Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/Q7u1YFh82pcEmza0irqgkABI52A.roa
File: Q7u1YFh82pcEmza0irqgkABI52A.roa (raw, json)
Hash identifier: haU94S9NaJAn+irOMhXU6ehXs35n56I5Ce7DK6NJbaU=
Subject key identifier: 43:BB:B5:60:58:7C:DA:97:04:9B:36:B4:8A:BA:A0:90:00:48:E7:60
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 018FC350C95A26BB89545DF005E1D8BD1527
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/Q7u1YFh82pcEmza0irqgkABI52A.roa
Signing time: Wed 29 May 2024 07:46:42 +0000
ROA not before: Wed 29 May 2024 07:46:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216319
IP address blocks: 94.228.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 11:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c3:50:c9:5a:26:bb:89:54:5d:f0:05:e1:d8:bd:15:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: May 29 07:46:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43bbb560587cda97049b36b48abaa0900048e760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:8b:1b:a0:77:7d:fa:b8:72:f4:70:96:f8:
cf:83:75:b4:7b:66:f2:42:02:34:cb:ae:37:cd:8f:
32:ab:41:d6:84:7c:97:ae:6c:11:41:b1:68:cc:49:
c8:6c:8c:a9:03:b6:b8:9a:10:f1:21:5b:b6:46:a8:
9e:d0:f0:97:79:57:a6:63:f6:e4:30:7a:fc:39:01:
59:1f:71:3d:0c:54:3b:55:bd:65:37:58:ab:15:c5:
53:68:0e:3d:e9:16:da:20:b9:4a:17:9f:32:f2:78:
09:84:5b:ee:38:3d:14:48:3c:e0:63:c2:84:28:f3:
1c:81:7e:85:48:d5:76:10:77:18:c2:78:95:66:3c:
07:a1:5d:06:3c:b9:2f:79:79:15:c5:aa:a1:78:06:
13:a1:0a:da:00:8f:f0:60:bd:d3:74:3a:88:32:16:
99:d6:88:f6:b8:45:70:b6:47:16:cd:69:08:86:51:
8d:f3:3c:07:28:e0:1d:80:9d:a4:cf:c0:53:90:8d:
99:a3:56:5b:81:56:a2:da:a0:59:c4:6b:f0:b1:ef:
fe:66:f7:5a:f0:4f:70:af:00:6e:3c:fd:b9:8d:ae:
a2:d8:2f:ec:e6:f9:41:44:0b:d0:36:42:ce:ff:38:
17:18:98:6c:2e:99:8e:0e:4d:ad:79:48:7f:92:d4:
65:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BB:B5:60:58:7C:DA:97:04:9B:36:B4:8A:BA:A0:90:00:48:E7:60
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/Q7u1YFh82pcEmza0irqgkABI52A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.166.0/24
Signature Algorithm: sha256WithRSAEncryption
38:d9:eb:5d:ac:64:e3:70:06:24:68:2c:1a:62:4b:83:ed:07:
49:ee:72:b0:ce:df:e7:d9:53:b8:2f:6e:ad:b2:cc:3a:77:33:
e0:fd:86:45:93:65:1b:ec:b5:23:2e:68:56:f0:a7:41:e5:a6:
95:13:c5:a7:80:bd:fd:6a:65:ea:8b:ff:72:f2:42:60:9e:3f:
d1:13:f7:ab:8e:f0:3f:4e:e1:a8:3c:64:6d:12:37:06:37:76:
f4:64:96:5d:3f:f1:9f:66:ec:49:c7:43:6b:07:8a:e6:0f:c4:
c0:2d:fe:8b:a2:5e:d8:7e:de:41:e7:5b:13:36:5c:03:d2:3f:
f5:51:c6:b5:50:2e:b9:ed:cd:11:d1:48:18:33:c9:b9:80:85:
b6:eb:55:f1:c2:d6:ef:2a:ab:d6:2e:9b:52:ca:a3:04:00:db:
36:e9:90:a0:55:38:20:50:ee:73:80:8b:eb:7d:57:14:0e:dd:
27:ad:87:e1:b0:b2:d0:4b:00:eb:07:18:6c:f8:7e:cf:b9:15:
a6:db:cb:b1:d8:87:b5:73:5e:11:bc:84:d2:ad:36:48:29:7b:
ab:38:b6:21:44:52:47:61:5c:1f:b4:8c:78:d0:1a:12:24:93:
c8:f2:72:45:ba:bf:e4:97:38:a1:ca:4f:87:b1:df:df:52:a1:
e2:63:d8:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/DUMlaJruJVF3wBeHYvRUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4
NzUwN2MwHhcNMjQwNTI5MDc0NjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2JiYjU2MDU4N2NkYTk3MDQ5YjM2YjQ4YWJhYTA5MDAwNDhlNzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5mLG6B3ffq4cvRwlvjPg3W0e2by
QgI0y643zY8yq0HWhHyXrmwRQbFozEnIbIypA7a4mhDxIVu2Rqie0PCXeVemY/bk
MHr8OQFZH3E9DFQ7Vb1lN1irFcVTaA496RbaILlKF58y8ngJhFvuOD0USDzgY8KE
KPMcgX6FSNV2EHcYwniVZjwHoV0GPLkveXkVxaqheAYToQraAI/wYL3TdDqIMhaZ
1oj2uEVwtkcWzWkIhlGN8zwHKOAdgJ2kz8BTkI2Zo1ZbgVai2qBZxGvwse/+Zvda
8E9wrwBuPP25ja6i2C/s5vlBRAvQNkLO/zgXGJhsLpmODk2teUh/ktRlrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEO7tWBYfNqXBJs2tIq6oJAASOdgMB8GA1UdIwQY
MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt
M2ZiYmJhOTI0OWNkLzEvUTd1MVlGaDgycGNFbXphMGlycWdrQUJJNTJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk
LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuSmMA0G
CSqGSIb3DQEBCwUAA4IBAQA42etdrGTjcAYkaCwaYkuD7QdJ7nKwzt/n2VO4L26t
ssw6dzPg/YZFk2Ub7LUjLmhW8KdB5aaVE8WngL39amXqi/9y8kJgnj/RE/erjvA/
TuGoPGRtEjcGN3b0ZJZdP/GfZuxJx0NrB4rmD8TALf6Lol7Yft5B51sTNlwD0j/1
Uca1UC657c0R0UgYM8m5gIW261XxwtbvKqvWLptSyqMEANs26ZCgVTggUO5zgIvr
fVcUDt0nrYfhsLLQSwDrBxhs+H7PuRWm28ux2Ie1c14RvITSrTZIKXurOLYhRFJH
YVwftIx40BoSJJPI8nJFur/klzihyk+Hsd/fUqHiY9iz
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:16 2024 by rpki-client on console-ams.rpki-client.org