Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aU88WObeaderZnoABrdGw5JH-mg.roa
File: aU88WObeaderZnoABrdGw5JH-mg.roa (raw, json)
Hash identifier: F86MUUQUTBjgJpDpXv1EiL5c5Kc/5sMd7fEXTPOGlQc=
Subject key identifier: 69:4F:3C:58:E6:DE:69:D7:AB:66:7A:00:06:B7:46:C3:92:47:FA:68
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FDC94C413C9C2288E2910B0157BF1AFC3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aU88WObeaderZnoABrdGw5JH-mg.roa
Signing time: Mon 03 Jun 2024 05:31:27 +0000
ROA not before: Mon 03 Jun 2024 05:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215998
IP address blocks: 194.169.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 07:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:dc:94:c4:13:c9:c2:28:8e:29:10:b0:15:7b:f1:af:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 3 05:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=694f3c58e6de69d7ab667a0006b746c39247fa68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6c:e1:e5:e5:e1:22:7a:aa:38:d9:61:2d:3b:
01:b9:09:35:ce:da:2b:4c:73:b3:e8:fd:81:3f:30:
4e:25:0a:02:7a:43:56:a6:46:ac:ac:1e:8b:bd:56:
d2:87:68:3d:f1:06:24:25:6d:90:5b:c5:de:ab:c1:
da:35:ce:56:90:cd:00:1e:f2:bd:44:8f:cd:d3:67:
6e:95:6b:1a:cd:34:f2:d6:0e:78:06:25:3e:da:76:
1c:1d:04:dd:a0:4a:02:09:e7:29:cf:99:07:a4:cd:
1f:7a:57:e0:3b:d1:d7:c0:c7:35:79:97:30:15:23:
96:4c:3b:e1:41:ab:73:48:63:e7:52:f5:91:c5:9e:
98:f9:ba:0e:a5:ea:48:8f:d6:1a:74:e1:0f:e9:6a:
03:ab:25:f0:81:af:1a:a1:9c:60:0d:7b:1c:5c:d2:
6b:4f:e9:25:94:bc:9a:cf:72:a1:c4:f3:e4:99:76:
32:14:c1:08:3f:bd:10:8d:b6:5a:ba:7f:eb:21:ae:
12:16:ce:93:f4:eb:24:c2:f0:32:fb:13:79:5b:00:
89:82:9a:31:64:16:d6:57:bf:e5:d9:40:ce:42:52:
35:4d:1a:5c:49:95:bb:19:5e:57:8a:b5:3b:f2:d1:
90:b7:1e:58:98:cc:14:6d:36:90:3c:f4:4f:59:a9:
66:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4F:3C:58:E6:DE:69:D7:AB:66:7A:00:06:B7:46:C3:92:47:FA:68
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aU88WObeaderZnoABrdGw5JH-mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.172.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ac:9d:4e:43:ff:17:a4:53:ee:5f:d6:e7:d5:bb:20:35:3d:
4f:79:62:20:ad:12:09:8c:8a:1d:78:c9:9e:4d:0e:94:a8:16:
5c:26:f6:73:98:59:83:6f:65:b8:1e:f0:95:2f:7d:fe:cf:a2:
f8:b8:42:11:b7:bc:70:a1:5c:18:8c:27:f6:b8:0b:e5:b0:49:
2d:94:ea:db:c3:a2:30:0c:91:8e:9c:2e:b1:85:1c:fc:96:c5:
22:3c:42:33:70:9f:93:5a:7c:68:c5:3b:d9:fa:20:c9:01:20:
f7:fd:ca:44:24:83:16:18:60:f4:f2:e7:ee:a3:d5:68:3a:68:
6a:d2:a6:5b:0c:a4:af:95:32:04:8f:17:fc:1f:ef:24:a8:40:
a2:17:4a:5a:14:e7:e4:13:0d:4e:06:c3:c5:cc:a5:6a:f7:a6:
4f:72:62:2c:32:b0:da:7a:a5:fb:1c:ce:38:95:81:81:03:2f:
76:90:66:84:ff:ec:80:9e:8e:c7:30:ce:3c:1f:fe:57:26:d5:
c4:bc:ad:38:e7:8f:e3:27:54:79:41:61:5d:af:e1:0a:7f:09:
4b:d5:5b:f6:ac:a4:e0:90:10:22:2e:f5:d7:aa:83:07:e0:52:
f8:ea:84:21:ce:03:12:39:1c:63:81:ee:59:e2:66:5e:7b:d9:
8e:23:60:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/clMQTycIojikQsBV78a/DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNjAzMDUzMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTRmM2M1OGU2ZGU2OWQ3YWI2NjdhMDAwNmI3NDZjMzkyNDdmYTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGzh5eXhInqqONlhLTsBuQk1ztor
THOz6P2BPzBOJQoCekNWpkasrB6LvVbSh2g98QYkJW2QW8Xeq8HaNc5WkM0AHvK9
RI/N02dulWsazTTy1g54BiU+2nYcHQTdoEoCCecpz5kHpM0felfgO9HXwMc1eZcw
FSOWTDvhQatzSGPnUvWRxZ6Y+boOpepIj9YadOEP6WoDqyXwga8aoZxgDXscXNJr
T+kllLyaz3KhxPPkmXYyFMEIP70QjbZaun/rIa4SFs6T9OskwvAy+xN5WwCJgpox
ZBbWV7/l2UDOQlI1TRpcSZW7GV5XirU78tGQtx5YmMwUbTaQPPRPWalmswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGlPPFjm3mnXq2Z6AAa3RsOSR/poMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvYVU4OFdPYmVhZGVyWm5vQUJyZEd3NUpILW1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqmsMA0G
CSqGSIb3DQEBCwUAA4IBAQB0rJ1OQ/8XpFPuX9bn1bsgNT1PeWIgrRIJjIodeMme
TQ6UqBZcJvZzmFmDb2W4HvCVL33+z6L4uEIRt7xwoVwYjCf2uAvlsEktlOrbw6Iw
DJGOnC6xhRz8lsUiPEIzcJ+TWnxoxTvZ+iDJASD3/cpEJIMWGGD08ufuo9VoOmhq
0qZbDKSvlTIEjxf8H+8kqECiF0paFOfkEw1OBsPFzKVq96ZPcmIsMrDaeqX7HM44
lYGBAy92kGaE/+yAno7HMM48H/5XJtXEvK0454/jJ1R5QWFdr+EKfwlL1Vv2rKTg
kBAiLvXXqoMH4FL46oQhzgMSORxjge5Z4mZee9mOI2De
-----END CERTIFICATE-----
Generated at Mon Jun 10 09:43:47 2024 by rpki-client on console-fra.rpki-client.org