Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Rw_e8uozKkHERs0yOqMleCTOYhc.roa
File: Rw_e8uozKkHERs0yOqMleCTOYhc.roa (raw, json)
Hash identifier: anNGP4WPi5VT2C/3NUhKVMbKEGfhrdyabIM+ZxuHLnQ=
Subject key identifier: 47:0F:DE:F2:EA:33:2A:41:C4:46:CD:32:3A:A3:25:78:24:CE:62:17
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 01866F4EBF4110BF6A0835BBC44706411DF2
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Rw_e8uozKkHERs0yOqMleCTOYhc.roa
Signing time: Mon 20 Feb 2023 14:51:17 +0000
ROA not before: Mon 20 Feb 2023 14:51:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33908
IP address blocks: 94.125.8.0/24 maxlen: 24
185.42.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:4e:bf:41:10:bf:6a:08:35:bb:c4:47:06:41:1d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Feb 20 14:51:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=470fdef2ea332a41c446cd323aa3257824ce6217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b7:dd:df:47:ee:0b:34:b8:74:63:e5:1b:f1:
38:7e:d0:ee:b7:05:b5:14:5c:ed:cf:df:55:7e:12:
7e:9e:92:04:0b:9a:62:99:fa:f8:9a:b4:6a:0c:30:
ea:58:3c:ff:ea:c7:01:56:e2:03:66:7e:61:8c:dd:
c6:f9:ce:4b:5f:f9:f9:dc:2b:55:65:a0:f0:56:04:
0d:58:1d:39:01:5d:f1:db:74:9a:44:80:b0:2e:85:
80:d5:bd:c6:97:d5:1b:f0:12:45:d9:e8:51:c1:69:
8b:25:a9:57:d6:a7:cf:7d:b5:ed:76:18:74:e5:a3:
c6:49:15:a0:29:fa:f0:3f:12:d5:f3:b1:87:3d:6a:
db:5e:9d:e7:17:70:51:61:42:d7:b5:43:cb:6b:0c:
ff:bc:d2:30:0b:f8:2f:ca:c9:6a:3c:b7:a2:e2:f9:
20:4b:49:5b:bc:8e:a6:8a:2c:f3:7a:6f:7c:dc:c7:
8e:87:ec:03:34:b7:bf:77:9c:8c:b8:e4:fa:65:95:
5e:06:b7:38:b3:df:be:4c:f1:3f:3a:1b:20:2a:1f:
2b:23:d1:9b:ed:8f:84:08:f1:08:90:ba:d8:07:6e:
25:df:3f:bc:e7:06:3b:05:bc:04:52:f9:17:4d:f4:
55:2d:7b:a3:6b:a4:33:74:08:16:cc:74:f4:9e:d5:
2e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0F:DE:F2:EA:33:2A:41:C4:46:CD:32:3A:A3:25:78:24:CE:62:17
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/Rw_e8uozKkHERs0yOqMleCTOYhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.8.0/24
185.42.62.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ac:35:5c:2c:9a:4d:b3:f7:2c:db:75:24:fd:2a:66:04:54:
ba:ed:d2:df:93:a3:49:d2:2c:24:6d:fd:09:04:e7:d9:19:c9:
2f:93:57:b2:2a:1a:d4:4a:88:8c:d3:f7:99:2c:1a:8d:46:7a:
be:48:7c:72:a6:0e:6d:51:2f:94:39:ed:ce:63:e7:c7:86:48:
4a:93:7c:dc:b5:8a:27:4e:28:cd:e8:29:e8:83:41:a0:b7:32:
e7:c6:71:13:6e:07:ca:bc:aa:94:7d:f3:3a:5d:88:43:1e:f2:
4d:0d:27:96:40:86:fb:16:c3:9d:7f:81:bd:1f:e5:49:46:89:
0e:90:bb:69:3a:32:e0:df:b7:9e:36:db:88:64:fd:94:a2:a5:
49:41:08:b3:82:22:56:1a:fd:88:6b:66:f1:81:c7:86:e0:b4:
a2:78:bb:24:e8:b2:97:3c:b2:fc:3b:de:de:ee:bd:aa:40:da:
2c:81:cf:db:ca:a5:94:0c:d6:db:25:4e:a9:4c:35:70:05:4e:
89:05:09:f2:ba:77:00:60:d9:4f:93:be:57:58:c9:d8:b0:4a:
7f:44:9c:f4:d2:ef:86:e1:29:27:0b:cc:43:dd:c9:ca:7d:9a:
7b:4f:40:6a:24:22:a6:af:6f:8d:8d:00:57:a1:51:fb:7e:02:
3a:aa:ac:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZvTr9BEL9qCDW7xEcGQR3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5
ZGY4NWQwHhcNMjMwMjIwMTQ1MTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzBmZGVmMmVhMzMyYTQxYzQ0NmNkMzIzYWEzMjU3ODI0Y2U2MjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7fd30fuCzS4dGPlG/E4ftDutwW1
FFztz99VfhJ+npIEC5pimfr4mrRqDDDqWDz/6scBVuIDZn5hjN3G+c5LX/n53CtV
ZaDwVgQNWB05AV3x23SaRICwLoWA1b3Gl9Ub8BJF2ehRwWmLJalX1qfPfbXtdhh0
5aPGSRWgKfrwPxLV87GHPWrbXp3nF3BRYULXtUPLawz/vNIwC/gvyslqPLei4vkg
S0lbvI6miizzem983MeOh+wDNLe/d5yMuOT6ZZVeBrc4s9++TPE/OhsgKh8rI9Gb
7Y+ECPEIkLrYB24l3z+85wY7BbwEUvkXTfRVLXuja6QzdAgWzHT0ntUutwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEcP3vLqMypBxEbNMjqjJXgkzmIXMB8GA1UdIwQY
MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt
M2Q1MjIxODFhMmM0LzEvUndfZTh1b3pLa0hFUnMweU9xTWxlQ1RPWWhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0
LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXn0IAwQA
uSo+MA0GCSqGSIb3DQEBCwUAA4IBAQCQrDVcLJpNs/cs23Uk/SpmBFS67dLfk6NJ
0iwkbf0JBOfZGckvk1eyKhrUSoiM0/eZLBqNRnq+SHxypg5tUS+UOe3OY+fHhkhK
k3zctYonTijN6Cnog0GgtzLnxnETbgfKvKqUffM6XYhDHvJNDSeWQIb7FsOdf4G9
H+VJRokOkLtpOjLg37eeNtuIZP2UoqVJQQizgiJWGv2Ia2bxgceG4LSieLsk6LKX
PLL8O97e7r2qQNosgc/byqWUDNbbJU6pTDVwBU6JBQnyuncAYNlPk75XWMnYsEp/
RJz00u+G4SknC8xD3cnKfZp7T0BqJCKmr2+NjQBXoVH7fgI6qqxQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:40 2024 by rpki-client on console-ams.rpki-client.org