Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/4SOiNnGgg8UUkONRPC9bAZQKhVA.roa
File: 4SOiNnGgg8UUkONRPC9bAZQKhVA.roa (raw, json)
Hash identifier: +PVJN//OQTaMrKfE6Zxcq1RWC1XTJynwy8O8LFJyEcs=
Subject key identifier: E1:23:A2:36:71:A0:83:C5:14:90:E3:51:3C:2F:5B:01:94:0A:85:50
Certificate issuer: /CN=46ed275c5a738888d580695edd36715959447921
Certificate serial: 018C1AFBD770EC0379D808A3408CABEE966C
Authority key identifier: 46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/4SOiNnGgg8UUkONRPC9bAZQKhVA.roa
Signing time: Wed 29 Nov 2023 12:09:21 +0000
ROA not before: Wed 29 Nov 2023 12:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198223
IP address blocks: 195.88.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:fb:d7:70:ec:03:79:d8:08:a3:40:8c:ab:ee:96:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ed275c5a738888d580695edd36715959447921
Validity
Not Before: Nov 29 12:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e123a23671a083c51490e3513c2f5b01940a8550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:7a:c0:27:05:ba:6a:2e:e0:cd:23:e2:a3:
b0:70:61:33:15:ac:d5:ff:f1:e2:8c:b0:bb:23:a8:
20:05:52:17:51:85:85:5d:e6:10:fd:fb:0d:46:32:
34:10:9c:bf:41:45:c6:34:d0:b4:ca:7c:30:83:22:
33:23:4e:14:c9:70:21:29:30:dc:12:cb:08:b5:f7:
49:df:3c:8e:f6:59:c9:c5:58:92:c5:2f:96:a6:d3:
67:f3:d7:63:6e:b2:6e:dc:bb:71:b1:2b:d5:77:eb:
20:a7:6b:85:5b:70:b3:7f:07:d3:27:04:89:93:d2:
dc:51:9b:04:7c:d1:bb:37:9d:89:c4:9e:e5:f3:8b:
b7:7b:7e:0d:c5:b6:18:83:72:de:d3:4d:96:2c:d1:
7b:a7:15:81:1b:fe:58:45:75:aa:0b:cd:6e:e9:50:
1c:8b:9a:74:55:dc:3c:bc:a5:40:89:83:55:e5:50:
0f:2b:09:0c:7e:86:57:16:12:78:a2:04:31:8a:de:
92:76:f4:d2:29:9c:31:47:51:99:df:55:32:49:4d:
88:f7:fa:1e:7d:82:46:23:4e:2e:5e:66:ee:d5:c7:
87:09:26:2f:38:07:fa:7b:87:d8:ac:dc:f0:c7:ef:
dd:03:4a:80:52:ba:dd:fb:60:fb:23:07:3a:27:63:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:23:A2:36:71:A0:83:C5:14:90:E3:51:3C:2F:5B:01:94:0A:85:50
X509v3 Authority Key Identifier:
keyid:46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/4SOiNnGgg8UUkONRPC9bAZQKhVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:2c:80:8c:44:18:db:43:f7:b9:8b:bc:93:4a:27:a9:67:09:
43:b3:31:74:ea:b4:b7:a2:de:e5:89:a3:d9:e8:88:b9:82:10:
f4:64:77:99:5d:4d:0f:7b:cf:ad:46:56:d9:01:cf:84:15:13:
4c:27:d8:37:7d:e0:90:83:da:15:0c:12:89:55:98:ff:54:a3:
15:16:4d:01:13:72:81:75:de:a6:0c:3f:cf:d4:59:05:a4:f7:
21:c2:07:29:eb:1a:e7:10:88:0e:37:01:33:ba:6f:34:87:70:
e0:a2:3f:5c:02:14:45:be:f7:78:4e:b7:04:f6:c4:ca:d7:28:
bc:3c:1a:9f:34:f5:ab:89:3d:09:71:a9:10:5d:be:c6:25:7d:
89:96:75:a6:4d:11:70:db:27:16:fe:19:e7:86:f0:3b:78:de:
d2:01:f2:9c:d0:6a:36:ae:a9:9d:58:6c:a1:62:0a:84:df:4c:
24:8b:e8:51:65:10:4d:0d:ce:07:d6:81:e6:be:b4:88:a4:43:
1d:a5:cc:a5:4e:27:24:dd:72:f8:99:27:48:0e:98:90:c5:f3:
c8:f4:2a:56:ce:66:7c:da:1d:6d:9d:9f:8f:17:92:15:af:11:
bb:b6:d7:ee:d4:84:54:87:c4:c2:1f:83:06:66:6d:cf:80:de:
00:fa:7a:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwa+9dw7AN52AijQIyr7pZsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWQyNzVjNWE3Mzg4ODhkNTgwNjk1ZWRkMzY3MTU5NTk0
NDc5MjEwHhcNMjMxMTI5MTIwOTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTIzYTIzNjcxYTA4M2M1MTQ5MGUzNTEzYzJmNWIwMTk0MGE4NTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwZ6wCcFumou4M0j4qOwcGEzFazV
//HijLC7I6ggBVIXUYWFXeYQ/fsNRjI0EJy/QUXGNNC0ynwwgyIzI04UyXAhKTDc
EssItfdJ3zyO9lnJxViSxS+WptNn89djbrJu3LtxsSvVd+sgp2uFW3CzfwfTJwSJ
k9LcUZsEfNG7N52JxJ7l84u3e34NxbYYg3Le002WLNF7pxWBG/5YRXWqC81u6VAc
i5p0Vdw8vKVAiYNV5VAPKwkMfoZXFhJ4ogQxit6SdvTSKZwxR1GZ31UySU2I9/oe
fYJGI04uXmbu1ceHCSYvOAf6e4fYrNzwx+/dA0qAUrrd+2D7Iwc6J2MoewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOEjojZxoIPFFJDjUTwvWwGUCoVQMB8GA1UdIwQY
MBaAFEbtJ1xac4iI1YBpXt02cVlZRHkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnUwblhGcHppSWpWZ0dsZTNUWnhXVmxFZVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wNmUyN2EtYzAzOS00OGRmLWFlN2Ut
M2Y4ZTdmMTAzODk5LzEvNFNPaU5uR2dnOFVVa09OUlBDOWJBWlFLaFZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8wNmUyN2EtYzAzOS00OGRmLWFlN2UtM2Y4ZTdmMTAzODk5
LzEvUnUwblhGcHppSWpWZ0dsZTNUWnhXVmxFZVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1j7MA0G
CSqGSIb3DQEBCwUAA4IBAQBvLICMRBjbQ/e5i7yTSiepZwlDszF06rS3ot7liaPZ
6Ii5ghD0ZHeZXU0Pe8+tRlbZAc+EFRNMJ9g3feCQg9oVDBKJVZj/VKMVFk0BE3KB
dd6mDD/P1FkFpPchwgcp6xrnEIgONwEzum80h3Dgoj9cAhRFvvd4TrcE9sTK1yi8
PBqfNPWriT0JcakQXb7GJX2JlnWmTRFw2ycW/hnnhvA7eN7SAfKc0Go2rqmdWGyh
YgqE30wki+hRZRBNDc4H1oHmvrSIpEMdpcylTick3XL4mSdIDpiQxfPI9CpWzmZ8
2h1tnZ+PF5IVrxG7ttfu1IRUh8TCH4MGZm3PgN4A+nr+
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:19 2024 by rpki-client on console-ams.rpki-client.org