Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/xCh9RRt5ldufcPfAVnsqk6-I7UM.roa
File: xCh9RRt5ldufcPfAVnsqk6-I7UM.roa (raw, json)
Hash identifier: y0N3Xz9zrwX4e0reg/v9g7ocJ2QjZx1T8K2Jpoo41Qk=
Subject key identifier: C4:28:7D:45:1B:79:95:DB:9F:70:F7:C0:56:7B:2A:93:AF:88:ED:43
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018CC56E0318C4DFE45175CFE429FC025EDF
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/xCh9RRt5ldufcPfAVnsqk6-I7UM.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211373
IP address blocks: 146.19.154.0/24 maxlen: 24
88.151.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 07:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:03:18:c4:df:e4:51:75:cf:e4:29:fc:02:5e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4287d451b7995db9f70f7c0567b2a93af88ed43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:70:f8:41:26:9d:2e:7d:02:e1:33:40:f9:30:
61:9f:6b:cb:5c:2d:e8:dd:e1:d0:38:b2:55:36:a8:
b9:9e:14:9b:89:3a:5b:d9:18:56:b1:c5:38:54:16:
86:52:75:63:45:c0:6b:7b:91:51:18:3f:14:d9:85:
68:ed:13:95:5a:c2:fb:a5:d5:5d:87:ff:ab:91:a7:
19:8e:e9:87:87:d5:38:6e:e0:f0:2f:f2:3a:c3:8e:
34:2c:9c:b4:f6:2d:d9:69:3e:a0:c1:06:92:47:08:
da:ad:eb:2d:ac:08:0e:21:f6:18:35:82:4e:ec:e4:
e4:74:cd:dc:ab:f6:68:67:37:f1:9a:8d:8f:94:82:
4b:28:a1:bf:ab:63:13:71:a3:86:01:ee:d6:2d:31:
bb:99:16:b3:5f:be:99:27:01:1d:d3:57:f1:57:be:
b5:9d:fc:f2:b8:80:10:fa:80:3a:7a:ca:1a:ed:fd:
eb:e2:36:01:da:84:02:a4:32:21:99:a4:26:44:68:
59:a4:b2:f1:36:85:5f:8b:f1:b3:3b:11:39:e9:af:
ec:39:69:4a:6d:0c:2b:31:1a:c5:b4:d7:71:c7:3a:
6b:05:6e:b5:ad:9c:27:16:e5:5b:35:40:40:44:87:
f6:b8:e0:6b:3d:f0:61:9f:3d:b5:3f:8c:5d:1b:32:
6e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:28:7D:45:1B:79:95:DB:9F:70:F7:C0:56:7B:2A:93:AF:88:ED:43
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/xCh9RRt5ldufcPfAVnsqk6-I7UM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.10.0/24
146.19.154.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ae:e3:ef:7b:73:f0:a9:db:3a:19:8d:63:87:cc:57:56:c9:
11:a7:50:1d:78:f2:73:34:e4:36:96:45:cc:7b:52:13:76:2c:
e0:7e:05:a1:a8:59:ac:31:52:f7:6e:e2:73:44:12:44:10:ad:
4c:25:79:0f:2e:24:6a:d4:dd:4e:46:95:27:f5:b6:70:9e:5c:
49:3b:01:b6:81:9c:9b:ff:9e:d6:5a:ee:e4:87:8c:ad:45:5d:
1e:c0:cf:68:bc:ef:9f:2d:0b:a4:45:9d:0d:c9:c1:6c:94:fa:
09:9b:b5:a0:a0:dd:71:09:90:df:b3:73:60:21:92:64:ba:5f:
0d:21:a0:62:3a:98:bf:f0:05:73:05:0e:08:fd:ab:02:6a:8f:
c5:cb:a1:76:90:44:f8:1a:da:99:5d:98:dc:03:b0:45:08:97:
da:d9:54:2f:5f:52:88:28:e4:da:c9:f9:a5:5f:da:5c:a3:30:
d3:14:33:76:77:90:00:2a:84:4c:f9:20:2c:ba:b9:a7:7a:f7:
a3:27:01:77:1e:6d:1f:ac:94:f0:e6:6d:5e:06:16:80:7e:dd:
ec:8c:38:1e:82:59:f6:82:72:54:eb:95:17:d4:66:29:e7:57:
ca:f4:54:56:25:8b:5c:1b:40:66:37:7a:20:bb:3c:fc:6a:83:
72:aa:43:d9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFbgMYxN/kUXXP5Cn8Al7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjQwMTAxMTQyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDI4N2Q0NTFiNzk5NWRiOWY3MGY3YzA1NjdiMmE5M2FmODhlZDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXD4QSadLn0C4TNA+TBhn2vLXC3o
3eHQOLJVNqi5nhSbiTpb2RhWscU4VBaGUnVjRcBre5FRGD8U2YVo7ROVWsL7pdVd
h/+rkacZjumHh9U4buDwL/I6w440LJy09i3ZaT6gwQaSRwjarestrAgOIfYYNYJO
7OTkdM3cq/ZoZzfxmo2PlIJLKKG/q2MTcaOGAe7WLTG7mRazX76ZJwEd01fxV761
nfzyuIAQ+oA6esoa7f3r4jYB2oQCpDIhmaQmRGhZpLLxNoVfi/GzOxE56a/sOWlK
bQwrMRrFtNdxxzprBW61rZwnFuVbNUBARIf2uOBrPfBhnz21P4xdGzJujQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMQofUUbeZXbn3D3wFZ7KpOviO1DMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEveENoOVJSdDVsZHVmY1BmQVZuc3FrNi1JN1VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWJcKAwQA
khOaMA0GCSqGSIb3DQEBCwUAA4IBAQADruPve3Pwqds6GY1jh8xXVskRp1AdePJz
NOQ2lkXMe1ITdizgfgWhqFmsMVL3buJzRBJEEK1MJXkPLiRq1N1ORpUn9bZwnlxJ
OwG2gZyb/57WWu7kh4ytRV0ewM9ovO+fLQukRZ0NycFslPoJm7WgoN1xCZDfs3Ng
IZJkul8NIaBiOpi/8AVzBQ4I/asCao/Fy6F2kET4GtqZXZjcA7BFCJfa2VQvX1KI
KOTayfmlX9pcozDTFDN2d5AAKoRM+SAsurmnevejJwF3Hm0frJTw5m1eBhaAft3s
jDgegln2gnJU65UX1GYp51fK9FRWJYtcG0BmN3oguzz8aoNyqkPZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:49 2024 by rpki-client on console-ams.rpki-client.org