Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/81ec54-a8a5-4128-9b7d-5f41d75a7e3a/1/9OgSxdoZKjvq3ral8Dr2w9Ml0A8.roa
File: 9OgSxdoZKjvq3ral8Dr2w9Ml0A8.roa (raw, json)
Hash identifier: dT8EKvdsphr4bMdwBNCs0GRdNONOTI62wDBGnNOlIi4=
Subject key identifier: F4:E8:12:C5:DA:19:2A:3B:EA:DE:B6:A5:F0:3A:F6:C3:D3:25:D0:0F
Certificate issuer: /CN=6cebe0eff0d425fff2fc43a442905c4dd52bd6a8
Certificate serial: 01856F4B4C2BF5A409CC4C4F41457EC75BA5
Authority key identifier: 6C:EB:E0:EF:F0:D4:25:FF:F2:FC:43:A4:42:90:5C:4D:D5:2B:D6:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOvg7_DUJf_y_EOkQpBcTdUr1qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/81ec54-a8a5-4128-9b7d-5f41d75a7e3a/1/9OgSxdoZKjvq3ral8Dr2w9Ml0A8.roa
Signing time: Sun 01 Jan 2023 21:44:43 +0000
ROA not before: Sun 01 Jan 2023 21:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136620
IP address blocks: 195.191.54.0/23 maxlen: 23
195.191.56.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:4c:2b:f5:a4:09:cc:4c:4f:41:45:7e:c7:5b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cebe0eff0d425fff2fc43a442905c4dd52bd6a8
Validity
Not Before: Jan 1 21:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4e812c5da192a3beadeb6a5f03af6c3d325d00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:b1:28:2e:cf:b7:8c:d3:c8:33:bc:16:93:
ce:04:0c:fa:db:03:bb:d6:55:a9:27:d7:2e:6a:66:
9c:e7:8c:b1:36:41:b4:2e:1a:46:4a:d6:2f:9e:ef:
ec:82:77:44:6f:ef:6d:f9:96:f6:76:19:00:e0:95:
04:52:85:6d:9a:e3:dc:47:06:9f:89:28:fa:65:47:
cc:79:c8:8e:d9:43:ff:c1:47:9c:49:fb:fd:5e:d9:
8f:74:7f:1a:52:08:66:63:62:ca:f6:b2:ac:38:e4:
af:0a:ef:d0:36:35:5e:c6:93:ef:f2:74:e5:71:ff:
4f:fb:50:c3:b5:d9:40:1f:91:1e:cf:da:2c:39:14:
89:fa:ff:0b:ec:96:20:45:dc:85:1d:a7:f7:5f:95:
44:6e:2a:d4:a2:07:3c:96:54:84:30:ce:56:79:0e:
37:a6:8e:96:fe:67:c9:64:37:0d:a0:d3:7b:d1:e4:
d7:67:94:9b:fc:fa:3f:b1:9d:9e:5b:2e:09:cb:7f:
96:7f:db:67:68:40:10:bb:cc:f8:c7:a9:1f:1a:a5:
cd:38:dc:bc:03:9c:20:ff:52:45:16:6d:16:c4:5f:
7a:67:83:2e:95:39:cf:23:54:96:11:67:cb:21:56:
07:4d:e7:73:1c:12:81:d8:9b:c8:dd:51:ed:ef:44:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E8:12:C5:DA:19:2A:3B:EA:DE:B6:A5:F0:3A:F6:C3:D3:25:D0:0F
X509v3 Authority Key Identifier:
keyid:6C:EB:E0:EF:F0:D4:25:FF:F2:FC:43:A4:42:90:5C:4D:D5:2B:D6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOvg7_DUJf_y_EOkQpBcTdUr1qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/81ec54-a8a5-4128-9b7d-5f41d75a7e3a/1/9OgSxdoZKjvq3ral8Dr2w9Ml0A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/81ec54-a8a5-4128-9b7d-5f41d75a7e3a/1/bOvg7_DUJf_y_EOkQpBcTdUr1qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.54.0-195.191.57.255
Signature Algorithm: sha256WithRSAEncryption
a5:e3:ce:e9:71:d2:d0:ac:16:3d:8d:ca:4c:41:f2:ea:fd:db:
78:45:26:0c:0c:43:de:2e:7f:a1:86:e9:f0:ac:29:f2:22:b9:
68:c3:dc:bf:6f:4b:e0:47:61:f2:b9:96:21:43:84:61:3f:ad:
a3:b7:62:a3:3a:13:69:49:94:46:5c:c9:a5:2c:72:9a:74:1d:
46:81:dc:ab:b2:7c:53:d0:33:e8:2d:5a:27:5e:1d:06:e6:6d:
d9:d0:7e:7d:d1:29:85:1e:13:bb:d4:02:24:a1:ad:75:ab:4d:
19:7e:cb:84:ac:90:50:af:8b:11:4a:74:4b:83:3f:08:54:a8:
f7:59:de:cd:0e:11:7e:75:77:a7:da:57:be:de:6a:b4:4d:14:
72:87:e4:3a:be:af:88:33:28:5b:90:3b:75:38:56:8b:b5:b7:
d7:a0:cd:f9:ff:40:38:19:55:27:66:3b:29:99:51:02:8b:5d:
be:bd:a9:75:c3:85:8e:90:c0:9f:9a:25:3b:9c:6c:70:71:eb:
0a:f2:50:dc:b8:d8:31:e1:38:c8:5f:06:da:d1:e3:d2:f4:88:
4d:13:7f:a1:c9:25:cb:13:36:05:ca:0c:de:c3:e7:78:91:a5:
1f:2b:2c:21:97:3d:7b:ff:ca:65:fe:fb:40:34:b2:e0:b3:49:
6f:df:e3:af
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVvS0wr9aQJzExPQUV+x1ulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZWJlMGVmZjBkNDI1ZmZmMmZjNDNhNDQyOTA1YzRkZDUy
YmQ2YTgwHhcNMjMwMTAxMjE0NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGU4MTJjNWRhMTkyYTNiZWFkZWI2YTVmMDNhZjZjM2QzMjVkMDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGCxKC7Pt4zTyDO8FpPOBAz62wO7
1lWpJ9cuamac54yxNkG0LhpGStYvnu/sgndEb+9t+Zb2dhkA4JUEUoVtmuPcRwaf
iSj6ZUfMeciO2UP/wUecSfv9XtmPdH8aUghmY2LK9rKsOOSvCu/QNjVexpPv8nTl
cf9P+1DDtdlAH5Eez9osORSJ+v8L7JYgRdyFHaf3X5VEbirUogc8llSEMM5WeQ43
po6W/mfJZDcNoNN70eTXZ5Sb/Po/sZ2eWy4Jy3+Wf9tnaEAQu8z4x6kfGqXNONy8
A5wg/1JFFm0WxF96Z4MulTnPI1SWEWfLIVYHTedzHBKB2JvI3VHt70TFhwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPToEsXaGSo76t62pfA69sPTJdAPMB8GA1UdIwQY
MBaAFGzr4O/w1CX/8vxDpEKQXE3VK9aoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk92ZzdfRFVKZl95X0VPa1FwQmNUZFVyMXFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84MWVjNTQtYThhNS00MTI4LTliN2Qt
NWY0MWQ3NWE3ZTNhLzEvOU9nU3hkb1pLanZxM3JhbDhEcjJ3OU1sMEE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84MWVjNTQtYThhNS00MTI4LTliN2QtNWY0MWQ3NWE3ZTNh
LzEvYk92ZzdfRFVKZl95X0VPa1FwQmNUZFVyMXFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHDvzYD
BAHDvzgwDQYJKoZIhvcNAQELBQADggEBAKXjzulx0tCsFj2NykxB8ur923hFJgwM
Q94uf6GG6fCsKfIiuWjD3L9vS+BHYfK5liFDhGE/raO3YqM6E2lJlEZcyaUscpp0
HUaB3KuyfFPQM+gtWideHQbmbdnQfn3RKYUeE7vUAiShrXWrTRl+y4SskFCvixFK
dEuDPwhUqPdZ3s0OEX51d6faV77earRNFHKH5Dq+r4gzKFuQO3U4Vou1t9egzfn/
QDgZVSdmOymZUQKLXb69qXXDhY6QwJ+aJTucbHBx6wryUNy42DHhOMhfBtrR49L0
iE0Tf6HJJcsTNgXKDN7D53iRpR8rLCGXPXv/ymX++0A0suCzSW/f468=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org