Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/cX6-aO_OuxKPQOHktnZrZWzH_yg.roa
File: cX6-aO_OuxKPQOHktnZrZWzH_yg.roa (raw, json)
Hash identifier: CK5NwEwTxs+MVWupeb+GtR8arAmg1+E1ofhRyjNTWqg=
Subject key identifier: 71:7E:BE:68:EF:CE:BB:12:8F:40:E1:E4:B6:76:6B:65:6C:C7:FF:28
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01919DFF57B46295C18428FBBC646FEC7C40
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/cX6-aO_OuxKPQOHktnZrZWzH_yg.roa
Signing time: Thu 29 Aug 2024 11:57:22 +0000
ROA not before: Thu 29 Aug 2024 11:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216127
IP address blocks: 94.228.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 10:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:ff:57:b4:62:95:c1:84:28:fb:bc:64:6f:ec:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Aug 29 11:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=717ebe68efcebb128f40e1e4b6766b656cc7ff28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:b8:e6:4e:93:89:04:e4:de:14:c8:26:18:
31:1c:ac:0e:54:6b:41:fa:d6:d0:e2:77:1d:d3:b2:
52:80:4f:aa:87:94:99:c4:6f:14:de:e4:98:43:02:
9c:79:c7:19:a2:02:e8:a8:d5:9d:38:97:d3:50:3b:
43:d3:13:a5:be:c6:14:cb:24:a2:b8:24:d1:92:a7:
ea:7b:8a:84:25:81:1a:f9:27:20:b3:b8:3b:c1:20:
a1:6c:52:1e:0b:ba:b1:9f:dc:b9:05:b9:fd:b7:5b:
a8:00:47:c6:99:b8:6c:0a:ca:57:02:a2:16:96:11:
54:37:6c:e9:c6:e2:50:51:33:ee:92:b5:46:ae:f4:
a3:c9:f0:31:ce:1b:93:37:d6:4d:d5:ac:1b:20:a1:
28:11:0a:ed:b4:62:60:ce:63:bd:9f:36:54:9a:4f:
f5:3e:2e:50:ed:05:2e:60:56:5b:3f:b3:35:2f:07:
3d:82:6b:b3:27:70:d7:e4:ed:05:aa:b5:13:32:0c:
6c:59:00:45:6e:50:36:e6:b7:d2:df:d3:55:37:b0:
a5:34:be:8f:8f:b3:04:1b:56:8e:0b:0e:49:00:4a:
f4:0c:28:22:30:94:6d:5e:ed:5a:2a:a8:f9:3f:bf:
3b:a7:ab:80:42:de:48:21:a2:33:4b:6d:95:b9:c7:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7E:BE:68:EF:CE:BB:12:8F:40:E1:E4:B6:76:6B:65:6C:C7:FF:28
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/cX6-aO_OuxKPQOHktnZrZWzH_yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.161.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c2:59:11:5e:ca:8b:99:c5:f1:47:17:9c:51:76:8c:a8:d7:
66:5c:42:a5:4c:2a:f8:be:12:b3:40:f4:5f:4e:2d:ee:57:c5:
4a:98:31:f7:ab:68:8c:0b:db:9a:a7:ac:af:81:6b:4c:b4:99:
67:9b:ac:a8:a8:fe:4b:02:0b:83:6c:ee:a8:a6:28:16:50:d6:
49:18:d4:ec:4d:54:34:80:83:0c:9f:03:4e:0c:f4:25:57:74:
11:72:d5:35:9b:60:6c:17:a8:90:4d:fa:18:ab:c2:35:bd:6d:
72:10:fd:44:24:db:15:8e:a1:d8:b0:b9:55:2f:f9:8f:25:ec:
64:43:ca:cc:6b:7b:ef:13:da:66:96:c1:10:0c:cb:84:f7:38:
b5:fe:d1:5d:4a:aa:c3:b5:70:24:6c:1e:6c:19:9b:cb:66:d1:
7a:ff:25:04:a9:8e:8b:7e:f1:5f:50:b1:f6:34:3d:0e:8d:87:
00:35:45:29:df:e4:99:92:be:06:91:a8:f4:3a:25:45:ae:d5:
15:ac:44:91:5f:43:fe:21:68:bb:00:5a:61:95:6d:c5:a0:cc:
7b:f2:68:2a:cd:b9:54:f9:fd:61:03:6e:c6:44:b1:8e:e0:65:
22:91:b6:f6:00:19:74:ad:72:38:aa:6b:9f:3c:25:3e:3c:7b:
6a:d5:ca:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGd/1e0YpXBhCj7vGRv7HxAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4
NzUwN2MwHhcNMjQwODI5MTE1NzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTdlYmU2OGVmY2ViYjEyOGY0MGUxZTRiNjc2NmI2NTZjYzdmZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4y45k6TiQTk3hTIJhgxHKwOVGtB
+tbQ4ncd07JSgE+qh5SZxG8U3uSYQwKceccZogLoqNWdOJfTUDtD0xOlvsYUyySi
uCTRkqfqe4qEJYEa+Scgs7g7wSChbFIeC7qxn9y5Bbn9t1uoAEfGmbhsCspXAqIW
lhFUN2zpxuJQUTPukrVGrvSjyfAxzhuTN9ZN1awbIKEoEQrttGJgzmO9nzZUmk/1
Pi5Q7QUuYFZbP7M1Lwc9gmuzJ3DX5O0FqrUTMgxsWQBFblA25rfS39NVN7ClNL6P
j7MEG1aOCw5JAEr0DCgiMJRtXu1aKqj5P787p6uAQt5IIaIzS22VucfDHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHF+vmjvzrsSj0Dh5LZ2a2Vsx/8oMB8GA1UdIwQY
MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt
M2ZiYmJhOTI0OWNkLzEvY1g2LWFPX091eEtQUU9Ia3RuWnJaV3pIX3lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk
LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuShMA0G
CSqGSIb3DQEBCwUAA4IBAQAawlkRXsqLmcXxRxecUXaMqNdmXEKlTCr4vhKzQPRf
Ti3uV8VKmDH3q2iMC9uap6yvgWtMtJlnm6yoqP5LAguDbO6opigWUNZJGNTsTVQ0
gIMMnwNODPQlV3QRctU1m2BsF6iQTfoYq8I1vW1yEP1EJNsVjqHYsLlVL/mPJexk
Q8rMa3vvE9pmlsEQDMuE9zi1/tFdSqrDtXAkbB5sGZvLZtF6/yUEqY6LfvFfULH2
ND0OjYcANUUp3+SZkr4Gkaj0OiVFrtUVrESRX0P+IWi7AFphlW3FoMx78mgqzblU
+f1hA27GRLGO4GUikbb2ABl0rXI4qmufPCU+PHtq1crP
-----END CERTIFICATE-----
Generated at Fri Aug 30 12:26:51 2024 by rpki-client on console-fra.rpki-client.org