Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/1EEM7FLNA5XL-N3ueQuI1_O6EeQ.roa
File: 1EEM7FLNA5XL-N3ueQuI1_O6EeQ.roa (raw, json)
Hash identifier: p+Rr0WP14TGz4tM9hmV6EEU5varWC//4WfQk1Zaog3k=
Subject key identifier: D4:41:0C:EC:52:CD:03:95:CB:F8:DD:EE:79:0B:88:D7:F3:BA:11:E4
Certificate issuer: /CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Certificate serial: 018CC348996D5FA8F23C43C0FC18A258A54C
Authority key identifier: 4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/1EEM7FLNA5XL-N3ueQuI1_O6EeQ.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12703
IP address blocks: 185.94.184.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 09 Jan 2024 10:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:99:6d:5f:a8:f2:3c:43:c0:fc:18:a2:58:a5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cc0b7d345cfae5347d3ce98b4241b900e4a9ef3
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4410cec52cd0395cbf8ddee790b88d7f3ba11e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:81:ae:3e:8e:fe:8d:76:50:81:f2:fa:35:
a9:ee:3f:2e:89:0f:c9:4c:b7:5c:f1:88:27:a1:ae:
66:72:b2:9c:83:71:0c:08:c2:66:f2:1b:90:1f:3d:
a9:46:ee:72:f9:10:23:ad:48:bd:7d:d0:70:f7:01:
00:87:a4:07:1c:ca:27:7e:12:87:ee:89:65:bd:67:
d4:c9:ab:59:58:75:20:94:b8:6a:2c:e9:63:12:92:
08:0b:f8:3c:1d:09:09:4d:5d:07:13:0e:49:d4:97:
a9:e6:17:d8:55:04:af:8d:aa:df:11:20:ed:a3:2b:
79:59:e8:21:3c:e6:83:52:4a:31:cd:2e:63:37:74:
a6:11:da:fd:f7:e4:f4:b5:91:b5:44:b7:a9:22:a5:
ff:9e:8f:54:b4:8d:6b:d1:b7:f2:e1:16:bd:4f:f6:
af:bc:2a:b1:90:47:4c:40:60:6a:9d:f0:2e:f1:a2:
fb:8b:c1:56:92:70:03:de:9f:08:78:0a:a6:5b:ce:
88:07:38:b8:50:80:73:57:a0:0e:1f:44:98:36:98:
78:31:02:fb:e1:ea:0e:74:e0:5f:a7:b2:b0:f9:72:
3f:0c:1b:b2:05:d0:94:42:c7:28:59:55:a3:1a:e8:
5e:7f:0a:51:c9:9d:df:70:80:5f:4e:b5:c4:99:a2:
54:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:41:0C:EC:52:CD:03:95:CB:F8:DD:EE:79:0B:88:D7:F3:BA:11:E4
X509v3 Authority Key Identifier:
keyid:4C:C0:B7:D3:45:CF:AE:53:47:D3:CE:98:B4:24:1B:90:0E:4A:9E:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMC300XPrlNH086YtCQbkA5KnvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/1EEM7FLNA5XL-N3ueQuI1_O6EeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/16d370-f632-4ca1-8b96-1be325f7a2e3/1/TMC300XPrlNH086YtCQbkA5KnvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.184.0/22
Signature Algorithm: sha256WithRSAEncryption
88:e2:2d:23:5b:aa:28:e4:41:e9:46:b7:50:2d:25:5e:cc:3c:
42:77:44:64:5c:b2:cc:28:62:57:5e:d5:3a:01:87:ad:0d:94:
33:e2:cb:47:3f:4b:37:10:af:a3:a9:4e:bd:e6:e3:bd:5e:fb:
56:ff:23:9d:3e:79:2b:fd:3c:2c:75:18:a6:c7:81:f6:2f:7f:
ab:6d:65:54:84:aa:a1:f1:46:11:f1:80:1c:e8:ca:98:0b:2a:
10:b6:fd:d8:55:d4:13:ba:21:18:25:a6:b4:b9:1f:68:ec:87:
f9:15:12:fa:16:a1:8d:f5:c8:7f:31:4b:f2:6b:5a:35:17:b9:
e2:fe:a3:2a:40:09:8e:84:38:54:49:c9:21:aa:83:26:78:dd:
90:26:c1:ef:92:df:88:c3:56:ca:47:f0:d2:45:7f:d2:7d:c3:
bd:e3:7c:53:5f:e9:01:36:d0:02:f2:c6:29:df:b9:10:98:0b:
5b:a4:19:90:ca:92:2c:c1:c3:7b:09:13:dc:c9:06:0b:51:2f:
af:39:f6:84:61:e0:4c:ae:9a:09:88:e8:64:46:ef:44:f4:e0:
98:5d:e0:8f:77:dd:03:39:52:8a:82:9f:23:15:11:22:cb:40:
07:f5:3f:35:09:1e:63:b0:b7:b5:13:d1:07:db:c4:36:d7:08:
e5:4d:26:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:50 2024 by rpki-client on console-fra.rpki-client.org