Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/JW2fYzeauki839m0FxTEanunp6g.roa
File: JW2fYzeauki839m0FxTEanunp6g.roa (raw, json)
Hash identifier: Hm3bP66JNx/e449JV3UAXEKml2MjCEnXkOYwgYNzmkU=
Subject key identifier: 25:6D:9F:63:37:9A:BA:48:BC:DF:D9:B4:17:14:C4:6A:7B:A7:A7:A8
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0190A69C0B3D911865296D2C8FF2CFE8DE56
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/JW2fYzeauki839m0FxTEanunp6g.roa
Signing time: Fri 12 Jul 2024 11:02:42 +0000
ROA not before: Fri 12 Jul 2024 11:02:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.40.0/24 maxlen: 24
94.154.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 10:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a6:9c:0b:3d:91:18:65:29:6d:2c:8f:f2:cf:e8:de:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jul 12 11:02:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=256d9f63379aba48bcdfd9b41714c46a7ba7a7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:a6:d2:6c:98:24:c1:29:d2:b7:86:0e:d5:
8f:c1:8d:83:9d:c6:63:43:a9:52:cf:b9:09:53:c4:
30:6d:6d:52:7b:c1:3d:3e:d6:8e:ba:6c:45:2b:d4:
ba:1b:94:9e:cf:bd:94:5f:59:06:f7:dc:d3:86:b9:
c9:b4:26:e8:2b:6f:7b:78:da:9f:c8:69:4b:55:af:
a8:89:ae:2d:33:3f:31:b3:1d:44:f3:d0:56:d5:15:
4a:89:1e:04:3e:84:a6:00:c8:2a:5e:a6:5f:8b:6e:
d2:4c:a6:55:67:01:95:74:3a:97:68:9c:9e:6c:3d:
15:b5:d5:19:5c:78:bf:f2:d7:43:cb:e9:e4:d6:a6:
93:2b:7b:83:80:f3:ae:d6:84:f9:66:9d:60:1f:a1:
af:72:cf:fb:72:31:e2:19:71:6e:2e:0a:aa:77:3b:
4f:d9:f1:ce:3a:27:1d:81:4c:52:16:e0:bb:c7:54:
05:b0:2a:52:fa:f2:d2:57:c3:b5:dd:47:d8:aa:5a:
78:46:47:55:ca:e4:2f:55:3a:09:bc:1d:a6:7a:ac:
d4:47:7b:be:7a:e1:b6:bf:55:cb:3a:fc:f1:a5:09:
69:9c:ce:88:e0:b7:76:97:99:4a:df:a7:ea:9f:33:
c0:8f:f9:a4:ab:fe:c9:9e:6e:42:dd:17:f7:2d:75:
4b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6D:9F:63:37:9A:BA:48:BC:DF:D9:B4:17:14:C4:6A:7B:A7:A7:A8
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/JW2fYzeauki839m0FxTEanunp6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0/24
94.154.44.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:f6:3d:98:3f:5a:58:3f:95:21:1d:af:a1:be:af:a7:34:e0:
ff:c0:50:91:8a:bd:1b:b6:39:51:3e:05:b2:90:a5:7f:86:33:
62:e6:b7:cd:fa:68:ac:a4:02:8b:1e:78:5e:e4:fa:0d:3b:23:
2f:c9:f6:72:bf:6b:86:16:e3:3f:b1:86:bf:24:70:81:ce:dc:
a8:1f:0b:76:4a:53:20:d9:05:83:40:71:58:aa:b3:d3:af:e2:
84:79:23:d2:66:9c:84:05:31:4b:9f:ad:3c:6d:5d:ca:62:02:
48:1e:92:54:b2:69:55:88:1a:93:b8:f4:9b:fb:a3:1e:b3:df:
fe:24:50:ca:e6:18:84:45:80:6e:3c:3e:fa:c5:53:e1:5d:69:
ce:07:bd:d5:b2:52:8e:a9:e0:42:4e:ee:07:81:a5:49:5f:93:
2d:82:1b:26:01:7a:45:aa:11:17:29:de:c4:69:de:b7:c5:09:
36:72:c8:09:d3:ea:64:ce:99:be:41:f1:a2:98:6d:19:ac:7e:
a6:c5:c4:eb:46:69:e0:34:cb:50:e0:7a:ce:95:a3:79:26:f8:
d1:25:04:46:b1:03:30:2f:dc:fa:ce:72:cd:e1:72:10:fe:68:
86:a8:01:6d:ad:55:ab:13:d0:a9:cc:ac:bb:64:af:60:f0:5a:
f2:b6:40:bc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZCmnAs9kRhlKW0sj/LP6N5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjQwNzEyMTEwMjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTZkOWY2MzM3OWFiYTQ4YmNkZmQ5YjQxNzE0YzQ2YTdiYTdhN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0um0myYJMEp0reGDtWPwY2DncZj
Q6lSz7kJU8QwbW1Se8E9PtaOumxFK9S6G5Sez72UX1kG99zThrnJtCboK297eNqf
yGlLVa+oia4tMz8xsx1E89BW1RVKiR4EPoSmAMgqXqZfi27STKZVZwGVdDqXaJye
bD0VtdUZXHi/8tdDy+nk1qaTK3uDgPOu1oT5Zp1gH6Gvcs/7cjHiGXFuLgqqdztP
2fHOOicdgUxSFuC7x1QFsCpS+vLSV8O13UfYqlp4RkdVyuQvVToJvB2meqzUR3u+
euG2v1XLOvzxpQlpnM6I4Ld2l5lK36fqnzPAj/mkq/7Jnm5C3Rf3LXVLuQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCVtn2M3mrpIvN/ZtBcUxGp7p6eoMB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvSlcyZll6ZWF1a2k4MzltMEZ4VEVhbnVucDZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXpooAwQB
XposMA0GCSqGSIb3DQEBCwUAA4IBAQA69j2YP1pYP5UhHa+hvq+nNOD/wFCRir0b
tjlRPgWykKV/hjNi5rfN+mispAKLHnhe5PoNOyMvyfZyv2uGFuM/sYa/JHCBztyo
Hwt2SlMg2QWDQHFYqrPTr+KEeSPSZpyEBTFLn608bV3KYgJIHpJUsmlViBqTuPSb
+6Mes9/+JFDK5hiERYBuPD76xVPhXWnOB73VslKOqeBCTu4HgaVJX5MtghsmAXpF
qhEXKd7Ead63xQk2csgJ0+pkzpm+QfGimG0ZrH6mxcTrRmngNMtQ4HrOlaN5JvjR
JQRGsQMwL9z6znLN4XIQ/miGqAFtrVWrE9CpzKy7ZK9g8FrytkC8
-----END CERTIFICATE-----
Generated at Mon Jul 29 12:11:53 2024 by rpki-client on console-fra.rpki-client.org