Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/RdCXSdmRXmaOyKXoueF5Pw0sbZ4.roa
File: RdCXSdmRXmaOyKXoueF5Pw0sbZ4.roa (raw, json)
Hash identifier: /2xjiyRELkqUgwfsoLbUiskBwLFjZupwncm/5YmtH48=
Subject key identifier: 45:D0:97:49:D9:91:5E:66:8E:C8:A5:E8:B9:E1:79:3F:0D:2C:6D:9E
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B9389A91730654BA7D72CC9DFCB5EF
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/RdCXSdmRXmaOyKXoueF5Pw0sbZ4.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61418
IP address blocks: 195.87.95.0/24 maxlen: 24
195.87.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 08:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:38:9a:91:73:06:54:ba:7d:72:cc:9d:fc:b5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45d09749d9915e668ec8a5e8b9e1793f0d2c6d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:19:d6:df:f9:d4:41:3d:e2:87:29:e4:f4:
54:e3:14:29:37:44:98:71:8b:bb:ce:1b:03:68:26:
58:b2:59:4d:6c:5c:2a:68:17:0a:f8:88:2c:23:67:
ba:de:db:9f:43:dc:01:86:81:4c:40:72:bb:30:90:
d0:ea:3c:46:21:38:aa:ea:ba:29:97:ee:bc:98:72:
3c:22:a6:17:ea:63:c1:ef:52:a9:8f:e8:99:de:ca:
26:f5:d9:04:96:06:8e:bb:8f:97:f7:ce:1c:e0:5c:
db:55:5a:d0:a6:bd:fa:25:fa:81:f0:1e:ba:2e:17:
a8:1b:f9:bb:1e:e5:e8:af:fb:30:03:32:d3:c6:74:
66:1a:e7:7c:86:59:c9:9c:fd:b1:b7:c9:81:16:bd:
9d:fc:0f:d3:8d:b8:2d:b5:25:30:19:81:75:05:79:
74:db:87:be:c8:e4:63:60:9c:c4:1c:5d:02:94:63:
b3:0d:28:bf:b9:77:6f:05:03:95:1b:ad:33:aa:c8:
55:78:44:34:97:dc:c9:71:c4:14:e1:2f:42:b1:f3:
c3:f4:a7:61:51:a0:49:08:ea:c6:de:36:55:cf:46:
10:74:b6:41:52:65:2a:a8:33:d8:cf:73:43:d5:15:
d7:da:57:cd:a9:0e:cd:b2:43:a5:f4:38:8f:ee:30:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D0:97:49:D9:91:5E:66:8E:C8:A5:E8:B9:E1:79:3F:0D:2C:6D:9E
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/RdCXSdmRXmaOyKXoueF5Pw0sbZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.87.95.0/24
195.87.125.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:af:3b:ac:cb:44:33:4a:66:ef:47:a7:04:7d:02:64:91:04:
c9:85:db:e8:de:ca:2b:67:d8:ec:36:28:29:c4:07:27:db:38:
36:25:b6:04:f1:67:8b:eb:0e:1e:1e:0f:8c:1f:13:1b:ab:df:
30:48:0f:c2:0c:c7:d0:77:5e:96:db:bd:0e:95:d3:97:aa:13:
88:06:a2:8f:a5:18:5a:1c:14:23:9b:7f:3f:7c:98:f9:d0:93:
1f:54:92:e2:31:62:fb:76:ec:af:fd:7c:d1:c2:e1:b4:fe:35:
1b:a1:6a:89:5a:ca:75:50:81:96:6d:05:8f:62:2d:e8:a1:13:
12:26:5d:d9:df:0c:c4:e2:3d:5f:40:4f:03:e3:93:66:9f:8b:
f8:81:5f:48:05:f0:0f:b5:71:4c:3a:24:5c:78:b0:46:0d:c8:
45:19:2c:0c:97:c6:82:35:9f:40:36:12:39:a8:1b:c2:b6:47:
be:56:00:30:73:c0:d4:72:e4:ef:eb:c6:38:58:4b:02:51:79:
54:72:4d:09:46:b6:0c:7c:02:2e:52:7c:4d:81:10:7c:d0:56:
2f:e6:f7:e4:25:a1:b8:17:2b:a3:f0:49:c4:59:81:f1:cd:8d:
66:85:2f:a2:04:69:ce:7a:09:7b:c5:57:1e:10:66:d3:32:49:
6d:36:f5:c5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGuTiakXMGVLp9csyd/LXvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw
MWY0YzkwHhcNMjQwMTAxMjAzMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWQwOTc0OWQ5OTE1ZTY2OGVjOGE1ZThiOWUxNzkzZjBkMmM2ZDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv94Z1t/51EE94ocp5PRU4xQpN0SY
cYu7zhsDaCZYsllNbFwqaBcK+IgsI2e63tufQ9wBhoFMQHK7MJDQ6jxGITiq6rop
l+68mHI8IqYX6mPB71Kpj+iZ3som9dkElgaOu4+X984c4FzbVVrQpr36JfqB8B66
LheoG/m7HuXor/swAzLTxnRmGud8hlnJnP2xt8mBFr2d/A/TjbgttSUwGYF1BXl0
24e+yORjYJzEHF0ClGOzDSi/uXdvBQOVG60zqshVeEQ0l9zJccQU4S9CsfPD9Kdh
UaBJCOrG3jZVz0YQdLZBUmUqqDPYz3ND1RXX2lfNqQ7NskOl9DiP7jBHfwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEXQl0nZkV5mjsil6LnheT8NLG2eMB8GA1UdIwQY
MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt
ODNkNjQ4Zjc5NzQ2LzEvUmRDWFNkbVJYbWFPeUtYb3VlRjVQdzBzYlo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2
LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw1dfAwQA
w1d9MA0GCSqGSIb3DQEBCwUAA4IBAQANrzusy0QzSmbvR6cEfQJkkQTJhdvo3sor
Z9jsNigpxAcn2zg2JbYE8WeL6w4eHg+MHxMbq98wSA/CDMfQd16W270OldOXqhOI
BqKPpRhaHBQjm38/fJj50JMfVJLiMWL7duyv/XzRwuG0/jUboWqJWsp1UIGWbQWP
Yi3ooRMSJl3Z3wzE4j1fQE8D45Nmn4v4gV9IBfAPtXFMOiRceLBGDchFGSwMl8aC
NZ9ANhI5qBvCtke+VgAwc8DUcuTv68Y4WEsCUXlUck0JRrYMfAIuUnxNgRB80FYv
5vfkJaG4Fyuj8EnEWYHxzY1mhS+iBGnOegl7xVceEGbTMkltNvXF
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org