Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/N9nWlb7aRWqcHhGxImtywlOefRE.roa
File: N9nWlb7aRWqcHhGxImtywlOefRE.roa (raw, json)
Hash identifier: eXbzjb1lKzcLbp+dFaVoxAOy5Kun5KLiweIP0gW9uJc=
Subject key identifier: 37:D9:D6:95:BE:DA:45:6A:9C:1E:11:B1:22:6B:72:C2:53:9E:7D:11
Certificate issuer: /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial: 018570796EECA95D45B9A1D7964A54AE9AC6
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/N9nWlb7aRWqcHhGxImtywlOefRE.roa
Signing time: Mon 02 Jan 2023 03:14:44 +0000
ROA not before: Mon 02 Jan 2023 03:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63956
IP address blocks: 94.250.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:6e:ec:a9:5d:45:b9:a1:d7:96:4a:54:ae:9a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Validity
Not Before: Jan 2 03:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37d9d695beda456a9c1e11b1226b72c2539e7d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:1d:0d:62:e7:98:3f:ef:92:a8:57:e7:60:
c2:34:4c:8e:c6:28:32:8e:ad:a5:ff:94:68:99:97:
82:b5:8d:c8:9a:0a:72:88:97:be:c2:b5:18:dd:7f:
ac:9b:87:4b:df:1a:05:72:f3:97:cb:06:1b:57:2f:
3c:56:1b:f3:ef:04:37:50:31:91:c2:f4:a5:ef:94:
1e:13:bb:bc:07:db:06:85:14:70:5f:7c:9d:02:b2:
f3:cd:8b:84:cf:91:c6:30:94:fb:08:f9:58:e4:80:
0d:4c:1e:d2:bc:80:c3:63:36:d4:ab:16:da:02:b7:
68:53:04:c9:94:52:9d:9a:19:db:99:37:17:3a:02:
c5:66:29:77:33:aa:07:41:38:35:d0:81:5a:0e:b0:
2f:40:5d:76:6e:fa:04:5d:11:6c:8a:14:ae:0c:c3:
5b:6b:38:e9:49:22:c7:a5:a3:81:d1:88:0a:eb:b4:
bf:15:48:dc:b4:d9:d4:fe:30:7f:b3:28:12:7b:3d:
df:86:a7:2f:75:6b:1c:7a:94:bd:2a:d1:59:b3:a4:
b9:05:81:7d:94:36:b4:ab:f1:90:8e:4a:c2:62:0e:
12:5f:e2:22:22:49:05:67:13:4b:ad:43:d9:2a:27:
0f:7f:ac:55:5b:28:fa:bc:a9:ed:cd:bd:2c:e4:f6:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D9:D6:95:BE:DA:45:6A:9C:1E:11:B1:22:6B:72:C2:53:9E:7D:11
X509v3 Authority Key Identifier:
keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/N9nWlb7aRWqcHhGxImtywlOefRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.207.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e6:17:c5:53:1f:fa:b1:97:0b:db:f6:b1:e7:29:bf:90:33:
df:e2:75:e1:7a:88:4c:07:da:73:59:f5:ab:8c:4c:e3:74:8a:
25:f3:af:68:21:94:ee:98:03:43:3e:19:90:ec:6d:2a:4e:69:
61:4d:58:43:5d:ab:e1:57:c6:71:68:ba:3c:3e:d4:93:50:1d:
29:4d:ed:7a:18:24:84:3a:ed:dc:05:5c:ee:3f:6c:0d:eb:1b:
39:3a:dd:19:f5:bc:b8:5f:ab:b3:e4:96:eb:4e:41:0d:f4:a9:
a4:ae:a5:83:85:4e:54:c5:9c:ad:7c:68:22:0c:13:53:58:54:
23:3d:b8:a7:46:f5:d1:78:9e:21:d8:7b:47:f0:70:fe:ed:49:
ae:df:3f:39:be:43:8b:f4:5b:69:08:f5:a0:ce:97:02:0b:0b:
5e:8c:f0:73:96:de:09:28:d3:b7:92:48:2e:da:f5:53:6b:33:
28:04:1c:93:96:8c:78:6d:53:45:78:59:f9:8a:df:b4:90:26:
10:3a:7b:6c:56:8e:bf:41:73:b8:b2:a4:cc:cc:f5:0c:f1:30:
c2:c9:24:7f:8d:4e:bb:82:46:28:ef:70:41:ae:35:c3:cf:d2:
49:0e:04:f8:ea:05:d1:db:22:26:ed:7a:6d:09:3b:b4:0c:32:
f1:df:ff:d5
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVweW7sqV1FuaHXlkpUrprGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ODU3ZWNmNDQxZTVlYTFkNzE4MWZlYzdlOTdlNmRiYzEy
MjBmYzIwHhcNMjMwMTAyMDMxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2Q5ZDY5NWJlZGE0NTZhOWMxZTExYjEyMjZiNzJjMjUzOWU3ZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB4dDWLnmD/vkqhX52DCNEyOxigy
jq2l/5RomZeCtY3ImgpyiJe+wrUY3X+sm4dL3xoFcvOXywYbVy88Vhvz7wQ3UDGR
wvSl75QeE7u8B9sGhRRwX3ydArLzzYuEz5HGMJT7CPlY5IANTB7SvIDDYzbUqxba
ArdoUwTJlFKdmhnbmTcXOgLFZil3M6oHQTg10IFaDrAvQF12bvoEXRFsihSuDMNb
azjpSSLHpaOB0YgK67S/FUjctNnU/jB/sygSez3fhqcvdWscepS9KtFZs6S5BYF9
lDa0q/GQjkrCYg4SX+IiIkkFZxNLrUPZKicPf6xVWyj6vKntzb0s5PaK8wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFDfZ1pW+2kVqnB4RsSJrcsJTnn0RMB8GA1UdIwQY
MBaAFPiFfs9EHl6h1xgf7H6X5tvBIg/CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1JVi16MFFlWHFIWEdCX3NmcGZtMjhFaUQ4SS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQz
LWE4OWY4MTc3NjQwNi8xL045bldsYjdhUldxY0hoR3hJbXR5d2xPZWZSRS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmEvYzg0OTc2LWQ1ZWEtNGU3Zi04ZWQzLWE4OWY4MTc3NjQw
Ni8xLzEtSVYtejBRZVhxSFhHQl9zZnBmbTI4RWlEOEkuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABe+s8w
DQYJKoZIhvcNAQELBQADggEBABPmF8VTH/qxlwvb9rHnKb+QM9/ideF6iEwH2nNZ
9auMTON0iiXzr2ghlO6YA0M+GZDsbSpOaWFNWENdq+FXxnFoujw+1JNQHSlN7XoY
JIQ67dwFXO4/bA3rGzk63Rn1vLhfq7PklutOQQ30qaSupYOFTlTFnK18aCIME1NY
VCM9uKdG9dF4niHYe0fwcP7tSa7fPzm+Q4v0W2kI9aDOlwILC16M8HOW3gko07eS
SC7a9VNrMygEHJOWjHhtU0V4WfmK37SQJhA6e2xWjr9Bc7iypMzM9QzxMMLJJH+N
TruCRijvcEGuNcPP0kkOBPjqBdHbIibtem0JO7QMMvHf/9U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:18 2024 by rpki-client on console-ams.rpki-client.org