Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/VEH8ZOkolzwQQA0J-UDmr4Rh_Ow.roa
File: VEH8ZOkolzwQQA0J-UDmr4Rh_Ow.roa (raw, json)
Hash identifier: BSMgQiEEi9/8Pj/IwRNAdyk82J2LzLmiB0GLKvJiiXs=
Subject key identifier: 54:41:FC:64:E9:28:97:3C:10:40:0D:09:F9:40:E6:AF:84:61:FC:EC
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018CA166DD58A6D4DBEC9CB2095B5C278912
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/VEH8ZOkolzwQQA0J-UDmr4Rh_Ow.roa
Signing time: Mon 25 Dec 2023 14:35:22 +0000
ROA not before: Mon 25 Dec 2023 14:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205585
IP address blocks: 193.109.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a1:66:dd:58:a6:d4:db:ec:9c:b2:09:5b:5c:27:89:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Dec 25 14:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5441fc64e928973c10400d09f940e6af8461fcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e8:15:10:19:70:48:61:66:67:44:1d:e6:20:
a9:ae:5e:51:90:43:25:26:f6:4f:e9:5d:c1:c0:2a:
d3:11:af:42:bf:cc:48:55:12:c0:53:b1:0e:77:8a:
7f:7e:08:a3:2a:5d:38:72:61:0d:4b:48:76:d3:00:
c8:d5:35:d9:5a:74:40:85:7d:67:65:fa:2e:da:d8:
8d:3c:2d:31:ea:29:34:28:09:cd:cc:92:89:13:14:
a8:25:60:b3:6b:e6:f1:b9:e7:ac:29:6d:57:91:0d:
a2:29:d7:00:35:68:45:68:fc:7d:64:ce:95:03:95:
68:40:35:05:3b:ed:c6:28:7c:a5:67:58:3c:a5:91:
ea:23:b9:22:d5:40:c2:3e:48:69:3b:39:a4:5f:58:
dc:83:26:68:ea:ae:42:8d:49:ab:ee:1e:9d:04:34:
ef:ca:1c:37:f0:7b:82:a7:3e:34:e8:dd:36:54:ec:
a5:50:17:33:5b:c6:98:25:74:ca:df:41:62:60:72:
28:b9:1a:0c:13:c9:77:2f:fc:00:52:56:22:cf:93:
08:01:25:a8:51:f1:36:df:4a:15:4a:a8:91:bd:ed:
42:5b:69:df:89:44:da:89:f2:bc:cd:03:b0:e1:bf:
63:cf:cf:19:e6:7e:2e:ae:e3:c2:f0:37:43:ef:76:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:41:FC:64:E9:28:97:3C:10:40:0D:09:F9:40:E6:AF:84:61:FC:EC
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/VEH8ZOkolzwQQA0J-UDmr4Rh_Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:17:5b:3f:32:c0:5c:a0:90:82:a6:e3:9d:7b:76:b6:ba:0b:
95:28:e1:07:45:e2:0d:f6:cf:39:64:65:07:3b:0c:31:c2:27:
ec:e0:3a:f3:db:44:f7:fe:06:6c:de:10:55:5b:5c:df:92:c6:
40:48:4d:46:e2:22:13:8f:8b:7f:ae:d5:e8:cd:07:d5:82:d8:
17:c2:d3:fc:c5:fd:42:8b:29:5e:8c:d0:ba:44:bc:b5:81:b6:
c9:85:cf:00:44:60:e0:9c:62:ba:90:2a:a4:1e:a3:4b:63:14:
6a:21:e2:f3:a6:bf:a9:c3:56:8c:de:50:1b:ef:ac:27:60:a0:
4e:fa:a2:9f:5d:c1:0d:20:d7:80:e8:84:f4:69:9a:f1:fb:a1:
c5:fd:08:e3:cf:a7:94:2e:4d:1a:89:55:87:1d:a6:3f:52:68:
7c:92:9e:ae:2f:95:04:6f:6b:6b:bb:a0:eb:01:44:3a:e5:fe:
98:bc:ea:86:1c:ae:e7:86:c3:c7:61:0a:27:a6:0c:61:77:af:
0a:49:7c:bf:5f:3b:16:ff:ad:a1:7c:67:0d:dd:ed:22:93:c9:
41:ca:42:69:99:91:da:77:a8:55:92:38:b6:07:e6:51:d7:16:
3e:15:b8:4d:36:f3:6e:b9:04:af:38:32:a2:dc:82:b8:b6:9f:
13:8d:bb:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyhZt1YptTb7JyyCVtcJ4kSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjMxMjI1MTQzNTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDQxZmM2NGU5Mjg5NzNjMTA0MDBkMDlmOTQwZTZhZjg0NjFmY2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOgVEBlwSGFmZ0Qd5iCprl5RkEMl
JvZP6V3BwCrTEa9Cv8xIVRLAU7EOd4p/fgijKl04cmENS0h20wDI1TXZWnRAhX1n
Zfou2tiNPC0x6ik0KAnNzJKJExSoJWCza+bxueesKW1XkQ2iKdcANWhFaPx9ZM6V
A5VoQDUFO+3GKHylZ1g8pZHqI7ki1UDCPkhpOzmkX1jcgyZo6q5CjUmr7h6dBDTv
yhw38HuCpz406N02VOylUBczW8aYJXTK30FiYHIouRoME8l3L/wAUlYiz5MIASWo
UfE230oVSqiRve1CW2nfiUTaifK8zQOw4b9jz88Z5n4uruPC8DdD73aXewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFRB/GTpKJc8EEANCflA5q+EYfzsMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvVkVIOFpPa29sendRUUEwSi1VRG1yNFJoX093LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW2JMA0G
CSqGSIb3DQEBCwUAA4IBAQCoF1s/MsBcoJCCpuOde3a2uguVKOEHReIN9s85ZGUH
Owwxwifs4Drz20T3/gZs3hBVW1zfksZASE1G4iITj4t/rtXozQfVgtgXwtP8xf1C
iylejNC6RLy1gbbJhc8ARGDgnGK6kCqkHqNLYxRqIeLzpr+pw1aM3lAb76wnYKBO
+qKfXcENINeA6IT0aZrx+6HF/Qjjz6eULk0aiVWHHaY/Umh8kp6uL5UEb2tru6Dr
AUQ65f6YvOqGHK7nhsPHYQonpgxhd68KSXy/XzsW/62hfGcN3e0ik8lBykJpmZHa
d6hVkji2B+ZR1xY+FbhNNvNuuQSvODKi3IK4tp8TjbvT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org