Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/rRSYixSriYTG-uDiYr-lmT4p28o.roa
File: rRSYixSriYTG-uDiYr-lmT4p28o.roa (raw, json)
Hash identifier: MbaiXHIkoTxOupiisXeHo11826jr9xCSb6EBs7GrQqg=
Subject key identifier: AD:14:98:8B:14:AB:89:84:C6:FA:E0:E2:62:BF:A5:99:3E:29:DB:CA
Certificate issuer: /CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Certificate serial: 018576E956D9534B8FDECD2761214EA70E54
Authority key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/rRSYixSriYTG-uDiYr-lmT4p28o.roa
Signing time: Tue 03 Jan 2023 09:14:41 +0000
ROA not before: Tue 03 Jan 2023 09:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201130
IP address blocks: 194.150.184.0/23 maxlen: 24
2a13:4340::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:76:e9:56:d9:53:4b:8f:de:cd:27:61:21:4e:a7:0e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Validity
Not Before: Jan 3 09:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad14988b14ab8984c6fae0e262bfa5993e29dbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:8f:67:21:19:85:a4:14:3d:f9:4d:60:b1:
3a:06:5d:75:8b:db:75:34:df:cd:60:ae:f9:34:42:
1d:05:1d:79:e8:e3:29:14:3c:e8:5b:73:2f:c6:c8:
25:37:4c:22:f6:7e:85:43:01:73:bc:3b:02:0c:35:
73:dd:09:27:a1:56:db:63:96:d2:2e:b1:fd:e8:66:
54:e0:9f:a5:ca:17:30:ae:3a:a3:52:19:78:80:92:
fe:c0:0f:d2:35:d7:66:98:4f:b9:47:24:17:fb:e7:
6e:6e:96:b0:61:f3:7e:a3:bf:3a:5c:45:68:64:12:
a8:2f:31:52:07:16:8c:b3:80:51:1d:6b:20:7a:40:
07:06:7d:29:02:c0:46:0b:d3:90:9b:53:5e:1f:34:
52:5b:ce:e3:e8:ea:e5:18:e2:f8:44:08:1c:8c:32:
83:75:62:7e:c9:43:25:a3:38:fb:c2:af:9b:e2:96:
60:81:f1:9d:a1:5f:98:72:f8:6f:38:3e:8d:4f:e4:
28:99:ab:e8:56:fc:db:d8:2a:1b:1a:9c:62:69:33:
a2:ff:f2:f7:b5:88:f5:32:2f:1d:fb:f5:0d:cb:5e:
ad:b7:48:3d:e1:fe:c3:1d:07:c5:3e:2c:88:f8:5f:
5f:63:3e:c6:e3:d3:a7:49:f2:ef:88:2b:b0:60:ef:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:14:98:8B:14:AB:89:84:C6:FA:E0:E2:62:BF:A5:99:3E:29:DB:CA
X509v3 Authority Key Identifier:
keyid:46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/rRSYixSriYTG-uDiYr-lmT4p28o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.184.0/23
IPv6:
2a13:4340::/29
Signature Algorithm: sha256WithRSAEncryption
43:06:45:52:b6:6d:4e:f0:b3:43:82:30:0f:09:5a:a4:18:5c:
76:2d:9c:6c:5e:eb:9c:de:96:9d:c1:35:39:45:56:35:58:42:
f2:f5:97:b6:5b:97:bd:0c:4d:b8:c1:1c:d7:d7:d8:a6:b2:54:
72:ff:9e:3e:03:16:54:c3:d0:eb:8e:b0:43:f1:4b:52:54:b4:
84:01:e0:4c:cf:ba:aa:28:e7:57:be:68:0a:20:9b:52:38:d1:
8d:9b:56:98:46:57:25:85:39:7e:44:50:c5:6e:0c:60:36:95:
ab:c8:63:f4:c8:5f:28:39:41:c1:e9:44:03:7b:81:2b:c0:64:
6b:69:0d:c6:9f:e6:cc:52:81:1d:0d:fb:44:f8:8d:e7:60:a5:
71:7c:68:0b:cb:0d:de:1c:14:cd:03:2e:9c:53:cc:1b:d8:10:
03:88:a3:1d:cd:af:1c:21:19:b8:70:db:77:c3:6a:a5:51:56:
29:de:3b:37:b8:b9:4e:52:52:2c:64:da:0d:87:0e:ce:0a:0e:
4d:10:55:34:58:9d:ff:95:76:e7:bb:0d:c8:2e:18:b0:7e:51:
14:00:71:41:50:94:f8:2f:fb:c3:7f:59:2e:62:b6:2f:d2:9d:
4f:f6:13:46:bb:ee:d2:50:c6:cc:f5:65:0a:76:48:12:e5:8c:
d9:c8:f1:28
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYV26VbZU0uP3s0nYSFOpw5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzVkYTNhMjA4NzllNTVmZTk2ODUzZTBkN2FlZWZmNTMz
ODZlOGIwHhcNMjMwMTAzMDkxNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDE0OTg4YjE0YWI4OTg0YzZmYWUwZTI2MmJmYTU5OTNlMjlkYmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOaPZyEZhaQUPflNYLE6Bl11i9t1
NN/NYK75NEIdBR156OMpFDzoW3MvxsglN0wi9n6FQwFzvDsCDDVz3QknoVbbY5bS
LrH96GZU4J+lyhcwrjqjUhl4gJL+wA/SNddmmE+5RyQX++dubpawYfN+o786XEVo
ZBKoLzFSBxaMs4BRHWsgekAHBn0pAsBGC9OQm1NeHzRSW87j6OrlGOL4RAgcjDKD
dWJ+yUMlozj7wq+b4pZggfGdoV+YcvhvOD6NT+QomavoVvzb2CobGpxiaTOi//L3
tYj1Mi8d+/UNy16tt0g94f7DHQfFPiyI+F9fYz7G49OnSfLviCuwYO8H5QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFK0UmIsUq4mExvrg4mK/pZk+KdvKMB8GA1UdIwQY
MBaAFEY12jogh55V/paFPg167v9TOG6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iZmI0YzgtNTY1NS00NDBmLTg1Yjgt
YzQwY2UzMmI2Zjc2LzEvclJTWWl4U3JpWVRHLXVEaVlyLWxtVDRwMjhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iZmI0YzgtNTY1NS00NDBmLTg1YjgtYzQwY2UzMmI2Zjc2
LzEvUmpYYU9pQ0hubFgtbG9VLURYcnVfMU00Ym9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBwpa4MA0E
AgACMAcDBQMqE0NAMA0GCSqGSIb3DQEBCwUAA4IBAQBDBkVStm1O8LNDgjAPCVqk
GFx2LZxsXuuc3padwTU5RVY1WELy9Ze2W5e9DE24wRzX19imslRy/54+AxZUw9Dr
jrBD8UtSVLSEAeBMz7qqKOdXvmgKIJtSONGNm1aYRlclhTl+RFDFbgxgNpWryGP0
yF8oOUHB6UQDe4ErwGRraQ3Gn+bMUoEdDftE+I3nYKVxfGgLyw3eHBTNAy6cU8wb
2BADiKMdza8cIRm4cNt3w2qlUVYp3js3uLlOUlIsZNoNhw7OCg5NEFU0WJ3/lXbn
uw3ILhiwflEUAHFBUJT4L/vDf1kuYrYv0p1P9hNGu+7SUMbM9WUKdkgS5YzZyPEo
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:04 2024 by rpki-client on console-ams.rpki-client.org