Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/PkagJKuCJPoDt6nKjPrjhGlw_9o.roa
File: PkagJKuCJPoDt6nKjPrjhGlw_9o.roa (raw, json)
Hash identifier: A7oDip1eRO+qFdIM7aI44g3iYTCQo+f2R8gND3OFzoA=
Subject key identifier: 3E:46:A0:24:AB:82:24:FA:03:B7:A9:CA:8C:FA:E3:84:69:70:FF:DA
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E7D5BD0C9DDDB3F6499E705AF930E
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/PkagJKuCJPoDt6nKjPrjhGlw_9o.roa
Signing time: Mon 02 Jan 2023 08:34:50 +0000
ROA not before: Mon 02 Jan 2023 08:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43581
IP address blocks: 194.226.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:7d:5b:d0:c9:dd:db:3f:64:99:e7:05:af:93:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e46a024ab8224fa03b7a9ca8cfae3846970ffda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:9f:2b:98:56:d7:d3:49:af:16:bb:8a:49:
c8:86:1d:90:94:92:d7:c2:2d:92:9a:e7:a6:28:f7:
91:0d:26:74:24:82:8f:cc:ab:3b:c0:78:9d:ab:10:
b3:c3:24:2c:50:86:ed:de:b6:cc:97:15:29:87:30:
f5:ed:07:d3:57:ec:38:e3:89:54:ae:a5:9b:80:f0:
8f:85:25:b5:47:84:6e:3e:82:aa:c7:f2:ff:f7:01:
5d:f5:a3:97:10:af:40:7f:5d:fe:e4:da:54:4e:7e:
82:90:49:dc:bb:bb:a1:aa:3d:4d:f9:f9:db:d0:f8:
9a:26:06:3f:80:e7:28:19:2c:ae:a9:ed:bb:8b:7e:
ec:78:bf:1b:66:63:49:89:b4:c1:81:2e:4f:31:02:
21:4b:16:d1:7a:8e:15:6f:23:94:da:9e:a3:30:1a:
14:8b:f5:0a:f0:b2:72:a9:94:fd:45:67:04:48:e1:
98:45:90:29:78:49:d0:43:b0:52:00:9c:38:b7:fb:
07:1d:a7:89:5d:a8:4d:bf:98:4b:b3:be:8b:0c:16:
63:58:2c:17:cc:aa:6a:db:74:22:cf:52:b9:f3:14:
00:5b:db:26:e0:6d:f0:9e:8c:8d:b1:78:4c:54:5b:
b3:20:59:1b:8f:be:6a:a8:cb:35:17:3d:84:59:7b:
74:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:46:A0:24:AB:82:24:FA:03:B7:A9:CA:8C:FA:E3:84:69:70:FF:DA
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/PkagJKuCJPoDt6nKjPrjhGlw_9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.49.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f0:07:c4:bd:10:31:1c:fb:61:cd:f8:b1:2a:ee:2b:af:e8:
44:8b:37:ea:fe:4c:71:53:4a:8c:2a:a1:00:8a:7f:06:81:7c:
41:33:43:d0:83:3a:3f:29:d4:9e:90:12:c7:1f:d8:fb:dd:7e:
cd:57:68:9a:d5:9c:b2:b7:26:69:46:89:9d:e6:17:28:4c:7b:
8e:b0:c2:9e:2c:d2:29:0d:ad:18:c4:02:16:6b:d1:fd:6b:f9:
fa:84:fa:53:83:2d:cd:ac:7e:2b:74:56:48:7c:00:4f:b2:7b:
2b:6e:50:ba:1e:0c:2a:af:2a:11:78:d2:ca:e9:a5:8e:4d:e5:
00:2f:4b:dd:02:de:f0:dc:79:fe:24:72:58:da:b4:cf:a0:fb:
74:b1:d1:fd:c3:14:b9:10:c2:9a:79:d8:54:9a:9e:75:e2:de:
e4:19:4f:22:cc:19:1f:21:4a:70:98:07:79:7d:49:78:35:4e:
7e:bb:14:ad:13:50:4b:9c:2c:83:b8:69:6c:eb:db:02:33:07:
92:a0:88:2f:7a:6b:37:28:75:18:3c:c8:b7:ba:6f:48:04:72:
f6:f0:be:dd:2b:12:28:d3:62:2c:14:8d:d7:ee:3b:3a:95:eb:
5d:a7:da:19:94:2c:e5:e2:db:ef:7b:39:3d:8f:53:16:4f:a4:
ff:1e:36:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxnn1b0Mnd2z9kmecFr5MOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjMwMTAyMDgzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTQ2YTAyNGFiODIyNGZhMDNiN2E5Y2E4Y2ZhZTM4NDY5NzBmZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolGfK5hW19NJrxa7iknIhh2QlJLX
wi2SmuemKPeRDSZ0JIKPzKs7wHidqxCzwyQsUIbt3rbMlxUphzD17QfTV+w444lU
rqWbgPCPhSW1R4RuPoKqx/L/9wFd9aOXEK9Af13+5NpUTn6CkEncu7uhqj1N+fnb
0PiaJgY/gOcoGSyuqe27i37seL8bZmNJibTBgS5PMQIhSxbReo4VbyOU2p6jMBoU
i/UK8LJyqZT9RWcESOGYRZApeEnQQ7BSAJw4t/sHHaeJXahNv5hLs76LDBZjWCwX
zKpq23Qiz1K58xQAW9sm4G3wnoyNsXhMVFuzIFkbj75qqMs1Fz2EWXt03QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD5GoCSrgiT6A7epyoz644RpcP/aMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvUGthZ0pLdUNKUG9EdDZuS2pQcmpoR2x3XzlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwuIxMA0G
CSqGSIb3DQEBCwUAA4IBAQAM8AfEvRAxHPthzfixKu4rr+hEizfq/kxxU0qMKqEA
in8GgXxBM0PQgzo/KdSekBLHH9j73X7NV2ia1ZyytyZpRomd5hcoTHuOsMKeLNIp
Da0YxAIWa9H9a/n6hPpTgy3NrH4rdFZIfABPsnsrblC6HgwqryoReNLK6aWOTeUA
L0vdAt7w3Hn+JHJY2rTPoPt0sdH9wxS5EMKaedhUmp514t7kGU8izBkfIUpwmAd5
fUl4NU5+uxStE1BLnCyDuGls69sCMweSoIgvems3KHUYPMi3um9IBHL28L7dKxIo
02IsFI3X7js6letdp9oZlCzl4tvvezk9j1MWT6T/HjZd
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org