Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MUkvjNOLPhaq1FNKigBJ0PLVkrQ.roa
File: MUkvjNOLPhaq1FNKigBJ0PLVkrQ.roa (raw, json)
Hash identifier: nfIc06a+w2vJ01k1BWRu7ZbPzHHuR5NFt/MijfvVVp4=
Subject key identifier: 31:49:2F:8C:D3:8B:3E:16:AA:D4:53:4A:8A:00:49:D0:F2:D5:92:B4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81F6C71CEEB845FE473EB4462D57EC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MUkvjNOLPhaq1FNKigBJ0PLVkrQ.roa
Signing time: Sun 01 Jan 2023 13:25:11 +0000
ROA not before: Sun 01 Jan 2023 13:25:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60701
IP address blocks: 94.156.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:f6:c7:1c:ee:b8:45:fe:47:3e:b4:46:2d:57:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31492f8cd38b3e16aad4534a8a0049d0f2d592b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:20:40:e0:90:6b:42:66:40:b7:74:24:76:9b:
75:33:ce:db:bf:c2:6d:4f:29:f0:60:93:2d:1c:64:
00:7c:54:ca:24:d2:8a:29:9b:33:b2:48:60:18:50:
c5:c2:f4:f0:b8:ab:53:97:6a:53:9d:66:f8:8e:60:
71:07:18:4d:84:58:7c:9d:40:3f:e9:f1:15:51:51:
ba:22:a6:7a:05:e9:54:46:e0:46:e6:a0:7e:3e:a8:
45:55:13:71:70:3f:67:da:3e:19:2a:63:0a:ef:1b:
7e:ae:a1:5c:40:01:f1:f8:1c:af:a0:06:b6:65:f2:
5d:c7:f1:b3:6c:0f:f1:ec:8b:93:25:27:a6:fd:1e:
23:c2:41:08:a3:2c:b7:c5:a9:0b:41:55:43:fa:8e:
f1:d2:00:cf:11:28:f8:e8:96:fb:b2:9a:40:80:75:
d5:66:65:1a:12:b9:6b:88:3b:8e:b5:47:c1:08:6a:
97:d0:fe:4e:d5:0f:82:ed:69:d7:0a:f3:49:0b:c5:
7e:3e:8b:98:27:22:17:e8:57:1f:ee:9a:b4:2e:c9:
49:a2:0b:20:8f:f2:03:ed:22:80:89:60:7c:05:a3:
30:0d:51:55:15:d7:c8:7b:90:c7:ea:d6:e3:7e:f7:
f6:cb:75:00:c3:ca:a2:5a:40:6b:8a:e1:7b:e0:2d:
5a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:49:2F:8C:D3:8B:3E:16:AA:D4:53:4A:8A:00:49:D0:F2:D5:92:B4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/MUkvjNOLPhaq1FNKigBJ0PLVkrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.103.0/24
Signature Algorithm: sha256WithRSAEncryption
51:01:71:24:59:71:9d:e0:6a:6c:48:ba:5f:5b:a8:85:1b:ac:
1c:1b:47:c8:84:f1:69:6c:ee:56:26:8a:c3:91:41:bf:5f:74:
d4:7b:06:4b:40:47:79:16:0a:e2:ac:84:a2:e5:60:8b:d3:3d:
c8:79:d8:a4:e2:8d:5a:eb:43:dc:80:c8:69:82:9f:77:c7:1a:
12:99:57:64:f0:79:be:c7:5e:2d:12:14:c9:d7:56:ce:d7:7f:
06:bf:60:f9:9b:a8:11:62:21:12:fe:37:c1:8f:31:2d:15:83:
11:e6:32:4c:e2:07:d5:88:25:29:f9:55:9b:8c:75:f0:a5:cd:
52:9a:73:dc:a7:24:7d:4c:1a:94:f1:99:62:ea:63:6b:86:9c:
65:4c:2f:a5:4e:35:7b:1c:a9:71:4c:aa:79:42:df:ea:65:38:
09:af:12:af:0f:2b:ab:47:8b:70:1a:a1:1e:04:99:1c:10:9a:
64:cd:7e:82:b4:27:0c:c2:33:9c:ed:e9:ee:7f:f8:22:5f:2b:
22:0e:bc:ca:4b:79:52:23:87:4e:6e:90:d5:be:93:c6:34:7d:
22:c5:69:12:26:eb:f3:fa:93:41:97:76:5e:52:90:53:3f:e5:
79:00:0c:5a:6c:e8:cb:91:2a:3a:fb:ef:a2:75:73:6b:0b:f6:
23:67:29:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtgfbHHO64Rf5HPrRGLVfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTQ5MmY4Y2QzOGIzZTE2YWFkNDUzNGE4YTAwNDlkMGYyZDU5MmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyBA4JBrQmZAt3Qkdpt1M87bv8Jt
TynwYJMtHGQAfFTKJNKKKZszskhgGFDFwvTwuKtTl2pTnWb4jmBxBxhNhFh8nUA/
6fEVUVG6IqZ6BelURuBG5qB+PqhFVRNxcD9n2j4ZKmMK7xt+rqFcQAHx+ByvoAa2
ZfJdx/GzbA/x7IuTJSem/R4jwkEIoyy3xakLQVVD+o7x0gDPESj46Jb7sppAgHXV
ZmUaErlriDuOtUfBCGqX0P5O1Q+C7WnXCvNJC8V+PouYJyIX6Fcf7pq0LslJogsg
j/ID7SKAiWB8BaMwDVFVFdfIe5DH6tbjfvf2y3UAw8qiWkBriuF74C1amwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDFJL4zTiz4WqtRTSooASdDy1ZK0MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvTVVrdmpOT0xQaGFxMUZOS2lnQkowUExWa3JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpxnMA0G
CSqGSIb3DQEBCwUAA4IBAQBRAXEkWXGd4GpsSLpfW6iFG6wcG0fIhPFpbO5WJorD
kUG/X3TUewZLQEd5FgrirISi5WCL0z3Iedik4o1a60PcgMhpgp93xxoSmVdk8Hm+
x14tEhTJ11bO138Gv2D5m6gRYiES/jfBjzEtFYMR5jJM4gfViCUp+VWbjHXwpc1S
mnPcpyR9TBqU8Zli6mNrhpxlTC+lTjV7HKlxTKp5Qt/qZTgJrxKvDyurR4twGqEe
BJkcEJpkzX6CtCcMwjOc7enuf/giXysiDrzKS3lSI4dObpDVvpPGNH0ixWkSJuvz
+pNBl3ZeUpBTP+V5AAxabOjLkSo6+++idXNrC/YjZylU
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:10 2024 by rpki-client on console-ams.rpki-client.org