Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/K9Ip1dKpalnK5zedbX3K9-MiI3s.roa
File: K9Ip1dKpalnK5zedbX3K9-MiI3s.roa (raw, json)
Hash identifier: ZBmK85goRwzrx1hCbI/h0Fqu5o0XUloDDMWVWu4mFo0=
Subject key identifier: 2B:D2:29:D5:D2:A9:6A:59:CA:E7:37:9D:6D:7D:CA:F7:E3:22:23:7B
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 018ADB3BF9103E3E52FCBF0D6B947C77660A
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/K9Ip1dKpalnK5zedbX3K9-MiI3s.roa
Signing time: Thu 28 Sep 2023 10:00:55 +0000
ROA not before: Thu 28 Sep 2023 10:00:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208011
IP address blocks: 194.156.190.0/23 maxlen: 24
194.156.198.0/23 maxlen: 24
2a0f:43c0::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:db:3b:f9:10:3e:3e:52:fc:bf:0d:6b:94:7c:77:66:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Sep 28 10:00:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bd229d5d2a96a59cae7379d6d7dcaf7e322237b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:2a:c4:b2:a1:f5:3f:89:86:9d:02:be:75:
17:e8:09:55:5a:37:b2:0d:3f:28:33:d9:3b:71:5a:
44:82:24:ea:28:53:a9:cb:ae:90:a2:78:23:27:67:
a0:31:5f:40:e0:46:f2:14:73:de:ba:ed:d3:75:0c:
f8:e2:e2:db:d0:41:ae:e7:cd:63:a6:a4:10:c8:eb:
0e:63:a7:58:29:0a:86:80:1b:30:20:91:74:ef:b8:
41:9b:c5:57:d9:fe:29:0a:28:75:5b:76:ac:0d:c5:
48:9b:b0:4e:cf:53:a2:cf:f9:4f:f9:f2:cf:b5:d4:
ce:6f:4a:b5:3d:87:c9:cf:b7:67:59:93:4d:17:f2:
54:b4:9c:f3:77:a0:be:47:07:92:59:19:a6:f6:51:
16:ec:f6:c6:48:b4:b8:f5:06:4a:2d:bf:c0:fc:62:
a0:81:ed:5b:84:8f:4b:46:f4:88:32:0a:ad:74:a0:
55:a5:a9:a7:8f:bf:d0:47:5d:f6:b9:56:a1:fc:9f:
0c:57:1c:b7:0b:7f:78:39:68:10:6b:d7:a9:21:68:
0d:2f:69:e7:e8:99:db:e0:46:9f:1b:8a:39:09:91:
01:40:ce:a7:36:3f:a1:01:71:e7:7c:3c:cc:0f:47:
7e:2f:fb:8d:fa:ee:8c:67:9d:be:4b:68:35:b7:11:
56:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D2:29:D5:D2:A9:6A:59:CA:E7:37:9D:6D:7D:CA:F7:E3:22:23:7B
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/K9Ip1dKpalnK5zedbX3K9-MiI3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.190.0/23
194.156.198.0/23
IPv6:
2a0f:43c0::/32
Signature Algorithm: sha256WithRSAEncryption
b4:8c:d7:23:b5:ca:2f:8f:5c:4a:07:94:22:0b:03:03:b4:95:
ef:77:47:4f:9c:14:80:31:7c:8a:d9:99:89:83:8f:c1:cd:06:
14:0b:97:43:53:d8:4e:69:8a:95:00:64:2e:92:b2:ba:8c:f4:
8c:df:b1:b1:46:2f:d3:5d:f8:81:72:f1:d1:1c:a2:50:0c:8c:
2c:40:37:29:ab:39:9f:32:0f:ac:3e:55:7c:7f:58:c1:c4:72:
c8:e3:38:ef:73:56:c5:b0:15:f0:b0:04:aa:87:27:bc:5c:29:
53:28:8b:e0:55:88:5d:b1:87:68:b3:b1:0c:11:6a:5a:79:a0:
ff:d7:61:77:79:52:bf:66:b0:4b:f6:0d:9f:a8:0f:9c:e1:a9:
33:99:b7:7c:fc:d0:d0:22:4e:75:d9:9f:fe:46:5d:c7:a4:ae:
a2:ac:85:c7:0a:ba:5a:8d:6c:74:3d:79:c1:fe:c2:9b:9a:7b:
88:8e:4f:bd:55:17:ed:bb:ef:57:24:0a:dc:8a:b0:e8:e3:11:
14:9b:ee:1e:43:68:bb:55:16:80:a3:9b:e9:e8:28:0b:56:d8:
19:00:c8:ae:95:d3:ef:03:35:dd:58:e6:cf:70:6c:4a:d0:f1:
fd:7e:6b:f5:17:05:e9:b5:aa:65:c1:37:d5:f2:3a:7b:9e:19:
03:f2:06:00
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYrbO/kQPj5S/L8Na5R8d2YKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMjZjOTFhZjBhYjI2NjhhMzYwMWIyZDk1N2RjNGNlMDAy
ZDU5ODYwHhcNMjMwOTI4MTAwMDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmQyMjlkNWQyYTk2YTU5Y2FlNzM3OWQ2ZDdkY2FmN2UzMjIyMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAgqxLKh9T+Jhp0CvnUX6AlVWjey
DT8oM9k7cVpEgiTqKFOpy66QongjJ2egMV9A4EbyFHPeuu3TdQz44uLb0EGu581j
pqQQyOsOY6dYKQqGgBswIJF077hBm8VX2f4pCih1W3asDcVIm7BOz1Oiz/lP+fLP
tdTOb0q1PYfJz7dnWZNNF/JUtJzzd6C+RweSWRmm9lEW7PbGSLS49QZKLb/A/GKg
ge1bhI9LRvSIMgqtdKBVpamnj7/QR132uVah/J8MVxy3C394OWgQa9epIWgNL2nn
6Jnb4EafG4o5CZEBQM6nNj+hAXHnfDzMD0d+L/uN+u6MZ52+S2g1txFW+QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCvSKdXSqWpZyuc3nW19yvfjIiN7MB8GA1UdIwQY
MBaAFM8myRrwqyZoo2AbLZV9xM4ALVmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTkt
NmJjODM5NDY1NmI3LzEvSzlJcDFkS3BhbG5LNXplZGJYM0s5LU1pSTNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS83NmRkZDctMGFmMi00M2NlLTk4NTktNmJjODM5NDY1NmI3
LzEvenliSkd2Q3JKbWlqWUJzdGxYM0V6Z0F0V1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwpy+AwQB
wpzGMA0EAgACMAcDBQAqD0PAMA0GCSqGSIb3DQEBCwUAA4IBAQC0jNcjtcovj1xK
B5QiCwMDtJXvd0dPnBSAMXyK2ZmJg4/BzQYUC5dDU9hOaYqVAGQukrK6jPSM37Gx
Ri/TXfiBcvHRHKJQDIwsQDcpqzmfMg+sPlV8f1jBxHLI4zjvc1bFsBXwsASqhye8
XClTKIvgVYhdsYdos7EMEWpaeaD/12F3eVK/ZrBL9g2fqA+c4akzmbd8/NDQIk51
2Z/+Rl3HpK6irIXHCrpajWx0PXnB/sKbmnuIjk+9VRftu+9XJArcirDo4xEUm+4e
Q2i7VRaAo5vp6CgLVtgZAMiuldPvAzXdWObPcGxK0PH9fmv1FwXptaplwTfV8jp7
nhkD8gYA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:16 2024 by rpki-client on console-fra.rpki-client.org