Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/z9qxFHIeqBAJnA-aDjym2i55A1k.roa
File: z9qxFHIeqBAJnA-aDjym2i55A1k.roa (raw, json)
Hash identifier: qLT3YTDkWmbTR4UhKahSQq8OoFXAmfbfWE2EcA/Bl8o=
Subject key identifier: CF:DA:B1:14:72:1E:A8:10:09:9C:0F:9A:0E:3C:A6:DA:2E:79:03:59
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 01856B935EFFEE2D7A4596AB077238C84F1F
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/z9qxFHIeqBAJnA-aDjym2i55A1k.roa
Signing time: Sun 01 Jan 2023 04:24:58 +0000
ROA not before: Sun 01 Jan 2023 04:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26114
IP address blocks: 94.31.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:5e:ff:ee:2d:7a:45:96:ab:07:72:38:c8:4f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 04:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfdab114721ea810099c0f9a0e3ca6da2e790359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d4:16:f2:72:29:9f:b0:33:80:4f:cb:7a:2c:
f1:cd:bb:ea:c5:f4:97:5b:25:4d:f3:26:8d:07:ff:
b5:04:33:5d:d7:1a:7b:73:94:4a:90:42:c4:ec:cf:
6e:de:c0:92:03:a2:27:1d:64:f8:be:cb:42:8f:c2:
f5:43:97:11:1c:7a:90:05:80:bc:71:9a:4a:aa:83:
2d:19:6a:3e:e9:d5:fc:24:d6:0a:6e:63:f1:77:80:
ff:46:2a:de:39:f0:25:b3:29:df:8f:40:ba:3a:e8:
c3:7f:21:02:58:74:b1:4a:0d:b4:13:ec:55:35:4d:
c9:6b:18:05:8e:27:14:e8:15:06:bb:78:01:10:64:
5e:b8:82:50:8b:72:8b:4b:91:fb:0f:ec:13:3c:31:
82:d3:42:16:61:0f:d7:e2:ad:6e:6d:c6:93:d0:17:
fd:74:34:e3:c6:27:b6:61:16:56:3b:0d:4b:45:76:
bf:2d:b7:c7:40:14:13:15:34:a5:8e:07:38:b8:3b:
07:3d:fd:de:bb:75:7f:14:2c:ef:d3:93:59:43:c3:
26:d5:5b:26:21:5f:92:98:9f:4c:b3:af:9f:b8:53:
9f:5f:3a:ad:41:3b:b8:d5:98:31:45:6e:4d:4e:bf:
66:a8:0a:48:7d:a2:0e:a8:62:dc:24:db:51:9d:b0:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DA:B1:14:72:1E:A8:10:09:9C:0F:9A:0E:3C:A6:DA:2E:79:03:59
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/z9qxFHIeqBAJnA-aDjym2i55A1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.31.44.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c1:23:5e:d6:5b:6f:19:83:98:ec:0a:01:bc:d5:c6:db:d3:
4e:29:b6:45:f6:b1:d0:f3:3c:fb:e8:3f:ac:61:77:da:6a:f5:
a3:47:49:83:eb:0d:7f:8a:a4:be:b9:02:2d:73:a6:a7:ff:36:
fa:67:ca:d8:d3:d3:56:30:48:09:b3:12:6f:26:44:f0:a5:01:
96:c0:11:aa:be:65:2f:11:e8:ad:ab:21:d3:57:cf:08:c8:db:
e9:25:e3:e8:da:17:32:66:eb:55:6d:83:ec:b9:85:e5:c8:26:
f9:a1:8c:62:42:8a:f7:de:cf:9a:01:a9:20:c5:82:b9:e3:75:
4f:02:ff:1a:45:76:69:17:88:7c:92:c8:a6:c7:eb:e9:ef:09:
ad:5f:bd:90:45:b1:0e:36:20:98:f1:ad:fe:45:92:68:6d:a4:
45:55:9b:b2:2d:11:76:e8:7e:05:a6:d0:dc:ea:af:b3:3a:64:
e4:f1:3c:91:50:e3:af:b2:10:9d:1e:47:f9:ce:a1:85:32:8d:
8d:f8:19:2c:86:4f:85:bf:06:69:6f:f0:79:a8:46:09:0c:df:
d8:49:d9:53:af:8f:de:28:4f:ee:2c:2d:26:05:60:52:f7:1e:
38:32:c5:38:27:c5:95:6b:ae:cf:c3:5b:c6:cf:44:8d:1e:b4:
24:69:9c:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrk17/7i16RZarB3I4yE8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMGNjOTQyOWI2MzM4MmU5YjE3MTRkMjFiM2M5NmQyZTVl
YmUyNTcwHhcNMjMwMTAxMDQyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmRhYjExNDcyMWVhODEwMDk5YzBmOWEwZTNjYTZkYTJlNzkwMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtQW8nIpn7AzgE/LeizxzbvqxfSX
WyVN8yaNB/+1BDNd1xp7c5RKkELE7M9u3sCSA6InHWT4vstCj8L1Q5cRHHqQBYC8
cZpKqoMtGWo+6dX8JNYKbmPxd4D/RireOfAlsynfj0C6OujDfyECWHSxSg20E+xV
NU3JaxgFjicU6BUGu3gBEGReuIJQi3KLS5H7D+wTPDGC00IWYQ/X4q1ubcaT0Bf9
dDTjxie2YRZWOw1LRXa/LbfHQBQTFTSljgc4uDsHPf3eu3V/FCzv05NZQ8Mm1Vsm
IV+SmJ9Ms6+fuFOfXzqtQTu41ZgxRW5NTr9mqApIfaIOqGLcJNtRnbCDaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM/asRRyHqgQCZwPmg48ptoueQNZMB8GA1UdIwQY
MBaAFOMMyUKbYzgumxcU0hs8ltLl6+JXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUt
ZGI0ZjM1MmU5YWQzLzEvejlxeEZISWVxQkFKbkEtYURqeW0yaTU1QTFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzMyODctYjFiMS00YWNhLWJkMmUtZGI0ZjM1MmU5YWQz
LzEvNHd6SlFwdGpPQzZiRnhUU0d6eVcwdVhyNGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXh8sMA0G
CSqGSIb3DQEBCwUAA4IBAQArwSNe1ltvGYOY7AoBvNXG29NOKbZF9rHQ8zz76D+s
YXfaavWjR0mD6w1/iqS+uQItc6an/zb6Z8rY09NWMEgJsxJvJkTwpQGWwBGqvmUv
EeitqyHTV88IyNvpJePo2hcyZutVbYPsuYXlyCb5oYxiQor33s+aAakgxYK543VP
Av8aRXZpF4h8ksimx+vp7wmtX72QRbEONiCY8a3+RZJobaRFVZuyLRF26H4FptDc
6q+zOmTk8TyRUOOvshCdHkf5zqGFMo2N+Bkshk+FvwZpb/B5qEYJDN/YSdlTr4/e
KE/uLC0mBWBS9x44MsU4J8WVa67Pw1vGz0SNHrQkaZz2
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:41 2024 by rpki-client on console-ams.rpki-client.org