Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/eH-8Sc4urUHq2UQvGDq-M0AdO28.roa
File: eH-8Sc4urUHq2UQvGDq-M0AdO28.roa (raw, json)
Hash identifier: SgTRbzC/eAthLSbyU9GAbPQnD9tWewyjCh/sxvoOY2c=
Subject key identifier: 78:7F:BC:49:CE:2E:AD:41:EA:D9:44:2F:18:3A:BE:33:40:1D:3B:6F
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 018614F200078D3C5F529E2F69F6FC31E0AC
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/eH-8Sc4urUHq2UQvGDq-M0AdO28.roa
Signing time: Fri 03 Feb 2023 01:44:09 +0000
ROA not before: Fri 03 Feb 2023 01:44:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 94.177.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:14:f2:00:07:8d:3c:5f:52:9e:2f:69:f6:fc:31:e0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Feb 3 01:44:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=787fbc49ce2ead41ead9442f183abe33401d3b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1e:5f:eb:55:0e:23:7e:08:ae:6e:6c:33:bd:
52:39:3e:07:ad:af:cc:1e:fa:fa:37:95:34:fc:45:
08:c8:a5:45:44:ab:24:ee:d3:23:32:a7:65:a1:8c:
db:72:19:ec:ed:6b:4f:c6:24:a3:f8:07:04:b9:70:
00:c0:96:79:5c:d5:8d:2d:b5:fe:04:04:6b:2a:d2:
8e:0a:c1:77:cc:7f:57:93:9a:04:60:bc:76:45:32:
91:e9:17:c8:b0:89:3c:ef:11:46:9f:e7:80:5b:af:
4e:2a:f6:0c:42:09:29:4a:c5:37:9e:87:a6:8c:37:
00:e8:9d:84:d7:46:b5:14:fb:c0:af:ad:53:5d:88:
df:52:89:41:5d:94:b2:bb:dd:94:c2:e0:58:fd:bb:
63:a8:0c:96:9b:b9:6a:58:fd:54:39:7b:be:ae:96:
40:db:1b:f2:44:5f:be:49:2c:e4:dc:6f:f2:55:fd:
f4:8e:7c:91:b7:05:79:08:44:fa:ef:a8:44:d8:47:
c6:23:4e:2d:8c:47:3d:6e:7a:25:81:ed:0a:be:94:
c5:64:1e:ef:1c:3f:58:97:00:3a:fd:be:be:38:0b:
33:cf:a3:c9:75:8f:99:13:c2:ad:b2:22:8e:b9:1d:
ae:3e:87:26:09:98:be:6b:82:31:ff:71:82:38:27:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7F:BC:49:CE:2E:AD:41:EA:D9:44:2F:18:3A:BE:33:40:1D:3B:6F
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/eH-8Sc4urUHq2UQvGDq-M0AdO28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.118.0/24
Signature Algorithm: sha256WithRSAEncryption
45:4e:76:c8:8b:65:dc:1e:21:47:95:cf:d0:fe:88:e0:cd:6a:
92:36:a4:2b:fd:4a:05:c4:a4:c9:17:2c:d6:d8:50:5a:f4:a9:
0a:a6:b3:60:2f:3f:9a:c0:e8:e4:6f:98:a0:9b:68:82:af:2e:
2e:7f:b3:70:79:04:ef:df:1b:8f:a4:4c:cc:7d:e0:21:2f:ab:
7b:d6:a7:b9:4e:80:38:cd:29:43:29:1b:a9:30:64:ff:d2:8f:
ac:3a:a7:c2:1a:8d:16:4d:49:98:7a:a0:8f:b5:48:91:3f:7d:
b2:73:09:41:b0:6c:43:13:ae:5b:a9:19:fe:08:c3:ae:7a:9b:
34:f8:93:79:20:85:10:21:68:25:f3:4c:db:e8:da:93:f5:7f:
e2:5e:3a:3d:70:2a:4f:21:20:57:40:a3:56:0b:93:cc:27:55:
0e:f1:4f:34:77:a1:83:45:d2:f0:0a:8b:c3:e7:23:30:47:1d:
10:77:ac:18:8b:fd:3b:17:c5:96:9e:4c:f4:46:65:23:b2:9b:
69:ab:90:7c:b2:41:e5:84:c2:87:97:f3:87:83:1a:09:5a:13:
d2:8d:e7:15:b7:d6:d0:4a:9f:87:ae:61:32:1f:f5:31:3f:63:
f6:6c:33:f1:6d:41:dc:58:ae:4b:84:eb:68:c7:41:d6:38:23:
db:12:ac:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYU8gAHjTxfUp4vafb8MeCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMwMjAzMDE0NDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODdmYmM0OWNlMmVhZDQxZWFkOTQ0MmYxODNhYmUzMzQwMWQzYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR5f61UOI34Irm5sM71SOT4Hra/M
Hvr6N5U0/EUIyKVFRKsk7tMjMqdloYzbchns7WtPxiSj+AcEuXAAwJZ5XNWNLbX+
BARrKtKOCsF3zH9Xk5oEYLx2RTKR6RfIsIk87xFGn+eAW69OKvYMQgkpSsU3noem
jDcA6J2E10a1FPvAr61TXYjfUolBXZSyu92UwuBY/btjqAyWm7lqWP1UOXu+rpZA
2xvyRF++SSzk3G/yVf30jnyRtwV5CET676hE2EfGI04tjEc9bnolge0KvpTFZB7v
HD9YlwA6/b6+OAszz6PJdY+ZE8KtsiKOuR2uPocmCZi+a4Ix/3GCOCdczQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHh/vEnOLq1B6tlELxg6vjNAHTtvMB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvZUgtOFNjNHVyVUhxMlVRdkdEcS1NMEFkTzI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrF2MA0G
CSqGSIb3DQEBCwUAA4IBAQBFTnbIi2XcHiFHlc/Q/ojgzWqSNqQr/UoFxKTJFyzW
2FBa9KkKprNgLz+awOjkb5igm2iCry4uf7NweQTv3xuPpEzMfeAhL6t71qe5ToA4
zSlDKRupMGT/0o+sOqfCGo0WTUmYeqCPtUiRP32ycwlBsGxDE65bqRn+CMOueps0
+JN5IIUQIWgl80zb6NqT9X/iXjo9cCpPISBXQKNWC5PMJ1UO8U80d6GDRdLwCovD
5yMwRx0Qd6wYi/07F8WWnkz0RmUjsptpq5B8skHlhMKHl/OHgxoJWhPSjecVt9bQ
Sp+HrmEyH/UxP2P2bDPxbUHcWK5LhOtox0HWOCPbEqyF
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org