Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/dn8dVMzW6sezPlXuKf9x_dsdm_Q.roa
File: dn8dVMzW6sezPlXuKf9x_dsdm_Q.roa (raw, json)
Hash identifier: iAtKNwQN/pkWMOhIg97TmaBauOhQpiqGKyaOhMOBDC8=
Subject key identifier: 76:7F:1D:54:CC:D6:EA:C7:B3:3E:55:EE:29:FF:71:FD:DB:1D:9B:F4
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 018F1A1B4936C6CCADD16B169F61871C3F91
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/dn8dVMzW6sezPlXuKf9x_dsdm_Q.roa
Signing time: Fri 26 Apr 2024 11:12:26 +0000
ROA not before: Fri 26 Apr 2024 11:12:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29436
IP address blocks: 94.240.132.0/22 maxlen: 22
94.240.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 26 Apr 2024 13:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1a:1b:49:36:c6:cc:ad:d1:6b:16:9f:61:87:1c:3f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Apr 26 11:12:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=767f1d54ccd6eac7b33e55ee29ff71fddb1d9bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4c:6c:04:c6:d2:69:a8:d8:2d:28:1c:32:2a:
9d:d5:3b:6d:3c:21:1f:aa:03:28:5c:39:11:48:be:
f1:4d:50:a3:94:21:7b:e4:f9:bb:d0:2a:57:b2:e7:
b1:bc:91:74:01:e2:f6:bb:ee:5c:3a:43:ca:c2:c8:
3e:ce:50:b8:45:e4:e6:03:6c:7e:7d:74:e2:1f:77:
eb:71:41:06:42:bb:22:0b:9d:2f:22:73:8a:85:bc:
86:a8:d3:6a:c8:65:31:07:63:64:47:85:28:dd:e2:
84:34:c0:9b:d0:9e:37:ef:6f:1c:44:ae:67:f0:86:
6b:f7:e5:9f:f3:5b:06:94:a5:d9:f4:96:11:15:be:
2e:a3:ab:75:89:eb:22:ff:33:68:27:c7:21:1d:24:
ce:e3:08:93:43:63:3f:55:44:6b:86:88:24:bf:33:
3b:d8:3e:92:59:cf:c4:57:f8:6b:19:0c:e1:ad:04:
33:63:9c:cc:14:61:66:58:27:fa:44:73:e5:95:67:
31:15:fc:c9:6b:a7:a0:47:8e:0b:97:b2:43:05:c9:
d5:19:5a:69:bd:50:c7:93:32:af:b2:84:3c:d4:a9:
58:de:82:88:c4:e1:a2:25:94:a7:83:6d:ee:45:42:
94:a0:2b:54:f4:85:ab:8d:ba:00:66:56:f1:57:9d:
03:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7F:1D:54:CC:D6:EA:C7:B3:3E:55:EE:29:FF:71:FD:DB:1D:9B:F4
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/dn8dVMzW6sezPlXuKf9x_dsdm_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.132.0/22
94.240.144.0/20
Signature Algorithm: sha256WithRSAEncryption
71:a9:66:9b:97:bc:66:45:c5:0b:d4:e1:38:4c:c5:a5:09:41:
5a:5f:7a:b0:fb:1a:5c:09:48:8a:e3:b3:6a:e8:c6:0a:3f:04:
d2:f2:bd:8c:ca:0e:10:98:1c:28:05:df:3d:6d:84:b2:5d:50:
a9:ad:e7:b7:a0:37:83:3d:c4:7e:d5:3c:88:0f:11:4f:91:b2:
0e:47:10:ab:55:71:e9:81:67:f0:24:cb:16:80:25:f8:28:e9:
a1:5b:e6:b5:fb:88:d0:d6:05:d5:b3:3f:ce:ce:51:d9:53:7a:
eb:a4:ea:d8:35:c4:31:34:3d:35:9a:9b:70:a3:a4:fe:ad:37:
55:68:45:f6:3e:ee:d0:b9:a2:33:e0:27:f2:91:f0:be:c0:2a:
a3:e5:98:a9:8b:8d:59:dd:67:ef:6b:ba:44:2e:54:f1:ae:40:
2c:cd:e0:3d:ea:ea:cf:f2:da:e0:be:0a:d5:98:99:b8:1a:44:
db:da:7c:94:0b:c1:7b:4b:9e:d1:22:b8:97:3c:a5:b7:d5:c6:
14:ce:c4:68:82:78:3e:6f:3c:33:5b:ce:6f:10:e0:ba:2e:f6:
0a:02:b7:7c:d5:f1:1f:32:df:dc:a9:91:86:5c:fe:3d:89:58:
19:6c:ab:0c:ba:53:d7:37:38:c9:69:66:3b:e9:ef:75:1b:81:
39:e6:5b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 18:27:25 2024 by rpki-client on console.sobornost.net