:94:
96:83:3c:fa:8a:41:36:27:00:ee:c8:32:57:95:99:
1f:f4:39:44:9d:90:ff:2b:58:dd:de:86:58:62:2a:
59:b0:f7:aa:30:2d:b6:0f:71:bf:93:c2:b3:f2:7b:
d0:67:e1:33:4a:ee:1c:1b:b4:46:dc:78:6c:75:2a:
32:5b:c9:23:01:da:51:bc:94:04:6b:69:e2:48:c8:
98:b3:31:92:c9:63:de:89:4e:54:4e:d3:1f:61:2a:
ea:27:a0:07:ab:a0:6a:87:7a:fc:08:03:85:f9:c0:
d0:3e:e1:af:5e:80:59:96:f9:fd:f0:9e:20:25:23:
1c:68:71:be:d4:d2:0d:b6:a0:88:ed:ab:7e:67:d1:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:BA:30:8E:E4:B8:2C:E8:59:84:9D:20:67:DC:D2:4F:1F:FB:93:4F
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/growjuS4LOhZhJ0gZ9zSTx_7k08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.96.0/24
Signature Algorithm: sha256WithRSAEncryption
75:55:d2:0a:bc:89:3b:b0:73:c5:6e:17:47:17:ad:fa:01:ff:
5b:d3:31:b9:54:fd:50:22:54:21:1c:4e:c5:05:91:02:41:a0:
c3:da:7d:db:80:f3:d4:d2:91:53:14:bc:f8:ba:76:b4:ad:c0:
6c:10:11:09:3a:e7:e0:fb:a9:60:2c:65:1e:7f:05:50:49:03:
2d:b3:1a:3c:b0:59:fc:17:16:57:ee:83:35:0b:91:ae:cf:b4:
d0:aa:90:a7:8c:56:00:2f:d6:29:d5:92:ac:dd:df:82:02:9a:
61:22:0e:0c:9c:f1:03:97:fd:b0:09:ee:88:53:75:8f:86:4d:
15:c9:93:53:fe:77:90:75:aa:61:a4:2b:25:5a:a3:45:55:73:
eb:55:87:be:aa:ad:95:4b:35:6d:13:65:9a:ee:5a:6d:a7:e7:
01:55:a4:7a:d5:95:25:28:df:d8:2a:1a:69:b7:70:53:33:57:
14:6f:3d:cb:1a:da:4e:cc:13:26:15:d3:12:7b:29:1c:68:8d:
cd:5c:3a:9e:b1:47:41:83:ac:92:f2:6b:27:63:59:69:76:0c:
58:b8:4d:5d:98:29:74:6c:e7:d8:c4:2d:cf:71:58:62:da:66:
b4:71:67:34:b9:da:8d:5c:bd:bc:4c:2b:7a:f2:a0:2e:8f:8a:
53:1c:fa:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:41 2024 by rpki-client on console-ams.rpki-client.org