Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/312132-2e2c-4a57-a8ac-578f02e78066/1/IYyps16LoVaCDxCJEhGBUi2C2Qg.roa
File: IYyps16LoVaCDxCJEhGBUi2C2Qg.roa (raw, json)
Hash identifier: idMbDBV3EBASdGijahpotEUTZMv0A4texHuzROcziUw=
Subject key identifier: 21:8C:A9:B3:5E:8B:A1:56:82:0F:10:89:12:11:81:52:2D:82:D9:08
Certificate issuer: /CN=c207e10cbc5d249bf4d8eeb2549ec4cf843ef0ee
Certificate serial: 01856BDC75C7B7CC485EB894D0F14341F6D8
Authority key identifier: C2:07:E1:0C:BC:5D:24:9B:F4:D8:EE:B2:54:9E:C4:CF:84:3E:F0:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/312132-2e2c-4a57-a8ac-578f02e78066/1/IYyps16LoVaCDxCJEhGBUi2C2Qg.roa
Signing time: Sun 01 Jan 2023 05:44:48 +0000
ROA not before: Sun 01 Jan 2023 05:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211914
IP address blocks: 94.158.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 03 Nov 2023 09:11:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:75:c7:b7:cc:48:5e:b8:94:d0:f1:43:41:f6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c207e10cbc5d249bf4d8eeb2549ec4cf843ef0ee
Validity
Not Before: Jan 1 05:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=218ca9b35e8ba156820f1089121181522d82d908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5d:fa:28:97:ac:97:1c:90:ab:0c:01:92:9c:
e3:33:f6:19:4e:3e:80:dd:47:92:0a:53:b0:1f:96:
6b:2e:df:ae:df:eb:ad:03:7c:bd:f6:99:e3:eb:b1:
f4:e5:6d:9e:65:4d:3e:fe:1e:70:34:fa:3e:1d:a9:
34:1e:57:f2:2a:7a:d5:c6:53:bf:43:31:01:70:e8:
bf:c8:58:01:7f:2b:0e:f6:32:f9:17:ad:39:9b:88:
b9:64:03:70:2c:09:26:7e:fb:ca:86:17:20:a9:25:
c6:93:43:fc:83:b8:be:52:d4:77:ab:e9:5c:93:21:
31:08:5c:88:b8:09:a7:fe:af:5a:67:5b:8c:6b:c4:
4c:5a:fe:fc:54:5d:e7:60:69:86:4a:63:15:d2:56:
69:02:25:27:fe:94:fa:90:b8:52:fa:ba:ad:b1:17:
6c:25:ba:5c:95:aa:e1:18:3f:2a:bc:75:43:60:5d:
d4:10:47:68:3a:5b:e2:3f:8f:e7:c8:36:4b:c8:5d:
ee:14:6f:7a:ff:9e:61:7d:c4:27:0b:af:64:c5:1d:
93:74:94:e7:2a:9f:48:d8:10:0c:4a:ab:2d:0e:c2:
d3:1e:92:19:1b:17:76:80:9f:d2:a2:e3:8a:d8:72:
27:a4:1e:45:79:d2:3a:9f:40:73:fd:67:6b:14:ca:
41:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8C:A9:B3:5E:8B:A1:56:82:0F:10:89:12:11:81:52:2D:82:D9:08
X509v3 Authority Key Identifier:
keyid:C2:07:E1:0C:BC:5D:24:9B:F4:D8:EE:B2:54:9E:C4:CF:84:3E:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/312132-2e2c-4a57-a8ac-578f02e78066/1/IYyps16LoVaCDxCJEhGBUi2C2Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/312132-2e2c-4a57-a8ac-578f02e78066/1/wgfhDLxdJJv02O6yVJ7Ez4Q-8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.208.0/21
Signature Algorithm: sha256WithRSAEncryption
04:4a:9a:ab:90:73:c7:6e:2e:8d:f1:a9:03:e1:d2:45:66:1e:
29:21:74:5c:d5:3d:92:29:2e:cc:ff:8d:ff:e2:4b:9a:85:36:
8c:26:55:1e:be:79:75:f5:fa:02:22:39:30:6a:b9:a5:02:12:
bf:3a:a4:e7:f5:dd:c5:cb:2d:12:c7:7a:5d:2a:8f:29:41:2d:
81:c7:13:e2:29:30:0a:1f:55:70:92:2b:fe:b2:49:9d:d2:57:
b0:3f:0b:a3:75:5e:e2:d9:99:9b:9a:ca:a5:51:ca:a9:b3:f8:
27:7c:e5:ee:63:03:21:9b:f8:7e:44:de:bd:51:19:a1:94:5c:
a6:2e:be:4b:a6:2d:68:cf:d7:6f:0c:bc:f5:24:37:3b:a8:4e:
cd:79:c6:e1:0b:48:9f:94:b0:df:12:b6:74:56:5c:37:7c:94:
bd:c3:21:b5:5d:44:ad:28:ae:76:78:08:58:15:19:ce:3c:ae:
33:14:07:d5:0d:24:44:95:ee:08:cd:8c:6c:3e:cc:ae:58:2b:
cf:10:29:ba:61:26:76:d2:41:68:fa:ff:f3:8c:f9:5b:45:44:
1b:f5:b8:36:95:7b:da:6e:fb:37:b5:2e:e3:ca:5d:15:b9:a5:
1e:d5:97:7a:ff:17:82:0c:3d:02:95:34:4e:22:6d:48:3d:00:
ad:a5:9c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:24 2024 by rpki-client on console-ams.rpki-client.org