Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/a0tK4QCjSqXklW8ifK1Jx6ddvGo.roa
File: a0tK4QCjSqXklW8ifK1Jx6ddvGo.roa (raw, json)
Hash identifier: OXDaRLsBimvrU3FRBef3lbt0C3D+a/+srb7t7+h+Msw=
Subject key identifier: 6B:4B:4A:E1:00:A3:4A:A5:E4:95:6F:22:7C:AD:49:C7:A7:5D:BC:6A
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 01903AB00D7D45B010E6DC687735A3461147
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/a0tK4QCjSqXklW8ifK1Jx6ddvGo.roa
Signing time: Fri 21 Jun 2024 12:05:34 +0000
ROA not before: Fri 21 Jun 2024 12:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.44.0/23 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 09:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:b0:0d:7d:45:b0:10:e6:dc:68:77:35:a3:46:11:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jun 21 12:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b4b4ae100a34aa5e4956f227cad49c7a75dbc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:95:ce:bd:69:cb:50:49:88:6d:af:da:51:79:
f2:48:cc:38:b3:b0:17:05:9d:76:7f:8c:cb:81:75:
4b:d6:58:b3:95:58:f3:31:96:e3:63:de:cd:4f:1e:
92:1f:7b:f0:2a:bd:0b:2d:fd:3e:16:a8:34:1b:c8:
1d:bf:3a:e4:dc:99:ae:07:13:2f:9a:68:2b:87:61:
ce:7c:23:e0:53:12:be:90:5d:8d:03:54:98:f1:07:
db:15:f4:b5:d0:58:ff:74:68:22:d6:f8:b4:1e:0b:
fa:cf:cd:c2:b7:dc:be:30:8e:db:96:45:d0:d9:f1:
8d:24:df:4f:eb:40:ce:77:11:ad:95:0b:58:5f:32:
d6:c2:db:97:a0:64:74:04:a0:fb:05:56:b2:6e:8f:
b7:72:f7:3a:e7:2f:ab:da:56:6a:78:37:ae:69:26:
7d:e2:ad:e9:01:73:84:48:49:cd:a3:5a:c4:b4:56:
37:a6:71:94:36:bb:28:87:d9:c0:b0:74:ba:d1:5a:
ae:1d:ca:de:c4:5f:99:00:a7:a7:8d:a6:b1:3e:59:
aa:11:80:ba:3e:40:70:fc:5d:9b:9d:c0:a9:ec:2c:
be:c2:58:f8:de:8d:a7:ba:e9:eb:29:ca:d0:56:47:
65:39:4e:4f:02:65:87:72:a2:21:90:b4:9d:2b:7f:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4B:4A:E1:00:A3:4A:A5:E4:95:6F:22:7C:AD:49:C7:A7:5D:BC:6A
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/a0tK4QCjSqXklW8ifK1Jx6ddvGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.44.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
34:d1:be:71:3f:f0:bd:f0:5a:af:97:3e:c7:71:ac:50:17:9a:
2f:e8:9b:f8:fa:b9:6c:05:0b:a3:30:f3:17:e0:da:b8:19:32:
e1:c1:17:a6:1d:21:df:b6:98:37:ca:37:1a:db:fe:14:23:4e:
75:11:20:d3:b7:5b:60:af:a3:93:da:52:99:34:81:43:2d:3e:
57:ee:89:a3:2f:61:2d:01:e3:c7:10:e3:18:be:90:55:20:2d:
97:b5:6d:b1:f5:03:b5:65:0c:39:b2:05:fe:24:64:76:73:38:
c1:fa:60:4f:66:ac:4e:4a:7e:b9:c8:07:4f:98:cd:8e:c8:d1:
5b:4d:af:c1:6d:01:7c:25:d2:32:f9:87:35:3e:e2:23:dd:d5:
2e:a6:b7:02:bd:3f:09:3b:5b:78:b5:1b:f2:92:b7:92:ae:ae:
82:38:fa:cc:bc:f9:80:d8:a6:a5:f0:f2:67:34:99:66:fa:8d:
54:74:37:ab:dd:47:6d:f6:08:4d:2a:3a:64:a9:85:59:6d:2c:
44:1b:fd:06:d0:9e:9d:e7:62:b4:19:02:34:37:fa:f4:bb:d0:
3f:a4:3b:f0:c3:fd:ed:c3:1c:13:85:ec:71:d1:41:26:84:cb:
9c:b0:c3:9e:4a:23:66:9a:95:26:70:a3:b9:04:7a:25:a1:db:
3a:43:ec:66
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZA6sA19RbAQ5txodzWjRhFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjQwNjIxMTIwNTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjRiNGFlMTAwYTM0YWE1ZTQ5NTZmMjI3Y2FkNDljN2E3NWRiYzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75XOvWnLUEmIba/aUXnySMw4s7AX
BZ12f4zLgXVL1lizlVjzMZbjY97NTx6SH3vwKr0LLf0+Fqg0G8gdvzrk3JmuBxMv
mmgrh2HOfCPgUxK+kF2NA1SY8QfbFfS10Fj/dGgi1vi0Hgv6z83Ct9y+MI7blkXQ
2fGNJN9P60DOdxGtlQtYXzLWwtuXoGR0BKD7BVaybo+3cvc65y+r2lZqeDeuaSZ9
4q3pAXOESEnNo1rEtFY3pnGUNrsoh9nAsHS60VquHcrexF+ZAKenjaaxPlmqEYC6
PkBw/F2bncCp7Cy+wlj43o2nuunrKcrQVkdlOU5PAmWHcqIhkLSdK39H/wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGtLSuEAo0ql5JVvInytScenXbxqMB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvYTB0SzRRQ2pTcVhrbFc4aWZLMUp4NmRkdkdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJemiwD
BABemi4wDQYJKoZIhvcNAQELBQADggEBADTRvnE/8L3wWq+XPsdxrFAXmi/om/j6
uWwFC6Mw8xfg2rgZMuHBF6YdId+2mDfKNxrb/hQjTnURINO3W2Cvo5PaUpk0gUMt
PlfuiaMvYS0B48cQ4xi+kFUgLZe1bbH1A7VlDDmyBf4kZHZzOMH6YE9mrE5KfrnI
B0+YzY7I0VtNr8FtAXwl0jL5hzU+4iPd1S6mtwK9Pwk7W3i1G/KSt5KuroI4+sy8
+YDYpqXw8mc0mWb6jVR0N6vdR232CE0qOmSphVltLEQb/QbQnp3nYrQZAjQ3+vS7
0D+kO/DD/e3DHBOF7HHRQSaEy5yww55KI2aalSZwo7kEeiWh2zpD7GY=
-----END CERTIFICATE-----
Generated at Mon Jun 24 13:02:52 2024 by rpki-client on console-fra.rpki-client.org