Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/1-rP-jUi-RqVK0cxX1V6YBjBdZ88.roa
File: 1-rP-jUi-RqVK0cxX1V6YBjBdZ88.roa (raw, json)
Hash identifier: 1460ojki9EquxArgIQm23AX6Pxrp43rB1tNa5dTSKoI=
Subject key identifier: FA:B3:FE:8D:48:BE:46:A5:4A:D1:CC:57:D5:5E:98:06:30:5D:67:CF
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018D0E48E47F6443240762BF1A069A16DB1A
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/1-rP-jUi-RqVK0cxX1V6YBjBdZ88.roa
Signing time: Mon 15 Jan 2024 18:01:14 +0000
ROA not before: Mon 15 Jan 2024 18:01:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 94.154.34.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 10:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0e:48:e4:7f:64:43:24:07:62:bf:1a:06:9a:16:db:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 15 18:01:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fab3fe8d48be46a54ad1cc57d55e9806305d67cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:ae:0e:0d:69:31:dc:21:81:50:46:00:65:
85:fc:72:81:7c:38:e8:41:82:3d:f8:6b:5a:f0:bf:
c0:5c:b9:6f:4d:85:c0:48:65:1d:6b:ed:1e:74:7a:
8d:b8:e9:ed:0b:32:a2:c2:2c:c3:1d:3e:06:5b:2d:
57:12:6d:92:2c:57:2b:09:af:e3:86:3a:d3:8d:fd:
a9:0c:f5:de:02:47:1f:a3:cf:a3:26:b3:19:e0:8d:
ff:55:38:3d:b3:45:ba:31:7f:db:75:d6:19:1d:87:
fd:55:3b:6e:86:06:27:40:ab:34:20:91:7b:9b:77:
3a:aa:48:f6:88:7d:ae:50:04:02:5a:3a:06:8e:7b:
ff:fc:a9:d2:4d:a0:54:50:79:d4:70:43:19:d0:51:
1f:40:f6:6c:05:f8:21:03:98:7d:07:4e:2e:a8:f6:
cf:0a:7f:1b:3d:1f:7f:41:90:48:8f:49:9f:1f:ac:
ab:ce:9c:23:2b:ad:2b:0c:eb:7f:f3:cf:fe:ab:d3:
40:aa:19:ea:97:49:11:c7:7d:74:12:c1:b1:9b:d2:
7b:aa:1b:33:22:cd:d0:3d:7b:10:61:bc:68:f3:40:
46:52:96:38:c7:df:e6:37:aa:fc:43:5a:56:90:26:
56:5e:40:5d:1f:00:64:72:8f:01:2c:8b:90:ff:57:
73:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B3:FE:8D:48:BE:46:A5:4A:D1:CC:57:D5:5E:98:06:30:5D:67:CF
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/1-rP-jUi-RqVK0cxX1V6YBjBdZ88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.34.0/23
Signature Algorithm: sha256WithRSAEncryption
17:d1:1c:e4:59:b4:8f:69:8e:34:07:42:58:ad:0e:fd:fc:dd:
26:7b:34:a9:dc:e5:b5:ba:36:86:c5:a6:f7:7c:27:ef:1f:9c:
4e:e2:a4:c3:99:07:3d:76:37:9f:49:1e:55:4d:22:18:2b:03:
15:bf:25:eb:77:b5:56:eb:fb:ec:d5:e4:7e:34:55:1d:73:5e:
13:aa:d1:d7:a9:5f:06:77:70:0d:21:f2:92:76:59:e7:42:39:
82:03:24:36:e7:7d:7e:d1:90:ec:c7:70:bf:b6:b0:bd:b7:0b:
06:ae:d6:79:4e:4b:d9:f9:5f:30:7c:7e:e0:9c:e7:7a:94:32:
99:4c:82:42:a5:86:fe:66:2d:69:ea:c9:e4:e4:15:89:61:74:
c2:53:ef:ed:f8:d7:13:b8:12:ac:36:78:d6:fb:6d:55:f6:5b:
b3:c5:11:8a:16:f5:8c:9b:c1:b4:f5:84:ce:69:80:ea:5b:81:
08:04:ef:ca:e7:a7:05:89:14:9b:22:17:04:de:5f:b5:e2:3b:
2e:10:0a:d1:73:27:0b:43:43:e5:1b:33:c8:e1:4c:26:83:88:
7f:84:aa:0a:ad:52:cb:c5:a3:09:cd:17:5f:c4:9e:d1:03:36:
58:dd:23:f4:4c:96:5f:37:cb:71:2b:15:48:d4:a6:a0:2a:2f:
9c:fc:7a:86
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY0OSOR/ZEMkB2K/GgaaFtsaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjQwMTE1MTgwMTE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWIzZmU4ZDQ4YmU0NmE1NGFkMWNjNTdkNTVlOTgwNjMwNWQ2N2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6CuDg1pMdwhgVBGAGWF/HKBfDjo
QYI9+Gta8L/AXLlvTYXASGUda+0edHqNuOntCzKiwizDHT4GWy1XEm2SLFcrCa/j
hjrTjf2pDPXeAkcfo8+jJrMZ4I3/VTg9s0W6MX/bddYZHYf9VTtuhgYnQKs0IJF7
m3c6qkj2iH2uUAQCWjoGjnv//KnSTaBUUHnUcEMZ0FEfQPZsBfghA5h9B04uqPbP
Cn8bPR9/QZBIj0mfH6yrzpwjK60rDOt/88/+q9NAqhnql0kRx310EsGxm9J7qhsz
Is3QPXsQYbxo80BGUpY4x9/mN6r8Q1pWkCZWXkBdHwBkco8BLIuQ/1dzWwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPqz/o1IvkalStHMV9VemAYwXWfPMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvMS1yUC1qVWktUnFWSzBjeFgxVjZZQmpCZFo4OC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzAvNGU3YmM3LTI2MGUtNDdlNi04Mzg4LWExODRmMzU1NmU0
My8xLzU4ODRoTGVBQjZKZHZpNHM3d3pITzJtU0g0Zy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAV6aIjAN
BgkqhkiG9w0BAQsFAAOCAQEAF9Ec5Fm0j2mONAdCWK0O/fzdJns0qdzltbo2hsWm
93wn7x+cTuKkw5kHPXY3n0keVU0iGCsDFb8l63e1Vuv77NXkfjRVHXNeE6rR16lf
BndwDSHyknZZ50I5ggMkNud9ftGQ7Mdwv7awvbcLBq7WeU5L2flfMHx+4JznepQy
mUyCQqWG/mYtaerJ5OQViWF0wlPv7fjXE7gSrDZ41vttVfZbs8URihb1jJvBtPWE
zmmA6luBCATvyuenBYkUmyIXBN5fteI7LhAK0XMnC0ND5RszyOFMJoOIf4SqCq1S
y8WjCc0XX8Se0QM2WN0j9EyWXzfLcSsVSNSmoCovnPx6hg==
-----END CERTIFICATE-----
Generated at Fri Jan 19 15:30:19 2024 by rpki-client on console-ams.rpki-client.org