Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/SCqM136dVEF2EgE4v_puFTgUj08.roa
File: SCqM136dVEF2EgE4v_puFTgUj08.roa (raw, json)
Hash identifier: GC4kwlMGgUAZLn6oO0j+n0uRUBBLFgWxD9ajWLGl02I=
Subject key identifier: 48:2A:8C:D7:7E:9D:54:41:76:12:01:38:BF:FA:6E:15:38:14:8F:4F
Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial: 0188F6C9A296E27E1E0645A2932DCC8682FD
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/SCqM136dVEF2EgE4v_puFTgUj08.roa
Signing time: Mon 26 Jun 2023 08:19:49 +0000
ROA not before: Mon 26 Jun 2023 08:19:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29196
IP address blocks: 195.69.216.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:c9:a2:96:e2:7e:1e:06:45:a2:93:2d:cc:86:82:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Validity
Not Before: Jun 26 08:19:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=482a8cd77e9d544176120138bffa6e1538148f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:d1:f7:06:76:e8:21:f0:7a:a8:2f:a6:da:
00:c8:b3:c2:35:8e:6f:28:37:f5:7c:c5:03:72:b4:
4a:81:78:31:0b:18:59:cc:bb:27:5c:70:50:1f:9f:
5d:42:1f:d0:3d:94:0b:97:16:f4:22:a0:c0:e2:15:
d5:60:eb:cc:0c:82:df:ea:7d:cf:4b:a4:39:f7:76:
7d:9a:bd:5f:bf:18:a8:58:b7:d0:a7:5c:b4:d7:5a:
12:77:fc:00:cd:11:76:4f:3c:ef:a6:1e:31:33:30:
ff:ac:6b:11:da:ff:b1:4c:85:6e:d0:56:94:3b:16:
cc:dd:73:89:93:a6:51:be:cc:61:17:70:50:48:d4:
2b:62:f4:74:96:ee:40:3c:fb:62:37:80:64:71:fa:
9b:d2:23:6e:1a:4e:99:6c:08:c4:51:b0:b4:1b:6b:
7d:2b:73:e4:71:d6:ff:2b:3f:e7:aa:84:63:71:6d:
8b:25:7e:3f:46:c1:3d:0a:54:f1:4f:e4:8e:7f:ee:
af:7c:28:01:0a:70:69:7b:56:5d:a0:37:f7:b9:45:
e5:81:fa:df:30:3f:bb:71:e8:56:8d:42:99:74:ab:
cb:e3:56:b0:2e:4e:4a:4e:a9:c9:84:83:d5:72:f0:
bc:40:84:85:79:a1:6a:23:82:1b:e1:7f:ca:70:6e:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2A:8C:D7:7E:9D:54:41:76:12:01:38:BF:FA:6E:15:38:14:8F:4F
X509v3 Authority Key Identifier:
keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/SCqM136dVEF2EgE4v_puFTgUj08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.216.0/22
Signature Algorithm: sha256WithRSAEncryption
28:0f:0b:90:7b:c0:23:c4:ac:17:5a:62:2a:10:d9:a7:d3:55:
aa:e9:6b:0a:36:d4:c8:a1:4f:46:5f:ca:6a:c2:3f:e9:7b:e9:
23:21:fa:53:8c:6b:8f:fa:b8:cb:b7:17:68:d0:2c:38:57:ce:
74:f9:d2:83:e2:af:bc:15:7a:f8:97:a9:de:87:cc:ac:7c:9f:
0f:67:60:a0:ff:0d:fb:4e:da:45:b8:28:d8:13:bf:f8:72:c3:
bd:62:2a:36:bc:dc:b4:0c:6d:b6:39:f4:20:c8:15:d8:8c:4c:
b5:ef:ed:40:f9:d5:3b:fb:1c:0c:f2:2e:d0:bd:1d:eb:dc:44:
98:02:35:af:9a:ca:46:9e:0e:e3:72:2e:aa:eb:db:e4:aa:d6:
5e:a2:ca:fe:77:93:c7:bd:ea:2c:01:e6:a7:16:6e:0a:c1:1b:
93:2b:cd:0e:f4:3b:e1:fb:67:79:de:bc:63:29:ee:ba:11:05:
84:63:d6:f3:5e:cb:de:44:4e:71:8f:90:d0:16:d9:03:de:ed:
59:fb:59:5c:9b:6a:d1:ba:68:40:e0:e1:1f:0a:1b:7d:f0:a3:
ac:72:fb:f9:51:80:30:0b:86:52:12:a5:f2:b7:9d:5e:8d:e8:
c3:76:14:5d:d4:8d:bd:51:d9:c7:83:2e:73:d2:f4:0f:e6:37:
20:ec:39:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYj2yaKW4n4eBkWiky3MhoL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NWM5ZmZhNjVjM2M5YjU3YzU0OWU3MmNkNmRjNzAzMDA1
YjJlMGUwHhcNMjMwNjI2MDgxOTQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODJhOGNkNzdlOWQ1NDQxNzYxMjAxMzhiZmZhNmUxNTM4MTQ4ZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHbR9wZ26CHweqgvptoAyLPCNY5v
KDf1fMUDcrRKgXgxCxhZzLsnXHBQH59dQh/QPZQLlxb0IqDA4hXVYOvMDILf6n3P
S6Q593Z9mr1fvxioWLfQp1y011oSd/wAzRF2Tzzvph4xMzD/rGsR2v+xTIVu0FaU
OxbM3XOJk6ZRvsxhF3BQSNQrYvR0lu5APPtiN4Bkcfqb0iNuGk6ZbAjEUbC0G2t9
K3Pkcdb/Kz/nqoRjcW2LJX4/RsE9ClTxT+SOf+6vfCgBCnBpe1ZdoDf3uUXlgfrf
MD+7cehWjUKZdKvL41awLk5KTqnJhIPVcvC8QISFeaFqI4Ib4X/KcG7U/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEgqjNd+nVRBdhIBOL/6bhU4FI9PMB8GA1UdIwQY
MBaAFJdcn/plw8m1fFSecs1txwMAWy4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGIt
MTI2YzdiNDhiODQ3LzEvU0NxTTEzNmRWRUYyRWdFNHZfcHVGVGdVajA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85MmVjZWEtM2YzYy00YmFhLTgzNGItMTI2YzdiNDhiODQ3
LzEvbDF5Zi1tWER5YlY4Vko1eXpXM0hBd0JiTGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw0XYMA0G
CSqGSIb3DQEBCwUAA4IBAQAoDwuQe8AjxKwXWmIqENmn01Wq6WsKNtTIoU9GX8pq
wj/pe+kjIfpTjGuP+rjLtxdo0Cw4V850+dKD4q+8FXr4l6neh8ysfJ8PZ2Cg/w37
TtpFuCjYE7/4csO9Yio2vNy0DG22OfQgyBXYjEy17+1A+dU7+xwM8i7QvR3r3ESY
AjWvmspGng7jci6q69vkqtZeosr+d5PHveosAeanFm4KwRuTK80O9Dvh+2d53rxj
Ke66EQWEY9bzXsveRE5xj5DQFtkD3u1Z+1lcm2rRumhA4OEfCht98KOscvv5UYAw
C4ZSEqXyt51ejejDdhRd1I29UdnHgy5z0vQP5jcg7DmL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:56 2024 by rpki-client on console-ams.rpki-client.org