Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/tQfAr8bkvJfCDgToxs9ClH7Eh-w.roa
File: tQfAr8bkvJfCDgToxs9ClH7Eh-w.roa (raw, json)
Hash identifier: KvlfBh+JultPP3ESuOvL2heK0c14wjARCh9QDmDEZkE=
Subject key identifier: B5:07:C0:AF:C6:E4:BC:97:C2:0E:04:E8:C6:CF:42:94:7E:C4:87:EC
Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial: 018B3FDD41E13487187947A5A3F1B1C9F3AC
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/tQfAr8bkvJfCDgToxs9ClH7Eh-w.roa
Signing time: Tue 17 Oct 2023 22:59:06 +0000
ROA not before: Tue 17 Oct 2023 22:59:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 194.29.58.0/24 maxlen: 24
194.29.57.0/24 maxlen: 24
194.29.56.0/24 maxlen: 24
194.29.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3f:dd:41:e1:34:87:18:79:47:a5:a3:f1:b1:c9:f3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Validity
Not Before: Oct 17 22:59:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b507c0afc6e4bc97c20e04e8c6cf42947ec487ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3a:60:97:cc:b9:3e:69:6a:28:91:53:75:24:
d5:36:3f:39:85:a1:1e:dc:aa:65:f0:8a:36:d5:11:
8f:40:12:0b:ec:da:13:24:62:14:71:d2:ae:42:fe:
ef:47:7a:c0:90:ab:25:ce:2b:b9:db:7f:65:1c:e4:
bd:3c:c5:20:b9:fb:d3:0c:59:4d:92:97:eb:31:7b:
3b:b4:ff:47:b4:e2:f0:99:31:c8:fe:d4:ab:45:75:
9d:c7:86:1d:11:15:6a:db:a7:65:47:cd:b3:5d:54:
05:4d:f4:4d:de:16:31:5f:25:31:87:4d:9e:23:c2:
50:f3:5c:66:5e:77:7a:b9:91:c9:00:88:cb:ad:74:
a9:26:a0:9c:c7:cc:30:29:a7:27:6c:ba:9f:da:c3:
04:24:0d:7b:29:c5:c3:4d:85:6c:d8:16:00:fe:3e:
9b:4a:f1:a7:86:a0:11:4a:47:d8:ee:df:23:26:bb:
f6:1b:f5:37:8d:74:d0:db:13:c7:40:b9:a9:23:ed:
c4:e2:c7:d3:24:5e:2b:83:6d:74:49:10:af:48:85:
d4:dd:18:b3:d8:38:c5:86:59:e7:7c:70:76:42:e2:
bd:44:23:05:c3:27:f0:04:5d:bd:a3:ae:69:57:39:
2f:1d:e9:82:ac:61:9d:df:9a:39:63:cc:a4:5c:f8:
1f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:07:C0:AF:C6:E4:BC:97:C2:0E:04:E8:C6:CF:42:94:7E:C4:87:EC
X509v3 Authority Key Identifier:
keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/tQfAr8bkvJfCDgToxs9ClH7Eh-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.56.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:96:8d:7a:be:9f:20:0d:8e:eb:68:cb:bb:92:30:8a:70:2a:
54:41:f6:e4:37:ac:45:ba:bb:99:81:84:5d:ff:af:ae:d0:51:
cf:68:5b:c9:11:19:cb:37:e5:92:d3:57:a6:12:a1:ba:85:e7:
c8:46:61:15:df:6b:7f:80:49:f1:6a:fc:50:5c:27:68:01:cc:
88:2e:3b:02:73:fe:ef:79:d9:4f:29:98:06:a8:f3:a9:70:d1:
09:24:09:67:3d:e9:93:56:50:6e:9b:47:f7:9b:3e:b3:60:10:
83:ff:e7:ba:22:65:3c:3a:bf:c4:a9:7c:47:2f:8f:34:f3:c7:
72:96:17:83:9d:50:15:35:7a:49:86:03:0a:72:fa:c3:d9:e0:
3c:79:cf:06:bc:2a:74:83:05:c7:38:0c:33:19:1e:c3:3e:30:
d4:25:9c:65:d4:a0:58:c9:13:c6:57:8f:2b:57:d4:de:53:9e:
7f:0b:d5:1b:71:67:86:6b:73:0b:3d:dd:a7:59:f8:86:2a:d2:
66:ab:8c:f4:b0:fd:7b:aa:88:88:c3:27:4f:55:0d:fe:85:15:
7d:3f:cc:bc:fb:04:c8:bb:8a:f1:82:69:a1:99:1b:3a:35:61:
68:f2:6a:ec:13:bb:3b:54:8a:da:13:c0:7b:ba:ab:da:f1:73:
bf:8e:3e:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYs/3UHhNIcYeUelo/GxyfOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZGUzMmJiOWNjOTllMTE1ZGRiYWY2YjdmYTIzMDUxNzg5
ZjJmNjEwHhcNMjMxMDE3MjI1OTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTA3YzBhZmM2ZTRiYzk3YzIwZTA0ZThjNmNmNDI5NDdlYzQ4N2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzpgl8y5PmlqKJFTdSTVNj85haEe
3Kpl8Io21RGPQBIL7NoTJGIUcdKuQv7vR3rAkKslziu5239lHOS9PMUgufvTDFlN
kpfrMXs7tP9HtOLwmTHI/tSrRXWdx4YdERVq26dlR82zXVQFTfRN3hYxXyUxh02e
I8JQ81xmXnd6uZHJAIjLrXSpJqCcx8wwKacnbLqf2sMEJA17KcXDTYVs2BYA/j6b
SvGnhqARSkfY7t8jJrv2G/U3jXTQ2xPHQLmpI+3E4sfTJF4rg210SRCvSIXU3Riz
2DjFhlnnfHB2QuK9RCMFwyfwBF29o65pVzkvHemCrGGd35o5Y8ykXPgfqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLUHwK/G5LyXwg4E6MbPQpR+xIfsMB8GA1UdIwQY
MBaAFMXeMrucyZ4RXduva3+iMFF4ny9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUt
MDYzNjc1MzY3OWI2LzEvdFFmQXI4Ymt2SmZDRGdUb3hzOUNsSDdFaC13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUtMDYzNjc1MzY3OWI2
LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwh04MA0G
CSqGSIb3DQEBCwUAA4IBAQDLlo16vp8gDY7raMu7kjCKcCpUQfbkN6xFuruZgYRd
/6+u0FHPaFvJERnLN+WS01emEqG6hefIRmEV32t/gEnxavxQXCdoAcyILjsCc/7v
edlPKZgGqPOpcNEJJAlnPemTVlBum0f3mz6zYBCD/+e6ImU8Or/EqXxHL48088dy
lheDnVAVNXpJhgMKcvrD2eA8ec8GvCp0gwXHOAwzGR7DPjDUJZxl1KBYyRPGV48r
V9TeU55/C9UbcWeGa3MLPd2nWfiGKtJmq4z0sP17qoiIwydPVQ3+hRV9P8y8+wTI
u4rxgmmhmRs6NWFo8mrsE7s7VIraE8B7uqva8XO/jj6Y
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:45 2024 by rpki-client on console-fra.rpki-client.org