Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/RI-4sxuwsMTPWFeZkKkemapxWO8.roa
File: RI-4sxuwsMTPWFeZkKkemapxWO8.roa (raw, json)
Hash identifier: Hq9m0Xg8G9+tHCrCqNfqjUzPGHFFcSvuoyrUF5UKrHs=
Subject key identifier: 44:8F:B8:B3:1B:B0:B0:C4:CF:58:57:99:90:A9:1E:99:AA:71:58:EF
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 01907A44F7E9374A19585F691AADE64D0328
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/RI-4sxuwsMTPWFeZkKkemapxWO8.roa
Signing time: Wed 03 Jul 2024 20:24:18 +0000
ROA not before: Wed 03 Jul 2024 20:24:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 13:10:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7a:44:f7:e9:37:4a:19:58:5f:69:1a:ad:e6:4d:03:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jul 3 20:24:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=448fb8b31bb0b0c4cf58579990a91e99aa7158ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:8e:5b:92:c1:b9:30:63:a1:f9:39:50:ac:
a0:f1:17:88:46:b2:44:7f:b1:37:d7:87:15:d9:11:
8b:1a:81:e3:1e:47:df:d7:7b:3f:16:85:69:84:91:
b7:8e:e8:c2:97:79:27:15:ad:e5:f5:cf:b4:02:36:
07:68:72:ed:6e:52:77:4e:5f:71:36:dd:8f:44:cd:
99:a5:cb:73:d6:06:0e:62:6b:43:f4:1a:3f:35:89:
eb:71:2b:27:7e:af:69:72:4b:3b:4e:e1:6e:7c:55:
83:9e:7d:82:d5:8c:75:bf:58:16:65:aa:dc:16:7b:
55:01:8c:e2:81:24:06:22:14:9f:f7:52:ee:cc:b2:
46:6a:bf:87:16:f5:55:ae:85:df:ac:5c:6b:3c:3b:
a5:4f:5d:2b:67:8b:d5:76:e8:6b:6e:53:63:8a:40:
9e:b2:2e:e6:d6:33:89:f8:fe:e0:21:f3:44:92:6a:
dc:88:23:8e:9c:20:d4:c1:75:16:26:af:70:c4:b2:
08:6f:4b:2a:f0:3f:53:50:30:e5:87:19:e3:2e:73:
88:6c:4b:d2:b4:23:eb:52:9c:ab:9f:70:d9:ba:24:
ec:f9:c1:65:06:78:a1:16:49:0b:70:02:19:a4:fc:
48:46:71:7c:91:c0:c9:3b:30:6a:ad:fb:e7:6a:28:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8F:B8:B3:1B:B0:B0:C4:CF:58:57:99:90:A9:1E:99:AA:71:58:EF
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/RI-4sxuwsMTPWFeZkKkemapxWO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.44.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:d8:22:4e:f6:f8:47:90:5b:69:d6:fb:c2:64:a6:a3:12:b5:
b8:a3:2a:13:47:b2:b8:13:78:e0:79:2c:c6:f2:52:c6:b6:e6:
a9:00:72:4a:6d:e9:1c:a1:dc:5a:b7:e4:ad:a1:44:66:1d:b3:
f6:87:c7:b8:50:bb:27:88:cb:4c:27:4e:4e:a8:c7:3c:ab:ab:
71:4e:5b:1b:89:8b:41:9a:0d:2d:8c:10:64:6a:6a:3d:a8:93:
63:e5:46:4d:c3:28:a5:58:97:ca:34:27:16:ef:ed:6d:ee:58:
06:07:f8:8a:08:7d:49:98:ef:8f:2d:3f:3a:ba:a6:3d:93:06:
99:95:54:1d:0e:94:e6:0f:d4:de:ff:6d:fd:e6:a2:7d:d4:ed:
61:c7:46:57:e5:f4:aa:93:43:d0:7e:f3:7d:55:04:ea:0b:3a:
08:c1:3b:59:bc:32:ef:96:a6:a1:9a:50:00:03:d4:56:ce:34:
a2:fe:8a:de:58:db:f7:13:cf:b2:9c:fa:04:cf:cc:4c:b5:b2:
5d:09:19:fc:da:87:d1:1b:33:c2:ed:0f:ed:56:ef:43:a0:62:
14:df:b1:2b:d0:b0:a2:ad:b8:f2:fa:9b:35:81:c3:5c:93:c5:
6e:ce:bd:8b:3b:d0:9b:cb:d1:d3:79:e3:a0:78:73:45:f3:1e:
a0:80:bc:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZB6RPfpN0oZWF9pGq3mTQMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjQwNzAzMjAyNDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDhmYjhiMzFiYjBiMGM0Y2Y1ODU3OTk5MGE5MWU5OWFhNzE1OGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOyOW5LBuTBjofk5UKyg8ReIRrJE
f7E314cV2RGLGoHjHkff13s/FoVphJG3jujCl3knFa3l9c+0AjYHaHLtblJ3Tl9x
Nt2PRM2Zpctz1gYOYmtD9Bo/NYnrcSsnfq9pcks7TuFufFWDnn2C1Yx1v1gWZarc
FntVAYzigSQGIhSf91LuzLJGar+HFvVVroXfrFxrPDulT10rZ4vVduhrblNjikCe
si7m1jOJ+P7gIfNEkmrciCOOnCDUwXUWJq9wxLIIb0sq8D9TUDDlhxnjLnOIbEvS
tCPrUpyrn3DZuiTs+cFlBnihFkkLcAIZpPxIRnF8kcDJOzBqrfvnaiguDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFESPuLMbsLDEz1hXmZCpHpmqcVjvMB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvUkktNHN4dXdzTVRQV0ZlWmtLa2VtYXB4V084LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXposMA0G
CSqGSIb3DQEBCwUAA4IBAQBL2CJO9vhHkFtp1vvCZKajErW4oyoTR7K4E3jgeSzG
8lLGtuapAHJKbekcodxat+StoURmHbP2h8e4ULsniMtMJ05OqMc8q6txTlsbiYtB
mg0tjBBkamo9qJNj5UZNwyilWJfKNCcW7+1t7lgGB/iKCH1JmO+PLT86uqY9kwaZ
lVQdDpTmD9Te/2395qJ91O1hx0ZX5fSqk0PQfvN9VQTqCzoIwTtZvDLvlqahmlAA
A9RWzjSi/oreWNv3E8+ynPoEz8xMtbJdCRn82ofRGzPC7Q/tVu9DoGIU37Er0LCi
rbjy+ps1gcNck8Vuzr2LO9Cby9HTeeOgeHNF8x6ggLxN
-----END CERTIFICATE-----
Generated at Thu Jul 4 15:56:53 2024 by rpki-client on console-ams.rpki-client.org