Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/AnrJkvpysmXS4O9TD3M2Uh9aZao.roa
File: AnrJkvpysmXS4O9TD3M2Uh9aZao.roa (raw, json)
Hash identifier: 4JlFo6pOrUrQYxFPE4F3YqBxXKN8O/4b9SyMm5xXOQk=
Subject key identifier: 02:7A:C9:92:FA:72:B2:65:D2:E0:EF:53:0F:73:36:52:1F:5A:65:AA
Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Certificate serial: 0192BE95E6AE48E43D7665F4536CBAC08E09
Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/AnrJkvpysmXS4O9TD3M2Uh9aZao.roa
Signing time: Thu 24 Oct 2024 12:52:27 +0000
ROA not before: Thu 24 Oct 2024 12:52:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211914
IP address blocks: 94.158.208.0/21 maxlen: 21
94.158.209.0/24 maxlen: 24
94.158.210.0/24 maxlen: 24
94.158.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:95:e6:ae:48:e4:3d:76:65:f4:53:6c:ba:c0:8e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134
Validity
Not Before: Oct 24 12:52:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=027ac992fa72b265d2e0ef530f7336521f5a65aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:87:68:a4:cf:36:61:87:08:f2:f9:a1:a0:
08:32:78:f1:c1:d7:5e:22:52:26:e2:db:48:86:a0:
75:a9:d6:38:c8:ea:e2:6f:5b:ad:10:0f:c8:cd:78:
e2:78:fb:bf:5a:5a:80:e8:30:55:3a:d0:6a:f2:ff:
36:60:66:d5:21:6a:b6:f5:a4:cd:54:13:25:a6:79:
8e:5b:05:93:4d:c3:53:8c:68:39:0e:4d:d3:20:7a:
81:74:a8:f8:4f:9f:a7:dd:5f:f1:7e:ad:a3:d9:80:
ae:8d:cc:da:34:24:aa:1e:14:32:21:20:ea:29:5d:
07:cc:1c:be:f2:96:10:63:5b:43:3e:d2:c3:d7:6f:
0c:d3:66:f9:af:82:56:6b:04:96:66:98:96:fb:16:
ca:2b:5f:69:10:1f:85:ae:26:1b:c8:c2:e2:0e:b9:
74:c5:b8:50:46:5c:b8:db:0d:73:f7:46:fe:e3:1a:
77:d3:41:6f:58:31:91:16:1b:23:bb:79:4a:ec:ad:
51:ff:52:73:a0:dd:8d:d1:89:6e:aa:9c:c1:a6:c7:
47:fc:7b:ca:25:cb:97:7e:cc:ac:a7:36:27:09:a2:
0f:7e:54:91:81:f7:c4:02:16:aa:26:d0:07:f0:21:
21:f4:bb:8e:15:e3:9c:05:c9:9a:95:82:e4:62:a4:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7A:C9:92:FA:72:B2:65:D2:E0:EF:53:0F:73:36:52:1F:5A:65:AA
X509v3 Authority Key Identifier:
keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/AnrJkvpysmXS4O9TD3M2Uh9aZao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.208.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:2b:a4:41:7f:de:73:bd:e7:70:5e:5c:e4:31:12:6d:f9:87:
ee:3b:46:5d:66:7d:e8:4f:56:90:1a:61:e7:ca:65:e6:09:82:
07:6d:7d:6a:cb:b9:18:be:76:d3:0a:f9:4d:c1:bf:e2:78:43:
7a:ef:74:e4:ef:d4:9b:af:4a:eb:88:ee:e7:d4:85:fc:db:9a:
60:57:7c:f8:f6:f9:1e:64:52:e9:cd:9b:8d:89:48:58:db:3c:
e7:b1:4d:74:ce:3d:19:f6:0d:3c:51:25:a7:ee:44:99:84:98:
e1:90:d2:b2:a6:01:25:95:e4:32:13:39:a2:a3:c4:67:9a:ee:
52:cf:56:63:89:a4:b9:c8:f4:ed:6a:ec:34:be:de:d3:1d:c5:
d6:0f:b6:31:db:ef:48:f6:fe:b0:23:70:44:09:67:05:7c:4b:
31:4d:51:5a:9a:02:08:1c:d0:20:93:db:5c:23:fb:52:18:12:
59:49:ea:55:3f:47:ce:a5:1f:9f:b9:77:a1:2a:b2:2a:06:2f:
4d:d0:89:24:de:53:f8:67:52:fb:8e:3d:cb:ee:5e:e4:b8:8a:
30:6c:45:c4:cc:38:1e:02:0d:03:21:0f:35:bd:f4:fb:03:e3:
52:11:23:e3:89:ad:64:9e:4d:e9:19:c7:5f:ec:8c:7e:58:fe:
fb:3c:27:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZK+leauSOQ9dmX0U2y6wI4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YjQ1ZTYwYjFmNWYyY2IyYzYxNGEwMDM0MWU4MTk5NmQ5
NGQxMzQwHhcNMjQxMDI0MTI1MjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjdhYzk5MmZhNzJiMjY1ZDJlMGVmNTMwZjczMzY1MjFmNWE2NWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI2HaKTPNmGHCPL5oaAIMnjxwdde
IlIm4ttIhqB1qdY4yOrib1utEA/IzXjiePu/WlqA6DBVOtBq8v82YGbVIWq29aTN
VBMlpnmOWwWTTcNTjGg5Dk3TIHqBdKj4T5+n3V/xfq2j2YCujczaNCSqHhQyISDq
KV0HzBy+8pYQY1tDPtLD128M02b5r4JWawSWZpiW+xbKK19pEB+FriYbyMLiDrl0
xbhQRly42w1z90b+4xp300FvWDGRFhsju3lK7K1R/1JzoN2N0YluqpzBpsdH/HvK
JcuXfsyspzYnCaIPflSRgffEAhaqJtAH8CEh9LuOFeOcBcmalYLkYqSNfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAJ6yZL6crJl0uDvUw9zNlIfWmWqMB8GA1UdIwQY
MBaAFGi0XmCx9fLLLGFKADQegZltlNE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMt
ZTNjNTViYjc3MjhlLzEvQW5ySmt2cHlzbVhTNE85VEQzTTJVaDlhWmFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMtZTNjNTViYjc3Mjhl
LzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXp7QMA0G
CSqGSIb3DQEBCwUAA4IBAQBfK6RBf95zvedwXlzkMRJt+YfuO0ZdZn3oT1aQGmHn
ymXmCYIHbX1qy7kYvnbTCvlNwb/ieEN673Tk79Sbr0rriO7n1IX825pgV3z49vke
ZFLpzZuNiUhY2zznsU10zj0Z9g08USWn7kSZhJjhkNKypgElleQyEzmio8Rnmu5S
z1ZjiaS5yPTtauw0vt7THcXWD7Yx2+9I9v6wI3BECWcFfEsxTVFamgIIHNAgk9tc
I/tSGBJZSepVP0fOpR+fuXehKrIqBi9N0Ikk3lP4Z1L7jj3L7l7kuIowbEXEzDge
Ag0DIQ81vfT7A+NSESPjia1knk3pGcdf7Ix+WP77PCe3
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:42 2025 by rpki-client