Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/yHP02NIGDK6rQIiJPCylYJNyef4.roa
File: yHP02NIGDK6rQIiJPCylYJNyef4.roa (raw, json)
Hash identifier: 0IlNWB+nrecvnRtHOAYd2tvYEfFo29O91xvcQgY8JO8=
Subject key identifier: C8:73:F4:D8:D2:06:0C:AE:AB:40:88:89:3C:2C:A5:60:93:72:79:FE
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 0192499B52A472624CC2D41BFF470E318B99
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/yHP02NIGDK6rQIiJPCylYJNyef4.roa
Signing time: Tue 01 Oct 2024 19:42:48 +0000
ROA not before: Tue 01 Oct 2024 19:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29076
IP address blocks: 94.159.71.0/24 maxlen: 24
94.159.84.0/24 maxlen: 24
94.159.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 06:52:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:49:9b:52:a4:72:62:4c:c2:d4:1b:ff:47:0e:31:8b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Oct 1 19:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c873f4d8d2060caeab4088893c2ca560937279fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:00:88:1f:84:ee:fa:34:bc:2e:88:b0:10:47:
ff:3e:1a:92:c4:0d:ca:e9:b8:c2:12:d9:93:32:5a:
c4:f2:94:a6:b7:01:b8:81:5e:40:1f:55:2e:85:0e:
08:0c:3a:fe:ba:b4:83:e6:bf:63:81:d7:41:a5:8b:
a4:01:25:3f:1d:5c:ba:ba:9f:7d:d6:7e:f8:b0:eb:
b6:87:10:ee:01:81:37:d0:1a:ac:9e:96:33:18:8f:
c5:25:13:f4:f2:b2:57:97:92:43:2e:9c:2b:e8:3e:
4b:e6:3f:84:cd:5b:44:34:e6:26:19:3c:90:3c:f1:
74:6d:af:5c:f8:f3:c0:f1:35:45:32:1c:49:53:26:
6a:64:71:6f:a1:80:8c:a7:67:6d:4d:b9:fb:7f:21:
a5:13:6b:b2:3b:64:71:99:c4:08:31:a7:6a:33:0e:
27:27:70:3d:95:ef:64:df:73:93:01:24:ce:f8:5f:
a1:d2:4c:8c:7f:d5:77:87:38:f2:28:68:fb:33:df:
d1:a3:1a:37:3f:ec:13:57:ab:73:84:50:df:7f:07:
66:f6:c3:55:38:17:6e:22:a2:e3:db:5b:cc:fb:65:
4a:e3:ec:08:4d:df:cb:34:8f:8a:63:a6:ef:1f:98:
b1:ac:49:9b:76:48:d2:52:84:6f:7b:88:c1:d6:ad:
0e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:73:F4:D8:D2:06:0C:AE:AB:40:88:89:3C:2C:A5:60:93:72:79:FE
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/yHP02NIGDK6rQIiJPCylYJNyef4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.159.71.0/24
94.159.84.0/24
94.159.86.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:45:f7:4d:15:4f:f0:b9:19:c8:09:1b:ad:5c:3b:c4:e9:12:
65:2f:2e:1e:c0:9c:77:43:4f:36:90:68:66:3d:33:f3:b4:e8:
52:0a:a5:20:db:12:18:c1:51:91:c9:13:6c:7e:64:34:25:43:
88:5f:36:2b:ea:ae:5f:74:97:5f:e4:f2:2b:8b:21:12:e2:50:
c4:3e:78:dc:b1:f9:50:c7:71:85:ad:a6:93:fa:cd:2d:18:1e:
d5:c2:91:e4:b5:16:a9:6a:6f:cd:a7:1b:8e:2a:33:12:4b:5d:
ec:fe:a5:d6:22:3b:af:ec:5b:a9:c1:11:b4:7a:8e:4a:73:e5:
34:47:e9:42:d8:36:44:3d:66:00:30:59:1f:f7:53:4a:8e:de:
a5:e9:78:04:c9:8d:d4:79:a5:04:40:a1:a1:95:16:09:8b:84:
f7:53:0b:f8:ee:f9:e7:67:e4:c4:b0:a6:e6:7e:09:b1:c0:68:
51:8a:4a:6f:ba:d1:da:9f:ac:91:f1:e1:96:f3:8f:76:f4:aa:
6c:51:be:33:25:f8:03:80:e7:ec:68:0b:4a:98:de:b1:0d:6b:
5e:ac:05:fe:31:c2:0e:d4:c8:6b:75:2d:61:9d:be:6b:6b:5c:
be:6b:2a:66:c6:a0:8c:13:59:4d:de:cf:5e:18:b0:33:fd:23:
d7:0c:b3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 08:53:01 2024 by rpki-client on console-fra.rpki-client.org