Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/TsFFyZwp5-m9qLPi1bY7lIjjpTI.roa
File: TsFFyZwp5-m9qLPi1bY7lIjjpTI.roa (raw, json)
Hash identifier: 6ygeoP3vPkkm8tzPUwqrSQGB0Okp+7JbSOvScaL6WNs=
Subject key identifier: 4E:C1:45:C9:9C:29:E7:E9:BD:A8:B3:E2:D5:B6:3B:94:88:E3:A5:32
Certificate issuer: /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial: 0191B3A332807612BA4C3E90C61CE3F440EC
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/TsFFyZwp5-m9qLPi1bY7lIjjpTI.roa
Signing time: Mon 02 Sep 2024 16:48:22 +0000
ROA not before: Mon 02 Sep 2024 16:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51167
IP address blocks: 195.191.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 07:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:a3:32:80:76:12:ba:4c:3e:90:c6:1c:e3:f4:40:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
Validity
Not Before: Sep 2 16:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ec145c99c29e7e9bda8b3e2d5b63b9488e3a532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:d9:05:d0:78:6c:6d:f4:e1:9d:fe:e4:1c:
ca:c2:2f:23:91:55:19:c6:ac:15:9d:04:de:74:95:
cb:60:44:a6:1c:ae:13:65:d6:f4:a9:86:2b:4a:e3:
e7:c2:b1:1c:32:aa:ee:b0:9b:c6:bf:8b:bc:0c:e5:
10:4c:c2:0a:4f:83:16:76:30:07:fc:22:83:74:ce:
c2:68:33:92:9c:e9:7e:ab:99:72:cd:84:67:4a:05:
d3:bd:a0:1a:d7:f2:c5:cc:2b:6c:27:2a:8d:bc:db:
92:b0:0d:3e:8e:df:bf:55:8c:3f:57:b6:5e:41:4f:
84:fd:d4:6a:68:33:dc:b9:4a:b9:11:bc:ce:aa:29:
00:b6:21:b4:a3:79:0d:08:a4:e0:9f:53:4a:9a:ff:
93:c7:9a:4f:15:4a:c4:49:25:9e:dc:fa:af:cd:c7:
f2:d0:b2:9e:0f:91:a3:b1:43:86:4f:43:12:74:a1:
35:ad:00:96:ce:1e:66:44:41:43:aa:82:a4:90:02:
61:a8:37:17:49:09:e8:74:6d:a3:17:d6:51:80:c8:
f6:66:59:90:20:b9:62:d7:c8:ae:dc:04:2d:2a:c6:
cc:4e:d7:23:12:4e:d4:9b:d5:f1:6c:f9:f7:d4:09:
92:6f:ad:74:a8:1a:5c:9a:84:6e:91:3d:51:d8:d9:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C1:45:C9:9C:29:E7:E9:BD:A8:B3:E2:D5:B6:3B:94:88:E3:A5:32
X509v3 Authority Key Identifier:
keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/TsFFyZwp5-m9qLPi1bY7lIjjpTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.65.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:82:42:c6:2b:18:fb:20:e3:30:e3:59:1d:48:de:b3:15:36:
8c:3b:5c:82:7c:cb:3a:05:0b:09:49:3e:2e:2f:31:04:23:2f:
18:ea:66:21:e3:b3:e8:86:15:39:30:bb:df:04:49:64:70:2f:
0f:bc:24:47:11:3c:77:f4:a4:9f:ab:c6:99:f0:5a:57:70:c0:
46:e3:eb:82:ff:ce:b9:fb:5c:92:c9:02:2b:29:17:7e:6f:fc:
3d:af:6a:5a:65:37:14:05:c4:f8:66:b4:c1:a7:5e:a0:c5:ee:
f7:36:ef:5c:b7:b4:d2:f7:d5:c6:65:57:ea:23:24:fc:76:b1:
b0:f1:d7:9c:18:1d:ff:13:c5:7e:49:9a:6d:81:05:e3:60:57:
22:08:3d:00:5c:28:34:d0:51:17:2c:3c:19:01:c3:f4:64:79:
af:d7:a2:05:dc:a9:f3:d8:c3:65:ae:0f:6c:3b:8d:0f:a3:4e:
9f:e0:66:2c:70:82:a5:3a:38:e4:a3:a2:e4:aa:cb:b2:3e:d1:
cd:a6:12:84:b7:d5:aa:f6:1b:f3:b7:a3:c2:8e:ee:26:a2:28:
4a:af:50:ec:34:86:08:24:c6:92:45:b7:42:ff:c2:45:79:dc:
13:21:f9:b5:c4:6f:e8:97:b1:cb:18:13:27:a0:3a:b7:c2:1d:
3e:5f:5f:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGzozKAdhK6TD6Qxhzj9EDsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYTAwMDgwY2QyY2IxYmIwNzM5MDNiMzJiMjVhZDY2MGEz
NjY0ODYwHhcNMjQwOTAyMTY0ODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWMxNDVjOTljMjllN2U5YmRhOGIzZTJkNWI2M2I5NDg4ZTNhNTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYnZBdB4bG304Z3+5BzKwi8jkVUZ
xqwVnQTedJXLYESmHK4TZdb0qYYrSuPnwrEcMqrusJvGv4u8DOUQTMIKT4MWdjAH
/CKDdM7CaDOSnOl+q5lyzYRnSgXTvaAa1/LFzCtsJyqNvNuSsA0+jt+/VYw/V7Ze
QU+E/dRqaDPcuUq5EbzOqikAtiG0o3kNCKTgn1NKmv+Tx5pPFUrESSWe3Pqvzcfy
0LKeD5GjsUOGT0MSdKE1rQCWzh5mREFDqoKkkAJhqDcXSQnodG2jF9ZRgMj2ZlmQ
ILli18iu3AQtKsbMTtcjEk7Um9XxbPn31AmSb610qBpcmoRukT1R2NmrCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE7BRcmcKefpvaiz4tW2O5SI46UyMB8GA1UdIwQY
MBaAFCGgAIDNLLG7BzkDsyslrWYKNmSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1Nzkt
ZTkyZWNlNGQzY2IzLzEvVHNGRnlad3A1LW05cUxQaTFiWTdsSWpqcFRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1NzktZTkyZWNlNGQzY2Iz
LzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw79BMA0G
CSqGSIb3DQEBCwUAA4IBAQB9gkLGKxj7IOMw41kdSN6zFTaMO1yCfMs6BQsJST4u
LzEEIy8Y6mYh47PohhU5MLvfBElkcC8PvCRHETx39KSfq8aZ8FpXcMBG4+uC/865
+1ySyQIrKRd+b/w9r2paZTcUBcT4ZrTBp16gxe73Nu9ct7TS99XGZVfqIyT8drGw
8decGB3/E8V+SZptgQXjYFciCD0AXCg00FEXLDwZAcP0ZHmv16IF3Knz2MNlrg9s
O40Po06f4GYscIKlOjjko6LkqsuyPtHNphKEt9Wq9hvzt6PCju4moihKr1DsNIYI
JMaSRbdC/8JFedwTIfm1xG/ol7HLGBMnoDq3wh0+X1+I
-----END CERTIFICATE-----
Generated at Tue Sep 3 09:41:53 2024 by rpki-client on console-fra.rpki-client.org