Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/xCuEDSzdUvxYHPlC4-RPPTMgiQg.roa
File: xCuEDSzdUvxYHPlC4-RPPTMgiQg.roa (raw, json)
Hash identifier: LU6CK0zrZeenZowWisOtG7NM49Nm73h3XYOtIBuFp1o=
Subject key identifier: C4:2B:84:0D:2C:DD:52:FC:58:1C:F9:42:E3:E4:4F:3D:33:20:89:08
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E8DEC6333F748D91D3AF4465FB73D
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/xCuEDSzdUvxYHPlC4-RPPTMgiQg.roa
Signing time: Mon 02 Jan 2023 08:34:54 +0000
ROA not before: Mon 02 Jan 2023 08:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62135
IP address blocks: 194.85.254.0/24 maxlen: 24
194.85.255.0/24 maxlen: 24
2a0c:a9c7:3::/48 maxlen: 48
2a0c:a9c7:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:8d:ec:63:33:f7:48:d9:1d:3a:f4:46:5f:b7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c42b840d2cdd52fc581cf942e3e44f3d33208908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1a:bc:e1:7c:d8:f0:02:3f:63:26:72:b6:ba:
19:ab:76:3d:73:23:49:8c:b7:8a:03:2b:e3:00:07:
fd:68:a9:42:f7:45:60:9c:e2:66:ab:0b:1d:c3:32:
56:f8:5a:f7:d1:c9:fd:a1:b4:f2:bc:2f:36:d6:74:
84:de:2e:a5:05:cf:19:d0:00:3d:ef:c0:30:6d:f2:
c9:df:1d:9b:5d:17:d4:2e:80:79:a1:1f:8d:d2:55:
92:e3:1d:41:aa:ba:eb:45:16:bc:46:f3:70:50:eb:
52:66:4a:9a:bc:9c:c5:a3:13:88:55:33:c1:86:d8:
8c:9d:7a:91:f6:92:02:03:40:6a:31:f4:61:16:8b:
3d:5d:3b:eb:e1:dc:ed:65:5a:bf:43:e4:81:53:38:
ae:a1:da:d4:17:9b:03:60:83:28:33:ee:88:a1:46:
b6:0e:f5:10:76:79:86:18:58:07:9f:38:dc:ec:ae:
d8:00:0b:e5:d1:16:0b:a4:d2:3e:2e:b8:04:9c:1c:
15:b5:78:d3:14:ac:fb:dd:46:85:70:89:a7:57:a1:
e6:9b:35:26:93:d1:94:6b:c9:81:23:4d:98:18:66:
66:15:47:91:55:3b:5f:eb:e8:4b:74:cf:ba:24:f5:
ba:96:d7:b3:1c:fa:0a:15:0c:6a:a3:64:0e:9f:e9:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2B:84:0D:2C:DD:52:FC:58:1C:F9:42:E3:E4:4F:3D:33:20:89:08
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/xCuEDSzdUvxYHPlC4-RPPTMgiQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.254.0/23
IPv6:
2a0c:a9c7:2::/47
Signature Algorithm: sha256WithRSAEncryption
6a:df:cd:c7:5b:63:13:71:32:71:a3:d3:12:65:87:ae:f6:a2:
c5:d0:c2:29:a5:e9:f3:88:ba:86:b1:bc:3d:49:11:db:2b:2d:
1a:5a:4c:5e:ea:70:b8:8a:c6:2f:29:70:d7:63:b4:9a:a7:2d:
4a:a2:ff:46:e5:28:52:05:51:6d:94:03:d9:57:90:18:45:07:
23:2f:5d:29:9f:92:66:d4:1d:3c:6f:0f:fd:d8:be:89:d2:2c:
97:70:f4:9e:9f:03:87:0f:07:fe:e0:ea:39:38:24:7a:3e:18:
2a:a2:a3:99:0d:ff:0c:37:39:fe:0a:d9:46:3b:58:36:fc:1f:
6a:cb:f6:36:e4:b7:b1:50:f3:48:07:4f:a2:47:fe:dd:93:17:
74:40:de:3f:18:d7:68:e4:75:12:01:2c:0a:40:78:4e:fa:18:
7f:c2:2c:b4:e3:dd:27:d9:9d:f5:1d:c7:0b:d7:5b:0f:15:16:
f7:85:c8:29:9c:01:96:33:3a:31:57:f1:1b:ac:c7:22:1b:c0:
94:85:4d:46:5e:80:fd:55:81:7f:84:29:f3:5d:ac:62:fa:3a:
ca:57:18:86:37:38:b8:f7:5a:0d:0f:90:25:70:df:9c:8d:d9:
65:9d:90:2f:1b:83:f0:47:64:5b:89:77:08:88:fe:c2:11:5f:
fd:f0:1f:1e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVxno3sYzP3SNkdOvRGX7c9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjMwMTAyMDgzNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDJiODQwZDJjZGQ1MmZjNTgxY2Y5NDJlM2U0NGYzZDMzMjA4OTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Bq84XzY8AI/YyZytroZq3Y9cyNJ
jLeKAyvjAAf9aKlC90VgnOJmqwsdwzJW+Fr30cn9obTyvC821nSE3i6lBc8Z0AA9
78AwbfLJ3x2bXRfULoB5oR+N0lWS4x1BqrrrRRa8RvNwUOtSZkqavJzFoxOIVTPB
htiMnXqR9pICA0BqMfRhFos9XTvr4dztZVq/Q+SBUziuodrUF5sDYIMoM+6IoUa2
DvUQdnmGGFgHnzjc7K7YAAvl0RYLpNI+LrgEnBwVtXjTFKz73UaFcImnV6HmmzUm
k9GUa8mBI02YGGZmFUeRVTtf6+hLdM+6JPW6ltezHPoKFQxqo2QOn+kQMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMQrhA0s3VL8WBz5QuPkTz0zIIkIMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEveEN1RURTemRVdnhZSFBsQzQtUlBQVE1naVFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwlX+MA8E
AgACMAkDBwEqDKnHAAIwDQYJKoZIhvcNAQELBQADggEBAGrfzcdbYxNxMnGj0xJl
h672osXQwiml6fOIuoaxvD1JEdsrLRpaTF7qcLiKxi8pcNdjtJqnLUqi/0blKFIF
UW2UA9lXkBhFByMvXSmfkmbUHTxvD/3YvonSLJdw9J6fA4cPB/7g6jk4JHo+GCqi
o5kN/ww3Of4K2UY7WDb8H2rL9jbkt7FQ80gHT6JH/t2TF3RA3j8Y12jkdRIBLApA
eE76GH/CLLTj3SfZnfUdxwvXWw8VFveFyCmcAZYzOjFX8RusxyIbwJSFTUZegP1V
gX+EKfNdrGL6OspXGIY3OLj3Wg0PkCVw35yN2WWdkC8bg/BHZFuJdwiI/sIRX/3w
Hx4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org