Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/gE9N1GCLOEcamLhhCcQReXQ0pC8.roa
File: gE9N1GCLOEcamLhhCcQReXQ0pC8.roa (raw, json)
Hash identifier: 9u3daXMW1ghGYnZ1ZdQ10LnOs9hVSRZC0B53ihoyvGc=
Subject key identifier: 80:4F:4D:D4:60:8B:38:47:1A:98:B8:61:09:C4:11:79:74:34:A4:2F
Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial: 018BB9EECDBF45CD28DFB8ED31F60E47FA64
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/gE9N1GCLOEcamLhhCcQReXQ0pC8.roa
Signing time: Fri 10 Nov 2023 15:51:57 +0000
ROA not before: Fri 10 Nov 2023 15:51:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48278
IP address blocks: 94.244.0.0/18 maxlen: 22
185.191.148.0/22 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:ee:cd:bf:45:cd:28:df:b8:ed:31:f6:0e:47:fa:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Validity
Not Before: Nov 10 15:51:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=804f4dd4608b38471a98b86109c411797434a42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2f:44:98:d7:58:6b:51:89:e3:60:6e:50:7a:
dd:57:7f:6c:31:7f:23:f4:39:17:66:cd:4f:99:a5:
38:ef:9c:24:f5:ec:e9:cc:e1:77:a8:f9:2d:82:11:
1f:a9:17:93:cf:e8:ba:e5:90:bb:0b:3f:87:a6:4b:
e8:76:d5:1c:74:17:2a:0d:a5:82:45:af:e0:8d:31:
51:4b:28:4d:9a:11:03:63:1f:38:da:f5:cf:85:e9:
1f:31:0f:29:95:4b:b1:6b:0e:aa:49:9b:5b:55:8c:
4f:63:93:e2:43:bf:b1:fa:74:5e:1f:e0:7d:2e:48:
3d:3f:f1:0f:cc:fb:10:5a:0c:45:1a:4d:49:a5:3a:
4a:93:ab:dc:1a:c8:4a:15:c6:4b:4a:bb:4c:14:8d:
07:24:af:99:ec:69:9f:61:f2:30:b0:21:3f:a0:bc:
d4:9f:4f:fe:90:61:b3:2f:ab:0e:23:31:8b:89:d9:
72:37:57:91:29:24:50:05:7a:8c:33:d3:92:7a:7c:
06:06:a8:59:82:7c:fb:28:a2:37:1c:ab:ea:2e:61:
9d:56:52:7b:0b:26:8d:78:0f:32:e3:f9:49:91:92:
89:26:e1:ed:ae:81:03:41:ac:a6:ea:3d:c8:08:75:
fa:56:d9:e4:51:51:11:d7:b2:43:65:a9:d4:80:e4:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4F:4D:D4:60:8B:38:47:1A:98:B8:61:09:C4:11:79:74:34:A4:2F
X509v3 Authority Key Identifier:
keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/gE9N1GCLOEcamLhhCcQReXQ0pC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.244.0.0/18
185.191.148.0/22
Signature Algorithm: sha256WithRSAEncryption
be:c6:6b:b2:20:35:67:fd:ab:c7:25:e9:97:3e:21:72:65:40:
7c:bc:e6:f9:bd:73:b7:b5:51:1b:21:37:3f:05:fa:37:69:13:
45:a3:40:f7:53:e1:9b:64:34:57:80:8b:4c:b4:fc:9e:e8:67:
70:c1:4d:d8:f4:74:84:eb:ab:48:0e:25:bf:c5:03:04:bf:7d:
fd:0e:8f:13:20:2b:71:f3:e0:64:42:57:c5:ce:91:ab:13:6f:
e2:ac:0a:7e:2e:1c:9d:cb:be:6f:7d:de:5d:ca:16:94:af:3a:
81:40:53:fa:f0:53:03:6c:f3:ba:e0:c4:44:e7:02:f5:d5:78:
4d:fd:df:d1:f6:4b:b7:86:96:28:37:34:c9:d1:b3:a9:9f:78:
79:1a:d9:09:e4:35:b1:51:ad:19:9e:03:95:7f:af:9d:a1:2a:
0c:fa:6f:51:eb:87:85:8b:7e:7c:52:85:bc:65:37:43:1e:cf:
80:70:cc:86:bf:bd:52:1d:1b:08:2d:fb:7b:0c:c5:f7:11:08:
80:f7:a6:cd:11:83:50:cf:dd:47:e1:24:e6:4a:0e:95:0b:4d:
65:22:85:ac:fb:98:ff:f0:8c:2f:2d:cf:56:f6:9b:7e:c9:6c:
bb:36:00:3e:4b:e9:31:b2:1a:0e:05:e3:cb:1b:c7:c7:64:5a:
1f:15:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:25 2024 by rpki-client on console-ams.rpki-client.org