Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4Ios_7FbgphqPQwkXLJocD18H8s.roa
File: 4Ios_7FbgphqPQwkXLJocD18H8s.roa (raw, json)
Hash identifier: V+hq8wPq7J/QDLsLrDr8lGmfzgi5v2MjCTvvI5to0Y8=
Subject key identifier: E0:8A:2C:FF:B1:5B:82:98:6A:3D:0C:24:5C:B2:68:70:3D:7C:1F:CB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F14E09533547152B92AE98316714DD1D5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4Ios_7FbgphqPQwkXLJocD18H8s.roa
Signing time: Thu 25 Apr 2024 10:50:13 +0000
ROA not before: Thu 25 Apr 2024 10:50:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151612
IP address blocks: 94.156.239.0/24 maxlen: 24
193.37.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 10:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:14:e0:95:33:54:71:52:b9:2a:e9:83:16:71:4d:d1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 25 10:50:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e08a2cffb15b82986a3d0c245cb268703d7c1fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0d:c9:56:d8:b2:b8:74:8b:6e:c7:29:42:04:
c3:45:2b:5d:f5:b6:49:b6:ab:23:fc:c0:e7:f5:38:
0c:29:74:cf:db:98:00:f3:e9:b6:70:4b:78:33:8a:
84:15:8f:b2:05:e2:79:6f:80:e5:d9:0f:55:d4:cf:
41:2e:28:2b:0e:ce:b1:4f:6e:9e:29:91:c3:59:3c:
57:d9:00:74:36:6f:00:6f:8e:9f:7a:4a:cf:55:53:
14:d0:e4:82:eb:c1:eb:82:70:7b:f9:18:3d:df:cb:
cd:4d:7d:cb:3b:c8:5b:2c:58:22:44:4f:1b:b8:86:
0f:28:f6:a7:b0:b0:b9:4f:2d:6e:38:96:16:f7:33:
56:ff:22:91:25:56:f9:02:db:f6:19:97:ce:b3:e4:
fe:97:01:64:e0:ed:67:34:62:24:73:c6:44:79:c3:
56:65:e6:8b:47:a5:66:ff:b0:3d:07:3a:13:23:c7:
62:6d:1c:0e:cc:26:1c:03:09:1e:bb:09:14:e1:0d:
fc:05:47:03:53:49:0e:16:db:95:a4:de:b1:11:8b:
87:08:f5:6a:fa:89:69:df:0c:63:31:87:00:6a:13:
15:51:be:c5:34:fc:47:39:fc:80:00:79:7b:2f:82:
6b:cc:4d:b5:62:d8:c1:b9:9d:b6:b1:03:c9:70:87:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8A:2C:FF:B1:5B:82:98:6A:3D:0C:24:5C:B2:68:70:3D:7C:1F:CB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4Ios_7FbgphqPQwkXLJocD18H8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.239.0/24
193.37.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:98:17:77:ec:ef:38:cd:57:c4:47:94:a7:c0:9c:c1:d4:b8:
e3:59:d4:56:43:32:e6:c4:8d:23:a2:f1:30:19:9e:79:76:bd:
1c:78:dd:cc:cb:f1:ce:87:9d:5e:01:ea:fb:48:1d:a2:bb:d6:
87:4e:99:53:8d:8f:d8:cd:49:b2:f4:17:7f:a0:2b:29:78:92:
98:57:24:82:3f:8e:40:99:56:ed:53:78:6c:18:8d:ed:89:4d:
8f:23:08:18:7a:06:57:99:e1:e7:24:6b:49:78:67:95:0c:12:
a2:6f:9d:d3:cb:27:7f:fb:df:95:f2:e5:02:21:9b:e6:85:8b:
8b:1f:7c:67:d7:22:89:09:b7:af:13:20:d3:8f:c8:03:87:b4:
36:f7:c6:70:e7:83:c6:28:63:ee:c9:9f:4d:2e:0d:44:1e:1d:
20:b2:3c:34:cf:77:97:17:4c:a5:35:e9:20:b6:46:ba:37:b3:
4f:d9:13:0f:f2:d2:76:f1:a9:74:8e:9a:77:c8:07:10:e4:5b:
b1:4c:d6:62:2d:ff:21:4a:2e:0a:7a:65:f1:05:3c:fa:cb:50:
03:68:60:ae:c1:e4:72:4a:8a:1b:94:19:9e:26:40:8e:a0:62:
3a:f3:41:19:48:17:2b:35:af:d0:a5:82:d0:1b:77:69:31:ee:
91:d8:af:69
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY8U4JUzVHFSuSrpgxZxTdHVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNDI1MTA1MDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDhhMmNmZmIxNWI4Mjk4NmEzZDBjMjQ1Y2IyNjg3MDNkN2MxZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA3JVtiyuHSLbscpQgTDRStd9bZJ
tqsj/MDn9TgMKXTP25gA8+m2cEt4M4qEFY+yBeJ5b4Dl2Q9V1M9BLigrDs6xT26e
KZHDWTxX2QB0Nm8Ab46fekrPVVMU0OSC68HrgnB7+Rg938vNTX3LO8hbLFgiRE8b
uIYPKPansLC5Ty1uOJYW9zNW/yKRJVb5Atv2GZfOs+T+lwFk4O1nNGIkc8ZEecNW
ZeaLR6Vm/7A9BzoTI8dibRwOzCYcAwkeuwkU4Q38BUcDU0kOFtuVpN6xEYuHCPVq
+olp3wxjMYcAahMVUb7FNPxHOfyAAHl7L4JrzE21YtjBuZ22sQPJcIf4AwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOCKLP+xW4KYaj0MJFyyaHA9fB/LMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNElvc183RmJncGhxUFF3a1hMSm9jRDE4SDhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXpzvAwQA
wSUvMA0GCSqGSIb3DQEBCwUAA4IBAQCnmBd37O84zVfER5SnwJzB1LjjWdRWQzLm
xI0jovEwGZ55dr0ceN3My/HOh51eAer7SB2iu9aHTplTjY/YzUmy9Bd/oCspeJKY
VySCP45AmVbtU3hsGI3tiU2PIwgYegZXmeHnJGtJeGeVDBKib53Tyyd/+9+V8uUC
IZvmhYuLH3xn1yKJCbevEyDTj8gDh7Q298Zw54PGKGPuyZ9NLg1EHh0gsjw0z3eX
F0ylNekgtka6N7NP2RMP8tJ28al0jpp3yAcQ5FuxTNZiLf8hSi4KemXxBTz6y1AD
aGCuweRySooblBmeJkCOoGI680EZSBcrNa/QpYLQG3dpMe6R2K9p
-----END CERTIFICATE-----
Generated at Fri May 10 13:38:27 2024 by rpki-client on console-fra.rpki-client.org