Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/sBrIsxMNd8ig3L4xtunZS0NaWok.roa
File: sBrIsxMNd8ig3L4xtunZS0NaWok.roa (raw, json)
Hash identifier: 51N6n+y7m1ervqyJANimLekd0kh0jjcKBSNo0YMd4iU=
Subject key identifier: B0:1A:C8:B3:13:0D:77:C8:A0:DC:BE:31:B6:E9:D9:4B:43:5A:5A:89
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 01907DDDFCB28937C4D74390B605552A0676
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/sBrIsxMNd8ig3L4xtunZS0NaWok.roa
Signing time: Thu 04 Jul 2024 13:10:18 +0000
ROA not before: Thu 04 Jul 2024 13:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 94.154.40.0/24 maxlen: 24
94.154.41.0/24 maxlen: 24
94.154.44.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 11:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7d:dd:fc:b2:89:37:c4:d7:43:90:b6:05:55:2a:06:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jul 4 13:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b01ac8b3130d77c8a0dcbe31b6e9d94b435a5a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f3:c1:7f:01:9a:aa:a2:ad:ac:bb:d8:d4:64:
71:50:54:06:1e:5d:09:3e:3d:2e:e5:21:86:b6:de:
ae:bf:32:0c:dc:4f:ba:10:1a:eb:21:f5:21:01:6a:
d8:61:9d:af:95:38:23:66:f9:db:ab:35:bd:48:88:
d7:8a:78:07:5f:d7:b2:5d:09:85:ce:c4:f0:ac:db:
0f:dd:42:ee:4c:85:23:71:0c:71:aa:b3:bb:d6:14:
b9:68:b9:db:9c:55:b9:52:37:bd:3b:18:0f:e1:e9:
2e:4d:cf:bc:9f:05:0b:4c:0c:69:9d:3e:06:7b:88:
2f:0f:13:13:88:56:d5:f8:ab:e9:95:72:73:76:5f:
66:70:36:3c:7f:fd:56:27:90:fb:83:68:e0:2f:34:
c3:87:05:f2:19:28:a3:2e:ca:5d:96:cb:b0:35:b3:
83:2c:19:72:f9:4c:da:e1:67:ba:71:00:29:f7:5c:
f4:e2:59:e5:8d:2e:a8:86:e4:32:92:c0:b2:10:d0:
46:51:55:4c:ab:ef:5e:77:07:74:4c:e1:ee:08:0f:
4f:13:ac:f8:03:84:f8:51:76:f2:29:bc:e3:a0:b7:
47:ac:fe:ac:66:a7:8f:7d:12:a6:f5:4a:a7:6f:0b:
b0:dc:b7:57:c7:e3:f8:18:8a:7f:f6:61:9f:2b:7f:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1A:C8:B3:13:0D:77:C8:A0:DC:BE:31:B6:E9:D9:4B:43:5A:5A:89
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/sBrIsxMNd8ig3L4xtunZS0NaWok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0/23
94.154.44.0/23
Signature Algorithm: sha256WithRSAEncryption
26:0e:ed:d8:d1:83:b8:1e:56:cd:c7:2c:e7:b0:21:fd:be:9f:
1d:6a:26:a6:6e:a5:e4:fe:ff:2c:83:f4:18:e1:aa:c8:82:79:
d2:30:63:c7:fb:6e:26:c4:32:b0:95:d2:d3:bd:94:31:e9:f4:
ea:cd:55:eb:60:e7:35:85:ef:5b:f6:8d:95:a7:82:9e:c9:49:
ed:98:96:82:87:43:7c:25:53:cd:fb:37:e1:f2:b1:e2:ec:6b:
de:3f:55:5a:a3:c5:ed:99:39:e8:03:27:ac:52:ee:5e:42:91:
b4:d2:cf:fd:dd:ea:e9:76:2d:2a:02:55:29:58:0b:ad:03:53:
99:a0:65:6c:80:38:36:c3:91:56:dd:86:2e:5d:cd:61:6d:bc:
5a:60:90:4d:3c:ec:e6:c2:d8:39:3f:54:4e:0d:3b:e5:40:12:
05:54:d4:84:8e:f7:f3:4a:da:aa:cb:8e:69:c2:7e:f2:9d:fc:
03:60:aa:77:74:c0:4f:88:e8:fc:43:2e:ba:d3:d7:6b:98:f6:
55:4c:b6:e0:dd:6a:09:fa:d3:d0:06:e4:30:94:f9:c2:f1:41:
cc:5a:24:54:65:49:28:04:8b:c7:86:38:bc:8b:ac:80:96:cd:
59:1d:80:4b:28:9a:15:77:71:c8:b8:18:a6:bd:0d:99:5e:78:
1e:ab:37:58
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZB93fyyiTfE10OQtgVVKgZ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk
NzExNTUwHhcNMjQwNzA0MTMxMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDFhYzhiMzEzMGQ3N2M4YTBkY2JlMzFiNmU5ZDk0YjQzNWE1YTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PPBfwGaqqKtrLvY1GRxUFQGHl0J
Pj0u5SGGtt6uvzIM3E+6EBrrIfUhAWrYYZ2vlTgjZvnbqzW9SIjXingHX9eyXQmF
zsTwrNsP3ULuTIUjcQxxqrO71hS5aLnbnFW5Uje9OxgP4ekuTc+8nwULTAxpnT4G
e4gvDxMTiFbV+KvplXJzdl9mcDY8f/1WJ5D7g2jgLzTDhwXyGSijLspdlsuwNbOD
LBly+Uza4We6cQAp91z04lnljS6ohuQyksCyENBGUVVMq+9edwd0TOHuCA9PE6z4
A4T4UXbyKbzjoLdHrP6sZqePfRKm9Uqnbwuw3LdXx+P4GIp/9mGfK38TwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLAayLMTDXfIoNy+Mbbp2UtDWlqJMB8GA1UdIwQY
MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt
NjUyNDljYmM1NzNjLzEvc0JySXN4TU5kOGlnM0w0eHR1blpTME5hV29rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj
LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXpooAwQB
XposMA0GCSqGSIb3DQEBCwUAA4IBAQAmDu3Y0YO4HlbNxyznsCH9vp8daiambqXk
/v8sg/QY4arIgnnSMGPH+24mxDKwldLTvZQx6fTqzVXrYOc1he9b9o2Vp4KeyUnt
mJaCh0N8JVPN+zfh8rHi7GveP1Vao8XtmTnoAyesUu5eQpG00s/93erpdi0qAlUp
WAutA1OZoGVsgDg2w5FW3YYuXc1hbbxaYJBNPOzmwtg5P1RODTvlQBIFVNSEjvfz
Stqqy45pwn7ynfwDYKp3dMBPiOj8Qy6609drmPZVTLbg3WoJ+tPQBuQwlPnC8UHM
WiRUZUkoBIvHhji8i6yAls1ZHYBLKJoVd3HIuBimvQ2ZXngeqzdY
-----END CERTIFICATE-----
Generated at Fri Jul 12 13:01:34 2024 by rpki-client on console-fra.rpki-client.org