Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8eO6YOtDasxQ2CWbWY9RqRz20kQ.roa
File: 8eO6YOtDasxQ2CWbWY9RqRz20kQ.roa (raw, json)
Hash identifier: awTqmiIIn0sdsD+RLtkjQ3uvOBh/6vaiqSGkizF8vms=
Subject key identifier: F1:E3:BA:60:EB:43:6A:CC:50:D8:25:9B:59:8F:51:A9:1C:F6:D2:44
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01875BDCB1B14B5EB872FDF3A3FB5ABCEE7D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8eO6YOtDasxQ2CWbWY9RqRz20kQ.roa
Signing time: Fri 07 Apr 2023 13:16:42 +0000
ROA not before: Fri 07 Apr 2023 13:16:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208911
IP address blocks: 94.103.124.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5b:dc:b1:b1:4b:5e:b8:72:fd:f3:a3:fb:5a:bc:ee:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 7 13:16:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1e3ba60eb436acc50d8259b598f51a91cf6d244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:02:d3:ec:68:4c:39:91:ab:7d:91:4e:ce:55:
72:01:bd:9f:32:df:c3:d2:bc:ac:50:b3:a6:98:d5:
cf:50:c7:38:aa:cf:f6:4f:0f:8a:06:f6:9a:21:f6:
38:7e:1a:46:87:56:ac:15:75:e1:ff:72:d3:cc:76:
ef:c4:2e:af:2d:c1:2c:2e:67:9f:8e:6c:8e:7b:a6:
db:89:1a:07:55:93:a3:29:c6:6c:32:4f:31:9b:00:
cb:e1:4c:f8:74:bd:7a:65:7d:91:03:3d:a7:ee:ca:
f9:0a:94:c8:2f:58:8b:52:db:f1:d2:f5:96:35:3c:
86:e4:dd:5b:4b:1e:21:56:e0:6c:d1:20:c1:7e:0c:
5a:c2:0c:d0:7a:30:9b:26:d3:32:dd:e9:0f:15:d0:
8f:c2:50:e1:1a:d3:0e:fa:9d:a6:30:47:8d:b5:46:
b3:0a:20:cf:5d:ad:80:0d:d7:52:6c:fb:88:1d:99:
b0:b2:7a:8c:74:fb:b8:20:fa:c6:5a:87:d0:ec:ea:
6e:d6:03:8a:ca:97:a7:be:09:4a:17:95:ad:a7:91:
8c:d5:6b:0d:df:69:b3:77:3e:1f:c6:cd:e8:ee:15:
27:af:9e:62:2d:c9:8c:33:e8:b8:a4:ba:77:79:25:
00:1d:49:c1:6f:6d:ff:97:90:ed:80:64:1d:f6:22:
79:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E3:BA:60:EB:43:6A:CC:50:D8:25:9B:59:8F:51:A9:1C:F6:D2:44
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8eO6YOtDasxQ2CWbWY9RqRz20kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.124.0/24
94.154.163.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ea:6c:47:1b:af:46:01:62:e5:30:fa:ce:7b:77:d8:ba:3f:
61:20:14:35:d6:24:df:5b:68:09:81:71:9d:6c:fe:67:ab:61:
5c:58:d6:4f:24:30:45:b3:3f:aa:57:4b:b3:ab:ea:e8:93:ed:
37:8a:7b:50:18:22:54:15:94:c5:2a:80:9a:1e:74:03:87:18:
12:0d:de:fa:e2:d9:1e:c4:ce:e3:ab:81:de:83:89:ee:8c:e0:
a4:10:9d:56:1c:23:53:22:b8:90:39:bb:01:93:39:3c:d8:ec:
b7:ac:6b:80:98:1a:39:d2:58:67:a8:4d:55:79:e8:98:86:f2:
c7:8e:70:76:96:6d:3d:8f:93:b9:e6:7a:32:c0:49:75:32:7c:
56:32:e1:c0:f2:87:ab:db:bd:5b:9d:79:48:e1:c1:e2:45:ca:
fd:cf:75:dc:ec:cf:82:7c:2b:4d:ef:6a:46:26:50:08:13:ed:
d4:8b:09:81:3d:b8:aa:fb:85:67:13:21:eb:7f:4c:6f:26:58:
b9:ec:a6:3a:39:71:7a:fc:fd:4e:e0:9d:b1:13:da:28:49:0f:
b2:eb:7f:e9:47:aa:b4:76:18:d6:46:5d:6c:fd:cd:42:70:39:
b6:30:47:02:be:b3:7c:58:c5:bb:cf:46:f1:dc:4d:6e:40:54:
b9:2d:7f:c2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYdb3LGxS164cv3zo/tavO59MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNDA3MTMxNjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWUzYmE2MGViNDM2YWNjNTBkODI1OWI1OThmNTFhOTFjZjZkMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugLT7GhMOZGrfZFOzlVyAb2fMt/D
0rysULOmmNXPUMc4qs/2Tw+KBvaaIfY4fhpGh1asFXXh/3LTzHbvxC6vLcEsLmef
jmyOe6bbiRoHVZOjKcZsMk8xmwDL4Uz4dL16ZX2RAz2n7sr5CpTIL1iLUtvx0vWW
NTyG5N1bSx4hVuBs0SDBfgxawgzQejCbJtMy3ekPFdCPwlDhGtMO+p2mMEeNtUaz
CiDPXa2ADddSbPuIHZmwsnqMdPu4IPrGWofQ7Opu1gOKypenvglKF5Wtp5GM1WsN
32mzdz4fxs3o7hUnr55iLcmMM+i4pLp3eSUAHUnBb23/l5DtgGQd9iJ5hwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPHjumDrQ2rMUNglm1mPUakc9tJEMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvOGVPNllPdERhc3hRMkNXYldZOVJxUnoyMGtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXmd8AwQA
XpqjMA0GCSqGSIb3DQEBCwUAA4IBAQCx6mxHG69GAWLlMPrOe3fYuj9hIBQ11iTf
W2gJgXGdbP5nq2FcWNZPJDBFsz+qV0uzq+rok+03intQGCJUFZTFKoCaHnQDhxgS
Dd764tkexM7jq4Heg4nujOCkEJ1WHCNTIriQObsBkzk82Oy3rGuAmBo50lhnqE1V
eeiYhvLHjnB2lm09j5O55noywEl1MnxWMuHA8oer271bnXlI4cHiRcr9z3Xc7M+C
fCtN72pGJlAIE+3UiwmBPbiq+4VnEyHrf0xvJli57KY6OXF6/P1O4J2xE9ooSQ+y
63/pR6q0dhjWRl1s/c1CcDm2MEcCvrN8WMW7z0bx3E1uQFS5LX/C
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:38 2023 by rpki-client on console-fra.rpki-client.org