Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/A8x84RRW_9MYOPM_7qIr-PbUxws.roa
File: A8x84RRW_9MYOPM_7qIr-PbUxws.roa (raw, json)
Hash identifier: Xb7WJtDqM2mutiPJ0PxneuFzDA5lATc08DSuOuVVHaQ=
Subject key identifier: 03:CC:7C:E1:14:56:FF:D3:18:38:F3:3F:EE:A2:2B:F8:F6:D4:C7:0B
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018CC5DC5D41534E0E3254B2E2D3722B81F2
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/A8x84RRW_9MYOPM_7qIr-PbUxws.roa
Signing time: Mon 01 Jan 2024 16:30:02 +0000
ROA not before: Mon 01 Jan 2024 16:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Mar 2024 09:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5d:41:53:4e:0e:32:54:b2:e2:d3:72:2b:81:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jan 1 16:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03cc7ce11456ffd31838f33feea22bf8f6d4c70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ca:1a:af:e0:2b:3f:a5:b2:59:0b:84:cd:08:
c8:a8:44:72:4c:37:aa:64:c3:eb:59:3a:28:24:b6:
6f:8f:40:b8:e4:08:19:8d:01:2a:e3:0f:97:0d:0b:
f0:f2:a8:fb:ca:a8:a9:90:e1:4f:f8:e4:80:20:1f:
b6:95:cf:f1:65:12:3e:fb:d3:63:81:11:13:07:0d:
ba:b3:79:f7:34:ed:0b:a4:bb:4d:bf:6a:09:cc:dc:
52:a9:b2:f9:cf:53:53:29:cf:18:ae:1d:d2:e5:b4:
55:76:66:a7:42:cb:48:55:aa:a8:27:b0:9d:a9:47:
5c:79:8a:96:d7:74:74:17:6a:6f:6f:c8:3d:e7:e5:
52:44:be:4f:21:d9:a5:7e:27:80:45:b3:f5:53:ba:
5a:94:2c:2e:e1:79:63:a6:a3:29:f8:43:93:ad:93:
a4:c7:74:c2:19:dd:93:4f:85:3f:b9:25:3d:1c:5e:
22:af:d0:30:4b:89:77:1c:56:50:36:4b:8b:06:4b:
61:08:e2:6a:43:d1:48:e6:ea:d2:9e:2d:15:19:8f:
b4:a3:02:84:a6:80:d8:f0:fa:56:d3:5b:f2:fd:dd:
e4:96:24:ac:37:53:3d:e7:61:54:b4:82:2d:07:5d:
8e:05:0c:32:65:61:96:c0:03:8b:a7:cf:01:b5:1f:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CC:7C:E1:14:56:FF:D3:18:38:F3:3F:EE:A2:2B:F8:F6:D4:C7:0B
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/A8x84RRW_9MYOPM_7qIr-PbUxws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.46.0/24
Signature Algorithm: sha256WithRSAEncryption
61:74:91:75:a7:1f:4b:5f:27:e6:7d:70:a4:a2:f2:63:f5:56:
d3:c6:d2:db:94:70:ba:d1:69:a7:f0:8c:b9:d0:e6:96:5b:f7:
14:bc:55:a3:23:75:4a:96:79:85:4f:a9:3f:63:c7:a0:43:89:
88:b6:c4:46:73:f1:d8:cf:75:31:bb:02:b1:e5:fc:ee:8c:79:
f9:7a:47:7f:dd:5a:04:19:4d:34:53:38:a5:7e:ab:99:81:bc:
17:f4:b7:23:f8:d3:be:ee:2b:d6:55:54:94:55:5a:15:9b:fd:
17:19:a1:7a:b8:9b:f3:6a:ec:8d:a2:e5:9c:a6:4d:1b:a0:c9:
7d:06:d1:86:39:cc:ee:3a:71:05:ec:2c:17:6a:7a:a9:be:b9:
9d:7d:08:ff:9b:b2:b4:b9:a6:a2:73:ba:c3:c8:e5:e8:79:14:
e4:75:e0:40:4f:12:ef:5b:e0:71:cd:54:03:03:3b:cd:b0:a9:
d6:24:db:0d:2a:1c:4f:7d:53:71:d9:37:f4:68:fd:89:5a:51:
c9:e5:29:5f:12:20:c6:c1:0b:58:d1:2b:a4:f2:21:b3:62:81:
c7:2e:a1:c2:df:ea:28:f4:14:17:72:34:3a:fc:f4:96:f9:1e:
3d:cb:35:63:f3:58:38:8f:09:92:08:a7:3f:8e:85:a9:e7:85:
d4:18:e0:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3F1BU04OMlSy4tNyK4HyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjQwMTAxMTYzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2NjN2NlMTE0NTZmZmQzMTgzOGYzM2ZlZWEyMmJmOGY2ZDRjNzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsoar+ArP6WyWQuEzQjIqERyTDeq
ZMPrWTooJLZvj0C45AgZjQEq4w+XDQvw8qj7yqipkOFP+OSAIB+2lc/xZRI++9Nj
gRETBw26s3n3NO0LpLtNv2oJzNxSqbL5z1NTKc8Yrh3S5bRVdmanQstIVaqoJ7Cd
qUdceYqW13R0F2pvb8g95+VSRL5PIdmlfieARbP1U7palCwu4XljpqMp+EOTrZOk
x3TCGd2TT4U/uSU9HF4ir9AwS4l3HFZQNkuLBkthCOJqQ9FI5urSni0VGY+0owKE
poDY8PpW01vy/d3kliSsN1M952FUtIItB12OBQwyZWGWwAOLp88BtR+oQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAPMfOEUVv/TGDjzP+6iK/j21McLMB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvQTh4ODRSUldfOU1ZT1BNXzdxSXItUGJVeHdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpouMA0G
CSqGSIb3DQEBCwUAA4IBAQBhdJF1px9LXyfmfXCkovJj9VbTxtLblHC60Wmn8Iy5
0OaWW/cUvFWjI3VKlnmFT6k/Y8egQ4mItsRGc/HYz3UxuwKx5fzujHn5ekd/3VoE
GU00UzilfquZgbwX9Lcj+NO+7ivWVVSUVVoVm/0XGaF6uJvzauyNouWcpk0boMl9
BtGGOczuOnEF7CwXanqpvrmdfQj/m7K0uaaic7rDyOXoeRTkdeBATxLvW+BxzVQD
AzvNsKnWJNsNKhxPfVNx2Tf0aP2JWlHJ5SlfEiDGwQtY0Suk8iGzYoHHLqHC3+oo
9BQXcjQ6/PSW+R49yzVj81g4jwmSCKc/joWp54XUGOCN
-----END CERTIFICATE-----
Generated at Sat Mar 9 11:30:55 2024 by rpki-client on console-fra.rpki-client.org