Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/OuyGL2GGHeeDo_xYJjG95khH0cQ.roa
File: OuyGL2GGHeeDo_xYJjG95khH0cQ.roa (raw, json)
Hash identifier: /YQcnlW1rl2bZowSXdh1+0jdunMruSs+ks9Yr9eth+8=
Subject key identifier: 3A:EC:86:2F:61:86:1D:E7:83:A3:FC:58:26:31:BD:E6:48:47:D1:C4
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018EA32E9EB41E743E8CAB45D840BC447EF1
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/OuyGL2GGHeeDo_xYJjG95khH0cQ.roa
Signing time: Wed 03 Apr 2024 08:58:45 +0000
ROA not before: Wed 03 Apr 2024 08:58:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.40.0/22 maxlen: 24
94.154.40.0/24 maxlen: 24
94.154.41.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 09:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:2e:9e:b4:1e:74:3e:8c:ab:45:d8:40:bc:44:7e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Apr 3 08:58:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3aec862f61861de783a3fc582631bde64847d1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:80:98:7b:19:2a:f1:da:6c:a8:c1:9f:b4:d4:
95:4d:98:f6:c6:52:a1:cb:89:13:d1:7e:8e:84:b0:
e2:02:8f:e8:be:8b:a6:9b:35:d4:8a:8a:d0:c1:a3:
4f:7f:19:75:f3:bd:64:da:46:f5:77:88:93:98:58:
c2:56:bf:7a:6c:ad:e5:43:40:57:d6:a4:42:60:14:
bc:b3:fc:2b:4f:8b:5a:59:6f:1d:08:64:8b:a3:9b:
a3:a3:67:c4:04:43:2e:f0:eb:ea:c1:64:0f:87:6f:
a1:6b:2d:e3:2c:2d:39:75:22:28:f5:3b:32:83:22:
7e:a7:c2:b7:47:e9:ee:b6:59:85:58:22:a9:d0:71:
eb:f3:4a:53:5c:07:cc:4a:ed:fb:c5:e2:25:21:1a:
8a:e3:fb:c5:ab:73:5b:9d:c0:5c:de:05:01:71:2b:
f4:bf:74:7b:51:31:00:83:65:d4:f0:9c:c6:f5:63:
d5:87:af:ec:ee:8d:7f:76:62:6e:25:df:ad:72:45:
36:81:64:68:6d:dc:f3:7d:12:37:d6:9e:e6:53:15:
82:25:47:db:87:59:9d:1c:98:5d:e3:e8:c8:f3:09:
84:2a:2d:a5:f8:0a:c6:06:5c:e9:86:38:0d:9c:d4:
fe:81:2d:52:7f:42:57:82:32:4a:87:b4:7a:b9:bd:
62:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:EC:86:2F:61:86:1D:E7:83:A3:FC:58:26:31:BD:E6:48:47:D1:C4
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/OuyGL2GGHeeDo_xYJjG95khH0cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.45.255
Signature Algorithm: sha256WithRSAEncryption
9c:d3:37:61:9a:e1:90:47:ab:ae:6f:f0:be:c1:2a:a2:91:7a:
95:64:fb:60:05:95:a3:7f:db:0f:d9:51:6d:31:64:d2:6c:e4:
3b:b2:4a:28:1d:d5:80:eb:42:82:a4:52:55:a2:76:a1:1d:d9:
e5:89:bf:2e:78:c0:00:0d:59:e0:56:89:8c:51:e9:88:00:72:
91:c0:47:d8:63:bb:30:83:12:0e:7b:86:15:2d:d0:54:90:7a:
00:a9:28:9e:19:97:6e:24:4b:c4:ec:f5:23:85:dd:7a:fb:6c:
3a:1f:4d:c4:bc:cd:0f:7b:7a:1f:f4:30:c5:bb:5c:d8:fa:5c:
99:41:b6:27:6e:31:f8:9f:1e:ad:19:0d:13:d8:91:db:d1:16:
f8:d6:28:83:a1:bc:d4:5a:4d:5c:23:84:88:05:61:16:45:da:
3d:3a:86:cf:39:24:c0:64:1f:9f:f7:ee:b3:fc:93:9c:a1:8f:
02:62:b1:0c:b2:c3:90:9d:24:80:4f:a4:41:d3:09:88:bf:f1:
07:c7:a6:81:67:74:2b:a7:db:e9:59:e0:2b:0b:05:c2:b7:00:
cd:d2:d7:d4:7e:c7:64:ef:15:a7:b7:83:f8:9f:3d:d7:01:79:
44:20:cb:d7:48:8a:4e:9f:b3:ee:a3:0b:b5:6a:3d:88:f8:44:
e7:c5:36:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:23 2025 by rpki-client