Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3P6BB9YU6fIi1YTyuo_e09N8CF0.roa
File: 3P6BB9YU6fIi1YTyuo_e09N8CF0.roa (raw, json)
Hash identifier: 0kA8u9OQblr4EARR2bs3sFfB9SnUHIpXdtysBXMKSgM=
Subject key identifier: DC:FE:81:07:D6:14:E9:F2:22:D5:84:F2:BA:8F:DE:D3:D3:7C:08:5D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CE049E49CE202E61779CCCD40F1BB0B5E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3P6BB9YU6fIi1YTyuo_e09N8CF0.roa
Signing time: Sat 06 Jan 2024 19:39:48 +0000
ROA not before: Sat 06 Jan 2024 19:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 94.176.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 11:33:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e0:49:e4:9c:e2:02:e6:17:79:cc:cd:40:f1:bb:0b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 6 19:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcfe8107d614e9f222d584f2ba8fded3d37c085d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b6:d3:93:76:8c:38:45:0b:b8:05:cb:8c:81:
68:ce:19:2a:ad:1f:f5:4e:c2:3b:e0:4e:56:c2:b0:
44:27:b9:e9:7b:ab:6f:47:06:2a:cd:82:4f:f0:d7:
e0:01:03:64:1a:7d:77:19:21:b2:bf:a8:64:ed:ac:
be:c9:02:f4:ae:b9:cd:29:7a:82:95:8f:15:aa:8a:
d0:1b:34:8f:86:70:c4:05:41:0d:7e:47:be:6f:8a:
54:68:e4:d4:f4:ea:12:4a:66:73:f2:0d:e3:33:46:
ca:a6:02:59:f4:12:61:8e:a5:3d:68:5e:d7:aa:0b:
82:52:03:c7:ec:80:d2:0b:f5:d8:ed:2c:b1:71:77:
be:ad:13:71:54:a5:27:2c:2b:0d:fa:1e:08:f2:2f:
30:08:42:0e:94:e0:7f:09:91:93:1c:05:8f:9a:08:
97:25:44:4e:ec:b7:cf:2d:61:0d:34:86:bb:33:56:
b8:86:c5:37:40:77:14:a5:fa:b2:51:93:88:6d:c3:
15:47:3a:94:ce:a5:8a:0b:71:47:47:15:5a:95:2e:
7a:fd:7b:fe:61:48:a4:b9:c9:7d:a3:ee:b7:16:30:
70:67:d1:ea:97:ed:8d:ff:7f:b7:f6:67:9f:6f:63:
ad:40:23:ec:e7:9e:85:d4:13:d0:de:d9:38:f8:7c:
84:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FE:81:07:D6:14:E9:F2:22:D5:84:F2:BA:8F:DE:D3:D3:7C:08:5D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3P6BB9YU6fIi1YTyuo_e09N8CF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.215.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:93:65:d0:20:34:b6:2e:14:9f:14:d8:98:82:d3:ec:07:ce:
ec:af:50:d4:7b:d8:36:8a:45:d0:eb:16:83:3f:e1:b3:53:42:
5a:44:c3:1d:75:4b:ed:f9:07:20:5f:9b:c6:64:90:25:1a:46:
3c:0e:28:70:52:ee:ff:66:d1:6b:4b:df:36:14:a7:7b:64:7a:
21:12:aa:0b:e1:69:79:5d:89:d4:e5:86:d2:d3:01:d0:41:2e:
18:3b:48:11:d6:89:3b:3e:2c:6b:85:fc:ed:9f:cd:4c:d1:a9:
d5:ec:f8:45:aa:43:f3:31:2d:70:37:41:e2:17:42:cc:bb:5c:
be:79:76:6c:bb:88:4a:75:73:fb:ce:53:67:e7:1c:90:bf:e9:
f0:48:96:a6:ea:43:c7:cb:8e:50:0b:14:86:7c:49:fe:c8:ed:
77:28:51:8c:e1:10:3c:95:28:7d:1e:5a:f9:04:f7:b4:ae:d1:
4b:4d:17:02:d5:cf:8c:6a:fd:e1:18:08:c8:2f:07:5d:76:ac:
c1:5a:db:5c:ee:9b:bc:01:5a:1f:44:a4:8c:f3:5a:d2:9f:df:
5d:a6:2b:ae:b0:b5:01:82:49:7b:5d:8d:aa:dd:1d:8f:28:52:
87:1f:62:71:63:52:aa:68:19:bc:c5:4d:84:20:d3:db:e9:37:
2e:6e:b1:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzgSeSc4gLmF3nMzUDxuwteMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwMTA2MTkzOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2ZlODEwN2Q2MTRlOWYyMjJkNTg0ZjJiYThmZGVkM2QzN2MwODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibbTk3aMOEULuAXLjIFozhkqrR/1
TsI74E5WwrBEJ7npe6tvRwYqzYJP8NfgAQNkGn13GSGyv6hk7ay+yQL0rrnNKXqC
lY8VqorQGzSPhnDEBUENfke+b4pUaOTU9OoSSmZz8g3jM0bKpgJZ9BJhjqU9aF7X
qguCUgPH7IDSC/XY7SyxcXe+rRNxVKUnLCsN+h4I8i8wCEIOlOB/CZGTHAWPmgiX
JURO7LfPLWENNIa7M1a4hsU3QHcUpfqyUZOIbcMVRzqUzqWKC3FHRxValS56/Xv+
YUikucl9o+63FjBwZ9Hql+2N/3+39mefb2OtQCPs556F1BPQ3tk4+HyE2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNz+gQfWFOnyItWE8rqP3tPTfAhdMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvM1A2QkI5WVU2ZklpMVlUeXVvX2UwOU44Q0YwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrDXMA0G
CSqGSIb3DQEBCwUAA4IBAQBfk2XQIDS2LhSfFNiYgtPsB87sr1DUe9g2ikXQ6xaD
P+GzU0JaRMMddUvt+QcgX5vGZJAlGkY8DihwUu7/ZtFrS982FKd7ZHohEqoL4Wl5
XYnU5YbS0wHQQS4YO0gR1ok7Pixrhfztn81M0anV7PhFqkPzMS1wN0HiF0LMu1y+
eXZsu4hKdXP7zlNn5xyQv+nwSJam6kPHy45QCxSGfEn+yO13KFGM4RA8lSh9Hlr5
BPe0rtFLTRcC1c+Mav3hGAjILwdddqzBWttc7pu8AVofRKSM81rSn99dpiuusLUB
gkl7XY2q3R2PKFKHH2JxY1KqaBm8xU2EINPb6TcubrGO
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:11 2024 by rpki-client on console-ams.rpki-client.org