Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/tBGUkw_9aIGuiQIVZ2xFQZha0Os.roa
File: tBGUkw_9aIGuiQIVZ2xFQZha0Os.roa (raw, json)
Hash identifier: VqoGpvpVXmFWKdbYUDbRT8conmsGElSeEYBEMHhwGBY=
Subject key identifier: B4:11:94:93:0F:FD:68:81:AE:89:02:15:67:6C:45:41:98:5A:D0:EB
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01886C04F7C41F2F85E7AE25ADE565435E2B
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/tBGUkw_9aIGuiQIVZ2xFQZha0Os.roa
Signing time: Tue 30 May 2023 09:37:24 +0000
ROA not before: Tue 30 May 2023 09:37:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199760
IP address blocks: 94.154.34.0/24 maxlen: 24
94.154.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:04:f7:c4:1f:2f:85:e7:ae:25:ad:e5:65:43:5e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: May 30 09:37:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b41194930ffd6881ae890215676c4541985ad0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:75:61:49:11:bd:70:a9:1b:27:4f:4c:ce:
39:13:07:4f:b4:1d:e9:b5:89:7e:ce:fb:e1:89:95:
17:c0:da:9d:54:e2:e1:be:c7:a7:f1:b5:7b:06:b5:
3c:e3:81:67:07:2d:9c:f5:82:b2:c0:4c:ed:a6:3a:
67:56:bf:41:e8:52:15:15:cc:83:37:db:64:4a:12:
aa:22:f7:82:f6:d6:7f:a4:0e:af:3a:9e:82:19:a7:
b4:22:89:ec:23:41:f9:f1:41:5d:bc:4c:41:d9:9f:
86:c4:aa:44:90:d0:35:9c:95:e2:32:b4:51:16:ba:
24:33:fa:00:6a:e1:c9:fa:c7:51:26:08:29:1a:d8:
08:78:7d:0b:9f:d3:2c:c4:d5:1e:a2:ab:c1:fe:00:
f1:98:06:ad:9f:4f:b5:20:59:59:e9:ac:6a:48:04:
d3:e3:4b:25:ad:1f:82:f8:17:47:64:71:58:9f:71:
b3:a6:c2:ab:f3:92:e3:4e:26:df:2a:32:37:e1:93:
e0:35:cd:df:05:2d:42:42:5c:84:1b:a3:73:87:70:
7e:6f:c3:e8:f6:f5:cc:63:f8:a0:46:f2:36:2f:19:
2e:53:ff:52:5f:8c:82:60:6b:3f:9e:bf:f2:14:80:
e2:60:41:8d:1a:ad:d1:46:d4:7a:9f:ce:fe:48:fa:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:11:94:93:0F:FD:68:81:AE:89:02:15:67:6C:45:41:98:5A:D0:EB
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/tBGUkw_9aIGuiQIVZ2xFQZha0Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.33.0-94.154.34.255
Signature Algorithm: sha256WithRSAEncryption
77:0f:8a:31:ce:97:f2:ff:e5:e2:86:3a:0d:74:17:cf:f5:e5:
be:44:b7:3d:32:ab:a4:b2:cf:8a:2f:60:2a:9f:de:91:d6:23:
f9:d7:b3:e9:33:c7:f0:39:0c:6a:23:a7:32:d7:6b:1f:5d:d1:
04:85:44:64:5b:1c:a1:9e:14:39:85:75:75:13:f9:0e:8c:f6:
18:3f:4a:c5:a6:8d:77:b0:41:10:55:db:a0:ad:dd:0a:21:ec:
50:2d:d4:04:04:60:8e:20:1d:53:75:b2:e8:d6:65:d4:d0:bf:
f3:d6:7b:29:f7:48:94:fb:ce:5a:db:e1:a0:12:56:e1:70:f7:
a3:3a:d2:23:e7:ea:f7:52:2e:a6:ee:da:72:eb:50:c8:0e:e9:
94:2b:7f:fa:93:83:86:ea:82:03:f0:e0:3b:41:41:4c:01:dd:
a0:c9:3d:7f:bd:4f:90:cd:48:bc:2d:6c:71:e2:8c:11:f7:ad:
11:d1:21:70:ba:b0:b7:16:68:e9:3f:eb:f6:bc:70:cc:ae:5c:
a4:15:78:72:1e:75:af:3b:d3:ad:97:60:a3:53:09:42:ba:cb:
55:ce:77:88:f1:cb:3a:65:25:24:75:91:db:99:38:fb:c3:00:
2c:6f:c1:77:02:8e:6d:2a:31:fd:68:14:c7:ad:59:7c:ab:51:
fa:2c:c3:aa
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYhsBPfEHy+F564lreVlQ14rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjMwNTMwMDkzNzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDExOTQ5MzBmZmQ2ODgxYWU4OTAyMTU2NzZjNDU0MTk4NWFkMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE11YUkRvXCpGydPTM45EwdPtB3p
tYl+zvvhiZUXwNqdVOLhvsen8bV7BrU844FnBy2c9YKywEztpjpnVr9B6FIVFcyD
N9tkShKqIveC9tZ/pA6vOp6CGae0IonsI0H58UFdvExB2Z+GxKpEkNA1nJXiMrRR
FrokM/oAauHJ+sdRJggpGtgIeH0Ln9MsxNUeoqvB/gDxmAatn0+1IFlZ6axqSATT
40slrR+C+BdHZHFYn3GzpsKr85LjTibfKjI34ZPgNc3fBS1CQlyEG6Nzh3B+b8Po
9vXMY/igRvI2LxkuU/9SX4yCYGs/nr/yFIDiYEGNGq3RRtR6n87+SPqj1QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLQRlJMP/WiBrokCFWdsRUGYWtDrMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvdEJHVWt3XzlhSUd1aVFJVloyeEZRWmhhME9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABemiED
BABemiIwDQYJKoZIhvcNAQELBQADggEBAHcPijHOl/L/5eKGOg10F8/15b5Etz0y
q6Syz4ovYCqf3pHWI/nXs+kzx/A5DGojpzLXax9d0QSFRGRbHKGeFDmFdXUT+Q6M
9hg/SsWmjXewQRBV26Ct3Qoh7FAt1AQEYI4gHVN1sujWZdTQv/PWeyn3SJT7zlrb
4aASVuFw96M60iPn6vdSLqbu2nLrUMgO6ZQrf/qTg4bqggPw4DtBQUwB3aDJPX+9
T5DNSLwtbHHijBH3rRHRIXC6sLcWaOk/6/a8cMyuXKQVeHIeda87062XYKNTCUK6
y1XOd4jxyzplJSR1kduZOPvDACxvwXcCjm0qMf1oFMetWXyrUfosw6o=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org