Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/ttdHf0Pohrlfgvfvr_NiFlqGAK8.roa
File: ttdHf0Pohrlfgvfvr_NiFlqGAK8.roa (raw, json)
Hash identifier: Oheh3ahWaLklAPWgsO0BPUcFFsPsVPe/hLHaLJ81i2s=
Subject key identifier: B6:D7:47:7F:43:E8:86:B9:5F:82:F7:EF:AF:F3:62:16:5A:86:00:AF
Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial: 018BF31939526BFE82D5707586F8CDA43B06
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/ttdHf0Pohrlfgvfvr_NiFlqGAK8.roa
Signing time: Tue 21 Nov 2023 18:16:38 +0000
ROA not before: Tue 21 Nov 2023 18:16:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62292
IP address blocks: 94.199.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f3:19:39:52:6b:fe:82:d5:70:75:86:f8:cd:a4:3b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Validity
Not Before: Nov 21 18:16:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6d7477f43e886b95f82f7efaff362165a8600af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1e:5f:79:45:6c:6d:d4:03:26:59:8d:65:02:
56:e1:3f:41:59:8f:46:62:1d:d5:57:35:c7:2c:af:
e1:e6:5f:f5:24:91:b3:df:c9:c2:36:2e:ed:88:eb:
e2:bd:0a:2b:10:08:7c:32:ce:4b:f9:c2:5e:49:9d:
24:00:44:87:bd:be:ec:49:d6:90:31:58:34:16:91:
2f:37:e4:f9:57:49:52:64:88:3b:1d:62:48:6c:88:
16:45:8c:5f:63:80:6e:9d:d1:1c:bb:b7:ca:28:df:
06:56:0e:b6:5e:3b:ad:88:64:9f:14:c1:94:cf:b4:
4b:2a:5f:de:53:0f:8a:6b:44:1e:d1:7c:54:72:86:
1f:f1:6c:88:64:b9:a5:4f:cd:43:2e:2d:fb:62:e8:
5b:f4:ac:1a:b4:52:e2:6d:75:56:c2:c0:a9:43:6a:
90:d3:65:47:85:0a:0e:41:f2:0e:74:69:ee:47:7a:
1f:f9:e6:17:91:c5:0b:37:16:a3:a8:af:8c:49:f1:
88:46:cf:df:3e:f7:7d:ee:1c:8e:95:a3:e1:1b:aa:
14:7b:c4:c2:8b:45:3e:c4:62:8a:6f:10:6e:05:9c:
1b:a0:44:49:10:57:62:3d:b1:87:ba:ef:9e:a2:9b:
4d:5f:77:3c:c4:eb:e5:81:01:f4:ee:ad:b6:b0:97:
78:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D7:47:7F:43:E8:86:B9:5F:82:F7:EF:AF:F3:62:16:5A:86:00:AF
X509v3 Authority Key Identifier:
keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/ttdHf0Pohrlfgvfvr_NiFlqGAK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.178.0/24
Signature Algorithm: sha256WithRSAEncryption
89:df:86:31:33:23:92:dc:61:95:d4:76:4f:8d:f4:65:d4:ab:
a7:2a:f9:1c:0a:ee:ea:0f:66:08:9e:0b:ca:a4:1d:d7:a4:7f:
36:c8:35:18:df:8c:c1:cd:0d:4d:d4:60:ae:99:63:39:08:12:
78:e0:86:a3:c1:b1:e5:8f:d7:e8:82:36:c8:d0:ba:fd:e0:72:
5f:6e:cf:dd:5c:33:63:ec:d6:b8:45:cd:eb:7a:24:1d:2d:aa:
ef:50:65:0b:01:20:97:d1:c7:a9:8c:41:d3:3c:f8:1a:1c:4c:
1a:68:c5:28:6a:dc:9c:ef:27:c2:df:24:20:e4:eb:2a:86:97:
f6:32:68:65:fe:48:50:82:71:84:dc:8e:a3:13:d3:03:b1:75:
f8:e3:c0:f3:a8:d6:5c:46:c3:ff:75:f9:65:3e:e4:ca:27:ed:
71:e3:28:32:cf:2c:a0:f6:7c:74:2f:03:25:8a:96:1c:00:7a:
54:c9:ad:83:b7:0a:bb:8c:51:b6:54:b6:4f:ce:d0:fa:1e:db:
4c:98:11:1d:50:e3:d3:ff:8c:52:77:7d:34:2d:e6:ec:a4:0d:
82:b8:55:ea:90:c6:bd:3f:6a:1a:1a:58:ff:de:5f:2e:ab:15:
77:a8:5a:e4:0d:f3:c9:80:1c:5a:3a:4a:38:9c:dc:ab:da:08:
6b:8d:f5:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvzGTlSa/6C1XB1hvjNpDsGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MjJhZWEwZWY0YzA2NjdkYjgxOWY1ZDVhM2RhZWE2Mzk5
ZjAzOGMwHhcNMjMxMTIxMTgxNjM4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmQ3NDc3ZjQzZTg4NmI5NWY4MmY3ZWZhZmYzNjIxNjVhODYwMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh5feUVsbdQDJlmNZQJW4T9BWY9G
Yh3VVzXHLK/h5l/1JJGz38nCNi7tiOvivQorEAh8Ms5L+cJeSZ0kAESHvb7sSdaQ
MVg0FpEvN+T5V0lSZIg7HWJIbIgWRYxfY4BundEcu7fKKN8GVg62XjutiGSfFMGU
z7RLKl/eUw+Ka0Qe0XxUcoYf8WyIZLmlT81DLi37Yuhb9KwatFLibXVWwsCpQ2qQ
02VHhQoOQfIOdGnuR3of+eYXkcULNxajqK+MSfGIRs/fPvd97hyOlaPhG6oUe8TC
i0U+xGKKbxBuBZwboERJEFdiPbGHuu+eoptNX3c8xOvlgQH07q22sJd41wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLbXR39D6Ia5X4L376/zYhZahgCvMB8GA1UdIwQY
MBaAFEcirqDvTAZn24GfXVo9rqY5nwOMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MGMzODctYjIwYi00MzBhLWE1ZTYt
NmUzMDc0YzZjNjYzLzEvdHRkSGYwUG9ocmxmZ3ZmdnJfTmlGbHFHQUs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84MGMzODctYjIwYi00MzBhLWE1ZTYtNmUzMDc0YzZjNjYz
LzEvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXseyMA0G
CSqGSIb3DQEBCwUAA4IBAQCJ34YxMyOS3GGV1HZPjfRl1KunKvkcCu7qD2YIngvK
pB3XpH82yDUY34zBzQ1N1GCumWM5CBJ44IajwbHlj9fogjbI0Lr94HJfbs/dXDNj
7Na4Rc3reiQdLarvUGULASCX0cepjEHTPPgaHEwaaMUoatyc7yfC3yQg5Osqhpf2
Mmhl/khQgnGE3I6jE9MDsXX448DzqNZcRsP/dfllPuTKJ+1x4ygyzyyg9nx0LwMl
ipYcAHpUya2Dtwq7jFG2VLZPztD6HttMmBEdUOPT/4xSd300LebspA2CuFXqkMa9
P2oaGlj/3l8uqxV3qFrkDfPJgBxaOko4nNyr2ghrjfWN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:32 2024 by rpki-client on console-fra.rpki-client.org