Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/1GkIG9T9piV0Scv-xxu4CjE01jI.roa
File: 1GkIG9T9piV0Scv-xxu4CjE01jI.roa (raw, json)
Hash identifier: U0pP+gbTubagulRP4VFGLU6a1u/OoOR4HGoww8znbWo=
Subject key identifier: D4:69:08:1B:D4:FD:A6:25:74:49:CB:FE:C7:1B:B8:0A:31:34:D6:32
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 0185BF18007A60DD7E3B5A87178C4E86D69C
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/1GkIG9T9piV0Scv-xxu4CjE01jI.roa
Signing time: Tue 17 Jan 2023 09:38:19 +0000
ROA not before: Tue 17 Jan 2023 09:38:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201925
IP address blocks: 94.246.168.0/21 maxlen: 24
94.246.179.0/24 maxlen: 24
94.246.180.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:18:00:7a:60:dd:7e:3b:5a:87:17:8c:4e:86:d6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Jan 17 09:38:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d469081bd4fda6257449cbfec71bb80a3134d632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:8d:9a:f4:44:75:2f:f0:6a:fc:5f:67:37:
87:42:b1:b3:af:ee:fc:eb:60:29:31:9d:66:ed:bd:
50:af:11:f6:a8:eb:04:5c:38:f7:62:12:ce:b9:14:
c2:2f:07:81:31:9b:ee:27:50:d4:b9:47:80:a9:ff:
29:70:ea:fc:40:b9:47:4e:03:9d:2b:bc:33:f0:ad:
2c:d5:a0:46:bc:3f:21:bc:75:00:6d:13:59:d4:b8:
0e:ab:18:d3:3b:85:f3:a9:1c:f3:d0:3b:33:91:c0:
27:6e:cc:c7:75:88:22:77:4c:aa:bd:d7:ad:d1:8f:
4d:84:96:ef:f2:48:eb:67:b9:7f:6e:ce:b6:5f:fc:
72:0a:ec:02:d9:97:0e:94:18:4d:95:95:a3:b8:6f:
c1:f0:df:2b:a0:83:44:0a:ef:3f:45:3f:47:7e:33:
46:ee:92:ec:d4:99:f5:9f:cb:1b:55:cf:79:37:90:
51:cb:9f:4b:c1:40:3c:c5:cf:5c:5d:24:ca:d1:cf:
39:f9:a0:1d:91:ef:cd:fc:1d:01:3b:80:c0:9e:3b:
b8:d6:2d:8b:50:e7:3b:73:37:33:5b:31:2f:56:7a:
03:91:67:a7:06:51:96:87:06:5f:f5:ea:95:5b:3e:
49:cb:cc:c0:65:ba:de:ff:01:0a:6f:4a:a4:c8:d5:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:69:08:1B:D4:FD:A6:25:74:49:CB:FE:C7:1B:B8:0A:31:34:D6:32
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/1GkIG9T9piV0Scv-xxu4CjE01jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.246.168.0/21
94.246.179.0-94.246.181.255
Signature Algorithm: sha256WithRSAEncryption
b5:4f:b4:2c:a6:70:73:bf:36:5a:b2:ed:cf:ae:0f:cc:ab:17:
d5:af:f8:a0:a6:3d:f7:e9:9c:cb:22:ea:70:b9:cd:9c:0e:cc:
61:de:f5:44:ba:e1:e1:8b:c8:46:d1:79:4e:3c:88:15:56:23:
6e:10:df:59:f4:db:9d:50:fd:38:d5:20:f3:16:df:23:16:76:
35:e6:21:c2:89:d3:e6:c6:be:67:11:18:1b:ef:d6:5c:2b:8e:
49:c3:9a:8c:d9:29:d5:98:a5:74:cf:74:6e:35:d2:07:5f:15:
af:88:ef:a6:49:61:22:e7:5c:5d:2b:9a:87:3f:6d:99:c4:e2:
47:ec:6c:2a:6d:4e:5c:39:45:1d:b8:79:28:d4:58:6a:c9:9c:
f3:99:73:78:5a:85:99:3a:27:53:16:d6:c6:2a:c3:67:6a:75:
8f:90:3d:2f:0d:bb:d9:a7:5c:8b:2e:ba:ff:cf:4e:f5:9e:34:
0e:d1:c9:f8:c0:30:b4:cc:8e:51:f2:a7:21:24:8d:2b:3c:aa:
36:14:57:c7:ad:21:d5:58:4b:7c:29:45:dc:2b:05:0d:06:26:
d7:33:43:fa:42:fe:1a:c6:3a:6f:7c:e0:59:59:1f:90:ab:83:
ac:33:f1:92:f8:2a:c7:b6:22:5b:41:23:cd:c2:67:20:8e:36:
6a:3d:b8:03
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYW/GAB6YN1+O1qHF4xOhtacMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Yjg3YjNiMDljY2I2OWE2ZGUyMDQ2OGU5MGVjYmIxOGY1
ZWNiYjYwHhcNMjMwMTE3MDkzODE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDY5MDgxYmQ0ZmRhNjI1NzQ0OWNiZmVjNzFiYjgwYTMxMzRkNjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0KNmvREdS/wavxfZzeHQrGzr+78
62ApMZ1m7b1QrxH2qOsEXDj3YhLOuRTCLweBMZvuJ1DUuUeAqf8pcOr8QLlHTgOd
K7wz8K0s1aBGvD8hvHUAbRNZ1LgOqxjTO4XzqRzz0DszkcAnbszHdYgid0yqvdet
0Y9NhJbv8kjrZ7l/bs62X/xyCuwC2ZcOlBhNlZWjuG/B8N8roINECu8/RT9HfjNG
7pLs1Jn1n8sbVc95N5BRy59LwUA8xc9cXSTK0c85+aAdke/N/B0BO4DAnju41i2L
UOc7czczWzEvVnoDkWenBlGWhwZf9eqVWz5Jy8zAZbre/wEKb0qkyNXSoQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFNRpCBvU/aYldEnL/scbuAoxNNYyMB8GA1UdIwQY
MBaAFLm4ezsJzLaabeIEaOkOy7GPXsu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJoN093bk10cHB0NGdSbzZRN0xzWTlleTdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wMGRkYWYtM2JlNS00MjBkLTkxOWYt
M2I0Y2I5NzVhOWJjLzEvMUdrSUc5VDlwaVYwU2N2LXh4dTRDakUwMWpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wMGRkYWYtM2JlNS00MjBkLTkxOWYtM2I0Y2I5NzVhOWJj
LzEvdWJoN093bk10cHB0NGdSbzZRN0xzWTlleTdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDXvaoMAwD
BABe9rMDBAFe9rQwDQYJKoZIhvcNAQELBQADggEBALVPtCymcHO/Nlqy7c+uD8yr
F9Wv+KCmPffpnMsi6nC5zZwOzGHe9US64eGLyEbReU48iBVWI24Q31n0251Q/TjV
IPMW3yMWdjXmIcKJ0+bGvmcRGBvv1lwrjknDmozZKdWYpXTPdG410gdfFa+I76ZJ
YSLnXF0rmoc/bZnE4kfsbCptTlw5RR24eSjUWGrJnPOZc3hahZk6J1MW1sYqw2dq
dY+QPS8Nu9mnXIsuuv/PTvWeNA7RyfjAMLTMjlHypyEkjSs8qjYUV8etIdVYS3wp
RdwrBQ0GJtczQ/pC/hrGOm984FlZH5Crg6wz8ZL4Kse2IltBI83CZyCONmo9uAM=
-----END CERTIFICATE-----
Generated at Mon Sep 4 09:30:32 2023 by rpki-client on console-fra.rpki-client.org