Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/x2WavwQh3EOZ2St-7x6HubjJP4I.roa
File: x2WavwQh3EOZ2St-7x6HubjJP4I.roa (raw, json)
Hash identifier: 7dVBmvwsZGQ7KXQU2ymUvQk+F6CVb/MbvJGTBJbvLiM=
Subject key identifier: C7:65:9A:BF:04:21:DC:43:99:D9:2B:7E:EF:1E:87:B9:B8:C9:3F:82
Certificate issuer: /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Certificate serial: 01857130A4678DA5F817B7A3A5B5951D9AC3
Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/x2WavwQh3EOZ2St-7x6HubjJP4I.roa
Signing time: Mon 02 Jan 2023 06:34:51 +0000
ROA not before: Mon 02 Jan 2023 06:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1136
IP address blocks: 194.104.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a4:67:8d:a5:f8:17:b7:a3:a5:b5:95:1d:9a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Validity
Not Before: Jan 2 06:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7659abf0421dc4399d92b7eef1e87b9b8c93f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:e3:8f:67:79:5d:2a:36:3b:2a:16:8f:6c:
5b:cf:a7:80:5f:1c:be:12:56:93:a1:5b:00:18:4d:
80:f5:0f:f9:31:33:0c:70:95:ca:ff:50:1b:91:1a:
1c:16:e1:53:ac:37:5d:60:8c:c0:52:e8:b8:ce:6a:
85:45:14:8d:7f:2d:de:e0:f6:da:e6:08:ad:3d:02:
dc:55:2a:8f:6c:91:9d:2b:98:b0:8c:7d:cc:45:fc:
14:d1:53:2a:a9:39:a8:31:8c:3a:69:ba:2e:83:29:
b4:d3:90:53:f8:b3:24:88:27:cd:27:e1:b7:cf:83:
76:b9:bc:2b:bb:f2:44:f5:8c:ca:8b:9d:0f:5e:39:
69:c9:89:12:d3:90:33:22:a9:5e:b6:60:25:9f:cf:
cd:fe:dd:90:46:dc:73:d9:ad:5d:ad:83:99:58:ec:
32:9b:13:8b:9b:c5:a0:85:b6:2f:b4:08:88:2b:cd:
b3:05:95:90:1b:b5:e9:f3:33:51:12:4f:e1:38:bc:
18:8e:83:46:f0:f4:6f:0f:ee:19:44:8d:de:8e:0f:
39:ff:35:bd:ed:d9:19:7d:4a:e3:3b:7c:48:4d:6f:
18:34:d4:21:f7:3f:02:e6:ea:e5:71:21:48:a1:1a:
fc:55:18:44:45:d2:a3:79:4d:86:48:dd:29:6f:88:
92:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:65:9A:BF:04:21:DC:43:99:D9:2B:7E:EF:1E:87:B9:B8:C9:3F:82
X509v3 Authority Key Identifier:
keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/x2WavwQh3EOZ2St-7x6HubjJP4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.194.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:8b:14:90:98:d4:c5:f1:44:d5:6e:53:c2:94:9b:1e:69:92:
d1:4c:01:e1:f9:f3:5d:a0:7b:ae:e4:7b:b0:dd:50:52:8f:61:
22:24:45:25:e3:e0:ce:ec:e7:80:26:bb:36:98:dc:d9:e8:0a:
ac:60:f3:83:ce:95:5f:bd:d7:ac:59:05:ab:f3:3f:37:f1:5a:
31:13:b7:54:34:41:50:2e:84:9d:8d:4c:21:33:c6:3f:f1:58:
c7:30:f3:77:4a:22:36:42:77:67:fa:84:13:11:db:cb:5e:b2:
12:b2:7f:48:59:e2:69:4c:13:dd:21:f5:63:e1:8f:0b:66:ae:
0e:27:cc:51:bb:43:93:5b:16:12:6a:cc:51:b5:5a:66:d6:ec:
43:7c:73:20:8b:57:ec:4d:51:e6:65:19:f4:61:ff:df:58:bc:
c4:6b:8f:53:be:6b:18:9d:2a:b5:ac:dd:5c:b0:bb:d5:e7:53:
45:cd:96:4e:b4:e8:31:24:c9:0a:bb:12:e2:60:fc:55:9a:ba:
74:28:26:88:3d:f1:91:98:16:68:3e:9d:c4:ab:f7:e1:ed:31:
26:b5:86:1d:53:32:29:eb:ec:99:a2:49:e3:39:25:e5:d4:a3:
e5:80:18:a6:bc:a2:71:ee:cb:f2:93:c0:d2:b6:6a:db:99:da:
cb:db:97:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxMKRnjaX4F7ejpbWVHZrDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDhhZmI3MmZjOTgzMjY3NzNjNWVlMWZiNDA1MmZlN2Q5
ZjBjNjgwHhcNMjMwMTAyMDYzNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzY1OWFiZjA0MjFkYzQzOTlkOTJiN2VlZjFlODdiOWI4YzkzZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3zjj2d5XSo2OyoWj2xbz6eAXxy+
ElaToVsAGE2A9Q/5MTMMcJXK/1AbkRocFuFTrDddYIzAUui4zmqFRRSNfy3e4Pba
5gitPQLcVSqPbJGdK5iwjH3MRfwU0VMqqTmoMYw6abougym005BT+LMkiCfNJ+G3
z4N2ubwru/JE9YzKi50PXjlpyYkS05AzIqletmAln8/N/t2QRtxz2a1drYOZWOwy
mxOLm8WghbYvtAiIK82zBZWQG7Xp8zNREk/hOLwYjoNG8PRvD+4ZRI3ejg85/zW9
7dkZfUrjO3xITW8YNNQh9z8C5urlcSFIoRr8VRhERdKjeU2GSN0pb4iSBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMdlmr8EIdxDmdkrfu8eh7m4yT+CMB8GA1UdIwQY
MBaAFNBIr7cvyYMmdzxe4ftAUv59nwxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wNjVmNzYtMDM4Mi00MmE0LTg2MDct
Nzc5MjJiNzg1ZmQyLzEveDJXYXZ3UWgzRU9aMlN0LTd4Nkh1YmpKUDRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wNjVmNzYtMDM4Mi00MmE0LTg2MDctNzc5MjJiNzg1ZmQy
LzEvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmjCMA0G
CSqGSIb3DQEBCwUAA4IBAQCpixSQmNTF8UTVblPClJseaZLRTAHh+fNdoHuu5Huw
3VBSj2EiJEUl4+DO7OeAJrs2mNzZ6AqsYPODzpVfvdesWQWr8z838VoxE7dUNEFQ
LoSdjUwhM8Y/8VjHMPN3SiI2Qndn+oQTEdvLXrISsn9IWeJpTBPdIfVj4Y8LZq4O
J8xRu0OTWxYSasxRtVpm1uxDfHMgi1fsTVHmZRn0Yf/fWLzEa49TvmsYnSq1rN1c
sLvV51NFzZZOtOgxJMkKuxLiYPxVmrp0KCaIPfGRmBZoPp3Eq/fh7TEmtYYdUzIp
6+yZoknjOSXl1KPlgBimvKJx7svyk8DStmrbmdrL25d3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:41 2024 by rpki-client on console-fra.rpki-client.org