Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/ID_L2307KeMhf72D8EFvtIcANKA.roa
File: ID_L2307KeMhf72D8EFvtIcANKA.roa (raw, json)
Hash identifier: s/YMpo29Y6n/qiCo/c2fV1EH4gt6uDUiAXXFtDlKNHo=
Subject key identifier: 20:3F:CB:DB:7D:3B:29:E3:21:7F:BD:83:F0:41:6F:B4:87:00:34:A0
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 01904A19F92E6BBF435E2B6D9A006DB4A0B7
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/ID_L2307KeMhf72D8EFvtIcANKA.roa
Signing time: Mon 24 Jun 2024 11:55:34 +0000
ROA not before: Mon 24 Jun 2024 11:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 12:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:19:f9:2e:6b:bf:43:5e:2b:6d:9a:00:6d:b4:a0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jun 24 11:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=203fcbdb7d3b29e3217fbd83f0416fb4870034a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:7b:47:54:91:24:b2:44:d6:78:c7:0d:d9:
38:b3:0d:31:3e:ed:03:43:26:92:d7:3c:28:b1:46:
15:45:38:6a:70:f8:fd:da:52:3f:ca:59:da:6a:17:
02:cd:ae:00:59:6d:8c:f5:2a:fa:38:13:1e:8a:0f:
52:ed:0c:b3:69:07:03:6c:12:6c:5b:80:96:93:e4:
d5:05:5f:c8:03:70:ba:1e:c4:6c:89:fb:c4:98:4c:
1b:27:a2:66:1c:95:6f:fc:a5:ed:ef:b1:87:17:9e:
ae:62:96:e7:a3:f2:2f:7e:fb:9f:46:2f:c3:87:47:
82:0a:87:c3:83:64:43:ec:f2:1d:99:26:7d:c9:5c:
36:67:13:9d:79:e8:8e:25:13:9c:48:70:a4:71:5f:
29:2b:db:14:5d:06:85:a4:21:d9:8d:2d:2e:00:27:
1c:61:e8:52:05:50:00:5e:a0:e7:f0:c7:39:77:13:
b0:ed:42:74:78:f2:3f:8b:39:de:11:cc:50:43:e3:
d4:18:15:8e:14:c3:31:e7:7c:d1:bb:ec:fe:fc:b1:
07:07:0a:b5:4f:6b:04:6f:46:03:53:52:c3:88:56:
6e:f0:a3:42:47:e6:3b:4e:03:a9:76:ce:99:b6:47:
51:49:e4:98:8b:04:1b:94:e1:e6:c1:4e:92:04:63:
97:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3F:CB:DB:7D:3B:29:E3:21:7F:BD:83:F0:41:6F:B4:87:00:34:A0
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/ID_L2307KeMhf72D8EFvtIcANKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.46.0/24
Signature Algorithm: sha256WithRSAEncryption
96:e2:0c:3f:5e:a0:89:9e:9a:f2:9a:82:c6:3c:d7:51:2d:68:
ac:fc:f2:f9:ea:7c:f8:6f:32:09:b6:07:0f:b3:1b:90:21:98:
3c:27:85:ef:ea:ec:3d:53:38:b7:1d:8d:78:01:4f:d0:84:48:
86:98:17:3e:f2:02:83:fd:34:d5:5c:36:74:88:b8:28:a9:54:
5e:92:02:ab:f3:ef:f7:b2:56:fb:f6:ab:68:c5:c8:e2:08:00:
c5:8a:b4:72:5e:df:37:06:56:e5:7d:f4:44:bb:9f:f6:07:d6:
42:7b:3d:f6:a4:fd:b7:86:0e:3a:01:dd:0c:79:01:09:c5:91:
2f:7f:31:03:60:86:de:5b:f2:44:e7:6c:a6:09:ec:ca:32:bc:
e2:e7:0c:36:59:1f:48:ea:20:36:05:43:d6:64:12:33:e7:2d:
64:dc:a0:a4:40:f9:c8:25:4b:90:08:f6:d7:0d:e7:30:c4:22:
6d:52:97:d0:d1:28:54:08:bc:be:53:76:c6:81:33:e4:07:1d:
de:5c:b5:d5:c3:23:c3:ed:71:5f:67:86:0f:da:04:b9:55:16:
de:69:4d:55:7d:0b:b3:f0:90:67:db:da:f9:0f:e2:aa:ba:7f:
44:a5:47:b8:a6:26:1b:7a:ea:5e:90:52:95:f6:f5:96:76:6a:
3a:69:b0:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBKGfkua79DXittmgBttKC3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjQwNjI0MTE1NTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDNmY2JkYjdkM2IyOWUzMjE3ZmJkODNmMDQxNmZiNDg3MDAzNGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQB7R1SRJLJE1njHDdk4sw0xPu0D
QyaS1zwosUYVRThqcPj92lI/ylnaahcCza4AWW2M9Sr6OBMeig9S7QyzaQcDbBJs
W4CWk+TVBV/IA3C6HsRsifvEmEwbJ6JmHJVv/KXt77GHF56uYpbno/IvfvufRi/D
h0eCCofDg2RD7PIdmSZ9yVw2ZxOdeeiOJROcSHCkcV8pK9sUXQaFpCHZjS0uACcc
YehSBVAAXqDn8Mc5dxOw7UJ0ePI/izneEcxQQ+PUGBWOFMMx53zRu+z+/LEHBwq1
T2sEb0YDU1LDiFZu8KNCR+Y7TgOpds6ZtkdRSeSYiwQblOHmwU6SBGOX6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCA/y9t9OynjIX+9g/BBb7SHADSgMB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvSURfTDIzMDdLZU1oZjcyRDhFRnZ0SWNBTktBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpouMA0G
CSqGSIb3DQEBCwUAA4IBAQCW4gw/XqCJnprymoLGPNdRLWis/PL56nz4bzIJtgcP
sxuQIZg8J4Xv6uw9Uzi3HY14AU/QhEiGmBc+8gKD/TTVXDZ0iLgoqVRekgKr8+/3
slb79qtoxcjiCADFirRyXt83BlblffREu5/2B9ZCez32pP23hg46Ad0MeQEJxZEv
fzEDYIbeW/JE52ymCezKMrzi5ww2WR9I6iA2BUPWZBIz5y1k3KCkQPnIJUuQCPbX
DecwxCJtUpfQ0ShUCLy+U3bGgTPkBx3eXLXVwyPD7XFfZ4YP2gS5VRbeaU1VfQuz
8JBn29r5D+Kqun9EpUe4piYbeupekFKV9vWWdmo6abDz
-----END CERTIFICATE-----
Generated at Tue Jun 25 16:30:42 2024 by rpki-client on console-ams.rpki-client.org