Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/VMQxa6rdkOlhnAObIgCReqDdb5k.roa
File: VMQxa6rdkOlhnAObIgCReqDdb5k.roa (raw, json)
Hash identifier: oE1WtuahPGL82gTtLF5AfYuMV8P+c3WDakxcDBl3jao=
Subject key identifier: 54:C4:31:6B:AA:DD:90:E9:61:9C:03:9B:22:00:91:7A:A0:DD:6F:99
Certificate issuer: /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial: 01856FF055534A62B3FDF66F0360BE6846B0
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/VMQxa6rdkOlhnAObIgCReqDdb5k.roa
Signing time: Mon 02 Jan 2023 00:44:59 +0000
ROA not before: Mon 02 Jan 2023 00:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211334
IP address blocks: 94.229.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:55:53:4a:62:b3:fd:f6:6f:03:60:be:68:46:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Validity
Not Before: Jan 2 00:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54c4316baadd90e9619c039b2200917aa0dd6f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:71:80:b6:78:d1:9b:ac:27:00:d4:80:8e:fb:
5f:83:a3:0e:05:a9:fe:f6:56:9e:93:c5:eb:e9:ba:
8d:11:35:d3:38:df:03:62:bf:4e:0e:d4:62:d9:76:
d1:8b:fd:70:08:da:4e:2d:6e:96:d6:65:97:32:0a:
6d:a4:6a:5c:72:37:4b:13:96:c2:50:fc:c5:b0:0a:
6b:c3:31:a2:19:4f:9f:8a:d3:30:22:6f:ae:7f:a1:
a6:18:f4:9b:61:db:db:6d:74:0a:0b:4d:68:1a:12:
ed:8d:cf:fc:7f:84:bb:a0:19:62:59:96:ad:2f:fd:
a3:8d:f7:e8:19:53:70:32:73:cb:ed:5c:83:e6:05:
84:07:b5:25:ad:3f:a3:f2:6e:52:6a:45:81:5e:d6:
82:0e:e6:90:53:3e:9a:04:60:41:0e:47:fb:70:6a:
51:c1:6a:3a:88:36:40:b4:82:ab:37:1c:1c:ad:59:
13:31:46:7e:be:f8:ed:45:5b:e6:f9:e6:5e:bf:79:
12:9a:da:c7:e4:e3:2b:d1:61:26:ad:34:df:fe:42:
f8:01:48:a6:41:82:02:b3:e9:bc:a8:c7:7c:a2:56:
4a:f1:a0:5a:f7:46:c5:c9:ab:4a:0e:1d:d5:29:61:
54:f8:a3:d4:f1:e9:61:c3:3c:e0:76:0d:97:1d:cb:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C4:31:6B:AA:DD:90:E9:61:9C:03:9B:22:00:91:7A:A0:DD:6F:99
X509v3 Authority Key Identifier:
keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/VMQxa6rdkOlhnAObIgCReqDdb5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.89.0/24
Signature Algorithm: sha256WithRSAEncryption
78:28:26:2e:aa:9a:6c:98:6c:9f:b8:e0:a8:e6:90:a9:11:3a:
5b:26:1f:a3:88:1e:0a:44:03:bf:c0:a3:0d:80:fc:f9:db:90:
98:8f:d8:1a:73:16:8b:a8:ec:42:2b:d6:49:a0:52:2d:68:f9:
cf:e7:48:ea:b3:37:43:1e:b4:bd:90:01:03:36:fa:53:4b:d1:
b0:f4:41:29:27:24:a3:de:d2:1a:13:72:8b:96:45:9c:b9:54:
fc:42:78:33:c3:d1:a2:be:4c:55:c3:4d:38:da:41:34:08:c8:
f5:61:32:47:e2:8d:bd:e7:4d:39:19:1b:d4:f5:8c:37:94:b3:
71:dc:b3:4e:d1:10:b0:96:f0:27:d6:b4:84:a5:57:8b:15:4c:
52:8e:62:7c:ef:4e:43:57:7d:84:cc:e7:13:be:b6:2f:51:a5:
fe:dd:1f:30:7b:5c:12:ea:e6:98:78:f7:b7:f4:89:c1:fd:3e:
60:6b:40:b3:3c:db:ba:41:b4:80:83:78:70:51:b5:1a:3d:15:
ec:1e:ae:02:24:14:60:74:7c:54:a3:19:17:22:b9:67:6b:7d:
10:fa:9b:99:fd:86:3f:68:a6:af:5d:8f:e3:a3:83:d3:7f:3c:
12:26:c6:18:04:1e:c0:43:7b:91:3e:ee:b1:38:fb:c4:11:ac:
6d:29:e9:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv8FVTSmKz/fZvA2C+aEawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZmM5MmIwYTc1Yjg5YWQyZTNjNTdmN2NiYTBlNDc4Njg0
MjE5Y2UwHhcNMjMwMTAyMDA0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGM0MzE2YmFhZGQ5MGU5NjE5YzAzOWIyMjAwOTE3YWEwZGQ2Zjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHGAtnjRm6wnANSAjvtfg6MOBan+
9laek8Xr6bqNETXTON8DYr9ODtRi2XbRi/1wCNpOLW6W1mWXMgptpGpccjdLE5bC
UPzFsAprwzGiGU+fitMwIm+uf6GmGPSbYdvbbXQKC01oGhLtjc/8f4S7oBliWZat
L/2jjffoGVNwMnPL7VyD5gWEB7UlrT+j8m5SakWBXtaCDuaQUz6aBGBBDkf7cGpR
wWo6iDZAtIKrNxwcrVkTMUZ+vvjtRVvm+eZev3kSmtrH5OMr0WEmrTTf/kL4AUim
QYICs+m8qMd8olZK8aBa90bFyatKDh3VKWFU+KPU8elhwzzgdg2XHcsc+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFTEMWuq3ZDpYZwDmyIAkXqg3W+ZMB8GA1UdIwQY
MBaAFHz8krCnW4mtLjxX98ug5HhoQhnOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlB5U3NLZGJpYTB1UEZmM3k2RGtlR2hDR2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xNzc2Y2ItMWM3OC00ZGNjLWI0M2It
MzZkN2I0Zjg0ZTVjLzEvVk1ReGE2cmRrT2xobkFPYklnQ1JlcURkYjVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xNzc2Y2ItMWM3OC00ZGNjLWI0M2ItMzZkN2I0Zjg0ZTVj
LzEvZlB5U3NLZGJpYTB1UEZmM3k2RGtlR2hDR2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuVZMA0G
CSqGSIb3DQEBCwUAA4IBAQB4KCYuqppsmGyfuOCo5pCpETpbJh+jiB4KRAO/wKMN
gPz525CYj9gacxaLqOxCK9ZJoFItaPnP50jqszdDHrS9kAEDNvpTS9Gw9EEpJySj
3tIaE3KLlkWcuVT8Qngzw9GivkxVw0042kE0CMj1YTJH4o295005GRvU9Yw3lLNx
3LNO0RCwlvAn1rSEpVeLFUxSjmJ8705DV32EzOcTvrYvUaX+3R8we1wS6uaYePe3
9InB/T5ga0CzPNu6QbSAg3hwUbUaPRXsHq4CJBRgdHxUoxkXIrlna30Q+puZ/YY/
aKavXY/jo4PTfzwSJsYYBB7AQ3uRPu6xOPvEEaxtKekU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:04 2024 by rpki-client on console-ams.rpki-client.org