Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/0S5DLozP5fYdj2Tf7qkkTT7yg1g.roa
File: 0S5DLozP5fYdj2Tf7qkkTT7yg1g.roa (raw, json)
Hash identifier: h4ZIortQNuwmBELYD7rSV3ydj7KLgCqkWrwEa/NtTu8=
Subject key identifier: D1:2E:43:2E:8C:CF:E5:F6:1D:8F:64:DF:EE:A9:24:4D:3E:F2:83:58
Certificate issuer: /CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Certificate serial: 0185BB2E5B1DF5EA319F784DFE8D5F8EDFE4
Authority key identifier: E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/0S5DLozP5fYdj2Tf7qkkTT7yg1g.roa
Signing time: Mon 16 Jan 2023 15:24:15 +0000
ROA not before: Mon 16 Jan 2023 15:24:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43623
IP address blocks: 194.55.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:2e:5b:1d:f5:ea:31:9f:78:4d:fe:8d:5f:8e:df:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8464c8c167dd2c87aa3d88acbfae4c233ff77b0
Validity
Not Before: Jan 16 15:24:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d12e432e8ccfe5f61d8f64dfeea9244d3ef28358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5c:a2:76:92:f4:05:43:fe:f5:5e:65:e9:ed:
1c:db:1b:b2:d8:40:2b:08:b3:32:63:58:8f:e8:cc:
19:2d:5b:31:0d:bf:c3:f8:20:ca:8f:a0:f3:38:94:
0f:3b:71:94:ce:7d:4a:ff:95:3c:79:2d:60:5a:2c:
44:34:52:70:f6:5c:4b:cf:d3:70:35:84:99:3f:dc:
11:91:cf:80:85:f0:43:27:0a:99:68:5a:30:a4:57:
f5:81:f4:02:69:98:ba:c9:3f:dc:57:04:58:84:03:
f6:a6:62:7e:79:c2:90:a3:5f:5a:b7:58:9e:11:aa:
98:dd:9c:f2:e8:35:a2:72:08:a2:6c:48:45:89:1f:
88:6b:b9:96:9b:ea:64:53:9c:f4:c6:fe:05:f6:3e:
91:7e:23:4b:fb:3c:85:d6:6e:cd:33:7f:9f:da:b3:
fa:3c:d8:e7:c1:00:82:ec:5e:9c:e6:5e:e5:b9:67:
f3:d8:9c:25:a9:c6:7d:7b:b2:26:b0:e1:5a:39:9b:
f6:92:80:c0:70:f5:34:44:78:4b:93:9e:da:27:22:
d9:91:26:6c:a5:7c:b0:ac:1d:1a:fa:18:ce:4f:a5:
9f:82:4a:80:0c:06:8b:89:14:c7:af:ee:0e:ac:12:
f7:0c:12:c5:e4:0e:e4:3e:53:1a:7a:c4:79:b4:e6:
31:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2E:43:2E:8C:CF:E5:F6:1D:8F:64:DF:EE:A9:24:4D:3E:F2:83:58
X509v3 Authority Key Identifier:
keyid:E8:46:4C:8C:16:7D:D2:C8:7A:A3:D8:8A:CB:FA:E4:C2:33:FF:77:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EZMjBZ90sh6o9iKy_rkwjP_d7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/0S5DLozP5fYdj2Tf7qkkTT7yg1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cca6c4-ec70-4405-a6a8-6eaa59b0d750/1/6EZMjBZ90sh6o9iKy_rkwjP_d7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.39.0/24
Signature Algorithm: sha256WithRSAEncryption
10:aa:8f:b4:c8:39:e3:eb:a2:4c:46:fb:ed:5b:f5:8c:8f:1f:
36:cd:d2:2f:44:be:fb:b1:88:e4:5b:13:e7:99:6d:72:09:48:
d0:04:db:1d:d3:c0:bc:e1:01:51:bd:19:6d:9c:13:c5:3d:9c:
95:a8:02:a1:9f:d4:73:56:cc:c7:cd:8d:0c:ee:3d:a8:92:6a:
89:ef:03:e8:86:6d:30:74:6e:02:ec:04:4e:13:82:58:b6:3b:
53:58:d7:9c:a1:fa:42:1e:c8:d0:89:14:4d:c5:ec:76:81:b0:
15:62:13:da:12:0f:99:56:9d:f3:6d:71:a0:34:e8:f8:35:99:
c1:4e:7c:f1:bf:52:33:ae:b6:42:11:92:4e:e5:55:5e:fb:30:
d1:40:a5:8f:95:67:35:e6:38:e8:f7:e9:7e:69:10:4f:09:84:
6e:15:ef:b0:ca:c7:c8:6f:db:90:d0:a5:30:05:75:55:de:8d:
a2:b1:fb:7c:70:5a:8b:b4:73:98:cf:4c:a8:cd:30:56:bb:11:
21:75:2a:0b:ec:ca:99:3e:a0:ca:2d:84:0a:a6:79:63:c1:d6:
06:91:15:e3:9d:22:4b:df:7a:7e:c2:4c:cb:5c:08:8f:7d:b0:
bb:f3:96:47:a0:58:4c:52:d0:24:9e:cc:ed:7a:b0:ad:f5:2a:
b7:45:b9:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYW7Llsd9eoxn3hN/o1fjt/kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDY0YzhjMTY3ZGQyYzg3YWEzZDg4YWNiZmFlNGMyMzNm
Zjc3YjAwHhcNMjMwMTE2MTUyNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTJlNDMyZThjY2ZlNWY2MWQ4ZjY0ZGZlZWE5MjQ0ZDNlZjI4MzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllyidpL0BUP+9V5l6e0c2xuy2EAr
CLMyY1iP6MwZLVsxDb/D+CDKj6DzOJQPO3GUzn1K/5U8eS1gWixENFJw9lxLz9Nw
NYSZP9wRkc+AhfBDJwqZaFowpFf1gfQCaZi6yT/cVwRYhAP2pmJ+ecKQo19at1ie
EaqY3Zzy6DWicgiibEhFiR+Ia7mWm+pkU5z0xv4F9j6RfiNL+zyF1m7NM3+f2rP6
PNjnwQCC7F6c5l7luWfz2JwlqcZ9e7ImsOFaOZv2koDAcPU0RHhLk57aJyLZkSZs
pXywrB0a+hjOT6WfgkqADAaLiRTHr+4OrBL3DBLF5A7kPlMaesR5tOYxsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNEuQy6Mz+X2HY9k3+6pJE0+8oNYMB8GA1UdIwQY
MBaAFOhGTIwWfdLIeqPYisv65MIz/3ewMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVaTWpCWjkwc2g2bzlpS3lfcmt3alBfZDdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jY2E2YzQtZWM3MC00NDA1LWE2YTgt
NmVhYTU5YjBkNzUwLzEvMFM1RExvelA1ZllkajJUZjdxa2tUVDd5ZzFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jY2E2YzQtZWM3MC00NDA1LWE2YTgtNmVhYTU5YjBkNzUw
LzEvNkVaTWpCWjkwc2g2bzlpS3lfcmt3alBfZDdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjcnMA0G
CSqGSIb3DQEBCwUAA4IBAQAQqo+0yDnj66JMRvvtW/WMjx82zdIvRL77sYjkWxPn
mW1yCUjQBNsd08C84QFRvRltnBPFPZyVqAKhn9RzVszHzY0M7j2okmqJ7wPohm0w
dG4C7AROE4JYtjtTWNecofpCHsjQiRRNxex2gbAVYhPaEg+ZVp3zbXGgNOj4NZnB
Tnzxv1IzrrZCEZJO5VVe+zDRQKWPlWc15jjo9+l+aRBPCYRuFe+wysfIb9uQ0KUw
BXVV3o2isft8cFqLtHOYz0yozTBWuxEhdSoL7MqZPqDKLYQKpnljwdYGkRXjnSJL
33p+wkzLXAiPfbC785ZHoFhMUtAknszterCt9Sq3Rbk6
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:42 2024 by rpki-client on console-ams.rpki-client.org