Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/o6DJWVACXqDC8VRyNbiEqlpbXZk.roa
File: o6DJWVACXqDC8VRyNbiEqlpbXZk.roa (raw, json)
Hash identifier: ta9Ca1SYXo2ukaSZbFaNmKeGVQk+laORq0v9bh1iegk=
Subject key identifier: A3:A0:C9:59:50:02:5E:A0:C2:F1:54:72:35:B8:84:AA:5A:5B:5D:99
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0191C7D443C9251BF24D8E91B8E9C38042FD
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/o6DJWVACXqDC8VRyNbiEqlpbXZk.roa
Signing time: Fri 06 Sep 2024 14:54:22 +0000
ROA not before: Fri 06 Sep 2024 14:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12679
IP address blocks: 94.137.72.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Sep 2024 20:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c7:d4:43:c9:25:1b:f2:4d:8e:91:b8:e9:c3:80:42:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Sep 6 14:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3a0c95950025ea0c2f1547235b884aa5a5b5d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:26:a6:57:17:d8:16:4b:f8:0f:32:f1:3b:8f:
62:6b:5a:7e:bc:c5:25:78:60:42:7a:ad:45:28:18:
13:be:75:c9:9e:85:c4:f2:a8:ac:f9:96:22:bc:3f:
0c:14:c7:76:ce:5b:db:b3:04:ad:68:dd:67:77:c0:
b3:2a:88:f4:b4:38:ef:7c:e5:58:27:81:9f:fe:79:
a2:68:3c:2c:f1:83:d8:8a:5b:db:6c:6b:fd:35:ee:
08:5e:b0:b5:97:98:ea:5c:41:5c:84:c2:9d:bd:6e:
16:b5:9f:14:c5:e9:c2:65:91:08:1f:17:e7:43:3a:
b9:e8:9f:d3:54:cd:98:fb:51:23:50:0d:3d:30:3e:
9e:45:80:5d:90:91:ef:19:51:69:90:42:dd:bf:7f:
7d:54:a5:82:38:f3:d1:92:6e:71:87:7b:97:86:e0:
6c:57:81:26:28:77:05:95:4d:2d:fc:53:12:7b:b6:
91:55:41:ad:80:fe:b2:91:7a:33:67:aa:e3:bd:d3:
ad:f0:f4:9c:95:db:ee:05:a5:f8:55:54:46:4a:3d:
c5:12:c7:ca:53:19:70:43:59:09:ef:65:b6:f4:9d:
16:7f:2a:40:18:80:23:8a:ab:dd:c2:aa:dc:a2:21:
98:4b:43:72:b3:36:4c:24:e1:f4:55:a0:25:16:4a:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A0:C9:59:50:02:5E:A0:C2:F1:54:72:35:B8:84:AA:5A:5B:5D:99
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/o6DJWVACXqDC8VRyNbiEqlpbXZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.72.0/24
94.137.89.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f6:b6:b4:d2:cd:ef:d5:a6:47:1a:27:d9:11:99:42:91:bc:
07:d1:58:69:2c:23:ed:82:f8:c7:06:6f:3b:09:4d:c5:e4:85:
1e:a3:25:df:4a:44:13:9e:87:58:87:4e:d5:0f:58:53:43:da:
2c:83:2b:27:e8:4a:6f:ae:87:b1:88:a1:fc:b5:fc:03:01:7e:
60:55:be:0c:1d:f3:fa:52:c1:5e:eb:df:f5:c7:40:1f:db:06:
61:89:77:c5:d2:54:14:05:23:6b:34:01:58:87:ec:fd:96:4d:
76:26:1a:76:b9:7c:c6:2e:f0:63:41:fa:15:66:b1:2e:4f:0c:
b6:86:65:53:d2:66:a1:0a:47:7c:75:27:8f:00:14:f8:87:61:
7b:b3:ab:a5:da:b1:64:a0:53:02:0d:23:a1:43:f7:ee:3b:55:
7b:c4:ce:cc:b2:d7:cc:93:ed:b9:69:55:2d:c0:ab:8c:4d:91:
79:10:a3:81:c0:da:5e:76:56:9b:83:f3:ec:9b:34:81:48:69:
de:9e:65:40:7b:46:a5:05:3d:a8:93:3d:bf:37:ce:a5:ce:91:
8e:58:e1:0a:06:de:e5:0f:86:c4:7a:4c:63:23:a6:b3:54:c4:
03:62:30:30:00:c5:af:00:89:e9:c7:02:4a:5e:bc:d1:92:f6:
b6:65:21:6b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZHH1EPJJRvyTY6RuOnDgEL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjQwOTA2MTQ1NDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2EwYzk1OTUwMDI1ZWEwYzJmMTU0NzIzNWI4ODRhYTVhNWI1ZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CamVxfYFkv4DzLxO49ia1p+vMUl
eGBCeq1FKBgTvnXJnoXE8qis+ZYivD8MFMd2zlvbswStaN1nd8CzKoj0tDjvfOVY
J4Gf/nmiaDws8YPYilvbbGv9Ne4IXrC1l5jqXEFchMKdvW4WtZ8UxenCZZEIHxfn
Qzq56J/TVM2Y+1EjUA09MD6eRYBdkJHvGVFpkELdv399VKWCOPPRkm5xh3uXhuBs
V4EmKHcFlU0t/FMSe7aRVUGtgP6ykXozZ6rjvdOt8PScldvuBaX4VVRGSj3FEsfK
UxlwQ1kJ72W29J0WfypAGIAjiqvdwqrcoiGYS0NyszZMJOH0VaAlFkpsTwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKOgyVlQAl6gwvFUcjW4hKpaW12ZMB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvbzZESldWQUNYcURDOFZSeU5iaUVxbHBiWFprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXolIAwQA
XolZMA0GCSqGSIb3DQEBCwUAA4IBAQAL9ra00s3v1aZHGifZEZlCkbwH0VhpLCPt
gvjHBm87CU3F5IUeoyXfSkQTnodYh07VD1hTQ9osgysn6EpvroexiKH8tfwDAX5g
Vb4MHfP6UsFe69/1x0Af2wZhiXfF0lQUBSNrNAFYh+z9lk12Jhp2uXzGLvBjQfoV
ZrEuTwy2hmVT0mahCkd8dSePABT4h2F7s6ul2rFkoFMCDSOhQ/fuO1V7xM7MstfM
k+25aVUtwKuMTZF5EKOBwNpedlabg/PsmzSBSGnenmVAe0alBT2okz2/N86lzpGO
WOEKBt7lD4bEekxjI6azVMQDYjAwAMWvAInpxwJKXrzRkva2ZSFr
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:01 2025 by rpki-client