Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s_3yecH7k91LWaJ_EmT5QseFrxM.roa
File: s_3yecH7k91LWaJ_EmT5QseFrxM.roa (raw, json)
Hash identifier: f5W19vAD9IQp4ZOJO3digLWtaybXrBOjQek7dkvGkYw=
Subject key identifier: B3:FD:F2:79:C1:FB:93:DD:4B:59:A2:7F:12:64:F9:42:C7:85:AF:13
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189E5478AF884F7E76AFB4E1838AEE638E1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s_3yecH7k91LWaJ_EmT5QseFrxM.roa
Signing time: Fri 11 Aug 2023 15:46:58 +0000
ROA not before: Fri 11 Aug 2023 15:46:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208885
IP address blocks: 94.156.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e5:47:8a:f8:84:f7:e7:6a:fb:4e:18:38:ae:e6:38:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 11 15:46:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3fdf279c1fb93dd4b59a27f1264f942c785af13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:52:ab:e1:bc:77:21:4a:60:63:82:d9:50:dd:
eb:63:ad:8d:3b:9f:c1:8b:a8:48:d6:cd:5d:28:1a:
69:92:c8:27:17:3b:47:b9:d0:66:b0:ab:d1:6b:b3:
13:de:4e:15:00:9c:66:55:35:fa:ae:7b:0f:24:da:
95:4a:6a:0a:19:6e:6a:2b:93:24:7d:ad:7f:38:d5:
95:10:6b:25:08:bc:aa:9a:17:c4:e6:1d:45:11:f8:
8f:80:ef:33:cd:8f:90:28:52:9b:33:3c:89:85:c2:
93:88:7d:c3:61:e7:41:74:0d:7f:5b:e2:a2:bb:01:
0d:f7:c6:50:19:6f:25:09:f0:2b:88:7c:4a:f9:79:
61:50:71:77:e4:48:61:e5:0e:81:2f:90:e8:ce:e5:
b4:6f:38:72:75:e7:7b:7b:89:8f:42:3f:59:22:2a:
4f:b0:e3:51:ec:fc:4e:4a:a1:6d:94:d3:f9:07:f9:
1d:00:25:64:06:d8:40:78:ec:72:47:08:c2:35:fa:
b4:69:77:e5:8c:80:12:e8:21:72:c9:e9:cd:3c:e7:
95:a5:11:b8:6c:a1:df:ca:9f:26:74:a8:d1:69:7c:
42:3c:78:0b:69:f5:c8:ea:65:76:50:3c:9f:f8:9a:
77:ce:2e:da:84:ea:59:c7:44:a4:96:8a:f0:1e:e7:
ac:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FD:F2:79:C1:FB:93:DD:4B:59:A2:7F:12:64:F9:42:C7:85:AF:13
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/s_3yecH7k91LWaJ_EmT5QseFrxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f2:fa:73:1c:26:ef:f2:64:e9:d8:03:9b:67:8c:89:2f:58:
b4:f2:42:2b:3a:cd:0c:92:fa:fd:97:4f:b9:04:01:96:3e:40:
8a:3c:fe:3b:18:c8:56:dd:1e:12:32:fb:44:ca:67:6f:14:21:
6b:93:72:51:74:f5:48:9b:1f:34:7d:8a:a4:00:b3:9b:ea:67:
00:96:21:d9:f3:66:01:70:fc:f2:d5:37:54:07:37:a4:80:25:
89:2f:7d:a9:e2:f5:44:b9:f9:00:0e:7f:48:5a:4e:c9:4b:1e:
d0:24:b6:97:b7:51:cb:d2:57:8a:33:ef:81:c6:7c:c1:5e:5a:
d0:15:9d:61:25:fe:5c:38:a7:0a:58:c7:40:e5:ae:0f:da:67:
43:de:8c:f2:ab:9e:cd:52:d4:da:58:a7:8a:6f:98:36:5d:b7:
72:50:f6:f5:44:32:56:b7:0d:62:fd:ef:df:03:7b:fd:cd:ac:
ef:9a:a6:b1:99:30:6f:71:4a:7c:b5:3a:b1:88:1c:9e:66:e1:
7d:ce:93:c3:3b:2a:19:ff:40:0d:2b:cf:10:11:05:0d:3c:4b:
e6:bb:22:14:74:0b:2f:dd:43:db:67:cb:33:17:c6:63:ca:fd:
ff:2f:b9:3a:4e:38:19:ec:b4:97:90:7d:7f:1c:77:5a:cd:22:
c7:44:c9:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnlR4r4hPfnavtOGDiu5jjhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwODExMTU0NjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2ZkZjI3OWMxZmI5M2RkNGI1OWEyN2YxMjY0Zjk0MmM3ODVhZjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFKr4bx3IUpgY4LZUN3rY62NO5/B
i6hI1s1dKBppksgnFztHudBmsKvRa7MT3k4VAJxmVTX6rnsPJNqVSmoKGW5qK5Mk
fa1/ONWVEGslCLyqmhfE5h1FEfiPgO8zzY+QKFKbMzyJhcKTiH3DYedBdA1/W+Ki
uwEN98ZQGW8lCfAriHxK+XlhUHF35Ehh5Q6BL5DozuW0bzhyded7e4mPQj9ZIipP
sONR7PxOSqFtlNP5B/kdACVkBthAeOxyRwjCNfq0aXfljIAS6CFyyenNPOeVpRG4
bKHfyp8mdKjRaXxCPHgLafXI6mV2UDyf+Jp3zi7ahOpZx0SklorwHues3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLP98nnB+5PdS1mifxJk+ULHha8TMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvc18zeWVjSDdrOTFMV2FKX0VtVDVRc2VGcnhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpwKMA0G
CSqGSIb3DQEBCwUAA4IBAQB78vpzHCbv8mTp2AObZ4yJL1i08kIrOs0Mkvr9l0+5
BAGWPkCKPP47GMhW3R4SMvtEymdvFCFrk3JRdPVImx80fYqkALOb6mcAliHZ82YB
cPzy1TdUBzekgCWJL32p4vVEufkADn9IWk7JSx7QJLaXt1HL0leKM++BxnzBXlrQ
FZ1hJf5cOKcKWMdA5a4P2mdD3ozyq57NUtTaWKeKb5g2XbdyUPb1RDJWtw1i/e/f
A3v9zazvmqaxmTBvcUp8tTqxiByeZuF9zpPDOyoZ/0ANK88QEQUNPEvmuyIUdAsv
3UPbZ8szF8Zjyv3/L7k6TjgZ7LSXkH1/HHdazSLHRMlf
-----END CERTIFICATE-----
Generated at Mon Aug 14 13:19:31 2023 by rpki-client on console-ams.rpki-client.org