Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/hDSL0Spodk9lt_66m89rEOFF4j4.roa
File: hDSL0Spodk9lt_66m89rEOFF4j4.roa (raw, json)
Hash identifier: kRkOSNOhX1D2mhAlJIeaEKL2+23zQbS9NnXBD3XNkT0=
Subject key identifier: 84:34:8B:D1:2A:68:76:4F:65:B7:FE:BA:9B:CF:6B:10:E1:45:E2:3E
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 0191DD5965116D19BA97C3E762D400F00530
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/hDSL0Spodk9lt_66m89rEOFF4j4.roa
Signing time: Tue 10 Sep 2024 19:11:48 +0000
ROA not before: Tue 10 Sep 2024 19:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216300
IP address blocks: 94.159.112.0/24 maxlen: 24
94.159.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 07:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dd:59:65:11:6d:19:ba:97:c3:e7:62:d4:00:f0:05:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Sep 10 19:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84348bd12a68764f65b7feba9bcf6b10e145e23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:2d:b6:ea:44:e9:3c:81:8d:03:4f:e7:76:
82:bd:49:cd:55:00:1b:11:75:7e:4b:84:4d:d4:43:
12:60:37:58:e9:7a:e5:5e:01:21:ac:8b:e9:2b:ca:
86:e0:2a:39:10:30:10:f3:1b:9e:d9:3a:a7:62:f6:
c3:2c:46:87:80:d3:9c:39:56:04:f4:3c:69:c9:84:
51:fe:b4:6a:08:33:6b:b3:d1:2a:35:29:24:b6:e2:
05:5e:36:01:b6:84:22:ad:72:49:a5:a3:51:e2:6f:
3c:99:bd:76:f0:db:ba:42:53:e2:ed:b3:bb:b3:42:
46:c4:0f:a0:6d:af:47:89:2a:9f:f1:e3:34:d6:16:
40:19:d3:cf:66:66:cc:49:a4:23:99:21:bb:45:23:
8b:76:6b:af:4a:c6:fa:f6:b2:65:15:9f:c6:04:ee:
1c:52:44:f6:25:ed:97:d1:bc:e9:96:e1:d9:d1:53:
e3:20:59:44:9c:ff:75:24:7a:03:83:f4:d8:94:aa:
9b:8f:d6:5b:0f:d0:2b:b2:ea:63:b2:4c:36:04:57:
89:8a:6d:b9:5b:0b:58:ae:77:82:bc:0d:b6:01:aa:
64:dd:a7:7c:38:38:66:08:f7:85:f9:44:f6:17:b9:
a3:e6:9f:a4:8e:25:3f:6b:51:ba:6e:6e:c8:fb:9c:
28:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:34:8B:D1:2A:68:76:4F:65:B7:FE:BA:9B:CF:6B:10:E1:45:E2:3E
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/hDSL0Spodk9lt_66m89rEOFF4j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.159.112.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:a7:be:9d:35:f6:7b:47:7f:ca:5a:70:7e:f9:b5:3b:70:8f:
4a:15:3c:cb:64:97:18:e1:d0:35:38:62:30:1d:85:76:b2:d6:
4d:b7:db:d7:bc:ca:df:a3:5f:c9:1c:a0:03:fa:2c:a8:15:8c:
90:42:d1:85:04:f2:f3:b8:d8:e1:b6:7e:10:d2:ce:6a:12:ab:
15:9b:48:f7:8f:58:9d:10:a8:1c:f8:b0:ef:ea:e8:b4:3a:91:
74:b5:91:36:2b:62:8d:c3:75:15:22:0d:43:52:f2:ac:30:b8:
f1:fb:1d:34:78:1b:81:4a:e2:ee:e5:ed:eb:f4:04:d5:7b:f6:
10:34:2a:3b:1a:b5:de:96:de:44:34:4c:b5:38:fb:05:af:f5:
db:60:ab:aa:9f:cc:19:5b:b8:29:93:4d:76:0b:1d:34:9d:a4:
48:da:1c:56:2d:4b:47:fd:55:4c:f4:a0:61:eb:d5:6a:01:61:
2a:9c:9f:6f:cb:e7:cf:71:9f:3f:80:98:94:b5:d4:dc:34:34:
43:04:e3:69:f3:42:f3:f7:ec:fd:00:7e:6e:ec:7b:b3:88:38:
4a:a0:f5:92:d1:83:1e:cb:f7:3d:b3:95:fc:72:1c:a3:84:4b:
e1:e2:82:4b:4f:fa:87:02:03:34:a6:b1:e8:90:0c:08:67:99:
31:83:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 10:55:44 2024 by rpki-client on console-ams.rpki-client.org