Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/1-R-nnnrqBBEZunD1ai8vhgVPgqM.roa
File: 1-R-nnnrqBBEZunD1ai8vhgVPgqM.roa (raw, json)
Hash identifier: wivMkO3rMYxIazKW2T20qZDFmTuMClJwl2U5Tv3JFXU=
Subject key identifier: F9:1F:A7:9E:7A:EA:04:11:19:BA:70:F5:6A:2F:2F:86:05:4F:82:A3
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018D115E7A9B54DEF2AD734B0E14A6428216
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/1-R-nnnrqBBEZunD1ai8vhgVPgqM.roa
Signing time: Tue 16 Jan 2024 08:23:40 +0000
ROA not before: Tue 16 Jan 2024 08:23:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 462206
IP address blocks: 94.154.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 11:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:5e:7a:9b:54:de:f2:ad:73:4b:0e:14:a6:42:82:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jan 16 08:23:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f91fa79e7aea041119ba70f56a2f2f86054f82a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:95:7d:a8:08:50:6c:83:2f:e7:5d:7e:c2:
ab:9b:21:1b:10:eb:40:0f:bb:4e:d1:7f:6c:eb:25:
38:92:2b:14:b7:a3:31:6f:a6:bc:12:90:43:56:47:
b2:de:2b:4a:4a:0b:e2:36:10:ce:06:a8:42:6c:48:
f7:68:c6:8a:43:aa:4b:93:fd:8a:d7:d0:5a:7f:8b:
4b:21:2f:c7:85:43:9a:94:37:73:cc:5f:7d:87:f8:
12:9d:af:84:b3:0e:61:d3:24:ed:61:2f:30:b8:19:
d3:ff:c9:60:9e:fc:4d:ba:4d:04:47:72:8c:4b:30:
72:65:ec:62:de:6e:e4:ff:dd:84:d7:0a:48:bd:98:
1e:08:d7:03:19:2a:66:8c:64:24:0b:da:08:fe:c0:
c2:ca:de:00:ef:d8:b2:55:0d:4a:a8:f5:e3:7e:67:
ce:e0:d3:3e:49:31:f5:4a:06:8c:33:cb:b2:af:ff:
27:c6:23:4e:5e:3b:76:9f:7c:d4:8c:76:56:20:91:
b6:53:27:4e:44:4f:38:21:d5:4c:d1:c4:5a:05:87:
8f:b7:50:5a:3d:cf:cb:0b:c7:78:78:73:32:6e:22:
74:8a:fe:5c:f7:79:53:4f:29:1f:19:7f:e3:48:df:
9d:c5:83:d2:30:e0:f2:15:bc:1b:7b:ac:cd:dd:c2:
7e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1F:A7:9E:7A:EA:04:11:19:BA:70:F5:6A:2F:2F:86:05:4F:82:A3
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/1-R-nnnrqBBEZunD1ai8vhgVPgqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b2:ef:31:01:d4:9a:8c:5e:f8:cb:5b:eb:2b:7e:22:1c:ff:
97:10:0f:cc:5e:4f:54:2c:24:ed:aa:13:02:a3:07:73:eb:6c:
fe:e9:38:d1:90:70:29:e9:74:97:93:1d:0e:51:39:0d:46:91:
5e:ce:27:c7:a0:95:89:5c:d2:b3:6a:89:c7:be:6e:97:ce:64:
77:4a:ba:ad:3b:e0:b2:e2:43:77:6c:1a:66:0b:78:ba:55:b5:
45:1b:5f:2e:6e:21:98:65:9c:c5:8c:78:85:65:82:05:12:20:
e5:98:7a:cc:e5:dd:cd:c6:a1:a2:1e:9d:5e:07:6c:a9:9b:bf:
8c:ca:62:53:ed:cc:bc:50:84:6f:b3:1d:5b:a9:87:d7:8a:51:
52:22:b8:65:44:1f:62:29:34:99:be:b2:9f:18:ad:a5:32:3e:
da:a9:30:72:f3:3d:8e:9a:c6:49:7d:2f:d4:3d:40:60:49:19:
96:c2:cb:2b:b3:02:7e:d4:2a:76:f0:9d:fe:4e:f9:fe:81:71:
18:b9:dd:22:10:86:ac:9b:3d:a1:67:42:53:d3:60:33:a1:00:
ec:4a:81:83:ad:23:16:78:6b:e5:36:95:b9:51:26:10:13:7f:
e1:fc:d5:1b:0d:48:f2:b4:5b:9c:19:82:55:12:a8:20:f7:63:
62:d4:2c:a7
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY0RXnqbVN7yrXNLDhSmQoIWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjQwMTE2MDgyMzQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTFmYTc5ZTdhZWEwNDExMTliYTcwZjU2YTJmMmY4NjA1NGY4MmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9iVfagIUGyDL+ddfsKrmyEbEOtA
D7tO0X9s6yU4kisUt6Mxb6a8EpBDVkey3itKSgviNhDOBqhCbEj3aMaKQ6pLk/2K
19Baf4tLIS/HhUOalDdzzF99h/gSna+Esw5h0yTtYS8wuBnT/8lgnvxNuk0ER3KM
SzByZexi3m7k/92E1wpIvZgeCNcDGSpmjGQkC9oI/sDCyt4A79iyVQ1KqPXjfmfO
4NM+STH1SgaMM8uyr/8nxiNOXjt2n3zUjHZWIJG2UydORE84IdVM0cRaBYePt1Ba
Pc/LC8d4eHMybiJ0iv5c93lTTykfGX/jSN+dxYPSMODyFbwbe6zN3cJ++QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPkfp5566gQRGbpw9WovL4YFT4KjMB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvMS1SLW5ubnJxQkJFWnVuRDFhaTh2aGdWUGdxTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTAvYjIyNjAzLTkwYWItNDNhZC1hYjE2LTY1MjQ5Y2JjNTcz
Yy8xLzNCSGE3Nl80SEg1UUVuallmWnZDc2dUWEVWVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF6aKDAN
BgkqhkiG9w0BAQsFAAOCAQEAb7LvMQHUmoxe+Mtb6yt+Ihz/lxAPzF5PVCwk7aoT
AqMHc+ts/uk40ZBwKel0l5MdDlE5DUaRXs4nx6CViVzSs2qJx75ul85kd0q6rTvg
suJDd2waZgt4ulW1RRtfLm4hmGWcxYx4hWWCBRIg5Zh6zOXdzcahoh6dXgdsqZu/
jMpiU+3MvFCEb7MdW6mH14pRUiK4ZUQfYik0mb6ynxitpTI+2qkwcvM9jprGSX0v
1D1AYEkZlsLLK7MCftQqdvCd/k75/oFxGLndIhCGrJs9oWdCU9NgM6EA7EqBg60j
Fnhr5TaVuVEmEBN/4fzVGw1I8rRbnBmCVRKoIPdjYtQspw==
-----END CERTIFICATE-----
Generated at Tue Jan 16 16:09:58 2024 by rpki-client on console-fra.rpki-client.org