Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/vFVyhwct_S3BRcpg0fIuuaw-qXM.roa
File: vFVyhwct_S3BRcpg0fIuuaw-qXM.roa (raw, json)
Hash identifier: T5B0B4ea9brfNdaUNAv82I6xaR8cDzu5aLVwKzNYwjk=
Subject key identifier: BC:55:72:87:07:2D:FD:2D:C1:45:CA:60:D1:F2:2E:B9:AC:3E:A9:73
Certificate issuer: /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial: 0187030C3F72D2062E586184CECA6552E32A
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/vFVyhwct_S3BRcpg0fIuuaw-qXM.roa
Signing time: Tue 21 Mar 2023 07:22:26 +0000
ROA not before: Tue 21 Mar 2023 07:22:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13335
IP address blocks: 94.140.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Mar 2023 09:42:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:0c:3f:72:d2:06:2e:58:61:84:ce:ca:65:52:e3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Validity
Not Before: Mar 21 07:22:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc557287072dfd2dc145ca60d1f22eb9ac3ea973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7f:87:c5:a9:3c:68:ed:60:a6:fe:cb:df:90:
d2:54:d1:2d:53:a4:12:7a:96:01:b4:dc:3e:99:14:
bf:11:2c:a1:6d:9c:3e:2a:61:49:e1:a9:58:76:19:
7c:a1:3d:57:0b:3e:47:82:91:55:9a:51:66:27:0b:
e8:2e:07:4d:60:c4:7b:df:35:f7:8a:ba:8b:73:e6:
e9:d9:cf:b7:75:82:7c:df:58:f0:ea:12:42:ec:a2:
3c:88:42:81:65:1d:ae:08:0d:ea:47:b2:40:e6:24:
4b:6c:0b:13:2f:6f:e3:a7:6a:b1:2a:2d:6a:82:17:
f3:23:aa:97:7d:31:35:d0:7c:52:f4:7c:8b:8c:70:
91:e2:19:a1:ad:a3:94:47:9c:aa:e4:fc:1e:d9:a4:
14:98:05:1a:7e:b3:37:d4:47:22:c3:f4:74:5a:1d:
00:08:b9:44:58:ce:6d:e8:f3:c7:94:e5:7e:48:0c:
47:31:e9:f2:88:79:b9:83:d6:f5:b9:bf:02:56:93:
62:53:df:c5:5b:e2:83:92:19:da:99:bb:3a:d0:0f:
b4:03:e1:67:4a:4d:49:1c:3a:4c:98:1b:22:bc:9f:
f3:ed:cf:81:6c:b4:e6:50:b5:a9:74:09:8a:78:6d:
ca:d9:7b:b3:98:b2:70:c4:06:bc:a1:12:70:b6:a1:
f0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:55:72:87:07:2D:FD:2D:C1:45:CA:60:D1:F2:2E:B9:AC:3E:A9:73
X509v3 Authority Key Identifier:
keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/vFVyhwct_S3BRcpg0fIuuaw-qXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.140.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:cd:b4:3b:32:ec:27:39:c3:81:58:ca:e3:21:29:17:72:7b:
50:37:85:0c:33:26:ef:be:d2:71:c9:54:a1:ee:aa:eb:41:96:
8f:53:be:94:6a:4d:b4:4b:e4:29:33:6d:e2:7f:f1:54:02:0f:
ce:90:7a:aa:9c:ce:c5:de:7c:d6:d5:9f:1b:db:42:10:15:bf:
70:35:8d:69:e4:f0:cc:73:d9:2b:00:a9:9a:a0:fd:6f:b9:00:
c7:59:cf:a3:63:12:03:ff:16:1e:5f:15:82:b2:e5:b7:76:b9:
b7:23:e8:07:dd:4f:4b:2b:35:df:2f:d2:75:b4:3a:13:d9:f6:
11:93:c3:21:b1:28:8d:e8:6a:46:f5:04:da:ff:7e:3c:b8:2d:
6d:4a:d3:00:61:15:f2:bf:6a:5e:28:03:a4:ad:b3:ad:bd:97:
8b:02:11:6e:5c:83:52:81:9b:6e:d9:77:d6:27:3f:11:15:a5:
4b:eb:ed:63:2b:a1:a5:79:ef:48:5f:95:56:62:e3:ca:2d:70:
c9:65:d7:cb:b2:e0:61:0b:a1:24:9f:d4:bd:d8:13:90:82:d2:
d8:a7:4e:ea:3d:d6:b3:6e:1a:d5:a7:ea:fc:4c:1c:02:15:f7:
03:8b:ea:bd:a4:ff:fd:97:60:1e:1c:ab:7f:6a:f5:d8:51:f0:
e4:cf:2a:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcDDD9y0gYuWGGEzsplUuMqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxODE0YTI4YThjMWViZTBhZGMzM2ExNTE5Yjk4ODNlMzA4
NGJiNTkwHhcNMjMwMzIxMDcyMjI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzU1NzI4NzA3MmRmZDJkYzE0NWNhNjBkMWYyMmViOWFjM2VhOTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH+Hxak8aO1gpv7L35DSVNEtU6QS
epYBtNw+mRS/ESyhbZw+KmFJ4alYdhl8oT1XCz5HgpFVmlFmJwvoLgdNYMR73zX3
irqLc+bp2c+3dYJ831jw6hJC7KI8iEKBZR2uCA3qR7JA5iRLbAsTL2/jp2qxKi1q
ghfzI6qXfTE10HxS9HyLjHCR4hmhraOUR5yq5Pwe2aQUmAUafrM31Eciw/R0Wh0A
CLlEWM5t6PPHlOV+SAxHMenyiHm5g9b1ub8CVpNiU9/FW+KDkhnambs60A+0A+Fn
Sk1JHDpMmBsivJ/z7c+BbLTmULWpdAmKeG3K2XuzmLJwxAa8oRJwtqHwMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLxVcocHLf0twUXKYNHyLrmsPqlzMB8GA1UdIwQY
MBaAFLGBSiiowevgrcM6FRm5iD4whLtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zZmJmZjYtNzNlZS00ODEyLThlNGIt
ODFkYWJjODFjMDVjLzEvdkZWeWh3Y3RfUzNCUmNwZzBmSXV1YXctcVhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8zZmJmZjYtNzNlZS00ODEyLThlNGItODFkYWJjODFjMDVj
LzEvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXowAMA0G
CSqGSIb3DQEBCwUAA4IBAQAMzbQ7MuwnOcOBWMrjISkXcntQN4UMMybvvtJxyVSh
7qrrQZaPU76Uak20S+QpM23if/FUAg/OkHqqnM7F3nzW1Z8b20IQFb9wNY1p5PDM
c9krAKmaoP1vuQDHWc+jYxID/xYeXxWCsuW3drm3I+gH3U9LKzXfL9J1tDoT2fYR
k8MhsSiN6GpG9QTa/348uC1tStMAYRXyv2peKAOkrbOtvZeLAhFuXINSgZtu2XfW
Jz8RFaVL6+1jK6Glee9IX5VWYuPKLXDJZdfLsuBhC6Ekn9S92BOQgtLYp07qPdaz
bhrVp+r8TBwCFfcDi+q9pP/9l2AeHKt/avXYUfDkzyqH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:25 2024 by rpki-client on console-ams.rpki-client.org