Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/nD27Bhq6r7rWtj_h2lTH7FoZAYM.roa
File: nD27Bhq6r7rWtj_h2lTH7FoZAYM.roa (raw, json)
Hash identifier: t3FmmF2MX7aWFDHD9S/LU8sfbNbEw7UzhuQOQT1dG6o=
Subject key identifier: 9C:3D:BB:06:1A:BA:AF:BA:D6:B6:3F:E1:DA:54:C7:EC:5A:19:01:83
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018AF52C05A89A946E9806285A88FF730551
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/nD27Bhq6r7rWtj_h2lTH7FoZAYM.roa
Signing time: Tue 03 Oct 2023 10:53:37 +0000
ROA not before: Tue 03 Oct 2023 10:53:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 94.137.78.0/24 maxlen: 24
94.137.72.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:2c:05:a8:9a:94:6e:98:06:28:5a:88:ff:73:05:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Oct 3 10:53:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c3dbb061abaafbad6b63fe1da54c7ec5a190183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:13:66:dd:63:84:a8:e5:3e:24:39:30:d2:6a:
33:fe:ab:a4:04:2e:06:3f:4b:71:0a:67:25:99:79:
2e:8b:60:22:52:da:e1:2c:cc:1f:9b:0c:a6:dd:fd:
5d:ee:51:f6:91:0b:3d:12:d5:d0:55:1b:57:8c:df:
cc:b3:2a:1c:42:53:8e:6f:dd:ba:32:99:4f:e1:87:
e6:e1:2b:49:f2:de:af:0f:e6:7b:80:11:47:56:7f:
db:65:0b:a5:98:28:de:68:09:17:6d:5c:bc:38:d0:
1f:06:b8:0b:ad:e0:9b:e2:2d:4d:1f:f1:15:66:c2:
af:f2:30:b5:17:2e:f3:89:da:60:17:43:42:40:a9:
ac:12:d0:dd:c5:74:3e:a9:d4:51:96:65:c8:f5:a4:
c3:7c:47:49:38:14:40:aa:24:48:30:ba:cc:a7:4a:
31:ba:14:e5:5b:78:34:15:b5:1b:44:43:53:42:ff:
96:b1:85:43:23:17:77:d7:1d:6f:94:66:0d:70:ab:
95:28:b0:e3:c5:d8:a4:8c:d1:10:0b:43:1e:f6:01:
f6:0a:be:bf:62:cd:97:38:1b:81:cf:10:e3:9e:76:
64:7e:49:1d:19:d2:49:c4:3e:7b:20:c5:43:e9:8e:
76:de:ad:0c:1f:5b:fd:e2:02:8f:69:4f:36:92:c5:
fb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3D:BB:06:1A:BA:AF:BA:D6:B6:3F:E1:DA:54:C7:EC:5A:19:01:83
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/nD27Bhq6r7rWtj_h2lTH7FoZAYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.72.0/24
94.137.78.0/24
94.137.89.0-94.137.91.255
94.137.93.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b0:ae:57:84:05:8f:d2:f4:98:f5:fe:58:df:85:13:3b:20:
3a:4b:3c:7c:89:d2:59:4e:72:c5:52:39:b7:62:4e:80:77:53:
ac:79:91:20:03:50:e2:cc:ea:99:cc:03:ee:2d:90:52:61:7b:
71:47:9a:ec:f7:9f:66:7e:00:3f:60:e2:c6:3a:bd:b6:7d:db:
e1:92:2a:63:06:a2:9e:5c:5f:90:8d:f2:64:65:b0:a3:46:04:
b6:c4:e4:44:bb:d6:c2:a3:ae:8c:f7:7b:2d:9f:74:43:39:f3:
d8:ad:2f:2e:d3:74:16:e8:d4:5f:33:23:c1:36:60:74:42:58:
f1:6d:40:6e:c2:bf:1d:2c:7e:78:6f:35:ae:fd:e5:94:d1:00:
36:d2:f0:46:8e:33:7c:50:8c:10:3e:76:40:2f:9b:5b:dc:cc:
3e:a8:cf:81:30:e0:c8:51:c2:c6:b8:41:5d:cb:d2:0f:00:81:
b3:b2:f3:4e:27:b7:6d:59:a8:b8:36:c8:ac:34:85:13:64:42:
8d:d5:22:43:28:76:b8:9b:6d:8e:d4:b7:90:6e:79:f2:13:90:
74:84:c0:f9:1a:4c:1e:75:74:30:86:a5:c0:4d:84:57:bf:d6:
22:a6:cb:ad:5c:3b:29:5a:b5:85:02:b4:a1:fb:ff:94:b9:b8:
dd:84:c2:d9
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYr1LAWompRumAYoWoj/cwVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjMxMDAzMTA1MzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzNkYmIwNjFhYmFhZmJhZDZiNjNmZTFkYTU0YzdlYzVhMTkwMTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixNm3WOEqOU+JDkw0moz/qukBC4G
P0txCmclmXkui2AiUtrhLMwfmwym3f1d7lH2kQs9EtXQVRtXjN/MsyocQlOOb926
MplP4Yfm4StJ8t6vD+Z7gBFHVn/bZQulmCjeaAkXbVy8ONAfBrgLreCb4i1NH/EV
ZsKv8jC1Fy7zidpgF0NCQKmsEtDdxXQ+qdRRlmXI9aTDfEdJOBRAqiRIMLrMp0ox
uhTlW3g0FbUbRENTQv+WsYVDIxd31x1vlGYNcKuVKLDjxdikjNEQC0Me9gH2Cr6/
Ys2XOBuBzxDjnnZkfkkdGdJJxD57IMVD6Y523q0MH1v94gKPaU82ksX7VwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFJw9uwYauq+61rY/4dpUx+xaGQGDMB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvbkQyN0JocTZyN3JXdGpfaDJsVEg3Rm9aQVlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAXolIAwQA
XolOMAwDBABeiVkDBAJeiVgDBABeiV0wDQYJKoZIhvcNAQELBQADggEBACawrleE
BY/S9Jj1/ljfhRM7IDpLPHyJ0llOcsVSObdiToB3U6x5kSADUOLM6pnMA+4tkFJh
e3FHmuz3n2Z+AD9g4sY6vbZ92+GSKmMGop5cX5CN8mRlsKNGBLbE5ES71sKjroz3
ey2fdEM589itLy7TdBbo1F8zI8E2YHRCWPFtQG7Cvx0sfnhvNa795ZTRADbS8EaO
M3xQjBA+dkAvm1vczD6oz4Ew4MhRwsa4QV3L0g8AgbOy804nt21ZqLg2yKw0hRNk
Qo3VIkModribbY7Ut5BuefITkHSEwPkaTB51dDCGpcBNhFe/1iKmy61cOylatYUC
tKH7/5S5uN2Ewtk=
Generated at Mon Oct 23 15:16:39 2023 by rpki-client on console-ams.rpki-client.org