Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/sZtnHZYa6BGjpm__1OVvJGZsEzQ.roa
File: sZtnHZYa6BGjpm__1OVvJGZsEzQ.roa (raw, json)
Hash identifier: O4g7wmO9GyaG/Q7zA1OanC/7xnXgIvvC8Q1VK5eH8lQ=
Subject key identifier: B1:9B:67:1D:96:1A:E8:11:A3:A6:6F:FF:D4:E5:6F:24:66:6C:13:34
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C3FEEAA34CBDF1C755D63313346BF9ADC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/sZtnHZYa6BGjpm__1OVvJGZsEzQ.roa
Signing time: Wed 06 Dec 2023 16:20:54 +0000
ROA not before: Wed 06 Dec 2023 16:20:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211014
IP address blocks: 94.176.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:ee:aa:34:cb:df:1c:75:5d:63:31:33:46:bf:9a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 6 16:20:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b19b671d961ae811a3a66fffd4e56f24666c1334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:da:96:e3:4a:89:82:5e:9c:54:9c:3d:3e:aa:
09:67:be:38:bb:75:70:7a:c0:94:ea:00:f7:b0:e5:
70:46:44:77:ef:b3:48:1f:26:3f:40:98:fc:ec:67:
dc:2a:f7:f4:cf:50:ad:93:df:f9:b2:62:eb:51:e6:
7e:a0:ec:64:05:e1:bd:09:38:db:97:76:bf:97:af:
48:8b:1c:4a:39:32:53:d8:96:67:d0:1c:20:7a:d4:
f4:de:48:88:ea:35:98:c2:92:a2:ca:be:5b:9d:15:
0b:0f:e2:3b:0c:65:c6:bb:e7:ab:5e:b1:03:a3:09:
0e:c1:e1:2e:d5:2f:17:fb:3b:74:a8:5a:d2:24:64:
25:d0:25:2e:ce:4f:04:e8:46:00:3f:f7:6f:4b:23:
e8:53:0d:ec:28:4e:50:fe:e2:8d:1d:57:a8:f3:9d:
e2:1e:d7:ad:52:4d:59:65:4b:2d:60:ea:01:b4:d0:
ec:16:dc:fe:e6:b6:e2:18:2c:e4:57:3b:30:49:38:
ed:4f:f3:38:0a:3a:03:ca:19:71:da:f7:28:52:a3:
25:b3:a3:b2:7c:3a:3d:8f:6c:af:24:0a:74:ed:76:
f6:aa:36:d3:f9:52:ae:c5:3b:1f:8c:60:8c:7a:75:
90:ee:53:7d:77:d6:a4:71:87:35:a1:b1:e1:cb:ce:
1b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:9B:67:1D:96:1A:E8:11:A3:A6:6F:FF:D4:E5:6F:24:66:6C:13:34
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/sZtnHZYa6BGjpm__1OVvJGZsEzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.215.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1b:c3:e9:4c:f9:35:7c:cc:83:cb:4e:3f:44:59:cb:76:5a:
ce:0c:4e:07:51:6a:2a:52:aa:e9:27:58:bd:dc:d3:04:44:24:
c1:34:cb:2a:88:06:55:9f:ea:5c:cb:61:db:59:43:1d:49:54:
ca:30:58:9f:b8:55:af:a0:75:27:80:a3:f5:48:b2:82:54:d9:
c9:1c:30:d1:28:8c:a1:b6:dd:ef:6f:d2:2a:f8:f2:f2:9b:15:
50:fc:02:34:1c:06:9d:86:1a:8a:42:88:42:cf:c6:2e:75:e6:
42:3c:52:1f:1f:bb:8a:1d:df:84:b7:cf:02:75:2d:2a:e8:2c:
92:8a:8c:f4:d9:f4:06:16:97:49:74:2a:ab:f9:ad:b5:b2:e2:
69:79:59:dc:e3:d8:a7:4b:97:ac:6e:d1:c9:c5:1a:76:61:86:
8c:48:97:64:bd:94:f5:03:9a:89:d6:42:6c:5f:05:f8:79:41:
55:57:21:c2:96:17:20:0c:a0:d6:4f:7b:fb:7b:43:ec:b2:91:
45:d4:12:62:ba:17:28:44:d3:db:9d:17:3d:f4:e5:61:55:4f:
7d:ab:e8:d3:c3:af:57:a4:06:11:92:17:48:8f:0a:8b:c7:71:
4d:a4:a4:5f:3c:04:84:00:93:22:2b:5c:94:ff:89:dc:3f:d9:
22:03:fc:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYw/7qo0y98cdV1jMTNGv5rcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMxMjA2MTYyMDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTliNjcxZDk2MWFlODExYTNhNjZmZmZkNGU1NmYyNDY2NmMxMzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNqW40qJgl6cVJw9PqoJZ744u3Vw
esCU6gD3sOVwRkR377NIHyY/QJj87GfcKvf0z1Ctk9/5smLrUeZ+oOxkBeG9CTjb
l3a/l69IixxKOTJT2JZn0BwgetT03kiI6jWYwpKiyr5bnRULD+I7DGXGu+erXrED
owkOweEu1S8X+zt0qFrSJGQl0CUuzk8E6EYAP/dvSyPoUw3sKE5Q/uKNHVeo853i
HtetUk1ZZUstYOoBtNDsFtz+5rbiGCzkVzswSTjtT/M4CjoDyhlx2vcoUqMls6Oy
fDo9j2yvJAp07Xb2qjbT+VKuxTsfjGCMenWQ7lN9d9akcYc1obHhy84bawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLGbZx2WGugRo6Zv/9TlbyRmbBM0MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvc1p0bkhaWWE2QkdqcG1fXzFPVnZKR1pzRXpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrDXMA0G
CSqGSIb3DQEBCwUAA4IBAQB1G8PpTPk1fMyDy04/RFnLdlrODE4HUWoqUqrpJ1i9
3NMERCTBNMsqiAZVn+pcy2HbWUMdSVTKMFifuFWvoHUngKP1SLKCVNnJHDDRKIyh
tt3vb9Iq+PLymxVQ/AI0HAadhhqKQohCz8YudeZCPFIfH7uKHd+Et88CdS0q6CyS
ioz02fQGFpdJdCqr+a21suJpeVnc49inS5esbtHJxRp2YYaMSJdkvZT1A5qJ1kJs
XwX4eUFVVyHClhcgDKDWT3v7e0PsspFF1BJiuhcoRNPbnRc99OVhVU99q+jTw69X
pAYRkhdIjwqLx3FNpKRfPASEAJMiK1yU/4ncP9kiA/zS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org