Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/ADSmE5uObsqILSOXbO0Zx2eFsSo.roa
File: ADSmE5uObsqILSOXbO0Zx2eFsSo.roa (raw, json)
Hash identifier: aJlEeMQs7WyCv70D/pRu4NDBG2GBF7Mh1EMT3thU0dw=
Subject key identifier: 00:34:A6:13:9B:8E:6E:CA:88:2D:23:97:6C:ED:19:C7:67:85:B1:2A
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 018CC3488DFE6A4541A3B737A69ECD4E5335
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/ADSmE5uObsqILSOXbO0Zx2eFsSo.roa
Signing time: Mon 01 Jan 2024 04:29:21 +0000
ROA not before: Mon 01 Jan 2024 04:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41012
IP address blocks: 94.116.0.0/16 maxlen: 16
94.119.128.0/18 maxlen: 18
194.42.124.0/23 maxlen: 23
91.103.32.0/23 maxlen: 23
94.117.0.0/16 maxlen: 16
94.119.255.0/24 maxlen: 24
94.119.64.0/18 maxlen: 18
94.118.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Fri 26 Jan 2024 12:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:8d:fe:6a:45:41:a3:b7:37:a6:9e:cd:4e:53:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Jan 1 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0034a6139b8e6eca882d23976ced19c76785b12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bb:5e:71:96:c8:ec:c0:89:ed:c3:0d:70:21:
82:04:01:49:cd:b1:33:4e:ef:e7:a6:a8:cb:e7:48:
5e:88:39:f9:df:c0:86:ff:8f:79:44:04:f5:53:08:
67:27:9c:4c:47:ea:49:97:7c:27:54:ed:d2:3a:c7:
a6:f4:88:13:89:0b:f2:8a:7d:e4:2b:d7:70:70:c3:
35:35:62:49:1f:98:2f:77:a8:c6:f0:44:cb:57:99:
e8:cc:54:c7:6d:34:c8:39:3d:74:08:cc:2e:d0:f0:
42:5e:1d:43:2d:82:02:2b:98:0f:7d:98:79:96:ea:
52:e9:1d:ba:0b:da:78:65:b8:5c:38:c3:85:68:e1:
ab:46:51:e5:f4:f3:14:f0:a4:40:0e:06:a4:fe:32:
10:8e:42:f8:f8:db:c3:75:95:e5:6d:39:34:e6:7b:
cf:32:af:48:c5:13:d7:b1:9b:c2:f7:24:e4:01:8e:
d2:79:1b:10:cf:04:9f:2e:ed:7d:8a:a3:85:0b:bf:
71:e2:bb:d8:09:46:23:ca:1b:77:18:f8:99:80:e5:
24:e0:9d:56:79:cf:c9:13:55:97:d0:dc:0d:3b:73:
ce:95:88:1f:03:75:20:65:60:78:9e:6e:c8:8f:aa:
a9:5f:29:6b:34:9a:94:25:cd:d4:c4:4c:aa:36:de:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:34:A6:13:9B:8E:6E:CA:88:2D:23:97:6C:ED:19:C7:67:85:B1:2A
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/ADSmE5uObsqILSOXbO0Zx2eFsSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.32.0/23
94.116.0.0-94.118.255.255
94.119.64.0-94.119.191.255
94.119.255.0/24
194.42.124.0/23
Signature Algorithm: sha256WithRSAEncryption
06:98:9c:b7:a8:58:b6:0a:c5:c2:b4:da:3c:b2:e9:28:67:37:
03:0d:b3:bb:79:25:c5:50:de:09:8b:d7:82:6f:3b:04:0a:d6:
39:70:e8:5a:f6:ae:75:ae:23:72:d9:f3:cc:d5:4a:12:c8:81:
1f:77:41:b5:e5:db:7a:1e:24:43:c5:0f:18:4b:02:cd:f8:3c:
69:17:cd:fe:58:ae:9f:18:9a:c2:d1:33:dc:ff:26:16:f7:9f:
48:c7:63:51:5f:f9:9f:c1:e3:1a:04:71:d5:d3:59:c3:39:7e:
23:1f:4a:1c:81:1a:26:42:d0:06:8d:ca:d3:77:a7:ef:2c:a0:
ce:f9:4b:22:de:42:5f:50:3b:89:e1:a9:23:2c:8a:7b:55:0d:
1c:9a:01:e7:de:6a:48:8c:0c:b2:21:17:e0:f3:49:aa:5e:1e:
55:ba:d7:72:39:09:b1:f0:10:66:c6:51:28:b4:1c:81:48:21:
0f:f1:d4:84:c3:d6:91:15:26:0a:7c:76:73:a4:34:98:be:8f:
54:9e:50:8f:a2:28:d8:c2:d3:74:9d:3a:cb:27:1d:18:31:b0:
ec:2f:c6:8e:ba:0e:11:0d:b7:c7:ba:7c:60:03:f0:a6:35:fe:
39:3b:41:bf:14:51:45:6b:5d:53:96:42:bb:ff:f9:e8:16:1a:
bc:0f:eb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 15:52:04 2024 by rpki-client on console-ams.rpki-client.org