Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/p9bZQF8-67g5XSJL7UlqInnVOeU.roa
File: p9bZQF8-67g5XSJL7UlqInnVOeU.roa (raw, json)
Hash identifier: ch3xNbP9b/otbOdp9/uJf0LnhcSxYb4zrmS4qdgzI+4=
Subject key identifier: A7:D6:D9:40:5F:3E:EB:B8:39:5D:22:4B:ED:49:6A:22:79:D5:39:E5
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0190FDF622EA91BF80E67C30A3DB17F870EE
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/p9bZQF8-67g5XSJL7UlqInnVOeU.roa
Signing time: Mon 29 Jul 2024 10:08:04 +0000
ROA not before: Mon 29 Jul 2024 10:08:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.40.0/24 maxlen: 24
94.154.44.0/23 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:f6:22:ea:91:bf:80:e6:7c:30:a3:db:17:f8:70:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jul 29 10:08:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7d6d9405f3eebb8395d224bed496a2279d539e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:07:83:e0:fc:4f:ce:06:6e:22:fa:d0:5e:
c0:35:a2:1c:e2:33:89:ea:41:18:ac:38:0f:d0:e9:
5f:81:20:dc:14:e4:7b:42:7e:6d:99:51:9c:ed:85:
db:1d:76:5b:11:05:fd:ba:16:95:f5:d7:89:5b:e3:
a4:5a:f5:e0:f4:73:34:4c:30:43:9b:b7:cc:f9:d8:
ee:8a:08:ba:97:d7:f4:98:41:04:8f:46:11:a9:03:
62:c0:60:6f:d5:bd:7f:68:ed:b4:d4:34:66:ad:38:
49:9b:15:d9:d4:39:33:d1:e7:6e:06:ef:f1:3a:c6:
f8:02:24:d8:04:f0:03:af:5d:a8:6d:2d:2f:00:26:
25:7a:a6:c7:b1:95:4f:50:51:f3:73:69:a7:13:87:
21:8b:18:8a:c0:60:ed:2a:d3:6e:1c:55:80:c0:12:
d3:d2:83:f6:2e:30:4f:f2:ad:42:ea:f9:95:fe:10:
c3:f8:fe:65:cc:d1:ee:f0:1d:0d:94:e9:f1:b1:d7:
2d:a4:11:17:31:59:a4:35:35:27:6c:2c:e0:a8:70:
12:9a:e2:2e:58:3b:dd:78:be:9e:dd:65:22:26:df:
68:55:0a:64:dc:80:0b:ee:78:26:ed:d8:e7:51:50:
86:e6:aa:3a:74:33:4d:a6:4c:10:f3:fe:87:54:82:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D6:D9:40:5F:3E:EB:B8:39:5D:22:4B:ED:49:6A:22:79:D5:39:E5
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/p9bZQF8-67g5XSJL7UlqInnVOeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0/24
94.154.44.0-94.154.46.255
Signature Algorithm: sha256WithRSAEncryption
20:e5:70:ed:75:84:c2:a5:c4:48:47:68:b0:5b:57:45:1c:2c:
90:bc:54:f7:b9:7b:3f:b3:b5:2a:7d:d8:38:3b:55:46:e2:0d:
90:bd:14:bd:c1:e0:4e:5f:28:98:f3:ce:8b:e6:43:72:44:08:
63:69:ac:c6:36:be:4a:13:a4:75:b9:95:68:3f:4e:df:a9:ce:
ec:aa:21:a2:e8:a7:54:69:8f:75:0f:e6:ea:72:e2:c4:f8:94:
25:aa:31:cb:3b:ad:5a:45:5c:a4:ef:c2:e2:4e:84:b7:12:aa:
b4:c2:43:c9:48:9c:03:19:a0:21:06:ac:41:a0:4a:c2:de:cc:
5f:df:74:2a:86:f2:d7:24:c4:8f:db:24:b2:42:4b:ed:52:63:
c8:78:2b:1e:51:77:01:68:71:bf:cd:0b:18:e6:b0:42:0b:e0:
42:d8:5c:f4:05:88:99:fe:b0:13:d3:28:fe:dd:83:82:e7:48:
a6:0e:b0:a1:9d:0c:fb:b9:0e:cd:55:61:be:1a:44:f9:71:ba:
e9:19:7b:72:77:96:57:dc:39:91:7a:06:87:71:2d:c8:6e:9a:
e2:b0:18:e6:55:7c:c7:26:38:b2:e7:b1:e8:f7:ef:12:34:c1:
1b:9e:d7:e0:7a:12:8b:48:af:be:cd:dc:48:c5:11:30:9c:3f:
a9:18:f0:d6
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZD99iLqkb+A5nwwo9sX+HDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjQwNzI5MTAwODA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2Q2ZDk0MDVmM2VlYmI4Mzk1ZDIyNGJlZDQ5NmEyMjc5ZDUzOWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FkHg+D8T84GbiL60F7ANaIc4jOJ
6kEYrDgP0OlfgSDcFOR7Qn5tmVGc7YXbHXZbEQX9uhaV9deJW+OkWvXg9HM0TDBD
m7fM+djuigi6l9f0mEEEj0YRqQNiwGBv1b1/aO201DRmrThJmxXZ1Dkz0eduBu/x
Osb4AiTYBPADr12obS0vACYleqbHsZVPUFHzc2mnE4chixiKwGDtKtNuHFWAwBLT
0oP2LjBP8q1C6vmV/hDD+P5lzNHu8B0NlOnxsdctpBEXMVmkNTUnbCzgqHASmuIu
WDvdeL6e3WUiJt9oVQpk3IAL7ngm7djnUVCG5qo6dDNNpkwQ8/6HVIJBlQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFKfW2UBfPuu4OV0iS+1JaiJ51TnlMB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvcDliWlFGOC02N2c1WFNKTDdVbHFJbm5WT2VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAXpooMAwD
BAJemiwDBABemi4wDQYJKoZIhvcNAQELBQADggEBACDlcO11hMKlxEhHaLBbV0Uc
LJC8VPe5ez+ztSp92Dg7VUbiDZC9FL3B4E5fKJjzzovmQ3JECGNprMY2vkoTpHW5
lWg/Tt+pzuyqIaLop1Rpj3UP5upy4sT4lCWqMcs7rVpFXKTvwuJOhLcSqrTCQ8lI
nAMZoCEGrEGgSsLezF/fdCqG8tckxI/bJLJCS+1SY8h4Kx5RdwFocb/NCxjmsEIL
4ELYXPQFiJn+sBPTKP7dg4LnSKYOsKGdDPu5Ds1VYb4aRPlxuukZe3J3llfcOZF6
BodxLchumuKwGOZVfMcmOLLnsej37xI0wRue1+B6EotIr77N3EjFETCcP6kY8NY=
-----END CERTIFICATE-----
Generated at Mon Jul 29 16:14:08 2024 by rpki-client on console-fra.rpki-client.org