Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/AL5r_gYiaYGK_JaMS2zcvaT76Co.roa
File: AL5r_gYiaYGK_JaMS2zcvaT76Co.roa (raw, json)
Hash identifier: GzOV4QIIDJyQ8NeHp1Wn+xwKQ33vBIF2t9zQ35GV8ac=
Subject key identifier: 00:BE:6B:FE:06:22:69:81:8A:FC:96:8C:4B:6C:DC:BD:A4:FB:E8:2A
Certificate issuer: /CN=e2110acce33ac85011ca8c22d2001666e45b9377
Certificate serial: 01856B37D3342AB96FE5ECD9B7D2DBC842DA
Authority key identifier: E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/AL5r_gYiaYGK_JaMS2zcvaT76Co.roa
Signing time: Sun 01 Jan 2023 02:44:58 +0000
ROA not before: Sun 01 Jan 2023 02:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9150
IP address blocks: 194.165.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:37:d3:34:2a:b9:6f:e5:ec:d9:b7:d2:db:c8:42:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2110acce33ac85011ca8c22d2001666e45b9377
Validity
Not Before: Jan 1 02:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00be6bfe062269818afc968c4b6cdcbda4fbe82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:fc:82:b3:6b:1a:c4:00:e4:75:8e:55:b8:
7d:8f:54:14:20:44:49:97:8e:a6:d1:63:5a:83:c1:
ce:e5:90:bc:f3:fa:a2:1e:8c:06:e8:ec:51:38:aa:
a9:c3:81:0b:d1:a1:70:d2:b0:d2:2f:d5:e7:f7:de:
f1:00:70:25:b4:b8:55:05:e3:65:b6:76:e5:97:c7:
0b:b9:43:85:a7:6c:26:12:2b:18:cd:60:1a:b1:e6:
f0:4b:ea:80:3b:11:27:b4:75:b3:60:a2:95:e3:b2:
78:e7:1c:a6:61:1b:87:c3:12:92:2f:94:12:52:4b:
62:9a:24:38:97:07:03:69:7a:0f:0f:a4:94:63:03:
fb:4c:e5:1e:d4:98:82:e1:03:ab:cd:79:b5:36:40:
de:9f:14:9a:9f:18:cb:58:4e:15:c8:25:0c:61:f6:
f6:0e:b0:8d:60:75:ea:af:a6:d4:6c:22:94:8e:31:
0b:7d:a0:5e:58:10:94:af:3a:17:ee:de:a1:84:75:
d9:a0:68:93:61:b7:8a:6e:2f:8c:cc:ec:44:15:2a:
72:90:17:b8:68:cc:c1:0e:10:b2:d9:a0:58:5b:93:
c8:9d:e0:d9:2d:a3:14:e8:7b:c6:4e:ff:c8:f7:28:
7f:1f:35:aa:c5:9a:c1:64:7f:33:cf:04:94:79:be:
79:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BE:6B:FE:06:22:69:81:8A:FC:96:8C:4B:6C:DC:BD:A4:FB:E8:2A
X509v3 Authority Key Identifier:
keyid:E2:11:0A:CC:E3:3A:C8:50:11:CA:8C:22:D2:00:16:66:E4:5B:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hEKzOM6yFARyowi0gAWZuRbk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/AL5r_gYiaYGK_JaMS2zcvaT76Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/051035-200d-41e8-adf1-d33f08f3a48d/1/4hEKzOM6yFARyowi0gAWZuRbk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.51.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b6:b9:8d:e3:ea:43:11:7b:04:96:6c:6d:4d:06:67:0f:6d:
e6:d8:ce:c2:29:ed:c8:57:ce:48:52:1b:01:21:32:22:cf:08:
2e:99:cf:25:4b:6f:9c:f9:5c:5f:04:fe:b9:7f:9c:2b:0d:c2:
eb:68:a5:31:58:f6:42:35:21:dd:69:3c:c4:6a:64:93:cd:36:
82:f7:40:02:b6:81:33:2a:f5:af:e8:d3:de:a2:d2:d5:28:bd:
6d:ff:a4:9d:32:27:d1:da:3a:59:dd:d4:66:ab:dd:ab:15:24:
0f:dd:ce:90:05:49:7d:6a:1b:eb:62:cf:6e:9f:1f:bd:fd:09:
df:e3:61:37:8f:63:d5:8c:d1:02:d5:e4:73:d3:5b:65:b7:5e:
b6:71:2e:d1:eb:84:c6:5d:71:aa:79:28:f5:6e:5c:6a:8e:2a:
03:12:34:9e:e3:bc:8c:da:58:c8:80:35:62:60:a5:90:87:9e:
0a:9e:db:8c:b7:87:1d:3a:7f:14:0b:e7:c4:0f:09:0f:98:fa:
3f:f8:d4:48:86:63:4e:77:00:68:ba:13:11:1d:a2:61:56:ea:
bd:fc:a7:36:91:fb:1f:db:03:11:57:25:3c:b0:99:53:89:9f:
47:62:9d:32:2f:78:78:26:fd:d8:c6:2d:6b:65:e2:75:76:bb:
76:5f:f8:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrN9M0Krlv5ezZt9LbyELaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMTEwYWNjZTMzYWM4NTAxMWNhOGMyMmQyMDAxNjY2ZTQ1
YjkzNzcwHhcNMjMwMTAxMDI0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGJlNmJmZTA2MjI2OTgxOGFmYzk2OGM0YjZjZGNiZGE0ZmJlODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEn8grNrGsQA5HWOVbh9j1QUIERJ
l46m0WNag8HO5ZC88/qiHowG6OxROKqpw4EL0aFw0rDSL9Xn997xAHAltLhVBeNl
tnbll8cLuUOFp2wmEisYzWAasebwS+qAOxEntHWzYKKV47J45xymYRuHwxKSL5QS
UktimiQ4lwcDaXoPD6SUYwP7TOUe1JiC4QOrzXm1NkDenxSanxjLWE4VyCUMYfb2
DrCNYHXqr6bUbCKUjjELfaBeWBCUrzoX7t6hhHXZoGiTYbeKbi+MzOxEFSpykBe4
aMzBDhCy2aBYW5PIneDZLaMU6HvGTv/I9yh/HzWqxZrBZH8zzwSUeb55JwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAC+a/4GImmBivyWjEts3L2k++gqMB8GA1UdIwQY
MBaAFOIRCszjOshQEcqMItIAFmbkW5N3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEt
ZDMzZjA4ZjNhNDhkLzEvQUw1cl9nWWlhWUdLX0phTVMyemN2YVQ3NkNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8wNTEwMzUtMjAwZC00MWU4LWFkZjEtZDMzZjA4ZjNhNDhk
LzEvNGhFS3pPTTZ5RkFSeW93aTBnQVdadVJiazNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqUzMA0G
CSqGSIb3DQEBCwUAA4IBAQAztrmN4+pDEXsElmxtTQZnD23m2M7CKe3IV85IUhsB
ITIizwgumc8lS2+c+VxfBP65f5wrDcLraKUxWPZCNSHdaTzEamSTzTaC90ACtoEz
KvWv6NPeotLVKL1t/6SdMifR2jpZ3dRmq92rFSQP3c6QBUl9ahvrYs9unx+9/Qnf
42E3j2PVjNEC1eRz01tlt162cS7R64TGXXGqeSj1blxqjioDEjSe47yM2ljIgDVi
YKWQh54KntuMt4cdOn8UC+fEDwkPmPo/+NRIhmNOdwBouhMRHaJhVuq9/Kc2kfsf
2wMRVyU8sJlTiZ9HYp0yL3h4Jv3Yxi1rZeJ1drt2X/ju
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:25 2024 by rpki-client on console-fra.rpki-client.org