Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/1Vs4DxE8NY3gMxbL5IgWJK1N864.roa
File: 1Vs4DxE8NY3gMxbL5IgWJK1N864.roa (raw, json)
Hash identifier: wlHCgl7OJLj0XncR9xs17FWyPHU6l9QSQu0B95d0l6o=
Subject key identifier: D5:5B:38:0F:11:3C:35:8D:E0:33:16:CB:E4:88:16:24:AD:4D:F3:AE
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018BD3ECDC5F9535874A23B787BD836F6339
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/1Vs4DxE8NY3gMxbL5IgWJK1N864.roa
Signing time: Wed 15 Nov 2023 16:59:57 +0000
ROA not before: Wed 15 Nov 2023 16:59:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 94.137.78.0/24 maxlen: 24
94.137.72.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:ec:dc:5f:95:35:87:4a:23:b7:87:bd:83:6f:63:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Nov 15 16:59:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d55b380f113c358de03316cbe4881624ad4df3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:7d:54:b7:c4:7d:77:b9:44:c2:50:b6:1d:
2d:37:f4:cc:50:51:57:1d:b9:4e:b5:6f:65:82:13:
51:de:5e:db:af:04:59:ae:e1:39:b8:4a:9d:75:b5:
37:e6:97:f6:9f:30:e7:92:64:c7:34:87:64:f9:34:
ae:5c:30:15:4f:12:8d:5e:5d:fd:b7:12:c9:8b:e2:
b9:8e:de:4a:2e:76:72:b7:9e:82:f3:04:3d:9d:33:
92:e5:9d:25:1e:81:f8:b2:84:19:2c:41:6a:77:a7:
47:2f:21:cc:80:17:b9:05:a0:f7:b6:8e:02:ac:38:
a7:1e:47:ed:e8:27:cd:53:e1:44:f8:87:15:e6:57:
d4:8c:15:ba:3b:b0:a2:ce:da:94:f9:32:32:8a:bf:
87:a3:49:7b:ae:05:35:0a:3e:b4:ee:c7:c1:c6:ef:
e2:4a:28:9f:ed:8a:e8:5c:dd:7d:33:9b:ab:d5:35:
f6:4e:30:64:50:e4:9a:28:86:f6:93:a2:19:f1:a9:
03:83:4b:33:c8:bd:08:e2:6d:1f:7b:12:25:4c:11:
0e:52:e9:1a:c4:d7:e6:72:6c:5c:58:75:94:ab:d4:
c9:4c:52:d5:d5:77:cf:50:c0:9b:79:58:85:50:97:
7b:c3:dd:ec:b3:d0:70:77:bc:8f:20:74:df:ef:ff:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5B:38:0F:11:3C:35:8D:E0:33:16:CB:E4:88:16:24:AD:4D:F3:AE
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/1Vs4DxE8NY3gMxbL5IgWJK1N864.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.72.0/24
94.137.78.0/24
94.137.89.0-94.137.91.255
Signature Algorithm: sha256WithRSAEncryption
56:99:8c:1d:51:fb:b5:91:e0:39:b2:80:da:c2:62:bd:73:49:
10:ea:7b:72:72:c2:81:46:5b:9a:e9:3e:72:51:36:47:ca:61:
53:d2:2e:c8:92:05:30:0e:a1:24:3f:59:b8:7c:47:5e:fa:8c:
5b:37:5e:db:ba:3c:fd:d5:d1:75:f5:27:d2:2b:2b:3b:1c:76:
bb:91:a8:a9:41:c7:56:0e:c8:f2:ca:29:37:e4:39:33:7d:f4:
0c:37:24:02:34:fe:26:2f:8d:17:ec:81:e3:d1:02:07:8b:4a:
d7:99:23:47:2d:c6:ad:1b:b3:72:d2:6b:35:bc:fd:7b:e4:df:
7a:a4:20:7e:15:31:e3:58:b3:99:93:be:f2:76:66:68:35:29:
fa:53:73:95:66:1c:cf:59:22:59:c7:ee:e5:a9:0b:ac:f7:8d:
1a:89:35:e7:4d:f8:07:e9:f4:62:89:d0:23:0c:9f:05:85:03:
82:82:48:4c:7a:2a:d7:e4:9c:53:0d:91:9b:27:6b:74:e0:5e:
da:63:6e:1d:62:25:65:95:ef:85:3a:ea:d3:1e:7b:d4:cb:1c:
08:f4:20:2c:33:a9:24:91:dc:51:41:e3:15:eb:dc:40:0d:71:
d7:2d:c9:7c:26:79:39:56:b1:44:93:fb:15:68:74:74:a8:93:
d8:9f:dd:df
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYvT7NxflTWHSiO3h72Db2M5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjMxMTE1MTY1OTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTViMzgwZjExM2MzNThkZTAzMzE2Y2JlNDg4MTYyNGFkNGRmM2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6V9VLfEfXe5RMJQth0tN/TMUFFX
HblOtW9lghNR3l7brwRZruE5uEqddbU35pf2nzDnkmTHNIdk+TSuXDAVTxKNXl39
txLJi+K5jt5KLnZyt56C8wQ9nTOS5Z0lHoH4soQZLEFqd6dHLyHMgBe5BaD3to4C
rDinHkft6CfNU+FE+IcV5lfUjBW6O7CiztqU+TIyir+Ho0l7rgU1Cj607sfBxu/i
Siif7YroXN19M5ur1TX2TjBkUOSaKIb2k6IZ8akDg0szyL0I4m0fexIlTBEOUuka
xNfmcmxcWHWUq9TJTFLV1XfPUMCbeViFUJd7w93ss9Bwd7yPIHTf7//IgQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFNVbOA8RPDWN4DMWy+SIFiStTfOuMB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvMVZzNER4RThOWTNnTXhiTDVJZ1dKSzFOODY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAXolIAwQA
XolOMAwDBABeiVkDBAJeiVgwDQYJKoZIhvcNAQELBQADggEBAFaZjB1R+7WR4Dmy
gNrCYr1zSRDqe3JywoFGW5rpPnJRNkfKYVPSLsiSBTAOoSQ/Wbh8R176jFs3Xtu6
PP3V0XX1J9IrKzscdruRqKlBx1YOyPLKKTfkOTN99Aw3JAI0/iYvjRfsgePRAgeL
SteZI0ctxq0bs3LSazW8/Xvk33qkIH4VMeNYs5mTvvJ2Zmg1KfpTc5VmHM9ZIlnH
7uWpC6z3jRqJNedN+Afp9GKJ0CMMnwWFA4KCSEx6KtfknFMNkZsna3TgXtpjbh1i
JWWV74U66tMee9TLHAj0ICwzqSSR3FFB4xXr3EANcdctyXwmeTlWsUST+xVodHSo
k9if3d8=
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:29 2024 by rpki-client on console-ams.rpki-client.org