Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7BFck5KMXmoOZ17W_8LpNRL4xUU.roa
File: 7BFck5KMXmoOZ17W_8LpNRL4xUU.roa (raw, json)
Hash identifier: AX+l5l6kjwHP3TBQDZynvMmcLBDbEjguL8idmoeueUw=
Subject key identifier: EC:11:5C:93:92:8C:5E:6A:0E:67:5E:D6:FF:C2:E9:35:12:F8:C5:45
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01902AFEB8842D4D74721A613E51EE7A20E0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7BFck5KMXmoOZ17W_8LpNRL4xUU.roa
Signing time: Tue 18 Jun 2024 10:57:34 +0000
ROA not before: Tue 18 Jun 2024 10:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215439
IP address blocks: 94.154.163.0/24 maxlen: 24
193.222.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 11:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2a:fe:b8:84:2d:4d:74:72:1a:61:3e:51:ee:7a:20:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 18 10:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec115c93928c5e6a0e675ed6ffc2e93512f8c545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:3c:24:5d:ab:f3:5e:39:10:e4:20:3c:a3:
ab:21:0b:eb:34:10:a7:85:3a:aa:af:83:d8:c6:b8:
8f:06:21:52:06:58:fe:73:27:07:6c:5a:f3:69:c0:
47:1a:d6:89:65:87:84:0d:3e:11:18:8e:65:b4:a4:
4a:1d:aa:00:3d:c5:aa:8b:a0:f8:5b:c4:bc:ab:c8:
87:49:2a:51:a8:61:c1:06:04:9d:24:41:c8:74:93:
4d:b0:88:d5:3c:b6:2a:74:ca:8b:e9:ee:43:16:88:
22:e3:d1:dd:b7:c4:9a:a3:0e:db:5e:77:77:8c:14:
7d:be:a7:9f:64:b8:65:1e:33:dc:9d:65:89:ab:60:
71:68:f4:25:a5:1b:09:b2:8f:c5:f6:37:4e:66:32:
5d:4c:7e:1c:db:14:ae:2d:69:76:2e:58:0c:f7:1b:
2b:bc:34:e8:dc:7a:03:65:ca:62:b0:d1:90:26:9f:
d2:7d:90:08:50:4b:b6:24:66:48:57:09:66:10:58:
e5:54:98:58:31:5e:e5:04:60:84:8d:13:e9:03:3c:
5c:87:1d:06:d3:d9:05:95:1f:f2:d9:7c:90:c4:66:
30:75:ed:7f:6f:4f:16:f6:e3:52:0a:82:ec:ea:3f:
5c:8a:6b:93:87:5f:98:0c:f6:87:9c:74:80:04:fd:
8d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:11:5C:93:92:8C:5E:6A:0E:67:5E:D6:FF:C2:E9:35:12:F8:C5:45
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7BFck5KMXmoOZ17W_8LpNRL4xUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.163.0/24
193.222.99.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e3:d7:a0:67:75:08:79:88:f2:ae:2e:b3:3c:98:d7:9e:f5:
c6:e1:20:08:ba:34:e4:db:41:2e:86:55:1b:a9:96:83:d9:e6:
5c:be:7e:03:d4:4e:1c:df:5e:ac:e5:a9:02:ad:60:2e:5b:28:
3b:bb:58:3a:0f:20:ef:01:17:57:a4:b6:ff:d4:83:4d:f9:eb:
0d:a9:38:9b:ec:65:0f:bb:f6:1e:df:12:3e:28:41:20:c7:1d:
dc:35:25:35:71:3a:57:ca:2e:ed:e6:a2:1a:12:60:63:d0:6d:
03:e9:0d:89:b7:6d:b1:67:0c:e0:dd:cb:4c:60:68:be:51:78:
7f:ac:58:c0:60:74:17:69:a1:0b:c2:05:42:b7:cd:08:1b:7e:
4f:40:2a:6b:c1:ee:cf:49:aa:cc:8b:f7:3b:c1:86:a6:95:be:
ff:13:ed:8e:f5:d0:26:3c:54:85:5f:a1:74:68:8d:73:eb:7a:
f8:04:20:99:94:67:c9:37:e9:43:b9:7c:72:60:c6:c1:67:d8:
c8:e3:21:e8:33:e5:3b:a9:08:a7:28:d4:d3:dd:13:99:b8:78:
5f:3a:f4:68:4c:e1:1e:91:c9:6b:1f:47:56:a0:63:f7:77:a5:
d3:9b:b9:dc:dd:30:48:c5:78:a6:b7:24:c1:db:b6:37:dd:6e:
6f:ca:b8:fd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZAq/riELU10chphPlHueiDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNjE4MTA1NzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzExNWM5MzkyOGM1ZTZhMGU2NzVlZDZmZmMyZTkzNTEyZjhjNTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKg8JF2r8145EOQgPKOrIQvrNBCn
hTqqr4PYxriPBiFSBlj+cycHbFrzacBHGtaJZYeEDT4RGI5ltKRKHaoAPcWqi6D4
W8S8q8iHSSpRqGHBBgSdJEHIdJNNsIjVPLYqdMqL6e5DFogi49Hdt8Saow7bXnd3
jBR9vqefZLhlHjPcnWWJq2BxaPQlpRsJso/F9jdOZjJdTH4c2xSuLWl2LlgM9xsr
vDTo3HoDZcpisNGQJp/SfZAIUEu2JGZIVwlmEFjlVJhYMV7lBGCEjRPpAzxchx0G
09kFlR/y2XyQxGYwde1/b08W9uNSCoLs6j9cimuTh1+YDPaHnHSABP2NAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOwRXJOSjF5qDmde1v/C6TUS+MVFMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvN0JGY2s1S01YbW9PWjE3V184THBOUkw0eFVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXpqjAwQA
wd5jMA0GCSqGSIb3DQEBCwUAA4IBAQAI49egZ3UIeYjyri6zPJjXnvXG4SAIujTk
20EuhlUbqZaD2eZcvn4D1E4c316s5akCrWAuWyg7u1g6DyDvARdXpLb/1INN+esN
qTib7GUPu/Ye3xI+KEEgxx3cNSU1cTpXyi7t5qIaEmBj0G0D6Q2Jt22xZwzg3ctM
YGi+UXh/rFjAYHQXaaELwgVCt80IG35PQCprwe7PSarMi/c7wYamlb7/E+2O9dAm
PFSFX6F0aI1z63r4BCCZlGfJN+lDuXxyYMbBZ9jI4yHoM+U7qQinKNTT3ROZuHhf
OvRoTOEekclrH0dWoGP3d6XTm7nc3TBIxXimtyTB27Y33W5vyrj9
-----END CERTIFICATE-----
Generated at Mon Jun 24 16:22:16 2024 by rpki-client on console-ams.rpki-client.org