Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/Pxy0pCRouA_T1V5HTxlXb__eqPs.roa
File: Pxy0pCRouA_T1V5HTxlXb__eqPs.roa (raw, json)
Hash identifier: VU/EOPSJEG6hKDDz/3PF4RteWfviMJnfHjaPqHq48jY=
Subject key identifier: 3F:1C:B4:A4:24:68:B8:0F:D3:D5:5E:47:4F:19:57:6F:FF:DE:A8:FB
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 018BE9FC33E633C210FE877770BD0154626F
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/Pxy0pCRouA_T1V5HTxlXb__eqPs.roa
Signing time: Sun 19 Nov 2023 23:48:21 +0000
ROA not before: Sun 19 Nov 2023 23:48:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211448
IP address blocks: 94.176.161.0/24 maxlen: 24
94.176.160.0/23 maxlen: 23
94.176.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e9:fc:33:e6:33:c2:10:fe:87:77:70:bd:01:54:62:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Nov 19 23:48:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f1cb4a42468b80fd3d55e474f19576fffdea8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0e:33:5a:74:23:87:c4:50:6a:d0:b9:ad:f5:
50:c1:3c:6f:32:94:d5:23:1a:d3:e0:0f:3b:d1:5a:
50:e7:44:61:ff:b0:4b:70:0a:65:31:c0:a8:6b:39:
14:e0:f5:75:fa:e6:a9:b2:f2:3e:a1:fd:82:34:17:
73:af:e3:e4:8d:74:8c:e1:d2:8c:1c:dd:4f:8b:8f:
89:ed:5a:45:8e:3d:bd:26:fc:05:42:cf:b6:b6:fc:
35:4a:0b:6e:fe:bf:e6:3f:21:4e:37:07:a4:63:0e:
c3:76:0e:a8:a4:7c:0a:3c:01:0d:d4:40:b9:19:b6:
d7:47:93:27:77:24:48:39:31:25:af:40:b0:58:de:
fe:b9:c2:8d:89:5f:36:90:8e:60:6e:54:94:b1:4f:
6b:7e:0a:e3:bd:48:49:be:54:bd:8d:d0:3c:21:37:
5a:75:ad:ef:85:21:69:6c:6d:06:7e:40:8d:3e:c4:
2e:60:5e:e2:0d:4e:80:31:fb:5e:c5:e7:86:84:d7:
85:32:94:e8:c6:2c:6b:69:d3:1e:df:04:81:07:f6:
00:4d:91:11:8f:0a:80:1c:c2:cf:bb:8b:81:e9:5e:
27:bc:43:1d:36:ff:01:db:96:11:c0:67:5e:10:de:
47:2c:e4:d0:ee:0a:ee:a1:a7:98:bb:f0:91:77:94:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1C:B4:A4:24:68:B8:0F:D3:D5:5E:47:4F:19:57:6F:FF:DE:A8:FB
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/Pxy0pCRouA_T1V5HTxlXb__eqPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.160.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:4a:3d:94:fa:da:2a:78:32:9e:05:06:6c:79:f2:fc:7d:41:
f1:91:81:9a:9f:ff:95:45:fc:22:15:0a:49:b5:c6:ce:5f:11:
ae:fa:0e:2c:ee:d0:5c:78:d8:69:71:bd:24:d3:bc:49:55:f8:
4e:63:67:35:6e:0a:86:92:30:53:1e:da:ed:55:2a:be:c3:61:
50:86:07:a6:f7:33:21:15:70:1e:e9:a2:8d:13:d9:c1:fb:bb:
b7:f5:27:05:ac:da:42:87:c5:1e:fc:d4:15:fb:f6:2f:a8:7d:
6a:87:2b:c0:35:63:03:e0:1e:9c:e5:3d:48:22:ec:db:40:38:
0a:1b:49:c1:86:6e:6b:08:5f:7a:2a:47:7f:1f:9c:7b:d4:66:
da:15:8d:94:5c:bd:bf:43:fa:15:e9:31:b6:ac:f9:ca:3b:bf:
f6:f2:6e:c0:be:60:8d:db:ec:dc:c8:c8:1d:4a:39:f3:2c:e6:
77:86:39:2e:08:a3:0e:56:dc:00:02:66:42:29:2c:0c:e3:ba:
b7:6d:93:0c:ab:b5:2c:a6:09:31:59:f5:fe:28:0b:8d:90:03:
8d:d6:b2:44:c8:b3:52:9c:37:9f:e9:f1:22:12:3b:36:9c:36:
a4:a3:3e:51:d3:28:71:31:e8:70:e5:09:c7:5c:80:e7:f0:0d:
44:c2:a7:46
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYvp/DPmM8IQ/od3cL0BVGJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MGUwMTdjZjE3MTE1MTliMGZmOWY2NTg1OGM0OTFiMmZh
NWQ0MGIwHhcNMjMxMTE5MjM0ODIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjFjYjRhNDI0NjhiODBmZDNkNTVlNDc0ZjE5NTc2ZmZmZGVhOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw4zWnQjh8RQatC5rfVQwTxvMpTV
IxrT4A870VpQ50Rh/7BLcAplMcCoazkU4PV1+uapsvI+of2CNBdzr+PkjXSM4dKM
HN1Pi4+J7VpFjj29JvwFQs+2tvw1Sgtu/r/mPyFONwekYw7Ddg6opHwKPAEN1EC5
GbbXR5MndyRIOTElr0CwWN7+ucKNiV82kI5gblSUsU9rfgrjvUhJvlS9jdA8ITda
da3vhSFpbG0GfkCNPsQuYF7iDU6AMftexeeGhNeFMpToxixradMe3wSBB/YATZER
jwqAHMLPu4uB6V4nvEMdNv8B25YRwGdeEN5HLOTQ7gruoaeYu/CRd5SkoQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFD8ctKQkaLgP09VeR08ZV2//3qj7MB8GA1UdIwQY
MBaAFPgOAXzxcRUZsP+fZYWMSRsvpdQLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1BNEJmUEZ4RlJtd181OWxoWXhKR3ktbDFBcy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2
LThjZTYwYTVjOGIxZi8xL1B4eTBwQ1JvdUFfVDFWNUhUeGxYYl9fZXFQcy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2LThjZTYwYTVjOGIx
Zi8xLzEtQTRCZlBGeEZSbXdfNTlsaFl4Skd5LWwxQXMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFesKAw
DQYJKoZIhvcNAQELBQADggEBAIxKPZT62ip4Mp4FBmx58vx9QfGRgZqf/5VF/CIV
Ckm1xs5fEa76Dizu0Fx42GlxvSTTvElV+E5jZzVuCoaSMFMe2u1VKr7DYVCGB6b3
MyEVcB7poo0T2cH7u7f1JwWs2kKHxR781BX79i+ofWqHK8A1YwPgHpzlPUgi7NtA
OAobScGGbmsIX3oqR38fnHvUZtoVjZRcvb9D+hXpMbas+co7v/bybsC+YI3b7NzI
yB1KOfMs5neGOS4Iow5W3AACZkIpLAzjurdtkwyrtSymCTFZ9f4oC42QA43WskTI
s1KcN5/p8SISOzacNqSjPlHTKHEx6HDlCcdcgOfwDUTCp0Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:42 2024 by rpki-client on console-ams.rpki-client.org