Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/ibwr7SqQ6VfSl_POsVVgbJTvqKg.roa
File: ibwr7SqQ6VfSl_POsVVgbJTvqKg.roa (raw, json)
Hash identifier: BUkYCrX52H8N2BbfsPYKDKT7yRhhGz7yLA1mwEqfRSw=
Subject key identifier: 89:BC:2B:ED:2A:90:E9:57:D2:97:F3:CE:B1:55:60:6C:94:EF:A8:A8
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 01856DA65D7F04B73AC290E654AEA542D729
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/ibwr7SqQ6VfSl_POsVVgbJTvqKg.roa
Signing time: Sun 01 Jan 2023 14:04:57 +0000
ROA not before: Sun 01 Jan 2023 14:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 94.124.112.0/24 maxlen: 24
2a0c:b280::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:5d:7f:04:b7:3a:c2:90:e6:54:ae:a5:42:d7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Jan 1 14:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89bc2bed2a90e957d297f3ceb155606c94efa8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:8e:82:fb:81:6e:25:fc:71:04:0b:f4:51:
18:a8:ae:17:14:29:e6:b1:c6:04:37:5a:c9:91:c0:
53:59:d1:5b:7e:0a:0f:a5:e5:ce:f3:ee:36:67:7a:
3d:a3:4c:8f:66:0c:8b:c8:df:30:3f:ed:0b:1b:b4:
d5:df:0b:ea:9b:eb:40:8f:1b:4d:69:36:40:11:53:
4f:16:b1:12:b3:52:4f:88:2a:e6:3b:04:cc:91:fc:
91:46:0d:e2:fd:3e:a9:fe:bd:de:db:e7:36:24:53:
3a:22:0b:5c:c1:78:47:14:89:f7:47:47:22:da:4c:
4f:70:f3:36:ad:46:b9:b2:93:62:ee:01:9c:d0:68:
81:8e:26:12:2f:bd:d7:16:72:03:fd:a5:bd:60:ab:
22:aa:a3:e3:a3:9d:2e:0a:5c:2b:44:3f:21:e6:78:
89:e3:42:37:38:f8:0f:0a:59:57:67:14:4e:b5:b5:
dc:8b:ee:2a:c4:ae:f6:41:0e:f7:87:b9:57:a3:14:
2a:ee:c1:2a:d5:6e:36:80:95:a1:40:70:2c:05:a8:
e9:04:bc:63:96:6d:ef:3a:c9:b9:ab:aa:37:b7:50:
e1:50:49:78:a9:47:7e:16:45:8e:2c:00:24:3d:09:
24:fb:b8:99:3b:98:9c:e7:be:d5:41:30:29:94:0f:
0b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BC:2B:ED:2A:90:E9:57:D2:97:F3:CE:B1:55:60:6C:94:EF:A8:A8
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/ibwr7SqQ6VfSl_POsVVgbJTvqKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.112.0/24
IPv6:
2a0c:b280::/48
Signature Algorithm: sha256WithRSAEncryption
41:10:94:68:63:f4:48:15:2c:f0:2a:0f:2d:43:10:00:54:4b:
fb:2b:1f:0a:6b:d8:ac:bd:5d:7a:17:49:ef:a7:05:8e:4c:32:
90:8f:5d:37:ac:dc:ca:cf:b3:13:f1:bb:36:f7:ff:bd:d4:01:
18:1b:a5:8e:4c:4e:f8:78:ca:31:47:e3:32:4e:b8:a9:3e:0e:
e1:ed:0d:70:ae:8f:ea:8c:d4:3f:4f:0f:eb:45:e0:81:8e:62:
48:ff:48:7f:f1:77:ea:7c:6a:4a:9c:f4:b6:23:01:3b:6e:27:
09:d9:77:4e:54:67:b4:60:0d:bc:25:f9:bc:38:5c:28:ed:9c:
1d:bf:a1:3d:c3:a5:40:2b:a8:91:ca:ad:0d:eb:3d:31:71:83:
7c:c4:65:1b:90:84:3b:b3:38:d5:64:48:c4:ee:14:20:7f:b3:
c8:3d:f0:7d:6a:5e:5b:50:a3:07:f4:9d:04:10:0f:27:12:a3:
88:82:fb:9f:83:05:cd:7d:8a:98:4f:f6:8d:1a:af:4f:d1:e1:
38:81:71:1f:4d:16:1e:d7:f2:c4:24:f4:cb:d6:bf:3a:ee:c2:
74:34:fa:44:29:1d:83:5d:33:67:28:52:4f:e0:a7:6c:98:75:
16:06:46:3b:69:df:5c:99:44:85:79:9a:2c:53:70:32:ce:12:
b2:cd:4d:a2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVtpl1/BLc6wpDmVK6lQtcpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzAyYTQ1ZDA1Njg0ODYwNTFhN2VjNDY2ZjAzMTA4YzMy
MGI0YzQwHhcNMjMwMTAxMTQwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWJjMmJlZDJhOTBlOTU3ZDI5N2YzY2ViMTU1NjA2Yzk0ZWZhOGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTCOgvuBbiX8cQQL9FEYqK4XFCnm
scYEN1rJkcBTWdFbfgoPpeXO8+42Z3o9o0yPZgyLyN8wP+0LG7TV3wvqm+tAjxtN
aTZAEVNPFrESs1JPiCrmOwTMkfyRRg3i/T6p/r3e2+c2JFM6IgtcwXhHFIn3R0ci
2kxPcPM2rUa5spNi7gGc0GiBjiYSL73XFnID/aW9YKsiqqPjo50uClwrRD8h5niJ
40I3OPgPCllXZxROtbXci+4qxK72QQ73h7lXoxQq7sEq1W42gJWhQHAsBajpBLxj
lm3vOsm5q6o3t1DhUEl4qUd+FkWOLAAkPQkk+7iZO5ic577VQTAplA8LtwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIm8K+0qkOlX0pfzzrFVYGyU76ioMB8GA1UdIwQY
MBaAFFIwKkXQVoSGBRp+xGbwMQjDILTEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGIt
ZTNlNWZhMzZiYjJmLzEvaWJ3cjdTcVE2VmZTbF9QT3NWVmdiSlR2cUtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS83NWJhNzItZDdiMi00MjgzLTlmMGItZTNlNWZhMzZiYjJm
LzEvVWpBcVJkQldoSVlGR243RVp2QXhDTU1ndE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAXnxwMA8E
AgACMAkDBwAqDLKAAAAwDQYJKoZIhvcNAQELBQADggEBAEEQlGhj9EgVLPAqDy1D
EABUS/srHwpr2Ky9XXoXSe+nBY5MMpCPXTes3MrPsxPxuzb3/73UARgbpY5MTvh4
yjFH4zJOuKk+DuHtDXCuj+qM1D9PD+tF4IGOYkj/SH/xd+p8akqc9LYjATtuJwnZ
d05UZ7RgDbwl+bw4XCjtnB2/oT3DpUArqJHKrQ3rPTFxg3zEZRuQhDuzONVkSMTu
FCB/s8g98H1qXltQowf0nQQQDycSo4iC+5+DBc19iphP9o0ar0/R4TiBcR9NFh7X
8sQk9MvWvzruwnQ0+kQpHYNdM2coUk/gp2yYdRYGRjtp31yZRIV5mixTcDLOErLN
TaI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:06 2024 by rpki-client on console-ams.rpki-client.org