Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/izD40Wj38OUAWi9rnHUgOcB3nzE.roa
File: izD40Wj38OUAWi9rnHUgOcB3nzE.roa (raw, json)
Hash identifier: ol1zrCQAcb5PHtt/eGk0tR1CwcCJ90KicrIBrzHRU5c=
Subject key identifier: 8B:30:F8:D1:68:F7:F0:E5:00:5A:2F:6B:9C:75:20:39:C0:77:9F:31
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018CC5DC52B38BDA812E0B55F5FC827205D5
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/izD40Wj38OUAWi9rnHUgOcB3nzE.roa
Signing time: Mon 01 Jan 2024 16:29:59 +0000
ROA not before: Mon 01 Jan 2024 16:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212220
IP address blocks: 194.226.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 Feb 2024 19:36:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:52:b3:8b:da:81:2e:0b:55:f5:fc:82:72:05:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 1 16:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b30f8d168f7f0e5005a2f6b9c752039c0779f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:99:4c:a1:c1:c2:a2:11:53:0b:1e:e4:62:
2d:08:aa:f1:4b:70:0a:79:82:4a:a1:d2:5d:2f:8b:
24:79:80:f8:f9:95:7d:91:2e:1d:48:68:71:9b:3d:
38:32:88:52:c5:6b:a6:7e:be:4e:ef:45:3e:59:f4:
6b:3b:39:46:13:bb:f7:db:32:19:fa:31:ff:fb:1e:
42:f8:59:97:47:53:bf:1d:95:de:41:de:b7:3a:ec:
4b:b1:1c:7a:d8:99:6d:9d:f3:f4:b7:ca:2e:f4:e9:
6a:a5:61:24:dc:da:70:29:e9:42:2c:3c:60:d3:b7:
95:93:e8:be:3a:10:23:30:61:d1:85:7d:78:dc:9b:
ab:c9:94:cc:7e:77:15:a5:1b:f2:66:a0:9f:1a:2f:
22:08:ad:4f:a4:92:c8:17:0e:36:e4:07:05:49:05:
f3:3b:35:9e:30:61:01:ac:71:ad:c2:25:94:1b:1c:
fd:d7:5a:53:45:bf:dd:d2:6a:de:22:21:68:8b:3d:
11:3d:1a:3a:be:6f:af:a1:6a:1e:78:aa:1e:e5:c2:
d8:e0:4f:5c:50:80:a7:ed:55:ca:cb:6a:aa:3c:10:
76:f0:86:26:65:6c:96:c0:0d:94:d0:a2:91:58:7b:
d3:24:c1:8c:c6:3b:c5:21:78:57:06:f2:42:f2:ad:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:30:F8:D1:68:F7:F0:E5:00:5A:2F:6B:9C:75:20:39:C0:77:9F:31
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/izD40Wj38OUAWi9rnHUgOcB3nzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.139.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:32:d9:d1:12:b5:cc:25:b2:ff:a8:eb:cd:a3:9a:62:45:0a:
2a:39:da:68:64:49:40:51:b9:25:d1:de:bd:69:de:18:e4:a4:
83:19:a3:11:ba:63:08:41:d3:27:7d:d9:f0:8e:97:b1:7f:57:
23:c9:9a:9e:06:41:ac:a4:f1:97:2f:dd:86:f9:5a:7e:0d:24:
9c:da:a8:2a:d1:64:fb:c2:a8:cd:e2:09:93:17:dd:bd:72:6f:
e8:6e:69:06:13:67:79:85:78:eb:d7:da:d2:05:55:da:a5:8b:
07:1f:5f:77:28:6a:1c:d2:1c:ad:d3:40:cc:38:e8:04:37:1e:
a0:fe:3d:a8:4a:e3:1a:4f:50:52:94:08:1d:f1:56:9c:41:41:
83:c4:28:69:da:80:d6:e7:b3:0c:79:e1:97:3b:c6:c0:df:ea:
17:66:46:9f:0c:64:25:dd:de:eb:7a:b5:6d:48:55:62:80:db:
d4:25:77:12:d1:11:4e:f2:dc:8b:e4:e4:a3:74:3c:11:b9:50:
d7:d2:45:40:65:2d:b3:11:37:95:f0:b0:94:c7:c8:eb:40:7c:
84:8d:96:8e:41:7e:8c:89:1e:15:d6:81:99:cc:2c:3f:b1:0d:
5b:73:e0:8e:b8:b6:0a:10:b1:d7:dd:04:50:1e:50:17:c2:da:
77:25:03:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3FKzi9qBLgtV9fyCcgXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjQwMTAxMTYyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjMwZjhkMTY4ZjdmMGU1MDA1YTJmNmI5Yzc1MjAzOWMwNzc5ZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcaZTKHBwqIRUwse5GItCKrxS3AK
eYJKodJdL4skeYD4+ZV9kS4dSGhxmz04MohSxWumfr5O70U+WfRrOzlGE7v32zIZ
+jH/+x5C+FmXR1O/HZXeQd63OuxLsRx62JltnfP0t8ou9OlqpWEk3NpwKelCLDxg
07eVk+i+OhAjMGHRhX143JuryZTMfncVpRvyZqCfGi8iCK1PpJLIFw425AcFSQXz
OzWeMGEBrHGtwiWUGxz911pTRb/d0mreIiFoiz0RPRo6vm+voWoeeKoe5cLY4E9c
UICn7VXKy2qqPBB28IYmZWyWwA2U0KKRWHvTJMGMxjvFIXhXBvJC8q0RbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIsw+NFo9/DlAFova5x1IDnAd58xMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvaXpENDBXajM4T1VBV2k5cm5IVWdPY0IzbnpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwuKLMA0G
CSqGSIb3DQEBCwUAA4IBAQCjMtnRErXMJbL/qOvNo5piRQoqOdpoZElAUbkl0d69
ad4Y5KSDGaMRumMIQdMnfdnwjpexf1cjyZqeBkGspPGXL92G+Vp+DSSc2qgq0WT7
wqjN4gmTF929cm/obmkGE2d5hXjr19rSBVXapYsHH193KGoc0hyt00DMOOgENx6g
/j2oSuMaT1BSlAgd8VacQUGDxChp2oDW57MMeeGXO8bA3+oXZkafDGQl3d7rerVt
SFVigNvUJXcS0RFO8tyL5OSjdDwRuVDX0kVAZS2zETeV8LCUx8jrQHyEjZaOQX6M
iR4V1oGZzCw/sQ1bc+COuLYKELHX3QRQHlAXwtp3JQOc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org