Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/loM6led-_hLnw8LDC60iGMetO_8.roa
File: loM6led-_hLnw8LDC60iGMetO_8.roa (raw, json)
Hash identifier: liQJExf4phsXtuzemfBcWm0hr848XXbk8zjp7z9RttM=
Subject key identifier: 96:83:3A:95:E7:7E:FE:12:E7:C3:C2:C3:0B:AD:22:18:C7:AD:3B:FF
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 018570FBD92BF40643B5C6305BEBF3E2D05B
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/loM6led-_hLnw8LDC60iGMetO_8.roa
Signing time: Mon 02 Jan 2023 05:37:11 +0000
ROA not before: Mon 02 Jan 2023 05:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57391
IP address blocks: 94.139.176.0/20 maxlen: 20
94.139.191.0/24 maxlen: 24
109.162.254.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:d9:2b:f4:06:43:b5:c6:30:5b:eb:f3:e2:d0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Jan 2 05:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96833a95e77efe12e7c3c2c30bad2218c7ad3bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:48:ea:95:8e:c3:98:ba:c4:a2:54:16:b4:75:
8c:b2:81:aa:1b:69:1a:ee:89:2a:4b:0c:5d:d0:0e:
d6:e5:d8:41:c6:4e:9d:d0:cb:14:43:a9:88:aa:5e:
e1:e9:0b:35:33:95:1f:9a:3e:c0:b2:79:d6:3b:1e:
d4:ef:d4:62:ca:93:4a:c0:fe:a8:fb:c6:de:f7:1c:
00:7b:a9:c4:52:f5:51:90:f1:50:31:2d:ea:63:b0:
87:f6:2e:fe:1a:56:86:5c:ed:b7:97:dd:53:a2:7e:
1e:c3:24:f2:f0:15:38:9a:23:54:86:a5:23:6f:ab:
5f:3a:4c:d7:70:53:ec:40:a9:b0:df:71:f4:d4:0e:
71:a2:0f:0d:3b:e5:0f:83:e4:61:31:97:88:06:d2:
be:be:16:b1:7a:5f:ab:0a:c0:61:f1:9c:86:89:8d:
9b:9b:27:c4:fb:5e:5d:0d:68:2b:c1:7d:51:c3:63:
83:90:1a:8e:eb:1d:41:93:44:46:7a:5e:b1:a7:84:
e6:ca:02:60:d9:3e:82:18:03:c5:e4:30:84:0c:80:
24:05:0d:a1:a4:c9:5c:52:4c:f3:bd:95:fc:fa:41:
10:c2:4c:d3:ec:53:6c:19:49:68:fd:59:c7:33:df:
be:b7:97:4c:be:65:5a:15:18:8b:e9:a6:9f:cd:02:
60:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:83:3A:95:E7:7E:FE:12:E7:C3:C2:C3:0B:AD:22:18:C7:AD:3B:FF
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/loM6led-_hLnw8LDC60iGMetO_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.176.0/20
109.162.254.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:c3:ea:96:ec:58:29:c9:55:85:d0:62:1c:b6:f8:89:7e:ec:
5d:07:fd:41:f9:60:12:6f:4c:19:4b:6c:8e:ce:ad:e3:e7:c9:
a4:55:7d:63:74:af:f1:63:78:88:2f:f9:42:f5:a1:05:e5:96:
67:53:d5:df:dd:45:d4:1b:13:bf:6e:5a:57:6e:02:b7:78:f7:
35:68:9f:9b:ac:5b:d1:82:22:c0:ed:54:ce:e7:73:f6:0e:35:
3d:58:9c:21:31:ec:d7:74:7c:7d:77:4a:ee:15:9e:05:e2:cc:
6c:0c:31:4a:00:ab:a8:51:93:b2:11:82:98:8c:49:81:e3:b2:
53:95:78:dd:9b:8f:ef:73:b7:19:b0:a2:be:b1:c2:85:2c:bd:
61:e3:22:74:5e:53:a2:17:f4:67:42:20:d4:9e:4d:15:f9:2a:
ec:db:8b:df:f7:ce:66:98:03:e8:2b:9c:9c:fe:13:42:5a:ef:
c9:8e:a8:e7:5d:50:bb:47:00:da:64:d4:f8:55:43:17:87:13:
21:4b:0a:56:24:19:b9:62:f5:e7:07:e2:df:78:1b:13:d8:9a:
73:78:5a:07:a4:c8:a5:e5:6f:d0:71:4b:c4:b7:45:7f:0c:2f:
38:24:93:a6:14:dd:10:cd:4f:5a:38:16:ce:dd:06:db:3c:a1:
01:95:cd:88
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVw+9kr9AZDtcYwW+vz4tBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDc0ZmJiYmFlNThkZDA4NzZkOTllODBlYzgyYTExYTQ0
NzdmN2UwHhcNMjMwMTAyMDUzNzExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjgzM2E5NWU3N2VmZTEyZTdjM2MyYzMwYmFkMjIxOGM3YWQzYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEjqlY7DmLrEolQWtHWMsoGqG2ka
7okqSwxd0A7W5dhBxk6d0MsUQ6mIql7h6Qs1M5Ufmj7AsnnWOx7U79RiypNKwP6o
+8be9xwAe6nEUvVRkPFQMS3qY7CH9i7+GlaGXO23l91Ton4ewyTy8BU4miNUhqUj
b6tfOkzXcFPsQKmw33H01A5xog8NO+UPg+RhMZeIBtK+vhaxel+rCsBh8ZyGiY2b
myfE+15dDWgrwX1Rw2ODkBqO6x1Bk0RGel6xp4TmygJg2T6CGAPF5DCEDIAkBQ2h
pMlcUkzzvZX8+kEQwkzT7FNsGUlo/VnHM9++t5dMvmVaFRiL6aafzQJgfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJaDOpXnfv4S58PCwwutIhjHrTv/MB8GA1UdIwQY
MBaAFE3XT7u65Y3Qh22Z6A7IKhGkR39+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmIt
OGVhYjdmNGZlNzdlLzEvbG9NNmxlZC1faExudzhMREM2MGlHTWV0T184LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZjVmNTctZTgyOC00YmNmLThkMmItOGVhYjdmNGZlNzdl
LzEvVGRkUHU3cmxqZENIYlpub0RzZ3FFYVJIZjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEXouwAwQB
baL+MA0GCSqGSIb3DQEBCwUAA4IBAQBMw+qW7FgpyVWF0GIctviJfuxdB/1B+WAS
b0wZS2yOzq3j58mkVX1jdK/xY3iIL/lC9aEF5ZZnU9Xf3UXUGxO/blpXbgK3ePc1
aJ+brFvRgiLA7VTO53P2DjU9WJwhMezXdHx9d0ruFZ4F4sxsDDFKAKuoUZOyEYKY
jEmB47JTlXjdm4/vc7cZsKK+scKFLL1h4yJ0XlOiF/RnQiDUnk0V+Srs24vf985m
mAPoK5yc/hNCWu/JjqjnXVC7RwDaZNT4VUMXhxMhSwpWJBm5YvXnB+LfeBsT2Jpz
eFoHpMil5W/QcUvEt0V/DC84JJOmFN0QzU9aOBbO3QbbPKEBlc2I
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:21 2024 by rpki-client on console-fra.rpki-client.org