Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/SL9N0PdZ_MRvvEqAy8YTFC9nQjY.roa
File: SL9N0PdZ_MRvvEqAy8YTFC9nQjY.roa (raw, json)
Hash identifier: fxQ8WVNiI4QqUDVgnD8U/jEY0Ez6rnUPH64ehHXMgmY=
Subject key identifier: 48:BF:4D:D0:F7:59:FC:C4:6F:BC:4A:80:CB:C6:13:14:2F:67:42:36
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 018ABCF3035D417B5AEA513C0EDE03BE8E42
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/SL9N0PdZ_MRvvEqAy8YTFC9nQjY.roa
Signing time: Fri 22 Sep 2023 12:52:37 +0000
ROA not before: Fri 22 Sep 2023 12:52:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209659
IP address blocks: 94.142.251.0/24 maxlen: 24
2a12:5bc1::/48 maxlen: 48
2a12:5bc2::/48 maxlen: 48
2a12:5bc0::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:f3:03:5d:41:7b:5a:ea:51:3c:0e:de:03:be:8e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Sep 22 12:52:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48bf4dd0f759fcc46fbc4a80cbc613142f674236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:34:4f:60:ce:74:7f:59:83:06:a6:f6:f2:
fd:b8:42:8f:b1:5e:0c:36:30:d6:de:c2:ac:12:8e:
a8:b1:79:20:67:b8:ac:07:67:75:62:3f:96:5e:2a:
f7:34:cc:16:62:bb:b4:60:90:76:7f:db:8a:8d:4f:
73:48:96:33:77:e6:0c:af:e7:ea:d0:3b:c4:ff:6a:
48:25:64:ee:a1:94:db:ae:a3:20:0c:bd:9d:56:d6:
54:0e:be:9e:18:f2:1f:c6:7b:bf:43:e6:e5:87:65:
9c:3e:6e:7d:a4:30:fc:c6:51:e7:58:9c:46:6c:dd:
4d:17:c5:04:af:51:3d:66:91:16:c9:20:a1:0c:a3:
6d:20:9a:c4:5e:5f:4f:26:d2:81:a8:4e:5d:10:30:
c2:0e:6c:1e:3c:e9:d5:64:7d:fe:41:f3:11:99:05:
52:e4:af:30:48:94:0d:16:11:1d:83:6e:eb:0f:4c:
95:1f:51:0b:e2:93:61:77:9c:f6:c6:2d:2f:39:d6:
4c:db:68:ea:34:75:10:56:77:f0:db:ca:ac:6d:99:
d9:27:02:8b:3e:f9:d5:f1:27:32:be:56:1a:d9:f3:
c3:94:3c:75:73:1d:d7:a9:3a:6a:63:35:c0:e9:85:
09:40:d7:79:fa:eb:21:d1:8c:1d:6d:ff:1e:22:ec:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BF:4D:D0:F7:59:FC:C4:6F:BC:4A:80:CB:C6:13:14:2F:67:42:36
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/SL9N0PdZ_MRvvEqAy8YTFC9nQjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.251.0/24
IPv6:
2a12:5bc0::-2a12:5bc1:0:ffff:ffff:ffff:ffff:ffff
2a12:5bc2::/48
Signature Algorithm: sha256WithRSAEncryption
8c:88:1d:81:5a:b5:61:d4:66:24:a6:f3:04:0e:98:c5:63:39:
a4:12:04:b5:74:2e:2c:a6:67:2e:67:09:f3:e0:04:00:93:8e:
3b:96:72:5f:3d:c0:c6:d1:4a:92:42:78:c8:15:77:fd:85:9b:
74:d7:16:d2:3d:6a:b5:aa:14:21:be:d7:55:f6:70:72:40:7b:
bc:6d:d8:cf:ee:d9:07:36:8b:22:f7:87:2d:4a:b8:38:cd:6c:
5d:17:9b:19:ec:5c:a6:ae:9e:cb:b3:32:41:8e:c6:99:f2:f8:
16:49:10:56:58:20:af:80:bc:b6:46:13:69:83:67:cf:ea:65:
fd:b8:6e:f8:e6:52:95:61:b1:d3:f9:a5:ae:4b:c1:1a:47:19:
34:92:4e:5d:a3:da:4f:43:54:31:28:90:ac:b8:76:ee:53:76:
23:8d:09:ce:f8:95:e4:41:16:2c:8b:68:cd:d5:8f:83:38:aa:
43:81:1a:1e:8e:e3:5e:6e:e3:90:a7:49:57:43:08:0d:87:ba:
48:d3:1e:e0:48:9f:d3:88:ab:06:21:b0:35:49:c3:66:bf:2a:
4f:2f:7b:4f:c3:b7:a7:2d:9b:d7:be:1e:73:c8:04:a9:e1:e9:
22:f7:8d:f9:16:f9:bd:14:ac:53:86:9a:14:de:3f:db:52:c6:
b3:47:2d:3b
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYq88wNdQXta6lE8Dt4Dvo5CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMTZmMGU5YWZmMzlhOGIxOTZjNDgzZTA4NWRlNzlmMjQ2
ZDlmZGQwHhcNMjMwOTIyMTI1MjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGJmNGRkMGY3NTlmY2M0NmZiYzRhODBjYmM2MTMxNDJmNjc0MjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCo0T2DOdH9Zgwam9vL9uEKPsV4M
NjDW3sKsEo6osXkgZ7isB2d1Yj+WXir3NMwWYru0YJB2f9uKjU9zSJYzd+YMr+fq
0DvE/2pIJWTuoZTbrqMgDL2dVtZUDr6eGPIfxnu/Q+blh2WcPm59pDD8xlHnWJxG
bN1NF8UEr1E9ZpEWySChDKNtIJrEXl9PJtKBqE5dEDDCDmwePOnVZH3+QfMRmQVS
5K8wSJQNFhEdg27rD0yVH1EL4pNhd5z2xi0vOdZM22jqNHUQVnfw28qsbZnZJwKL
PvnV8ScyvlYa2fPDlDx1cx3XqTpqYzXA6YUJQNd5+ush0Ywdbf8eIuwX5wIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFEi/TdD3WfzEb7xKgMvGExQvZ0I2MB8GA1UdIwQY
MBaAFEEW8Omv85qLGWxIPghd558kbZ/dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAt
MjQwZDFmZmQwOWI4LzEvU0w5TjBQZFpfTVJ2dkVxQXk4WVRGQzluUWpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9iYzNmZjctYWE4Ny00Mjk3LWFkZjAtMjQwZDFmZmQwOWI4
LzEvUVJidzZhX3ptb3NaYkVnLUNGM25ueVJ0bjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAXo77MCEE
AgACMBswEAMFBioSW8ADBwAqElvBAAADBwAqElvCAAAwDQYJKoZIhvcNAQELBQAD
ggEBAIyIHYFatWHUZiSm8wQOmMVjOaQSBLV0LiymZy5nCfPgBACTjjuWcl89wMbR
SpJCeMgVd/2Fm3TXFtI9arWqFCG+11X2cHJAe7xt2M/u2Qc2iyL3hy1KuDjNbF0X
mxnsXKaunsuzMkGOxpny+BZJEFZYIK+AvLZGE2mDZ8/qZf24bvjmUpVhsdP5pa5L
wRpHGTSSTl2j2k9DVDEokKy4du5TdiONCc74leRBFiyLaM3Vj4M4qkOBGh6O415u
45CnSVdDCA2HukjTHuBIn9OIqwYhsDVJw2a/Kk8ve0/Dt6ctm9e+HnPIBKnh6SL3
jfkW+b0UrFOGmhTeP9tSxrNHLTs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org