Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/L9TAcfL3l3JvV0bNqkSchuXbTlA.roa
File: L9TAcfL3l3JvV0bNqkSchuXbTlA.roa (raw, json)
Hash identifier: tYoHUh1xPoLlcx/UlxxWQlnbjkZQDDX0ZEY3sPl1vrw=
Subject key identifier: 2F:D4:C0:71:F2:F7:97:72:6F:57:46:CD:AA:44:9C:86:E5:DB:4E:50
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 01924C00BAD808BB98B509CA05704A23FF9E
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/L9TAcfL3l3JvV0bNqkSchuXbTlA.roa
Signing time: Wed 02 Oct 2024 06:52:49 +0000
ROA not before: Wed 02 Oct 2024 06:52:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29076
IP address blocks: 94.159.71.0/24 maxlen: 24
94.159.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 13:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4c:00:ba:d8:08:bb:98:b5:09:ca:05:70:4a:23:ff:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Oct 2 06:52:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fd4c071f2f797726f5746cdaa449c86e5db4e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:5b:3c:48:1e:4e:a7:4d:6f:1b:53:a0:0f:
19:0e:81:9d:1c:04:33:12:f9:b1:d4:f5:40:86:68:
6e:2a:2d:d0:22:8d:5f:d8:d4:23:70:0f:a7:35:32:
d6:a2:bd:78:76:0f:e7:fd:9c:66:f4:9d:ae:b1:01:
5e:de:d7:6a:2a:2b:21:78:ec:4c:a9:3b:11:f1:e0:
5b:20:c0:cc:9d:62:7a:f7:4b:10:bf:62:88:79:e9:
92:29:54:dc:6b:fb:95:16:e6:b6:1a:9e:2b:d9:2a:
9b:a3:bc:ac:e1:39:79:28:5b:8c:dc:9a:5b:33:39:
ef:9d:ea:84:ac:9e:96:e1:55:fe:6e:dd:24:7d:65:
f3:c2:fc:75:13:b9:5b:30:92:4e:8f:aa:7e:3d:e2:
a0:b9:e7:b4:d7:d5:7b:7f:44:b1:0f:41:54:8f:52:
d1:eb:2d:0e:c7:1b:cf:55:36:0f:b2:1d:be:9d:dd:
4d:dd:e0:bc:30:f7:ad:13:6e:dd:6e:7d:ee:52:92:
13:07:ad:ac:1e:fb:15:b6:35:a1:6f:4b:f8:d7:8c:
29:cd:c4:50:18:f0:53:f9:17:ef:67:38:99:03:08:
4a:9e:9f:cb:71:47:90:2b:1c:da:9c:dc:bf:9b:82:
f6:36:20:52:35:78:2d:e3:ea:6d:1e:57:bd:00:fd:
d6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D4:C0:71:F2:F7:97:72:6F:57:46:CD:AA:44:9C:86:E5:DB:4E:50
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/L9TAcfL3l3JvV0bNqkSchuXbTlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.159.71.0/24
94.159.84.0/24
Signature Algorithm: sha256WithRSAEncryption
52:93:72:1b:0d:1e:3c:6d:3d:c5:e7:86:99:f2:78:89:4c:9e:
54:57:d6:a6:54:e8:a1:ec:1f:54:4c:a8:5b:6d:1d:a2:7b:13:
dc:db:bc:f0:c3:a9:e9:8c:fa:9b:aa:29:46:48:f9:97:fd:b9:
15:e9:c4:f0:c9:dd:12:1f:58:6d:f7:7f:c6:97:b8:c0:19:fe:
84:ff:41:d3:25:b3:7b:02:be:e6:8d:a6:ce:5c:fa:59:b2:11:
5f:b4:6d:e6:b5:c8:18:3d:1c:51:f4:1d:04:b5:4a:1f:ea:d1:
ae:5b:84:c2:76:0a:03:22:38:bc:5c:d5:c7:62:b6:e0:6a:df:
21:c6:5c:33:94:62:24:95:d9:0c:17:1f:ea:e5:dc:0b:6f:27:
2b:9d:06:85:dc:86:41:b2:92:bb:48:a8:9f:a0:1c:7d:1a:49:
d4:0d:ab:5a:51:5a:75:11:67:2b:d5:69:4f:22:1f:13:d1:a6:
8b:92:59:f2:e5:c1:80:5b:86:21:89:e7:ff:d4:2d:d0:44:10:
33:bb:78:95:d3:52:59:37:b1:cb:59:72:94:4a:71:37:b1:ba:
a5:a1:b9:84:c2:ac:90:8e:d1:67:d3:34:ec:b7:1b:74:51:89:
60:ed:13:88:93:90:b1:2a:73:a2:7e:08:ab:77:3e:75:e1:82:
b1:5e:3c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 16:08:17 2024 by rpki-client on console-fra.rpki-client.org