Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/kdXaA4Qb8RkzDqrTYACJ0vlENdY.roa
File: kdXaA4Qb8RkzDqrTYACJ0vlENdY.roa (raw, json)
Hash identifier: pcqETnZcEufjEHSYZHtlRTUBA6bitPGsJlAXjt01Ecs=
Subject key identifier: 91:D5:DA:03:84:1B:F1:19:33:0E:AA:D3:60:00:89:D2:F9:44:35:D6
Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial: 01856E142CAA627060BFC19D8E7BC558137C
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/kdXaA4Qb8RkzDqrTYACJ0vlENdY.roa
Signing time: Sun 01 Jan 2023 16:04:53 +0000
ROA not before: Sun 01 Jan 2023 16:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 194.42.48.0/24 maxlen: 32
2001:7f8:c::/48 maxlen: 128
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:2c:aa:62:70:60:bf:c1:9d:8e:7b:c5:58:13:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Validity
Not Before: Jan 1 16:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91d5da03841bf119330eaad3600089d2f94435d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:22:6e:66:b8:c1:65:37:9e:78:0a:46:05:
b4:b2:14:37:a1:0b:1d:5b:0a:65:ef:a3:45:fe:28:
da:20:05:f7:4e:da:2b:cd:8a:f8:c8:41:a1:2c:15:
0e:5d:cd:86:9a:98:5b:07:96:f4:4f:c9:af:e6:17:
64:eb:1e:07:5b:1b:7c:2c:34:f9:c9:f0:d8:8d:ae:
44:13:e9:ba:05:7f:62:50:17:03:73:62:ca:aa:78:
99:55:bd:47:03:e2:5f:20:52:a0:d2:95:7b:5f:06:
ec:fa:e8:37:35:a2:02:07:b7:16:ed:b0:ff:b8:11:
57:36:f1:88:9c:dc:f6:a7:2e:c9:90:5c:16:6b:a8:
69:ca:9d:1e:62:76:ed:6a:c7:f5:51:1d:e5:17:ea:
bf:cb:0d:2e:08:4d:20:be:4d:6d:ff:82:a6:a8:f6:
e7:f8:4d:02:2e:e3:be:2d:91:c4:f6:b7:d7:ad:35:
5f:a0:ad:5a:82:55:38:d4:d3:f0:ad:33:bf:47:6d:
55:4c:4e:a0:31:a6:fa:a4:2d:95:ac:85:ee:5a:2d:
7f:fe:6c:a1:82:e3:93:90:ce:66:d0:ef:05:39:8b:
f5:a6:f5:31:96:66:2c:67:86:e0:3e:23:1e:1e:15:
e9:e3:73:c2:40:22:a5:72:f7:4c:af:ed:5f:38:64:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D5:DA:03:84:1B:F1:19:33:0E:AA:D3:60:00:89:D2:F9:44:35:D6
X509v3 Authority Key Identifier:
keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/kdXaA4Qb8RkzDqrTYACJ0vlENdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.48.0/24
IPv6:
2001:7f8:c::/48
Signature Algorithm: sha256WithRSAEncryption
b3:8f:4a:3d:a5:90:b4:2d:0b:5b:d7:e9:f4:8f:b8:6f:3c:1f:
03:40:56:a8:a9:40:be:6e:b2:4c:0f:8d:be:17:fa:f0:fe:29:
8d:8e:71:4f:d2:9b:23:0b:7c:1a:ab:db:24:00:90:66:06:56:
81:40:3c:57:c5:40:63:c5:41:05:17:9f:06:a9:db:04:8d:8f:
2c:bb:96:d9:5c:f0:25:e6:64:32:ac:99:b4:7a:15:83:10:47:
76:6a:8e:8d:bc:ec:c4:93:ab:8e:61:8c:32:47:94:5d:53:c2:
30:98:3a:e0:79:d5:84:d6:3d:bc:52:06:d1:c1:3a:33:ab:c2:
95:d8:9c:6c:d6:ac:09:35:17:7b:74:d2:93:f5:eb:61:c6:54:
e9:9c:c2:a8:15:d1:4e:59:64:a6:16:08:b8:c7:f0:05:df:45:
d1:03:66:71:fd:a8:30:5d:12:b1:d0:d7:0a:ee:e6:2d:03:6c:
f2:23:0a:3f:62:b1:6c:c1:de:05:a6:20:1e:91:4c:3c:08:ed:
da:f9:be:e9:7d:3f:d8:c6:8b:5a:bd:59:a6:ae:02:3e:96:48:
1d:4c:20:8e:0f:4f:c7:80:a7:e6:b2:e0:05:c6:a4:4e:bd:a6:
2e:95:d9:5e:61:c2:4c:b9:cf:ae:65:7a:d0:d4:4e:32:27:7f:
a9:98:e5:43
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVuFCyqYnBgv8GdjnvFWBN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MGQxY2E3ODc2MTMxMGFjMzlhNzE0ZmY2MmYzYjkyYjJl
NzdkOGEwHhcNMjMwMTAxMTYwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWQ1ZGEwMzg0MWJmMTE5MzMwZWFhZDM2MDAwODlkMmY5NDQzNWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogMibma4wWU3nngKRgW0shQ3oQsd
Wwpl76NF/ijaIAX3TtorzYr4yEGhLBUOXc2GmphbB5b0T8mv5hdk6x4HWxt8LDT5
yfDYja5EE+m6BX9iUBcDc2LKqniZVb1HA+JfIFKg0pV7Xwbs+ug3NaICB7cW7bD/
uBFXNvGInNz2py7JkFwWa6hpyp0eYnbtasf1UR3lF+q/yw0uCE0gvk1t/4KmqPbn
+E0CLuO+LZHE9rfXrTVfoK1aglU41NPwrTO/R21VTE6gMab6pC2VrIXuWi1//myh
guOTkM5m0O8FOYv1pvUxlmYsZ4bgPiMeHhXp43PCQCKlcvdMr+1fOGQ8xQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJHV2gOEG/EZMw6q02AAidL5RDXWMB8GA1UdIwQY
MBaAFHkNHKeHYTEKw5pxT/YvO5Ky532KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVEwY3A0ZGhNUXJEbW5GUDlpODdrckxuZllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hM2NjY2UtYzBkNi00OWE4LWJiYjgt
YjhhZTE2YjM1YzMxLzEva2RYYUE0UWI4Umt6RHFyVFlBQ0owdmxFTmRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hM2NjY2UtYzBkNi00OWE4LWJiYjgtYjhhZTE2YjM1YzMx
LzEvZVEwY3A0ZGhNUXJEbW5GUDlpODdrckxuZllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwiowMA8E
AgACMAkDBwAgAQf4AAwwDQYJKoZIhvcNAQELBQADggEBALOPSj2lkLQtC1vX6fSP
uG88HwNAVqipQL5uskwPjb4X+vD+KY2OcU/SmyMLfBqr2yQAkGYGVoFAPFfFQGPF
QQUXnwap2wSNjyy7ltlc8CXmZDKsmbR6FYMQR3Zqjo287MSTq45hjDJHlF1TwjCY
OuB51YTWPbxSBtHBOjOrwpXYnGzWrAk1F3t00pP162HGVOmcwqgV0U5ZZKYWCLjH
8AXfRdEDZnH9qDBdErHQ1wru5i0DbPIjCj9isWzB3gWmIB6RTDwI7dr5vul9P9jG
i1q9WaauAj6WSB1MII4PT8eAp+ay4AXGpE69pi6V2V5hwky5z65letDUTjInf6mY
5UM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:56 2024 by rpki-client on console-ams.rpki-client.org