Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/pyoOB9wUhzxlR9pwuvbd_Lyr-Dk.roa
File: pyoOB9wUhzxlR9pwuvbd_Lyr-Dk.roa (raw, json)
Hash identifier: xJWa/4/inhffy39f8iE0IrXCjTGFvmkKY64tNELNuKc=
Subject key identifier: A7:2A:0E:07:DC:14:87:3C:65:47:DA:70:BA:F6:DD:FC:BC:AB:F8:39
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018F824B00C8829CC05A822EB9E2A952DA7C
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/pyoOB9wUhzxlR9pwuvbd_Lyr-Dk.roa
Signing time: Thu 16 May 2024 16:45:04 +0000
ROA not before: Thu 16 May 2024 16:45:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50225
IP address blocks: 94.154.42.0/24 maxlen: 24
94.154.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 09:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:82:4b:00:c8:82:9c:c0:5a:82:2e:b9:e2:a9:52:da:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: May 16 16:45:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a72a0e07dc14873c6547da70baf6ddfcbcabf839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:21:46:76:3b:e4:ac:ec:04:1a:b1:bc:ff:
47:a9:07:37:1d:3e:14:a2:de:7d:a7:22:a4:6f:a5:
09:23:be:44:44:ce:2d:d0:59:eb:41:13:e9:95:8b:
1a:af:27:78:2e:44:86:82:6d:e6:2d:90:92:f5:68:
62:76:39:33:ef:2c:a7:9b:c3:47:34:2f:23:9c:a7:
19:82:3e:8a:91:85:33:66:5e:27:09:f3:cf:ee:40:
01:60:cf:4d:44:76:a8:e5:6c:29:a8:65:16:21:0d:
bb:7b:d0:c8:52:c2:78:a8:72:42:f9:b7:bb:59:c3:
53:5e:df:ae:69:d5:8a:1c:af:88:1b:3d:c5:21:b4:
cb:f1:4f:51:c1:97:6f:5e:ca:e6:c4:6e:de:f2:de:
9c:be:92:8a:cc:c6:13:21:16:60:f5:4b:45:29:c5:
40:e9:43:41:76:34:de:6d:00:cd:de:55:52:03:bb:
7d:58:8b:9b:2a:d6:3c:81:3b:13:ab:0f:e8:73:eb:
73:3e:3b:6d:13:6c:bc:5f:f3:1b:70:77:5e:7b:46:
13:93:a3:7f:79:13:d3:07:ff:5b:2c:95:26:9f:91:
d4:3a:14:05:19:ed:36:eb:b3:1b:20:39:cc:7a:3e:
09:b3:0c:0c:0d:18:1e:df:25:88:5f:26:00:8a:5c:
3c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2A:0E:07:DC:14:87:3C:65:47:DA:70:BA:F6:DD:FC:BC:AB:F8:39
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/pyoOB9wUhzxlR9pwuvbd_Lyr-Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.42.0/24
94.154.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:68:c6:14:b0:fe:4b:ec:c1:fd:5d:3e:25:89:fd:4a:d5:59:
ff:85:35:71:a6:3c:97:be:8b:be:b7:75:ca:b0:01:cb:f6:22:
38:af:8e:f2:6c:de:f1:e2:2b:bb:1a:d9:cf:18:0e:e9:cb:e9:
f9:3e:91:10:2b:9e:dc:91:e5:4c:81:a3:d8:51:a9:dd:65:68:
66:7f:30:aa:0b:61:a9:d4:38:4d:f6:3f:89:27:2b:3e:3b:a4:
2a:3b:2f:6a:c2:3a:57:6e:a5:05:25:fd:29:02:e4:c2:59:99:
b3:90:54:f6:46:16:d2:af:36:95:d7:d1:d0:7a:91:ae:dd:ee:
8d:d3:67:ff:73:df:41:30:09:94:6f:6c:6e:80:ff:ee:29:57:
8d:50:13:8b:a9:2b:c1:54:92:73:fb:38:7a:f7:e4:dc:04:21:
ae:1f:c7:06:aa:28:b2:88:72:c3:54:66:15:9c:c2:49:43:dc:
bd:94:6c:9e:d6:7c:0a:b7:32:25:47:c4:35:91:19:db:35:10:
13:31:2d:05:ad:f7:42:5a:09:7a:06:76:3c:cc:ce:50:c2:ee:
49:e6:2a:33:b2:f7:01:8c:52:a1:f8:20:b2:1c:00:0f:15:4c:
98:11:36:2e:61:72:1f:44:ae:12:9a:45:46:a8:b2:7f:ef:ce:
69:64:a4:cc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY+CSwDIgpzAWoIuueKpUtp8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjQwNTE2MTY0NTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzJhMGUwN2RjMTQ4NzNjNjU0N2RhNzBiYWY2ZGRmY2JjYWJmODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApochRnY75KzsBBqxvP9HqQc3HT4U
ot59pyKkb6UJI75ERM4t0FnrQRPplYsaryd4LkSGgm3mLZCS9Whidjkz7yynm8NH
NC8jnKcZgj6KkYUzZl4nCfPP7kABYM9NRHao5WwpqGUWIQ27e9DIUsJ4qHJC+be7
WcNTXt+uadWKHK+IGz3FIbTL8U9RwZdvXsrmxG7e8t6cvpKKzMYTIRZg9UtFKcVA
6UNBdjTebQDN3lVSA7t9WIubKtY8gTsTqw/oc+tzPjttE2y8X/MbcHdee0YTk6N/
eRPTB/9bLJUmn5HUOhQFGe0267MbIDnMej4JswwMDRge3yWIXyYAilw8AQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKcqDgfcFIc8ZUfacLr23fy8q/g5MB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvcHlvT0I5d1VoenhsUjlwd3V2YmRfTHlyLURrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXpoqAwQA
XpouMA0GCSqGSIb3DQEBCwUAA4IBAQCmaMYUsP5L7MH9XT4lif1K1Vn/hTVxpjyX
vou+t3XKsAHL9iI4r47ybN7x4iu7GtnPGA7py+n5PpEQK57ckeVMgaPYUandZWhm
fzCqC2Gp1DhN9j+JJys+O6QqOy9qwjpXbqUFJf0pAuTCWZmzkFT2RhbSrzaV19HQ
epGu3e6N02f/c99BMAmUb2xugP/uKVeNUBOLqSvBVJJz+zh69+TcBCGuH8cGqiiy
iHLDVGYVnMJJQ9y9lGye1nwKtzIlR8Q1kRnbNRATMS0FrfdCWgl6BnY8zM5Qwu5J
5iozsvcBjFKh+CCyHAAPFUyYETYuYXIfRK4SmkVGqLJ/785pZKTM
-----END CERTIFICATE-----
Generated at Thu May 23 12:22:59 2024 by rpki-client on console-ams.rpki-client.org