Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/E0-fBJmv9JlBa-CMAODOyGwOkKs.roa
File: E0-fBJmv9JlBa-CMAODOyGwOkKs.roa (raw, json)
Hash identifier: J4J3sUBgL6MpVyv3F/leI1uvQdHyqsohiSFJBnZDXjs=
Subject key identifier: 13:4F:9F:04:99:AF:F4:99:41:6B:E0:8C:00:E0:CE:C8:6C:0E:90:AB
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018F824DC1A8A01D530F013A28D551EE6A90
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/E0-fBJmv9JlBa-CMAODOyGwOkKs.roa
Signing time: Thu 16 May 2024 16:48:04 +0000
ROA not before: Thu 16 May 2024 16:48:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 94.154.40.0/22 maxlen: 24
94.154.40.0/24 maxlen: 24
94.154.41.0/24 maxlen: 24
94.154.42.0/24 maxlen: 24
94.154.44.0/24 maxlen: 24
94.154.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 09:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:82:4d:c1:a8:a0:1d:53:0f:01:3a:28:d5:51:ee:6a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: May 16 16:48:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=134f9f0499aff499416be08c00e0cec86c0e90ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:de:60:ba:6f:06:3d:62:70:22:cb:b3:8b:
cc:10:98:95:b7:9c:c2:5c:84:de:f1:a3:b5:3b:4f:
01:43:67:b5:b3:93:62:07:91:2e:fe:5e:e8:bc:fd:
2c:4f:09:37:9a:54:71:82:03:2a:93:0c:a6:d4:1e:
f8:8f:e8:3d:90:f2:34:42:61:76:61:94:8d:3a:d0:
ee:51:07:ed:95:c1:fb:49:e8:df:a1:e0:34:30:f6:
ee:df:3a:45:c9:bb:32:e0:6d:2c:6a:3e:67:f5:14:
8b:d2:b0:8a:65:d3:ca:79:33:15:1c:89:b3:b5:d6:
d3:f8:21:e1:78:27:6c:63:6f:d3:5b:15:3b:8d:f9:
ba:01:4b:9c:0e:f1:0f:21:08:b9:e7:19:ea:fd:4a:
78:e9:63:fb:7b:82:04:98:bb:e6:3a:3d:9b:32:ea:
cc:e0:71:2c:de:07:88:f2:e2:a2:be:64:08:d9:08:
16:3d:97:a0:7e:db:73:26:9d:20:bb:3b:9f:9c:90:
00:eb:1a:30:5a:0a:49:7a:97:87:d3:e6:8d:a4:d0:
dd:73:7a:42:06:a7:38:53:c0:02:9c:2b:57:7b:2d:
81:50:29:39:8c:f3:b9:de:02:18:37:10:17:17:6e:
41:33:d1:2a:6d:8f:10:ff:dc:d3:fd:67:81:26:3b:
a7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4F:9F:04:99:AF:F4:99:41:6B:E0:8C:00:E0:CE:C8:6C:0E:90:AB
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/E0-fBJmv9JlBa-CMAODOyGwOkKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0-94.154.45.255
Signature Algorithm: sha256WithRSAEncryption
aa:0c:41:b7:c3:5a:54:de:45:5d:84:c6:d5:b3:66:9b:a3:57:
e8:f7:ca:91:b3:ee:f9:42:b6:51:3f:96:ca:82:7f:fb:5c:56:
49:10:d6:77:cf:b2:86:ec:67:f2:0c:0a:0e:09:3b:2e:43:13:
6f:4a:a4:8f:ea:7f:81:fb:a0:8c:15:33:3f:c5:58:2a:f5:05:
c6:90:3a:f4:dd:9a:cd:da:c2:36:19:d2:5e:90:41:08:06:44:
49:6a:0e:0d:30:1c:11:d3:02:ae:df:7c:4f:12:fe:7b:e3:5e:
9a:97:a0:54:5c:0a:29:b9:c8:b2:6b:97:f6:c0:68:e2:9a:b5:
60:01:80:cd:e2:53:1a:80:73:87:be:bf:63:c8:15:63:9a:48:
75:09:78:c5:d2:78:09:82:28:d8:3a:a8:b6:e1:34:87:50:2a:
67:fa:c5:b6:1f:d7:d8:a5:6c:5a:ad:8c:1e:71:2c:c4:8b:0c:
44:e6:9e:d7:0d:f2:e1:73:1d:58:7e:96:0b:b4:2c:c1:b7:6d:
05:fe:07:e3:29:6b:71:13:b7:ec:97:44:45:cc:64:c0:44:db:
ea:3a:f3:54:b3:be:71:f4:ed:0d:53:6c:47:6d:04:44:dd:f2:
b0:67:13:e4:d6:16:74:16:39:08:0a:52:f2:45:a4:35:fd:31:
0c:53:23:4f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY+CTcGooB1TDwE6KNVR7mqQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjQwNTE2MTY0ODA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzRmOWYwNDk5YWZmNDk5NDE2YmUwOGMwMGUwY2VjODZjMGU5MGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUTeYLpvBj1icCLLs4vMEJiVt5zC
XITe8aO1O08BQ2e1s5NiB5Eu/l7ovP0sTwk3mlRxggMqkwym1B74j+g9kPI0QmF2
YZSNOtDuUQftlcH7SejfoeA0MPbu3zpFybsy4G0saj5n9RSL0rCKZdPKeTMVHImz
tdbT+CHheCdsY2/TWxU7jfm6AUucDvEPIQi55xnq/Up46WP7e4IEmLvmOj2bMurM
4HEs3geI8uKivmQI2QgWPZegfttzJp0guzufnJAA6xowWgpJepeH0+aNpNDdc3pC
Bqc4U8ACnCtXey2BUCk5jPO53gIYNxAXF25BM9EqbY8Q/9zT/WeBJjunbQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBNPnwSZr/SZQWvgjADgzshsDpCrMB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvRTAtZkJKbXY5SmxCYS1DTUFPRE95R3dPa0tzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBANemigD
BAFemiwwDQYJKoZIhvcNAQELBQADggEBAKoMQbfDWlTeRV2ExtWzZpujV+j3ypGz
7vlCtlE/lsqCf/tcVkkQ1nfPsobsZ/IMCg4JOy5DE29KpI/qf4H7oIwVMz/FWCr1
BcaQOvTdms3awjYZ0l6QQQgGRElqDg0wHBHTAq7ffE8S/nvjXpqXoFRcCim5yLJr
l/bAaOKatWABgM3iUxqAc4e+v2PIFWOaSHUJeMXSeAmCKNg6qLbhNIdQKmf6xbYf
19ilbFqtjB5xLMSLDETmntcN8uFzHVh+lgu0LMG3bQX+B+Mpa3ETt+yXREXMZMBE
2+o681SzvnH07Q1TbEdtBETd8rBnE+TWFnQWOQgKUvJFpDX9MQxTI08=
-----END CERTIFICATE-----
Generated at Thu May 23 12:58:39 2024 by rpki-client on console-fra.rpki-client.org