Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/KJaZnOdCqPLJVmYbOQqYZRWvbVw.roa
File: KJaZnOdCqPLJVmYbOQqYZRWvbVw.roa (raw, json)
Hash identifier: kYx/sD4yigAfxSJ/MP1n/4/4EsT0Hc8Rc//lWtzt7D4=
Subject key identifier: 28:96:99:9C:E7:42:A8:F2:C9:56:66:1B:39:0A:98:65:15:AF:6D:5C
Certificate issuer: /CN=1651d3ddc6add483b761ac0476269533fe7ea717
Certificate serial: 01856C783E0A0E9D7006937BC939660F16F9
Authority key identifier: 16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/KJaZnOdCqPLJVmYbOQqYZRWvbVw.roa
Signing time: Sun 01 Jan 2023 08:34:57 +0000
ROA not before: Sun 01 Jan 2023 08:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206104
IP address blocks: 194.126.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:3e:0a:0e:9d:70:06:93:7b:c9:39:66:0f:16:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1651d3ddc6add483b761ac0476269533fe7ea717
Validity
Not Before: Jan 1 08:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2896999ce742a8f2c956661b390a986515af6d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:cb:de:3a:1f:e7:78:ae:dc:32:b4:5d:46:c3:
40:0a:1a:62:1b:5d:f2:6c:f1:24:5d:eb:4b:52:d4:
22:ca:36:39:17:1c:39:4f:9f:06:ae:6c:84:d1:46:
86:ed:38:10:31:60:d6:5c:1e:ca:40:13:01:d9:b6:
50:6e:14:0e:f7:15:c9:3c:06:2a:56:ee:da:ea:d3:
86:58:90:e9:d6:26:8f:45:dd:4d:7a:47:22:af:43:
9a:56:66:df:70:42:b5:0a:0a:a9:e6:8c:52:a5:5d:
be:59:4d:f2:57:47:5d:4d:e4:7c:79:d9:ab:4d:60:
32:af:1a:65:d4:31:9b:92:d0:51:3e:60:1e:0b:9c:
52:dc:d4:ac:76:80:d6:3e:6b:74:71:52:75:ff:41:
c3:22:4d:f3:c7:01:08:5e:0f:d0:cb:f4:6a:2f:aa:
74:81:0d:41:79:79:43:1a:1f:70:2c:e7:48:3a:1e:
36:57:82:f0:ab:bb:d5:22:7a:0c:ac:c0:b4:8c:07:
42:35:02:f9:b5:03:d7:ea:2f:59:cb:84:e9:bb:10:
85:36:49:2c:e8:e0:cf:fe:ae:aa:4f:c7:3d:e0:e5:
34:7c:ff:94:59:1e:0a:a5:b8:bd:c7:55:1d:88:71:
dd:84:bd:21:de:e9:b5:37:ff:d6:07:2a:71:bc:c7:
6e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:96:99:9C:E7:42:A8:F2:C9:56:66:1B:39:0A:98:65:15:AF:6D:5C
X509v3 Authority Key Identifier:
keyid:16:51:D3:DD:C6:AD:D4:83:B7:61:AC:04:76:26:95:33:FE:7E:A7:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlHT3cat1IO3YawEdiaVM_5-pxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/KJaZnOdCqPLJVmYbOQqYZRWvbVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/321f74-092d-4dff-b335-2054f6e61922/1/FlHT3cat1IO3YawEdiaVM_5-pxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.249.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ea:24:bd:d2:2f:75:61:8a:08:16:55:6f:a5:99:6b:e1:f4:
23:3d:e7:71:ea:5a:3e:47:ec:2c:f1:6d:09:a5:07:ee:40:b2:
c7:8a:3c:56:ba:df:d5:d0:1b:7e:37:86:71:1d:70:b3:5e:4b:
27:34:b6:fa:f0:cb:af:b7:5f:24:4c:52:84:56:73:74:24:99:
d6:f5:ec:b1:32:a6:fb:47:ed:cf:e5:0d:a7:c1:df:fc:b2:a7:
f6:48:10:58:c0:91:bd:ca:62:ba:5f:f4:8a:24:33:f6:b7:bf:
f3:e0:24:7b:84:5e:89:94:05:50:7c:6d:e8:3f:1d:1f:98:33:
f4:52:24:c0:e7:e3:06:17:37:d0:ad:ab:5f:a0:e2:d6:68:df:
ae:31:a4:ab:b1:37:ac:9b:53:3b:54:7b:0c:10:1c:b7:c9:4f:
f8:15:be:68:75:15:f0:ab:a1:ff:5a:4b:26:5a:37:d4:b2:31:
ec:dd:be:e1:3c:e4:06:af:17:48:fa:93:a7:f6:4f:0b:0e:b2:
f3:df:1a:99:07:8b:ac:f2:8d:34:30:af:47:84:12:09:b5:c0:
c9:f5:17:59:78:0f:bc:27:13:e5:31:e9:df:59:9d:24:31:d0:
72:62:04:15:5c:29:92:bf:0d:89:cf:de:19:5e:fd:4e:3d:83:
f1:31:f8:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVseD4KDp1wBpN7yTlmDxb5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NTFkM2RkYzZhZGQ0ODNiNzYxYWMwNDc2MjY5NTMzZmU3
ZWE3MTcwHhcNMjMwMTAxMDgzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODk2OTk5Y2U3NDJhOGYyYzk1NjY2MWIzOTBhOTg2NTE1YWY2ZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9sveOh/neK7cMrRdRsNAChpiG13y
bPEkXetLUtQiyjY5Fxw5T58GrmyE0UaG7TgQMWDWXB7KQBMB2bZQbhQO9xXJPAYq
Vu7a6tOGWJDp1iaPRd1Nekcir0OaVmbfcEK1Cgqp5oxSpV2+WU3yV0ddTeR8edmr
TWAyrxpl1DGbktBRPmAeC5xS3NSsdoDWPmt0cVJ1/0HDIk3zxwEIXg/Qy/RqL6p0
gQ1BeXlDGh9wLOdIOh42V4Lwq7vVInoMrMC0jAdCNQL5tQPX6i9Zy4TpuxCFNkks
6ODP/q6qT8c94OU0fP+UWR4Kpbi9x1UdiHHdhL0h3um1N//WBypxvMdulQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCiWmZznQqjyyVZmGzkKmGUVr21cMB8GA1UdIwQY
MBaAFBZR093GrdSDt2GsBHYmlTP+fqcXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmxIVDNjYXQxSU8zWWF3RWRpYVZNXzUtcHhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8zMjFmNzQtMDkyZC00ZGZmLWIzMzUt
MjA1NGY2ZTYxOTIyLzEvS0phWm5PZENxUExKVm1ZYk9RcVlaUld2YlZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8zMjFmNzQtMDkyZC00ZGZmLWIzMzUtMjA1NGY2ZTYxOTIy
LzEvRmxIVDNjYXQxSU8zWWF3RWRpYVZNXzUtcHhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn75MA0G
CSqGSIb3DQEBCwUAA4IBAQCW6iS90i91YYoIFlVvpZlr4fQjPedx6lo+R+ws8W0J
pQfuQLLHijxWut/V0Bt+N4ZxHXCzXksnNLb68Muvt18kTFKEVnN0JJnW9eyxMqb7
R+3P5Q2nwd/8sqf2SBBYwJG9ymK6X/SKJDP2t7/z4CR7hF6JlAVQfG3oPx0fmDP0
UiTA5+MGFzfQratfoOLWaN+uMaSrsTesm1M7VHsMEBy3yU/4Fb5odRXwq6H/Wksm
WjfUsjHs3b7hPOQGrxdI+pOn9k8LDrLz3xqZB4us8o00MK9HhBIJtcDJ9RdZeA+8
JxPlMenfWZ0kMdByYgQVXCmSvw2Jz94ZXv1OPYPxMfio
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:32 2024 by rpki-client on console-fra.rpki-client.org