Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lC3DdpJJP6p94gcrf56ctOd4lBI.roa
File: lC3DdpJJP6p94gcrf56ctOd4lBI.roa (raw, json)
Hash identifier: XXJG1/FoSE8oy6mJmbFxlLk+iu2xLC8KuM7O7Az6s7Y=
Subject key identifier: 94:2D:C3:76:92:49:3F:AA:7D:E2:07:2B:7F:9E:9C:B4:E7:78:94:12
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01941A865A32BBA551A4ED0C787FE55A990C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lC3DdpJJP6p94gcrf56ctOd4lBI.roa
Signing time: Tue 31 Dec 2024 02:23:20 +0000
ROA not before: Tue 31 Dec 2024 02:23:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214943
IP address blocks: 94.156.177.0/24 maxlen: 24
94.156.227.0/24 maxlen: 24
212.87.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Dec 2024 08:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1a:86:5a:32:bb:a5:51:a4:ed:0c:78:7f:e5:5a:99:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 31 02:23:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=942dc37692493faa7de2072b7f9e9cb4e7789412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:be:86:c3:f6:e7:37:ca:e4:76:67:5e:ec:
d4:70:e4:7a:a8:e2:4a:b9:9a:3c:51:1c:b2:2b:a6:
d0:aa:83:be:2e:50:63:c5:73:05:33:41:7b:e2:05:
87:71:de:57:7d:d8:7a:a4:8d:39:6b:54:22:c1:97:
ac:b8:d2:69:e7:04:cf:41:0a:d5:9b:27:59:b6:ea:
bb:84:85:f1:44:6a:5e:a2:de:26:f1:57:bc:62:f3:
e3:e2:82:f9:25:a9:71:13:c7:48:c8:51:ab:77:86:
62:32:5d:8c:e2:09:f5:e1:27:1e:7f:0c:fa:61:e9:
69:ca:46:59:6b:09:cb:d0:d0:d3:2d:7f:32:09:52:
a9:f0:b4:b4:69:ba:5b:8b:2b:b9:e3:58:2b:ad:8d:
9d:da:ec:bb:16:fa:ad:61:e4:14:08:e7:1d:e6:39:
aa:14:b9:7c:a6:4c:64:42:da:11:04:2a:b3:97:ff:
a6:45:d8:87:fd:e4:bc:3e:3e:5d:8f:39:28:ad:e5:
32:cd:2c:ed:45:2d:a4:2b:6e:8f:1e:14:78:51:9f:
0f:06:06:60:06:bb:30:22:4b:68:3c:6f:c4:c0:ec:
48:ea:da:89:a1:bd:3d:dc:57:97:46:19:8e:e9:41:
27:32:f6:ba:a8:46:7d:b0:39:9f:a8:25:40:b5:5b:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2D:C3:76:92:49:3F:AA:7D:E2:07:2B:7F:9E:9C:B4:E7:78:94:12
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lC3DdpJJP6p94gcrf56ctOd4lBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.177.0/24
94.156.227.0/24
212.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
01:29:b3:58:4b:03:ea:5e:c7:7f:cf:99:6e:48:08:19:15:d9:
34:8e:3f:da:e5:d0:d9:da:6a:74:d0:e0:ff:13:f4:c9:16:c0:
e5:e3:dd:46:f7:75:72:1c:06:23:36:2e:73:fc:70:53:f9:d1:
af:c1:42:f8:1f:43:e3:92:6e:c5:39:a0:fe:64:89:4b:c0:c4:
c5:6b:75:b8:c1:47:79:35:85:d5:f7:f3:5a:89:ec:cb:c1:a8:
b0:3f:d3:31:b6:0c:a4:81:5c:64:ec:73:c7:a6:94:de:37:9d:
35:70:76:e9:af:9c:68:ec:fb:cb:da:e9:b1:5e:10:f7:12:51:
b7:41:4e:7d:56:83:e8:7a:41:48:de:0d:64:cc:89:ef:cc:4f:
87:64:37:a5:2f:b9:f2:f5:e0:e0:e3:88:44:c9:1b:4f:b1:26:
5e:eb:31:19:6b:8a:74:59:28:cf:87:89:79:b4:06:bb:b7:c6:
65:e6:34:20:dc:0a:31:2d:3a:e1:e9:c4:94:aa:42:40:cc:ad:
69:c7:8e:f4:9c:45:0d:74:e6:90:16:6d:7e:0a:d4:48:70:14:
08:64:2b:d3:5f:9d:95:9f:39:1c:ec:b4:ec:03:1f:9a:39:bd:
f1:ab:25:d3:e2:e7:31:d6:02:7c:0b:12:9e:81:75:b4:0b:20:
79:a7:06:11
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQahloyu6VRpO0MeH/lWpkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMjMxMDIyMzIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDJkYzM3NjkyNDkzZmFhN2RlMjA3MmI3ZjllOWNiNGU3Nzg5NDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEq+hsP25zfK5HZnXuzUcOR6qOJK
uZo8URyyK6bQqoO+LlBjxXMFM0F74gWHcd5Xfdh6pI05a1QiwZesuNJp5wTPQQrV
mydZtuq7hIXxRGpeot4m8Ve8YvPj4oL5JalxE8dIyFGrd4ZiMl2M4gn14Scefwz6
YelpykZZawnL0NDTLX8yCVKp8LS0abpbiyu541grrY2d2uy7FvqtYeQUCOcd5jmq
FLl8pkxkQtoRBCqzl/+mRdiH/eS8Pj5djzkoreUyzSztRS2kK26PHhR4UZ8PBgZg
BrswIktoPG/EwOxI6tqJob093FeXRhmO6UEnMva6qEZ9sDmfqCVAtVsWbwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJQtw3aSST+qfeIHK3+enLTneJQSMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvbEMzRGRwSkpQNnA5NGdjcmY1NmN0T2Q0bEJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXpyxAwQA
XpzjAwQA1FffMA0GCSqGSIb3DQEBCwUAA4IBAQABKbNYSwPqXsd/z5luSAgZFdk0
jj/a5dDZ2mp00OD/E/TJFsDl491G93VyHAYjNi5z/HBT+dGvwUL4H0Pjkm7FOaD+
ZIlLwMTFa3W4wUd5NYXV9/NaiezLwaiwP9MxtgykgVxk7HPHppTeN501cHbpr5xo
7PvL2umxXhD3ElG3QU59VoPoekFI3g1kzInvzE+HZDelL7ny9eDg44hEyRtPsSZe
6zEZa4p0WSjPh4l5tAa7t8Zl5jQg3AoxLTrh6cSUqkJAzK1px470nEUNdOaQFm1+
CtRIcBQIZCvTX52Vnzkc7LTsAx+aOb3xqyXT4ucx1gJ8CxKegXW0CyB5pwYR
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:36:54 2025 by rpki-client