Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/34LIPHUJ1vjeC0e9JiDD22GFg3Q.roa
File: 34LIPHUJ1vjeC0e9JiDD22GFg3Q.roa (raw, json)
Hash identifier: T8jGZMvwTi/hCXfVO1PilSc5A+Ag0nTW6CYV4xSndrU=
Subject key identifier: DF:82:C8:3C:75:09:D6:F8:DE:0B:47:BD:26:20:C3:DB:61:85:83:74
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0191EAB224F5E04C88FFA1D143AA0C88E34F
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/34LIPHUJ1vjeC0e9JiDD22GFg3Q.roa
Signing time: Fri 13 Sep 2024 09:23:48 +0000
ROA not before: Fri 13 Sep 2024 09:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 94.232.249.0/24 maxlen: 24
103.74.92.0/24 maxlen: 24
103.74.93.0/24 maxlen: 24
103.74.94.0/24 maxlen: 24
103.74.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Sep 2024 08:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:b2:24:f5:e0:4c:88:ff:a1:d1:43:aa:0c:88:e3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Sep 13 09:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df82c83c7509d6f8de0b47bd2620c3db61858374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:27:89:46:b7:74:db:56:71:7d:70:19:60:6d:
4e:11:d5:ff:1d:f3:cf:d4:fa:8b:98:2e:63:02:cf:
7c:08:c8:28:4a:78:16:f1:47:e7:91:fb:2f:2c:1e:
72:90:58:0e:ea:50:ce:41:ea:9f:a5:07:be:90:e6:
85:68:ed:8a:7d:17:99:ec:4a:6f:4e:68:6b:71:ee:
0f:c2:af:f9:8a:fd:17:4a:c1:75:27:fb:6c:fd:71:
1b:bb:b2:58:53:34:bf:03:d7:f7:03:9f:c3:96:a8:
71:30:16:42:42:f6:c8:14:70:7a:15:75:9e:5d:98:
b5:07:47:fb:48:59:40:4e:58:3f:16:ea:46:02:01:
22:ae:b7:53:e9:8c:6c:11:59:63:67:19:dd:f2:b9:
d7:7f:2e:51:01:c5:79:33:cb:2e:dc:61:25:02:99:
45:b5:6e:b0:02:97:f2:ec:75:0f:25:28:7b:b7:61:
d0:87:e7:05:43:e1:4f:d6:e5:99:19:8b:ce:fc:01:
a4:55:6f:55:c2:45:14:06:0d:c9:2b:f3:23:d5:5c:
ee:26:fe:ee:49:e0:eb:d3:37:e0:ff:11:8a:ad:8e:
2b:e3:b9:44:a9:c1:a1:06:cf:38:0c:07:81:f4:3a:
21:e9:37:36:09:63:0d:94:dc:4e:40:26:c1:9f:ec:
ea:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:82:C8:3C:75:09:D6:F8:DE:0B:47:BD:26:20:C3:DB:61:85:83:74
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/34LIPHUJ1vjeC0e9JiDD22GFg3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.249.0/24
103.74.92.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:9a:5e:77:60:8d:24:7c:b4:f8:42:7c:7b:92:e4:d5:ef:43:
60:0f:ac:80:8c:76:2f:b2:43:70:a6:e1:cb:95:10:29:20:65:
fe:a3:f3:e6:1f:a1:1b:fd:ba:42:a6:43:26:b4:d4:b6:27:61:
e2:30:7e:40:0e:1d:7f:b5:5d:74:5a:52:88:9f:f6:c3:68:41:
df:02:b3:37:54:6c:23:95:12:a9:e3:12:66:58:e1:52:c2:2a:
3c:08:b0:d3:e4:83:da:2e:53:ab:99:68:11:56:43:71:a9:46:
0a:41:fa:8f:cc:18:03:e7:ee:d2:01:a2:3f:89:86:42:6e:80:
d8:62:57:cd:e1:3c:35:42:cb:0b:05:25:2c:9a:0b:53:f7:d1:
a0:0b:92:95:9d:27:b2:91:40:85:7b:3e:c5:e1:25:3e:38:f6:
fe:1a:81:ef:75:00:33:ad:36:22:b0:b2:3d:4d:8d:c1:ed:15:
eb:55:26:eb:49:89:5d:04:af:34:6d:5a:78:39:29:ea:a9:5e:
0b:f6:7c:3a:a3:ef:46:f3:b8:29:59:57:c2:3d:24:95:5b:9e:
c3:25:e0:f5:ed:15:eb:f4:22:e7:05:db:c0:b5:e1:88:0c:f7:
ef:e6:ee:76:c8:6a:22:f1:a3:a8:48:88:ff:3a:f3:23:8b:30:
df:4d:8d:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZHqsiT14EyI/6HRQ6oMiONPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjQwOTEzMDkyMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjgyYzgzYzc1MDlkNmY4ZGUwYjQ3YmQyNjIwYzNkYjYxODU4Mzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yeJRrd021ZxfXAZYG1OEdX/HfPP
1PqLmC5jAs98CMgoSngW8UfnkfsvLB5ykFgO6lDOQeqfpQe+kOaFaO2KfReZ7Epv
Tmhrce4Pwq/5iv0XSsF1J/ts/XEbu7JYUzS/A9f3A5/DlqhxMBZCQvbIFHB6FXWe
XZi1B0f7SFlATlg/FupGAgEirrdT6YxsEVljZxnd8rnXfy5RAcV5M8su3GElAplF
tW6wApfy7HUPJSh7t2HQh+cFQ+FP1uWZGYvO/AGkVW9VwkUUBg3JK/Mj1VzuJv7u
SeDr0zfg/xGKrY4r47lEqcGhBs84DAeB9Doh6Tc2CWMNlNxOQCbBn+zqJQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN+CyDx1Cdb43gtHvSYgw9thhYN0MB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvMzRMSVBIVUoxdmplQzBlOUppREQyMkdGZzNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXuj5AwQC
Z0pcMA0GCSqGSIb3DQEBCwUAA4IBAQC8ml53YI0kfLT4Qnx7kuTV70NgD6yAjHYv
skNwpuHLlRApIGX+o/PmH6Eb/bpCpkMmtNS2J2HiMH5ADh1/tV10WlKIn/bDaEHf
ArM3VGwjlRKp4xJmWOFSwio8CLDT5IPaLlOrmWgRVkNxqUYKQfqPzBgD5+7SAaI/
iYZCboDYYlfN4Tw1QssLBSUsmgtT99GgC5KVnSeykUCFez7F4SU+OPb+GoHvdQAz
rTYisLI9TY3B7RXrVSbrSYldBK80bVp4OSnqqV4L9nw6o+9G87gpWVfCPSSVW57D
JeD17RXr9CLnBdvAteGIDPfv5u52yGoi8aOoSIj/OvMjizDfTY1Q
-----END CERTIFICATE-----
Generated at Fri Sep 27 11:22:41 2024 by rpki-client on console-ams.rpki-client.org