Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/NfPCw1h_SqCJw8ygMxqxzi4Au9o.roa
File: NfPCw1h_SqCJw8ygMxqxzi4Au9o.roa (raw, json)
Hash identifier: U6EkIgv8OJ/iyBoRSgK0cAcZVM9wONPOAn0haUe+ouU=
Subject key identifier: 35:F3:C2:C3:58:7F:4A:A0:89:C3:CC:A0:33:1A:B1:CE:2E:00:BB:DA
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 01856C53F5DFC5F23CE1D8459125063596C8
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/NfPCw1h_SqCJw8ygMxqxzi4Au9o.roa
Signing time: Sun 01 Jan 2023 07:55:19 +0000
ROA not before: Sun 01 Jan 2023 07:55:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210353
IP address blocks: 195.114.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f5:df:c5:f2:3c:e1:d8:45:91:25:06:35:96:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 07:55:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35f3c2c3587f4aa089c3cca0331ab1ce2e00bbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f5:4c:61:65:2c:6d:1d:99:1f:d9:65:5f:93:
18:0a:6c:36:79:ea:7a:e8:76:30:06:97:26:0e:7c:
97:55:d9:81:6c:2a:36:8c:9b:f7:67:24:20:46:c2:
04:53:a2:7f:11:73:a2:c1:f5:cd:c9:77:c6:84:77:
04:64:20:7f:91:5c:f9:9b:16:68:fa:be:d6:e1:f1:
97:2a:75:6c:73:a8:68:f8:d3:78:f7:e4:c4:7e:d4:
b9:84:3b:77:f1:05:8b:dc:c8:89:6c:ce:80:c7:04:
83:5d:48:99:6e:a9:a7:7c:91:da:6a:9c:41:0e:ad:
c9:4a:71:e3:07:95:f4:6c:db:d0:85:70:63:69:c8:
37:59:d0:29:b4:f3:47:a5:18:46:0d:27:9d:5c:52:
5e:30:9f:13:a4:18:61:2c:92:2f:f0:cc:b6:85:2a:
4d:c6:10:9d:7c:00:c9:18:f2:90:92:b1:25:40:2d:
e4:37:36:54:11:2f:bb:93:e8:ab:90:59:f8:7a:5a:
86:49:e3:42:98:68:14:ee:44:51:b3:f9:81:d0:de:
af:d0:6c:de:8a:0b:ec:d0:37:68:4f:ae:ee:4a:96:
b1:8d:ca:23:5e:dd:08:f4:e4:cb:11:db:c9:38:09:
c6:06:e5:fb:53:bb:ce:02:54:a9:fc:cd:4c:c3:d1:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F3:C2:C3:58:7F:4A:A0:89:C3:CC:A0:33:1A:B1:CE:2E:00:BB:DA
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/NfPCw1h_SqCJw8ygMxqxzi4Au9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.130.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c0:d2:fd:2a:94:e7:88:36:08:85:6f:ae:b5:80:81:20:bc:
0b:85:19:e9:31:7e:aa:a9:04:7e:a2:b9:54:40:00:15:13:e5:
97:1e:9e:06:43:39:ec:e3:02:bb:ba:62:d2:26:d3:44:58:36:
21:49:50:17:aa:a5:45:e3:07:b1:e5:35:1b:17:c5:c8:94:4a:
c8:4e:4b:f6:bc:52:fa:81:9d:82:82:26:25:db:ab:18:31:db:
fc:a4:30:c9:c3:8a:2b:19:bb:9c:08:37:5c:75:49:07:5d:fc:
8f:4f:87:ce:4c:7c:67:70:fd:e7:e1:f2:2e:57:94:9f:64:47:
8b:d9:6a:81:fd:dd:0d:98:c5:16:cc:d6:a0:1f:5f:a2:2f:53:
00:49:a0:63:79:2f:28:e0:6a:8f:8c:dc:96:d9:a7:4a:5e:8e:
3d:a9:52:e6:88:3e:97:a4:48:dc:1e:c0:64:4b:8f:8e:0b:7c:
87:fb:30:f8:86:e4:a7:8d:1b:76:51:2d:ee:3f:9e:27:04:f1:
d1:8e:0a:45:70:89:00:72:b9:8e:d9:ec:86:40:93:29:96:96:
12:dd:14:20:79:76:20:9f:9d:07:d1:34:28:e5:b8:39:c6:ac:
15:8a:bf:32:06:88:2b:a1:ca:02:af:2b:98:d4:1d:39:24:74:
3c:16:17:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU/XfxfI84dhFkSUGNZbIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky
OTMxNDAwHhcNMjMwMTAxMDc1NTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWYzYzJjMzU4N2Y0YWEwODljM2NjYTAzMzFhYjFjZTJlMDBiYmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPVMYWUsbR2ZH9llX5MYCmw2eep6
6HYwBpcmDnyXVdmBbCo2jJv3ZyQgRsIEU6J/EXOiwfXNyXfGhHcEZCB/kVz5mxZo
+r7W4fGXKnVsc6ho+NN49+TEftS5hDt38QWL3MiJbM6AxwSDXUiZbqmnfJHaapxB
Dq3JSnHjB5X0bNvQhXBjacg3WdAptPNHpRhGDSedXFJeMJ8TpBhhLJIv8My2hSpN
xhCdfADJGPKQkrElQC3kNzZUES+7k+irkFn4elqGSeNCmGgU7kRRs/mB0N6v0Gze
igvs0DdoT67uSpaxjcojXt0I9OTLEdvJOAnGBuX7U7vOAlSp/M1Mw9GNPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDXzwsNYf0qgicPMoDMasc4uALvaMB8GA1UdIwQY
MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt
MzA1NmFmOWEzMzVlLzEvTmZQQ3cxaF9TcUNKdzh5Z014cXh6aTRBdTlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl
LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3KCMA0G
CSqGSIb3DQEBCwUAA4IBAQB7wNL9KpTniDYIhW+utYCBILwLhRnpMX6qqQR+orlU
QAAVE+WXHp4GQzns4wK7umLSJtNEWDYhSVAXqqVF4wex5TUbF8XIlErITkv2vFL6
gZ2CgiYl26sYMdv8pDDJw4orGbucCDdcdUkHXfyPT4fOTHxncP3n4fIuV5SfZEeL
2WqB/d0NmMUWzNagH1+iL1MASaBjeS8o4GqPjNyW2adKXo49qVLmiD6XpEjcHsBk
S4+OC3yH+zD4huSnjRt2US3uP54nBPHRjgpFcIkAcrmO2eyGQJMplpYS3RQgeXYg
n50H0TQo5bg5xqwVir8yBogrocoCryuY1B05JHQ8Fhf+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:32 2024 by rpki-client on console-fra.rpki-client.org