Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/iGekl4dR1SGEe-yGxvhN5fGwI6U.roa
File: iGekl4dR1SGEe-yGxvhN5fGwI6U.roa (raw, json)
Hash identifier: ccXtCsbSqL/ge/7nO7+vXd+HIsN0/zSOtJoaXDjg068=
Subject key identifier: 88:67:A4:97:87:51:D5:21:84:7B:EC:86:C6:F8:4D:E5:F1:B0:23:A5
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 01856C4A4C3D1435CA5DA2C19A1F45509AE7
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/iGekl4dR1SGEe-yGxvhN5fGwI6U.roa
Signing time: Sun 01 Jan 2023 07:44:46 +0000
ROA not before: Sun 01 Jan 2023 07:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48137
IP address blocks: 94.126.49.0/24 maxlen: 24
94.126.50.0/24 maxlen: 24
94.126.51.0/24 maxlen: 24
94.126.48.0/24 maxlen: 24
2a02:f00::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:4c:3d:14:35:ca:5d:a2:c1:9a:1f:45:50:9a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Jan 1 07:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8867a4978751d521847bec86c6f84de5f1b023a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:07:a0:f8:80:6f:7d:ec:3f:63:e0:79:32:51:
53:8e:a2:1f:fe:8e:9a:70:a3:c9:d2:d2:5c:1a:00:
e4:a1:17:61:a3:b0:fc:c2:f8:bd:64:79:db:97:04:
ce:f2:db:b9:d2:3e:b5:db:eb:78:1a:e6:53:ad:ee:
7e:ea:c1:2f:a3:95:1c:87:ff:05:60:94:6b:c9:05:
e1:cf:89:71:22:0b:1d:ef:d2:a9:de:7b:38:a2:d6:
c1:20:fa:a1:1e:40:b9:a4:97:49:20:6e:2b:0b:3d:
9a:af:16:0c:48:fb:4b:2e:b6:1f:3e:ff:83:a1:4a:
17:65:87:8d:81:02:a0:1e:2e:98:ca:33:b8:0b:fa:
e8:60:60:26:c1:ba:82:c5:02:cd:cb:fa:d1:f2:03:
69:35:24:a1:ee:9c:3c:ec:be:29:57:9e:92:fb:f2:
e7:32:90:1c:70:cf:55:a5:5a:89:94:fc:8b:5b:9f:
4e:84:12:6f:5e:ec:89:bc:62:b3:d3:98:b0:16:50:
d7:28:60:77:19:a6:1e:3b:c9:82:4e:00:e7:9b:ff:
bf:43:cb:31:81:63:ea:c4:87:f5:80:95:6f:60:af:
c3:60:f8:03:05:a5:ad:42:77:07:52:2a:d6:f9:74:
45:20:0f:eb:cf:97:fa:64:c7:77:a7:59:0e:a3:9a:
c3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:67:A4:97:87:51:D5:21:84:7B:EC:86:C6:F8:4D:E5:F1:B0:23:A5
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/iGekl4dR1SGEe-yGxvhN5fGwI6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.48.0/22
IPv6:
2a02:f00::/48
Signature Algorithm: sha256WithRSAEncryption
b8:75:24:d4:05:af:6d:b5:d5:33:4f:30:cd:8b:f1:8d:1a:e5:
9e:2a:ad:9f:f0:09:6a:12:a7:51:7f:0f:3d:e2:66:10:1b:a8:
5e:7f:8c:ad:60:83:c5:87:31:8a:f3:41:71:6b:a2:da:ca:3f:
22:e2:8b:72:c7:6e:7e:ae:39:72:77:a2:3b:6e:d2:17:2a:9c:
02:86:78:b5:68:52:a4:89:2e:58:0e:c5:bc:09:2b:f4:a1:44:
ad:03:17:cd:ec:a7:8e:ba:59:86:70:ad:3a:b3:2f:1d:b0:9d:
65:6d:9b:7a:c2:05:d4:3f:bd:48:b6:bf:87:fc:91:14:74:3b:
33:10:75:bc:ee:0e:2a:b0:96:0f:a2:4c:61:b4:0a:76:f5:d4:
aa:18:4f:39:b8:2a:e9:8c:e5:fe:be:2f:44:e3:bf:e0:6d:82:
64:35:35:32:08:79:87:3b:fd:29:cb:ad:96:54:e4:1a:a3:5d:
eb:0f:9e:96:6c:3d:e4:eb:57:d1:cd:c0:fd:7d:01:04:4f:91:
ec:7e:6c:45:fb:78:62:ac:14:eb:91:02:24:df:67:5a:d4:c9:
b5:ee:33:ed:3c:de:17:3f:56:aa:60:ee:c1:4d:6d:99:f6:b5:
dc:4f:c2:1c:5e:18:24:c1:41:1a:cb:dd:ac:c5:f9:1d:9c:b5:
ed:89:44:1a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVsSkw9FDXKXaLBmh9FUJrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTdjYjNhMWU1M2U3NjI5ZWUzYjlmMjY3MmQ0NTcxZWY4
NWQyYzgwHhcNMjMwMTAxMDc0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODY3YTQ5Nzg3NTFkNTIxODQ3YmVjODZjNmY4NGRlNWYxYjAyM2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAeg+IBvfew/Y+B5MlFTjqIf/o6a
cKPJ0tJcGgDkoRdho7D8wvi9ZHnblwTO8tu50j612+t4GuZTre5+6sEvo5Uch/8F
YJRryQXhz4lxIgsd79Kp3ns4otbBIPqhHkC5pJdJIG4rCz2arxYMSPtLLrYfPv+D
oUoXZYeNgQKgHi6YyjO4C/roYGAmwbqCxQLNy/rR8gNpNSSh7pw87L4pV56S+/Ln
MpAccM9VpVqJlPyLW59OhBJvXuyJvGKz05iwFlDXKGB3GaYeO8mCTgDnm/+/Q8sx
gWPqxIf1gJVvYK/DYPgDBaWtQncHUirW+XRFIA/rz5f6ZMd3p1kOo5rDFwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIhnpJeHUdUhhHvshsb4TeXxsCOlMB8GA1UdIwQY
MBaAFAxXyzoeU+dinuO58mctRXHvhdLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMt
Y2Y3MjMyZGRlYmVjLzEvaUdla2w0ZFIxU0dFZS15R3h2aE41Zkd3STZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMtY2Y3MjMyZGRlYmVj
LzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCXn4wMA8E
AgACMAkDBwAqAg8AAAAwDQYJKoZIhvcNAQELBQADggEBALh1JNQFr2211TNPMM2L
8Y0a5Z4qrZ/wCWoSp1F/Dz3iZhAbqF5/jK1gg8WHMYrzQXFrotrKPyLii3LHbn6u
OXJ3ojtu0hcqnAKGeLVoUqSJLlgOxbwJK/ShRK0DF83sp466WYZwrTqzLx2wnWVt
m3rCBdQ/vUi2v4f8kRR0OzMQdbzuDiqwlg+iTGG0Cnb11KoYTzm4KumM5f6+L0Tj
v+BtgmQ1NTIIeYc7/SnLrZZU5BqjXesPnpZsPeTrV9HNwP19AQRPkex+bEX7eGKs
FOuRAiTfZ1rUybXuM+083hc/Vqpg7sFNbZn2tdxPwhxeGCTBQRrL3azF+R2cte2J
RBo=
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:22 2024 by rpki-client on console-fra.rpki-client.org