Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/2_H4bg4_tyNXZ4adTdb0OrOPBQo.roa
File: 2_H4bg4_tyNXZ4adTdb0OrOPBQo.roa (raw, json)
Hash identifier: EUkFVo/UbdludmKZ8RIaTYGKGrRvLYpERc5bZA96X2U=
Subject key identifier: DB:F1:F8:6E:0E:3F:B7:23:57:67:86:9D:4D:D6:F4:3A:B3:8F:05:0A
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018F10F341AF8F1A2B498755728B981DA0E7
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/2_H4bg4_tyNXZ4adTdb0OrOPBQo.roa
Signing time: Wed 24 Apr 2024 16:32:08 +0000
ROA not before: Wed 24 Apr 2024 16:32:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 94.154.40.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Apr 2024 09:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:10:f3:41:af:8f:1a:2b:49:87:55:72:8b:98:1d:a0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Apr 24 16:32:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbf1f86e0e3fb7235767869d4dd6f43ab38f050a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:f0:eb:f2:c4:c7:53:50:14:b4:74:ea:70:
93:61:62:dd:8b:b6:cf:c3:8e:b5:d6:1b:ac:54:ca:
fa:f7:20:b0:bf:c4:38:c5:24:cd:db:ad:de:ce:26:
26:a6:dc:c7:2f:a1:fa:8e:ca:3a:29:ce:b0:df:58:
a6:9b:3f:4d:1a:03:51:5e:e2:6d:73:72:b1:40:19:
02:15:74:ac:28:a5:87:f5:69:12:50:a5:b0:46:e8:
88:05:12:46:0b:fe:0b:22:27:b8:1b:6d:f8:12:6e:
75:3c:a0:e1:4e:5d:04:a2:f4:21:2f:ff:04:66:e9:
e3:a5:07:bf:81:14:79:c9:54:30:f9:cb:99:d2:39:
41:50:fa:d0:01:63:d6:3a:d3:98:de:ea:93:82:f8:
32:d7:83:db:51:4c:f0:cc:35:1c:93:15:63:45:ef:
b7:d5:97:89:ba:2a:d6:99:30:1e:81:3e:6d:33:2e:
3f:82:5f:1b:4d:15:7f:b6:19:e0:e9:4c:84:61:72:
42:63:b6:c3:c0:2b:0d:61:90:cc:12:31:43:8a:14:
92:53:0e:5c:5a:da:dc:44:67:df:aa:79:9f:1b:c3:
10:27:7d:da:7f:52:82:db:5f:4b:14:cc:cb:f1:0c:
2b:20:a8:e9:30:24:0c:98:82:3d:7d:0c:92:bd:bf:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F1:F8:6E:0E:3F:B7:23:57:67:86:9D:4D:D6:F4:3A:B3:8F:05:0A
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/2_H4bg4_tyNXZ4adTdb0OrOPBQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0/24
94.154.42.0/24
Signature Algorithm: sha256WithRSAEncryption
57:dc:96:3c:02:5a:a4:4f:ed:7f:ed:e1:58:bb:ea:6d:5e:42:
43:07:2a:8d:6a:5b:e9:6d:36:ed:c8:83:cb:04:20:3f:03:5d:
e9:5c:ec:60:9e:5e:da:38:6a:66:c5:dd:25:12:6d:2b:58:a3:
a9:0c:38:79:20:1b:94:5d:29:0f:02:2a:98:40:22:8f:39:e8:
54:1f:51:6f:1b:d5:8e:2d:e6:12:27:83:61:e5:60:94:97:b6:
ad:82:63:81:73:31:bc:b8:f7:32:b5:5a:e5:98:3a:eb:00:2a:
61:8d:02:e7:47:e9:48:72:01:cb:92:7c:ac:78:8a:6a:1f:39:
1a:6d:b4:2f:58:1b:fc:53:c8:6f:83:be:d4:c2:14:0d:0a:cf:
73:d3:51:b0:21:70:55:c0:8d:35:0b:44:ff:35:0c:04:c9:8c:
be:68:94:98:81:08:4d:95:86:a7:82:92:b3:e5:3d:86:bc:11:
28:4c:65:b4:69:7b:29:6d:75:b4:3d:07:bd:23:43:10:a5:26:
4d:eb:8d:84:ba:42:c6:19:9b:78:2a:ff:84:25:51:40:ed:8f:
9a:89:4f:e8:00:0f:dc:64:4c:fd:5f:aa:2a:44:69:ed:f5:14:
64:c1:05:67:8f:4e:0f:d4:ae:4c:c1:1b:7b:c2:9c:f6:cf:8e:
9b:6a:64:ba
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY8Q80GvjxorSYdVcouYHaDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjQwNDI0MTYzMjA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmYxZjg2ZTBlM2ZiNzIzNTc2Nzg2OWQ0ZGQ2ZjQzYWIzOGYwNTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Hw6/LEx1NQFLR06nCTYWLdi7bP
w4611husVMr69yCwv8Q4xSTN263eziYmptzHL6H6jso6Kc6w31immz9NGgNRXuJt
c3KxQBkCFXSsKKWH9WkSUKWwRuiIBRJGC/4LIie4G234Em51PKDhTl0EovQhL/8E
ZunjpQe/gRR5yVQw+cuZ0jlBUPrQAWPWOtOY3uqTgvgy14PbUUzwzDUckxVjRe+3
1ZeJuirWmTAegT5tMy4/gl8bTRV/thng6UyEYXJCY7bDwCsNYZDMEjFDihSSUw5c
WtrcRGffqnmfG8MQJ33af1KC219LFMzL8QwrIKjpMCQMmII9fQySvb/qYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNvx+G4OP7cjV2eGnU3W9DqzjwUKMB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvMl9INGJnNF90eU5YWjRhZFRkYjBPck9QQlFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXpooAwQA
XpoqMA0GCSqGSIb3DQEBCwUAA4IBAQBX3JY8AlqkT+1/7eFYu+ptXkJDByqNalvp
bTbtyIPLBCA/A13pXOxgnl7aOGpmxd0lEm0rWKOpDDh5IBuUXSkPAiqYQCKPOehU
H1FvG9WOLeYSJ4Nh5WCUl7atgmOBczG8uPcytVrlmDrrACphjQLnR+lIcgHLknys
eIpqHzkabbQvWBv8U8hvg77UwhQNCs9z01GwIXBVwI01C0T/NQwEyYy+aJSYgQhN
lYangpKz5T2GvBEoTGW0aXspbXW0PQe9I0MQpSZN642EukLGGZt4Kv+EJVFA7Y+a
iU/oAA/cZEz9X6oqRGnt9RRkwQVnj04P1K5MwRt7wpz2z46bamS6
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:55 2024 by rpki-client on console-ams.rpki-client.org