Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/NIOOOtuPYpLjv6m37vk7B-_N6bE.roa
File: NIOOOtuPYpLjv6m37vk7B-_N6bE.roa (raw, json)
Hash identifier: EKpIQdJT1g4SziDmwjWXZVQ6om5KELpWVzd4cFUQsIo=
Subject key identifier: 34:83:8E:3A:DB:8F:62:92:E3:BF:A9:B7:EE:F9:3B:07:EF:CD:E9:B1
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018EAD9C6F98CC068121915036FE9DF83A32
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/NIOOOtuPYpLjv6m37vk7B-_N6bE.roa
Signing time: Fri 05 Apr 2024 09:34:54 +0000
ROA not before: Fri 05 Apr 2024 09:34:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.40.0/22 maxlen: 24
94.154.40.0/24 maxlen: 24
94.154.41.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 12:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ad:9c:6f:98:cc:06:81:21:91:50:36:fe:9d:f8:3a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Apr 5 09:34:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34838e3adb8f6292e3bfa9b7eef93b07efcde9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:84:b2:be:45:a6:d4:58:4e:13:ae:d8:ec:18:
f7:d0:f7:24:4d:02:eb:50:14:6c:39:45:8a:69:3a:
2f:73:ce:33:b7:dd:15:d3:dc:d8:38:95:62:f2:fa:
8b:13:b4:56:32:b1:46:2a:a0:44:07:a3:84:a0:7c:
f9:fe:47:0b:2e:ae:55:19:ee:be:84:2c:f7:91:ad:
fc:93:fa:f2:1c:08:b3:f7:bc:f8:11:ed:40:cf:05:
64:cf:4c:38:09:5e:d0:48:3e:ad:d4:2d:0e:48:dd:
fe:b1:c9:f5:8e:0c:80:54:9c:71:44:99:45:ed:4c:
5e:97:3d:de:75:81:d5:75:48:91:9b:8e:e2:4e:35:
63:75:1b:4b:a0:73:94:f0:0b:26:02:46:35:57:a6:
40:88:97:20:5b:c3:f6:23:fc:38:a6:54:ca:47:b0:
8b:c2:75:e4:58:ee:e6:7a:39:fb:c7:bd:48:ff:85:
53:57:a1:28:86:e9:7a:1c:54:26:96:1d:40:af:73:
b2:d2:df:62:2b:a7:99:cc:74:c1:ec:01:cc:27:e2:
fa:a6:17:12:34:c0:a4:aa:b2:0c:2b:46:a4:fa:8c:
88:d6:ed:21:4e:4a:a6:71:06:15:cf:d1:ea:9a:84:
93:f4:e9:4c:26:a3:41:ad:e8:2e:dd:07:d4:92:ca:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:83:8E:3A:DB:8F:62:92:E3:BF:A9:B7:EE:F9:3B:07:EF:CD:E9:B1
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/NIOOOtuPYpLjv6m37vk7B-_N6bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.45.255
Signature Algorithm: sha256WithRSAEncryption
65:7a:72:8c:92:e9:04:63:62:7b:66:48:9c:85:9e:b5:de:54:
e9:33:a3:4e:d0:f7:dc:03:f2:58:94:1c:3c:e3:65:32:10:96:
5f:4d:f5:75:47:ac:f4:67:9e:53:b3:17:62:63:6d:ab:51:6d:
84:53:b3:f7:f5:3b:81:5a:b9:e8:85:93:d1:3b:a0:96:62:81:
8b:2f:81:4d:d9:8c:d2:db:41:5a:36:98:51:38:f7:d6:84:18:
52:73:3f:a7:47:55:48:f1:e3:29:80:07:d8:56:28:dc:78:de:
21:9e:62:b8:ac:2a:c5:ff:2d:2b:62:fb:cc:e8:f0:19:c7:36:
d4:9a:d7:16:65:4a:ed:93:a2:8a:9f:6f:f1:29:2b:f7:58:6e:
24:7e:bc:6b:df:b3:3d:e6:15:35:72:d9:b5:88:67:f6:d8:d9:
8a:f1:03:bb:df:bf:6f:bb:02:d9:1f:96:90:45:4d:88:3d:ff:
17:8a:5a:3b:eb:07:10:63:b4:0c:12:8e:96:4e:37:ef:2c:c1:
16:8e:5c:8c:65:d1:3c:8a:09:7e:a0:c6:a3:37:e8:76:05:06:
22:4f:3c:90:a0:30:8f:be:46:f2:33:27:02:5f:20:22:e6:e2:
91:a0:7b:24:72:ec:f1:11:0c:0e:64:15:e1:52:0f:18:c8:d0:
c5:b0:95:2d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY6tnG+YzAaBIZFQNv6d+DoyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjQwNDA1MDkzNDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDgzOGUzYWRiOGY2MjkyZTNiZmE5YjdlZWY5M2IwN2VmY2RlOWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4SyvkWm1FhOE67Y7Bj30PckTQLr
UBRsOUWKaTovc84zt90V09zYOJVi8vqLE7RWMrFGKqBEB6OEoHz5/kcLLq5VGe6+
hCz3ka38k/ryHAiz97z4Ee1AzwVkz0w4CV7QSD6t1C0OSN3+scn1jgyAVJxxRJlF
7Uxelz3edYHVdUiRm47iTjVjdRtLoHOU8AsmAkY1V6ZAiJcgW8P2I/w4plTKR7CL
wnXkWO7mejn7x71I/4VTV6Eohul6HFQmlh1Ar3Oy0t9iK6eZzHTB7AHMJ+L6phcS
NMCkqrIMK0ak+oyI1u0hTkqmcQYVz9HqmoST9OlMJqNBregu3QfUkspJoQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDSDjjrbj2KS47+pt+75OwfvzemxMB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvTklPT090dVBZcExqdjZtMzd2azdCLV9ONmJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANemigD
BAFemiwwDQYJKoZIhvcNAQELBQADggEBAGV6coyS6QRjYntmSJyFnrXeVOkzo07Q
99wD8liUHDzjZTIQll9N9XVHrPRnnlOzF2JjbatRbYRTs/f1O4FaueiFk9E7oJZi
gYsvgU3ZjNLbQVo2mFE499aEGFJzP6dHVUjx4ymAB9hWKNx43iGeYrisKsX/LSti
+8zo8BnHNtSa1xZlSu2Tooqfb/EpK/dYbiR+vGvfsz3mFTVy2bWIZ/bY2YrxA7vf
v2+7AtkflpBFTYg9/xeKWjvrBxBjtAwSjpZON+8swRaOXIxl0TyKCX6gxqM36HYF
BiJPPJCgMI++RvIzJwJfICLm4pGgeyRy7PERDA5kFeFSDxjI0MWwlS0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:55 2024 by rpki-client on console-ams.rpki-client.org