Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/QI0OsTm-Q0-vGk862_IYdQ7cFx4.roa
File: QI0OsTm-Q0-vGk862_IYdQ7cFx4.roa (raw, json)
Hash identifier: pBf+30/rtVUp51cFKZcwf7qNuEBd5+7yX5TEPkSy5rg=
Subject key identifier: 40:8D:0E:B1:39:BE:43:4F:AF:1A:4F:3A:DB:F2:18:75:0E:DC:17:1E
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 018573682D586DC973B9B7149DC114A85D3F
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/QI0OsTm-Q0-vGk862_IYdQ7cFx4.roa
Signing time: Mon 02 Jan 2023 16:54:45 +0000
ROA not before: Mon 02 Jan 2023 16:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8068
IP address blocks: 94.245.84.0/24 maxlen: 24
2a01:111:202d::/48 maxlen: 48
2a01:111:202e::/48 maxlen: 48
2a01:111:2003::/48 maxlen: 48
2a01:111:202c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:2d:58:6d:c9:73:b9:b7:14:9d:c1:14:a8:5d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jan 2 16:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=408d0eb139be434faf1a4f3adbf218750edc171e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:a8:48:bb:6d:ef:c3:1f:af:82:b6:d4:c4:
98:bc:95:1b:f6:f0:73:bb:8b:63:a8:c6:54:60:5c:
d4:ec:0c:7b:2e:f4:16:8d:0c:7d:10:86:9d:6b:a8:
0d:2a:1b:68:ca:e6:be:28:e3:20:a9:e7:8b:72:ab:
20:7e:2e:14:68:7b:fa:9e:ec:80:d2:10:9b:c4:a0:
6f:14:53:e6:ce:02:e4:e9:00:bc:a9:e3:79:70:0c:
6f:56:08:86:f8:bd:4b:66:e8:cb:e7:96:28:48:ec:
23:61:1e:f9:f2:68:57:e4:d8:6f:1d:f2:71:94:99:
59:44:dd:29:44:39:fd:9d:bf:30:41:d4:29:bd:17:
16:6a:45:82:73:65:f3:3d:51:e3:e5:cd:d7:5d:15:
1d:2c:10:9a:23:e9:34:58:5f:87:d8:33:d9:43:fe:
c2:2c:25:d3:b6:4e:20:ea:ed:8d:df:85:3b:bc:97:
fe:7c:ce:8c:ef:d5:29:ec:57:16:46:a9:d3:0c:ae:
a6:5b:42:eb:ab:5e:b1:eb:2b:b6:a7:9c:f9:b1:8e:
68:bb:e9:9e:93:a8:d0:fb:36:c0:d5:75:04:8e:a7:
42:69:53:4d:3e:ca:e9:b3:b6:26:9e:ea:68:b9:61:
0f:95:8b:7d:1e:80:47:e9:c6:c3:fb:4c:5e:ba:a9:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8D:0E:B1:39:BE:43:4F:AF:1A:4F:3A:DB:F2:18:75:0E:DC:17:1E
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/QI0OsTm-Q0-vGk862_IYdQ7cFx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.245.84.0/24
IPv6:
2a01:111:2003::/48
2a01:111:202c::-2a01:111:202e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c9:19:df:c8:5a:b9:ee:2d:65:62:77:0f:16:f6:b0:87:cb:28:
d6:f8:d6:e1:a8:46:85:b0:0f:5d:a5:a0:b7:04:a5:d2:ff:3c:
91:93:1c:e3:9b:36:c1:47:96:95:5a:43:fe:4c:61:69:f6:aa:
eb:34:dc:a7:38:09:70:8e:04:bd:07:ae:4c:7c:99:55:c4:4c:
d1:e1:46:5c:99:86:4e:68:cd:73:eb:3c:30:a4:f1:bc:90:ed:
21:db:28:7b:f5:57:a7:d8:55:80:95:cb:41:b3:28:81:4b:77:
bb:5c:e7:b9:b5:f2:b0:02:0d:2e:dd:7f:ca:8c:40:e8:16:77:
3a:bf:96:58:c1:ed:2b:2e:45:3f:d2:16:7b:2a:fd:a5:ea:8d:
45:17:6b:d6:60:61:0d:9e:53:fb:a2:84:7e:32:ea:c7:e5:be:
e5:63:5e:16:c1:2a:0f:bb:8d:26:d7:3e:92:1c:22:35:87:a1:
33:51:11:dd:8f:23:9b:92:1f:c6:e6:d5:18:95:6e:97:80:76:
59:27:2d:71:f1:c7:02:5a:47:ed:a3:a3:cf:81:d4:2f:a5:8b:
9b:05:60:db:c0:bc:73:91:ff:c0:78:07:84:b8:0f:99:11:02:
3b:78:dc:60:35:56:49:61:97:42:bb:a4:d5:28:7e:f5:f6:a6:
35:2a:ad:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org