Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/mPjY9bvTJ0eJc7_WT1OUrvUmfRg.roa
File: mPjY9bvTJ0eJc7_WT1OUrvUmfRg.roa (raw, json)
Hash identifier: xOksuwK9J2BVRY0Vx6Y91ABoDuGDcBEUojCYqB64as0=
Subject key identifier: 98:F8:D8:F5:BB:D3:27:47:89:73:BF:D6:4F:53:94:AE:F5:26:7D:18
Certificate issuer: /CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Certificate serial: 018D11F39B0AB63B2CAE77A5E419EAC013F5
Authority key identifier: 44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/mPjY9bvTJ0eJc7_WT1OUrvUmfRg.roa
Signing time: Tue 16 Jan 2024 11:06:34 +0000
ROA not before: Tue 16 Jan 2024 11:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201183
IP address blocks: 94.101.108.0/24 maxlen: 24
94.156.156.0/23 maxlen: 24
94.156.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Apr 2024 16:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:f3:9b:0a:b6:3b:2c:ae:77:a5:e4:19:ea:c0:13:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Validity
Not Before: Jan 16 11:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98f8d8f5bbd327478973bfd64f5394aef5267d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:7e:13:62:7d:2e:6e:a4:de:2c:8b:98:7f:
a5:6c:d4:a0:b5:d9:2e:4c:1b:aa:d3:68:6d:5d:ed:
6c:1d:dc:da:d6:5f:5f:27:74:41:f4:06:9b:61:54:
a0:4c:c7:e6:a8:e0:d8:73:4e:fe:2b:de:d4:8b:a8:
a5:16:7f:91:62:e3:6f:ee:18:db:ba:17:2b:91:3e:
f9:6e:79:0f:22:f8:2a:ee:c5:d9:ee:de:b1:78:78:
bd:f2:ea:3c:3e:53:38:82:d8:cb:23:90:bc:b0:0e:
4a:9e:7c:1e:ba:32:a0:e0:77:04:c3:40:97:cd:d4:
a9:9a:fd:c9:a9:76:e9:12:d6:a1:0f:29:5b:a3:0e:
c7:21:15:a7:ac:eb:90:dc:70:e8:ce:ab:57:74:9e:
ef:b2:4c:ae:8a:9e:c7:7d:f5:7f:21:dc:54:7a:e4:
2d:1c:67:11:4d:5a:06:a9:ee:b6:a9:83:da:1b:97:
de:77:35:aa:11:48:28:d9:3a:94:fc:e3:3a:ef:9a:
51:63:df:b8:5f:22:7e:b2:3c:b0:56:d3:69:25:30:
82:65:5d:1a:dc:7e:5f:b6:f4:5b:59:1e:f8:e3:1a:
7f:ef:88:57:0f:8b:3d:25:d3:17:e2:36:db:7a:84:
d8:05:f4:28:a2:ea:7b:6b:90:88:9b:f8:05:95:46:
9f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F8:D8:F5:BB:D3:27:47:89:73:BF:D6:4F:53:94:AE:F5:26:7D:18
X509v3 Authority Key Identifier:
keyid:44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/mPjY9bvTJ0eJc7_WT1OUrvUmfRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.108.0/24
94.156.156.0/23
94.156.160.0/23
Signature Algorithm: sha256WithRSAEncryption
89:3d:35:4f:e2:1f:a0:27:5d:d4:2e:2e:7f:e0:18:84:dd:05:
95:b6:35:db:b6:80:de:53:54:8d:6f:fc:7e:6d:1c:75:41:81:
20:14:c3:51:42:77:ae:96:6f:4e:0b:f1:4b:be:42:b1:82:2d:
85:41:91:52:67:35:4f:94:16:73:a7:57:c1:44:8e:c4:3f:a5:
20:cc:e8:3d:fd:10:de:59:d6:c1:fc:f0:c8:23:9a:43:a1:f3:
5e:f9:01:70:0f:83:6f:7f:af:ac:cc:7a:3a:9d:6c:98:20:f6:
b7:d3:01:58:91:e9:45:3a:66:b5:f6:05:ec:4f:a2:ea:90:f0:
23:61:8f:e9:26:6c:07:b4:96:63:fc:5c:2f:78:63:fd:e0:0f:
1e:85:16:39:4e:bc:be:39:d1:5e:50:16:a3:fc:5b:75:39:85:
5b:0f:7c:e2:75:04:27:72:54:df:a9:78:62:3e:c8:a3:09:95:
60:14:99:6b:9a:0a:43:4b:a4:8a:14:c7:b2:a7:37:69:66:f6:
a5:cc:45:ee:4a:d7:4d:1e:b6:70:a5:a4:02:74:67:60:5e:82:
28:b0:84:2d:f9:54:db:9c:92:40:30:4b:2a:a1:2a:2e:95:6e:
5e:7d:ff:40:b6:9e:df:9d:e4:80:92:87:82:63:3e:35:e6:3a:
06:e3:7f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:18 2024 by rpki-client on console-fra.rpki-client.org