Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/1-9khXTkN0-AMxAzVI-rl61BKoFg.roa
File: 1-9khXTkN0-AMxAzVI-rl61BKoFg.roa (raw, json)
Hash identifier: 5I4EoYP5NPS1/P8xVcdK9XzrHQHPfPqiDJ/BKMbJI+8=
Subject key identifier: FB:D9:21:5D:39:0D:D3:E0:0C:C4:0C:D5:23:EA:E5:EB:50:4A:A0:58
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 018EE640C0941B2F6165A23C2D36D6D6FE6C
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/1-9khXTkN0-AMxAzVI-rl61BKoFg.roa
Signing time: Tue 16 Apr 2024 09:33:07 +0000
ROA not before: Tue 16 Apr 2024 09:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39877
IP address blocks: 195.78.124.0/23 maxlen: 24
195.88.38.0/23 maxlen: 24
195.245.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 16:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:40:c0:94:1b:2f:61:65:a2:3c:2d:36:d6:d6:fe:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Apr 16 09:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbd9215d390dd3e00cc40cd523eae5eb504aa058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:18:66:6c:ba:f8:d6:db:52:5a:49:45:9a:25:
d1:2f:d4:68:0c:e2:4b:5f:e3:5d:a9:f7:87:60:0e:
31:1b:54:85:ab:65:5e:5a:0a:db:a5:fa:c8:62:05:
02:7b:ce:6b:2e:c3:f7:39:15:ce:c9:a6:bd:64:e3:
ba:6e:7d:4b:e8:e2:fe:89:f7:f8:bc:37:c7:79:9d:
d2:64:74:37:6a:05:85:b6:f4:02:80:45:fc:6a:c2:
34:e2:c3:44:fa:aa:6a:cb:38:5d:ac:90:9b:9d:63:
f0:e4:4c:75:25:b0:de:49:ea:f0:8e:26:ab:66:0c:
74:aa:40:a7:02:e9:27:17:4b:a2:c3:43:a4:a4:18:
14:85:61:e9:0f:1f:a2:37:45:8f:84:0f:6c:20:ed:
16:b3:7e:f3:24:cc:9a:06:69:49:ae:1e:81:31:ea:
90:ec:75:57:03:a6:59:eb:0a:14:ce:2d:e2:e4:62:
f8:5c:91:4a:11:f5:d6:ee:86:32:5a:d6:e4:52:d2:
4a:4a:a5:ae:fc:e1:51:2d:ae:2f:10:63:8a:ed:fa:
ff:29:6c:6e:f3:f0:09:e9:8f:c8:49:a2:25:fa:28:
5b:ea:56:1b:0a:ba:bb:52:22:7e:17:8b:cc:52:98:
ca:73:35:5a:98:56:f6:f1:cb:3a:1e:f4:59:2b:8b:
2b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D9:21:5D:39:0D:D3:E0:0C:C4:0C:D5:23:EA:E5:EB:50:4A:A0:58
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/1-9khXTkN0-AMxAzVI-rl61BKoFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.124.0/23
195.88.38.0/23
195.245.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:1c:4e:f5:7b:4d:6a:f4:7e:cd:4a:db:39:c7:b3:8a:d0:d1:
d6:18:4a:97:d3:8b:1f:7a:19:5a:b3:45:6b:ac:f7:c1:68:55:
96:e2:55:e7:24:46:0b:bf:cc:21:c9:70:19:c4:7b:a1:75:88:
98:b7:57:a1:96:e8:37:06:b1:d1:d4:76:4b:cc:06:0e:6e:11:
fd:a4:dd:1b:b8:09:a8:84:05:d6:b6:03:ca:7c:c3:b0:1b:8e:
bc:44:79:2e:e1:a7:57:f7:b2:28:0a:1f:60:71:87:c6:9b:e9:
10:c0:46:ba:68:62:12:b9:2f:94:f3:b1:2c:97:dd:59:b7:79:
ac:7b:83:d8:f2:d5:ab:ba:c2:6f:3d:cb:26:ec:32:b8:ad:dd:
92:41:7b:9c:79:7e:89:85:ad:fb:99:af:3c:41:37:02:2c:2b:
7d:fb:d4:ae:2f:45:51:c9:1b:92:cd:98:92:f2:06:77:a3:a1:
de:39:fb:39:66:ce:83:f0:34:cf:0f:66:f4:13:7c:0b:73:23:
b2:d0:d1:f4:6c:95:e2:a1:fd:0d:86:c6:0a:21:f7:a8:29:21:
da:1d:33:a1:4d:ab:a3:f1:87:13:c2:05:d5:28:2c:62:71:f5:
93:fb:f0:1e:72:0e:a5:74:b2:f6:43:f3:69:47:9e:f9:75:fd:
3f:06:5c:99
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAY7mQMCUGy9hZaI8LTbW1v5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNGRiNzYyMzI0MWQ3ZTY2NzhmYzI1NzUxZmE0ZTBiNjY2
NTE4NmIwHhcNMjQwNDE2MDkzMzA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmQ5MjE1ZDM5MGRkM2UwMGNjNDBjZDUyM2VhZTVlYjUwNGFhMDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhhmbLr41ttSWklFmiXRL9RoDOJL
X+NdqfeHYA4xG1SFq2VeWgrbpfrIYgUCe85rLsP3ORXOyaa9ZOO6bn1L6OL+iff4
vDfHeZ3SZHQ3agWFtvQCgEX8asI04sNE+qpqyzhdrJCbnWPw5Ex1JbDeSerwjiar
Zgx0qkCnAuknF0uiw0OkpBgUhWHpDx+iN0WPhA9sIO0Ws37zJMyaBmlJrh6BMeqQ
7HVXA6ZZ6woUzi3i5GL4XJFKEfXW7oYyWtbkUtJKSqWu/OFRLa4vEGOK7fr/KWxu
8/AJ6Y/ISaIl+ihb6lYbCrq7UiJ+F4vMUpjKczVamFb28cs6HvRZK4srOQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPvZIV05DdPgDMQM1SPq5etQSqBYMB8GA1UdIwQY
MBaAFMBNt2IyQdfmZ4/CV1H6TgtmZRhrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMt
MDQyM2YyNjNmMmNiLzEvMS05a2hYVGtOMC1BTXhBelZJLXJsNjFCS29GZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDgvNmU4NzRlLTczZmUtNGRiYi1iNzRjLTA0MjNmMjYzZjJj
Yi8xL3dFMjNZakpCMS1abmo4SlhVZnBPQzJabEdHcy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAcNOfAME
AcNYJgMEAMP1UzANBgkqhkiG9w0BAQsFAAOCAQEAfhxO9XtNavR+zUrbOcezitDR
1hhKl9OLH3oZWrNFa6z3wWhVluJV5yRGC7/MIclwGcR7oXWImLdXoZboNwax0dR2
S8wGDm4R/aTdG7gJqIQF1rYDynzDsBuOvER5LuGnV/eyKAofYHGHxpvpEMBGumhi
ErkvlPOxLJfdWbd5rHuD2PLVq7rCbz3LJuwyuK3dkkF7nHl+iYWt+5mvPEE3Aiwr
ffvUri9FUckbks2YkvIGd6Oh3jn7OWbOg/A0zw9m9BN8C3MjstDR9GyV4qH9DYbG
CiH3qCkh2h0zoU2ro/GHE8IF1SgsYnH1k/vwHnIOpXSy9kPzaUee+XX9PwZcmQ==
-----END CERTIFICATE-----
Generated at Fri Aug 16 20:54:28 2024 by rpki-client on console-ams.rpki-client.org