Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xCKop4ERDlfFxG643i3NEGt9ApQ.roa
File: xCKop4ERDlfFxG643i3NEGt9ApQ.roa (raw, json)
Hash identifier: 8QFq2VJufn1dAD5mpDto/UfMdPexIFzx60UkU8+oWGg=
Subject key identifier: C4:22:A8:A7:81:11:0E:57:C5:C4:6E:B8:DE:2D:CD:10:6B:7D:02:94
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189784EE942A297828D6F7508908EF65A12
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xCKop4ERDlfFxG643i3NEGt9ApQ.roa
Signing time: Fri 21 Jul 2023 11:56:24 +0000
ROA not before: Fri 21 Jul 2023 11:56:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41944
IP address blocks: 195.133.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 09:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:78:4e:e9:42:a2:97:82:8d:6f:75:08:90:8e:f6:5a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 21 11:56:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c422a8a781110e57c5c46eb8de2dcd106b7d0294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:4a:5b:86:3e:73:b1:a9:e2:83:36:e8:6d:
80:a5:eb:2d:8c:5b:a9:5c:cd:c7:46:05:c3:77:e2:
2b:ac:2e:3b:f0:e2:fc:e9:61:d0:b1:77:1d:ef:89:
44:27:5e:9c:71:1b:03:6f:0d:dd:61:61:c2:5a:a0:
0e:63:10:22:ca:76:50:16:dd:c6:44:73:38:2a:58:
4b:91:9b:d1:99:0c:dc:6e:1d:38:2a:66:e4:a8:03:
1e:43:51:2b:3a:e6:3c:84:dd:bd:f9:d1:fe:8f:2d:
96:d0:08:9b:8c:6a:4e:2d:d8:b5:5a:68:9c:e5:3c:
b9:43:83:49:d3:2b:d3:67:26:12:38:28:24:d7:c7:
db:84:7a:e5:20:6e:db:84:df:b5:d7:a8:25:38:93:
c8:38:8a:76:8d:7a:d0:d1:14:2a:f0:0c:9b:e9:6d:
59:8a:27:ef:e4:70:2b:af:29:f9:f4:4a:55:af:cf:
9e:d3:84:3f:c4:0e:ac:20:f4:18:f1:cc:ca:9b:cc:
0e:ec:fd:1b:cd:3c:6f:85:30:ac:f7:30:76:b2:76:
d7:89:a6:c8:79:bd:7c:9d:60:6d:e3:06:54:ee:10:
4d:3b:6e:74:3b:f0:f4:ee:22:49:9c:c2:8d:09:58:
2d:03:33:8d:68:b9:d2:11:2e:f0:82:5c:1d:46:18:
b7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:22:A8:A7:81:11:0E:57:C5:C4:6E:B8:DE:2D:CD:10:6B:7D:02:94
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xCKop4ERDlfFxG643i3NEGt9ApQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.94.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b0:2a:78:77:9a:8b:a5:fe:1b:2a:26:7f:82:ae:af:c4:84:
78:87:4c:30:fc:d9:f5:b1:87:92:0b:84:60:72:96:a6:0a:0a:
74:f8:bd:14:35:f8:2c:f8:95:dc:9a:6e:e1:96:53:b0:d0:e0:
a2:c1:74:af:fa:f8:93:e7:aa:a8:0f:c9:48:76:68:b6:bc:82:
84:73:96:99:94:99:15:9c:d7:dd:d8:b6:f0:09:ec:91:29:ef:
c5:9c:59:38:05:44:30:b8:ee:a4:31:61:e6:aa:50:79:ea:ae:
ad:f6:bf:b4:b8:5c:bd:fc:5e:62:89:04:fe:d8:dd:8e:6b:04:
f6:1d:56:fe:77:3f:50:58:8e:c1:12:66:3b:dd:ac:23:94:01:
a4:46:ce:1d:6c:b2:d3:46:61:42:98:31:c3:11:e2:6b:20:a0:
0f:f4:99:fc:0c:8e:fc:7e:87:e6:84:b9:11:21:44:53:64:b1:
ee:cb:22:07:61:67:26:9e:2f:5f:fa:1a:fd:7a:9e:96:dd:f4:
27:87:a4:1c:6c:1f:21:9b:cd:dd:32:3e:d0:d4:7d:c3:9f:0d:
f4:47:aa:b0:84:ca:68:28:59:fa:da:d1:0d:6b:d2:d4:54:48:
a0:29:b6:61:60:54:4b:6a:7b:fc:65:30:b0:5b:a8:f3:fb:55:
f5:19:af:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYl4TulCopeCjW91CJCO9loSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNzIxMTE1NjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDIyYThhNzgxMTEwZTU3YzVjNDZlYjhkZTJkY2QxMDZiN2QwMjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBdKW4Y+c7Gp4oM26G2ApestjFup
XM3HRgXDd+IrrC478OL86WHQsXcd74lEJ16ccRsDbw3dYWHCWqAOYxAiynZQFt3G
RHM4KlhLkZvRmQzcbh04KmbkqAMeQ1ErOuY8hN29+dH+jy2W0AibjGpOLdi1Wmic
5Ty5Q4NJ0yvTZyYSOCgk18fbhHrlIG7bhN+116glOJPIOIp2jXrQ0RQq8Ayb6W1Z
iifv5HArryn59EpVr8+e04Q/xA6sIPQY8czKm8wO7P0bzTxvhTCs9zB2snbXiabI
eb18nWBt4wZU7hBNO250O/D07iJJnMKNCVgtAzONaLnSES7wglwdRhi34QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMQiqKeBEQ5XxcRuuN4tzRBrfQKUMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEveENLb3A0RVJEbGZGeEc2NDNpM05FR3Q5QXBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4VeMA0G
CSqGSIb3DQEBCwUAA4IBAQADsCp4d5qLpf4bKiZ/gq6vxIR4h0ww/Nn1sYeSC4Rg
cpamCgp0+L0UNfgs+JXcmm7hllOw0OCiwXSv+viT56qoD8lIdmi2vIKEc5aZlJkV
nNfd2LbwCeyRKe/FnFk4BUQwuO6kMWHmqlB56q6t9r+0uFy9/F5iiQT+2N2OawT2
HVb+dz9QWI7BEmY73awjlAGkRs4dbLLTRmFCmDHDEeJrIKAP9Jn8DI78fofmhLkR
IURTZLHuyyIHYWcmni9f+hr9ep6W3fQnh6QcbB8hm83dMj7Q1H3Dnw30R6qwhMpo
KFn62tENa9LUVEigKbZhYFRLanv8ZTCwW6jz+1X1Ga9L
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:51 2024 by rpki-client on console-ams.rpki-client.org