Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/P2AM1AjTercr3xYLbjiWulBFWcc.roa
File: P2AM1AjTercr3xYLbjiWulBFWcc.roa (raw, json)
Hash identifier: TM+SiXUMQh68AlSDP1spIFqTS8JydGSczIObmGzmP30=
Subject key identifier: 3F:60:0C:D4:08:D3:7A:B7:2B:DF:16:0B:6E:38:96:BA:50:45:59:C7
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 01903218096DC7AADBBBEC532FD64B103FEF
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/P2AM1AjTercr3xYLbjiWulBFWcc.roa
Signing time: Wed 19 Jun 2024 20:02:34 +0000
ROA not before: Wed 19 Jun 2024 20:02:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 195.234.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 20:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:32:18:09:6d:c7:aa:db:bb:ec:53:2f:d6:4b:10:3f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: Jun 19 20:02:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f600cd408d37ab72bdf160b6e3896ba504559c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:71:97:dc:8c:ee:00:92:74:71:95:8a:b1:
ed:2f:6c:57:f9:92:10:85:cc:f0:16:84:9b:f7:51:
48:a8:3c:60:a6:fa:71:d2:a8:8c:74:9f:77:70:b1:
8b:11:ce:1c:5b:e9:bb:2e:76:63:0c:fc:e3:6c:d3:
54:b3:7e:b9:93:b1:7b:9f:df:df:26:20:ad:32:f4:
f7:3d:82:62:b2:6b:82:97:0f:1d:98:30:5b:93:a9:
db:9d:ef:18:46:4f:28:d5:39:9a:86:47:4a:88:df:
3f:d2:95:13:c5:b6:f8:74:17:f1:2f:48:57:cb:d7:
37:1d:83:d8:83:d4:71:1a:80:e9:4b:e5:9b:c9:64:
3f:50:4a:3b:ab:5d:78:a6:18:5e:06:a8:7e:4e:2e:
92:eb:d9:f6:c6:eb:01:f4:be:19:76:89:aa:ff:c5:
29:05:28:a7:ee:88:7c:d0:e3:e4:6d:0d:bc:6b:3a:
63:f0:7a:23:87:d6:73:47:3c:38:52:e2:42:c4:74:
2c:12:cd:cb:f8:0c:e6:1b:fc:6e:9c:ba:06:04:17:
07:ea:8e:b4:c0:50:c7:bb:92:47:a5:5a:9b:f0:ff:
e7:35:2b:9d:94:c8:19:04:0c:45:43:20:62:67:e8:
f5:b5:75:ba:d8:9c:65:cc:28:eb:30:43:d1:4b:44:
c1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:60:0C:D4:08:D3:7A:B7:2B:DF:16:0B:6E:38:96:BA:50:45:59:C7
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/P2AM1AjTercr3xYLbjiWulBFWcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ee:d0:6e:c4:41:e8:52:f0:2b:e8:32:94:04:c1:0a:35:3e:
30:61:7a:d7:89:a5:95:4c:42:4e:2b:8c:71:28:b2:b7:ec:49:
f5:9a:e2:fa:ca:7a:c2:79:db:f2:9f:f1:09:b1:8d:c6:45:0c:
f2:af:7e:20:04:1e:bf:63:2c:86:7c:8c:3a:7c:c0:99:08:1d:
88:f4:4c:17:b1:26:a1:41:53:a6:4a:db:f9:3e:77:7b:50:47:
04:db:cd:ac:84:10:f7:e2:b1:38:b7:21:94:be:54:24:07:05:
ab:da:c2:5b:b8:27:20:40:84:0b:98:bc:10:a0:c5:9a:5b:79:
df:4c:77:54:61:72:92:2e:19:5c:e1:c5:9c:17:c7:f1:65:b9:
e6:94:b0:8a:cd:c3:21:6d:d1:d6:98:9d:99:0d:24:9b:9b:4e:
83:11:d1:1b:46:4c:e5:2f:29:ad:f0:9e:f0:83:62:b7:f5:eb:
2d:f5:a8:44:d6:12:71:cf:5e:18:7a:18:61:ae:e6:28:80:67:
53:cd:22:56:76:0e:54:7c:a0:0d:c1:c8:55:e4:7f:1a:01:f0:
31:5f:7e:64:8c:90:b1:11:26:8c:81:25:18:0b:1c:22:3d:29:
5c:47:0a:3a:ba:aa:bd:08:29:f4:e0:20:a1:14:a3:00:da:6b:
24:ed:6e:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAyGAltx6rbu+xTL9ZLED/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMDUxZWYyMzA2MGViNTFiZmQ4Yzc5Nzk1ZjZhNGRhZjQ4
YTNhYTAwHhcNMjQwNjE5MjAwMjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjYwMGNkNDA4ZDM3YWI3MmJkZjE2MGI2ZTM4OTZiYTUwNDU1OWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuapxl9yM7gCSdHGVirHtL2xX+ZIQ
hczwFoSb91FIqDxgpvpx0qiMdJ93cLGLEc4cW+m7LnZjDPzjbNNUs365k7F7n9/f
JiCtMvT3PYJismuClw8dmDBbk6nbne8YRk8o1TmahkdKiN8/0pUTxbb4dBfxL0hX
y9c3HYPYg9RxGoDpS+WbyWQ/UEo7q114phheBqh+Ti6S69n2xusB9L4Zdomq/8Up
BSin7oh80OPkbQ28azpj8Hojh9ZzRzw4UuJCxHQsEs3L+AzmG/xunLoGBBcH6o60
wFDHu5JHpVqb8P/nNSudlMgZBAxFQyBiZ+j1tXW62JxlzCjrMEPRS0TBvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD9gDNQI03q3K98WC244lrpQRVnHMB8GA1UdIwQY
MBaAFCsFHvIwYOtRv9jHl5X2pNr0ijqgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8zODE3OWMtMjVhYi00MzY4LThjZjgt
NTdlNTkzY2Y5YTRlLzEvUDJBTTFBalRlcmNyM3hZTGJqaVd1bEJGV2NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8zODE3OWMtMjVhYi00MzY4LThjZjgtNTdlNTkzY2Y5YTRl
LzEvS3dVZThqQmc2MUdfMk1lWGxmYWsydlNLT3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+qZMA0G
CSqGSIb3DQEBCwUAA4IBAQCh7tBuxEHoUvAr6DKUBMEKNT4wYXrXiaWVTEJOK4xx
KLK37En1muL6ynrCedvyn/EJsY3GRQzyr34gBB6/YyyGfIw6fMCZCB2I9EwXsSah
QVOmStv5Pnd7UEcE282shBD34rE4tyGUvlQkBwWr2sJbuCcgQIQLmLwQoMWaW3nf
THdUYXKSLhlc4cWcF8fxZbnmlLCKzcMhbdHWmJ2ZDSSbm06DEdEbRkzlLymt8J7w
g2K39est9ahE1hJxz14YehhhruYogGdTzSJWdg5UfKANwchV5H8aAfAxX35kjJCx
ESaMgSUYCxwiPSlcRwo6uqq9CCn04CChFKMA2msk7W6T
-----END CERTIFICATE-----
Generated at Fri Jun 21 22:11:44 2024 by rpki-client on console-fra.rpki-client.org