Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/AO1dQw4PCDkGwd03SZhBi7H6mqE.roa
File: AO1dQw4PCDkGwd03SZhBi7H6mqE.roa (raw, json)
Hash identifier: I0xItsPAWZQF8K5wEBGR9zPdQL6Ri9N9DA3W2VuYiao=
Subject key identifier: 00:ED:5D:43:0E:0F:08:39:06:C1:DD:37:49:98:41:8B:B1:FA:9A:A1
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0193BC7630B2FC2B23EB268748980A8224C4
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/AO1dQw4PCDkGwd03SZhBi7H6mqE.roa
Signing time: Thu 12 Dec 2024 20:01:22 +0000
ROA not before: Thu 12 Dec 2024 20:01:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bc:76:30:b2:fc:2b:23:eb:26:87:48:98:0a:82:24:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Dec 12 20:01:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00ed5d430e0f083906c1dd374998418bb1fa9aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:dd:be:5e:93:9a:53:74:51:81:b8:7d:c7:
f9:51:7f:68:9f:b4:aa:e4:c8:ab:0d:a3:98:73:c6:
4d:0e:a0:1b:16:2b:ee:e8:dc:4e:39:b8:a9:74:ca:
23:43:c8:9f:f5:f0:bb:db:ee:b9:70:ec:ed:bb:38:
e2:68:c2:35:53:02:d3:f9:24:3c:35:64:37:c1:a5:
af:5f:44:e5:35:3e:4d:4c:9e:b3:21:ba:67:f0:7e:
42:db:d6:c3:48:ad:97:c4:4a:97:73:4e:87:d9:4f:
33:c6:64:84:92:42:f6:fb:20:65:33:1e:90:c9:47:
35:12:87:02:3c:01:00:ed:7b:f9:dd:01:6e:ea:16:
31:6f:85:3b:1c:33:86:8a:89:c9:ec:f7:ed:56:4c:
62:17:4d:f1:52:ee:fc:e8:3b:35:6c:89:b4:9b:00:
05:a7:00:4e:2c:42:57:94:42:15:0a:a0:a9:f6:9b:
9c:ce:2c:c5:e8:8e:80:6b:f7:49:f8:6a:1c:54:04:
82:c8:ce:e6:fe:66:11:d2:b2:0b:76:29:1b:92:a9:
6e:80:a9:24:11:f5:1b:76:46:68:97:9e:af:7d:02:
7b:8c:1a:58:e3:38:d9:ce:90:43:c1:ef:b3:2b:3e:
f2:d5:f6:bf:07:b9:6c:dd:a4:9b:d0:56:d3:e2:c1:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:ED:5D:43:0E:0F:08:39:06:C1:DD:37:49:98:41:8B:B1:FA:9A:A1
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/AO1dQw4PCDkGwd03SZhBi7H6mqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.44.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:a9:72:59:9f:74:88:e2:07:66:01:86:15:a1:49:94:80:e5:
5a:76:54:3d:a3:a5:2d:2a:00:f0:5c:4a:45:6d:6f:32:9d:99:
7d:bc:61:a1:41:85:91:61:30:24:44:06:f1:4e:a7:b0:17:57:
24:e2:17:bd:9a:2e:56:b9:5b:39:de:78:1e:e1:da:e7:48:3e:
98:69:66:13:f0:9d:e6:7a:07:b8:09:d0:b9:e6:03:5b:41:c4:
c5:ae:e6:d1:f3:cd:af:e5:82:84:10:15:b3:e7:f2:45:df:e0:
0f:9c:79:df:13:da:3b:4e:8d:6c:b9:ac:9e:f2:65:a7:c8:6f:
54:90:a1:0f:ac:56:fd:5f:46:30:5a:3e:14:59:f3:e2:c9:43:
c9:61:db:23:06:d1:46:1e:df:96:cc:5d:2c:91:91:99:cd:0f:
7d:2e:e1:21:64:dc:0a:0a:30:52:9d:ae:fd:64:e2:4c:b8:6b:
8d:84:5e:ce:fc:4c:48:7f:55:6c:1e:d6:b9:68:c4:03:3f:86:
52:2b:f4:4e:d7:b6:12:55:87:11:51:25:5d:29:df:b6:52:06:
c8:53:1b:4d:a8:86:32:ea:19:ca:00:2d:ce:02:2e:ae:f0:2a:
2e:e7:32:e7:7d:44:ff:95:a8:32:b6:6f:65:08:fd:5a:8c:27:
e2:b1:cc:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZO8djCy/Csj6yaHSJgKgiTEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjQxMjEyMjAwMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGVkNWQ0MzBlMGYwODM5MDZjMWRkMzc0OTk4NDE4YmIxZmE5YWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxrdvl6TmlN0UYG4fcf5UX9on7Sq
5MirDaOYc8ZNDqAbFivu6NxOObipdMojQ8if9fC72+65cOztuzjiaMI1UwLT+SQ8
NWQ3waWvX0TlNT5NTJ6zIbpn8H5C29bDSK2XxEqXc06H2U8zxmSEkkL2+yBlMx6Q
yUc1EocCPAEA7Xv53QFu6hYxb4U7HDOGionJ7PftVkxiF03xUu786Ds1bIm0mwAF
pwBOLEJXlEIVCqCp9puczizF6I6Aa/dJ+GocVASCyM7m/mYR0rILdikbkqlugKkk
EfUbdkZol56vfQJ7jBpY4zjZzpBDwe+zKz7y1fa/B7ls3aSb0FbT4sFhZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFADtXUMODwg5BsHdN0mYQYux+pqhMB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvQU8xZFF3NFBDRGtHd2QwM1NaaEJpN0g2bXFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXposMA0G
CSqGSIb3DQEBCwUAA4IBAQAcqXJZn3SI4gdmAYYVoUmUgOVadlQ9o6UtKgDwXEpF
bW8ynZl9vGGhQYWRYTAkRAbxTqewF1ck4he9mi5WuVs53nge4drnSD6YaWYT8J3m
ege4CdC55gNbQcTFrubR882v5YKEEBWz5/JF3+APnHnfE9o7To1suaye8mWnyG9U
kKEPrFb9X0YwWj4UWfPiyUPJYdsjBtFGHt+WzF0skZGZzQ99LuEhZNwKCjBSna79
ZOJMuGuNhF7O/ExIf1VsHta5aMQDP4ZSK/RO17YSVYcRUSVdKd+2UgbIUxtNqIYy
6hnKAC3OAi6u8Cou5zLnfUT/lagytm9lCP1ajCfisczE
-----END CERTIFICATE-----
Generated at Mon Apr 14 03:46:31 2025 by rpki-client