Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/g1JPdjFCsgGWqgDGaZ7-01UdMeA.roa
File: g1JPdjFCsgGWqgDGaZ7-01UdMeA.roa (raw, json)
Hash identifier: pjU5Y3JmpUdKTtAlZN9rqTmap4HWFlF6iw3CLX3Xohc=
Subject key identifier: 83:52:4F:76:31:42:B2:01:96:AA:00:C6:69:9E:FE:D3:55:1D:31:E0
Certificate issuer: /CN=3ec2c20d6b3acf84802c2b7ca0722deb72c670bb
Certificate serial: 018B8F613C152AF24D6D013C004BE50B7210
Authority key identifier: 3E:C2:C2:0D:6B:3A:CF:84:80:2C:2B:7C:A0:72:2D:EB:72:C6:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsLCDWs6z4SALCt8oHIt63LGcLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/g1JPdjFCsgGWqgDGaZ7-01UdMeA.roa
Signing time: Thu 02 Nov 2023 09:33:16 +0000
ROA not before: Thu 02 Nov 2023 09:33:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 195.211.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 09:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:61:3c:15:2a:f2:4d:6d:01:3c:00:4b:e5:0b:72:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec2c20d6b3acf84802c2b7ca0722deb72c670bb
Validity
Not Before: Nov 2 09:33:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83524f763142b20196aa00c6699efed3551d31e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:57:d7:d5:37:0b:2e:6b:8f:67:08:98:06:
63:cc:18:a8:11:0e:f7:df:1a:84:75:d9:c8:af:46:
83:d2:ff:b6:28:de:d2:2f:e9:67:c9:8f:38:62:f4:
d3:9b:ae:87:fa:1c:b8:a9:98:21:9f:62:dc:58:4f:
8d:f5:c6:f2:90:7d:b2:a0:b5:19:9e:df:d0:50:48:
53:32:b1:44:94:ae:e9:06:fc:f0:4f:b5:9d:72:49:
b1:ef:a7:a6:c1:ad:ca:df:ec:93:47:a1:c5:63:60:
ec:a6:44:75:05:10:e4:e6:c3:33:85:03:d6:9b:58:
c6:06:76:71:1a:b0:77:a4:16:d5:b2:08:0d:e8:71:
53:a8:23:bc:3c:da:51:63:ba:8d:f7:e5:20:3d:4b:
88:72:ba:04:e7:51:98:d7:1e:b6:5a:53:a7:7e:67:
72:1d:84:0b:dd:84:0c:b5:0e:63:26:f3:b0:ad:52:
7b:0e:83:14:44:88:a9:12:d7:95:1e:6d:b2:43:08:
1f:cf:34:98:2d:cf:45:df:83:89:62:97:87:fa:5e:
ca:b6:56:d0:56:ed:0e:fb:9f:7b:d9:01:93:7c:6a:
4e:b1:85:0e:da:14:9d:bb:32:a1:ca:42:73:14:d5:
2a:f0:0a:08:ff:99:92:78:20:36:f3:45:3c:16:75:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:52:4F:76:31:42:B2:01:96:AA:00:C6:69:9E:FE:D3:55:1D:31:E0
X509v3 Authority Key Identifier:
keyid:3E:C2:C2:0D:6B:3A:CF:84:80:2C:2B:7C:A0:72:2D:EB:72:C6:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsLCDWs6z4SALCt8oHIt63LGcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/g1JPdjFCsgGWqgDGaZ7-01UdMeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/PsLCDWs6z4SALCt8oHIt63LGcLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.167.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:39:83:f9:6c:ff:92:0b:7b:f0:33:10:a8:ea:f4:7c:d4:06:
a1:5c:ad:f4:18:77:df:f2:73:29:e1:7f:15:f6:45:9b:18:ff:
57:4d:7a:00:51:a6:fc:0d:76:0f:c1:fa:2b:7a:6f:16:87:3a:
45:e9:c9:9b:1e:2a:b9:3e:df:05:91:ef:78:f9:57:c8:53:ca:
df:ce:e3:51:c0:e6:e8:45:03:89:9f:f1:1b:27:3b:6c:00:2c:
60:1c:b3:41:c5:65:48:5a:25:dd:98:7e:51:2e:0f:90:42:dc:
b8:ec:23:c2:18:e8:a3:fd:4b:41:32:06:f9:b3:a6:e3:6a:2e:
d6:14:82:4e:31:3c:39:a5:c6:91:71:45:da:66:7d:ca:3b:25:
04:ab:ea:53:df:dd:b6:31:90:86:04:ef:3b:f3:b7:02:da:19:
35:fb:8a:d6:3f:fb:eb:5d:20:fd:c8:65:de:50:6c:e4:4b:63:
38:bc:de:d4:27:e0:67:f8:8b:26:65:68:ed:5d:8b:02:e4:a3:
75:b8:e8:cd:4c:2d:b0:0d:bd:ee:77:79:79:1f:3c:c9:0d:0a:
af:8f:c0:c3:3c:52:82:69:f0:f4:58:0a:dd:a1:6b:9d:6c:e0:
76:84:88:30:17:ee:1a:55:84:6f:f0:31:52:c1:b8:5b:60:ed:
e6:a0:89:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuPYTwVKvJNbQE8AEvlC3IQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzJjMjBkNmIzYWNmODQ4MDJjMmI3Y2EwNzIyZGViNzJj
NjcwYmIwHhcNMjMxMTAyMDkzMzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzUyNGY3NjMxNDJiMjAxOTZhYTAwYzY2OTllZmVkMzU1MWQzMWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS5X19U3Cy5rj2cImAZjzBioEQ73
3xqEddnIr0aD0v+2KN7SL+lnyY84YvTTm66H+hy4qZghn2LcWE+N9cbykH2yoLUZ
nt/QUEhTMrFElK7pBvzwT7Wdckmx76emwa3K3+yTR6HFY2DspkR1BRDk5sMzhQPW
m1jGBnZxGrB3pBbVsggN6HFTqCO8PNpRY7qN9+UgPUuIcroE51GY1x62WlOnfmdy
HYQL3YQMtQ5jJvOwrVJ7DoMURIipEteVHm2yQwgfzzSYLc9F34OJYpeH+l7KtlbQ
Vu0O+5972QGTfGpOsYUO2hSduzKhykJzFNUq8AoI/5mSeCA280U8FnUYfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFINST3YxQrIBlqoAxmme/tNVHTHgMB8GA1UdIwQY
MBaAFD7Cwg1rOs+EgCwrfKByLetyxnC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNMQ0RXczZ6NFNBTEN0OG9ISXQ2M0xHY0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yNzEwYjAtNmM0YS00YTk0LWI5MmEt
YjFjZWZjOTk1Mzc5LzEvZzFKUGRqRkNzZ0dXcWdER2FaNy0wMVVkTWVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yNzEwYjAtNmM0YS00YTk0LWI5MmEtYjFjZWZjOTk1Mzc5
LzEvUHNMQ0RXczZ6NFNBTEN0OG9ISXQ2M0xHY0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9OnMA0G
CSqGSIb3DQEBCwUAA4IBAQA9OYP5bP+SC3vwMxCo6vR81AahXK30GHff8nMp4X8V
9kWbGP9XTXoAUab8DXYPwforem8WhzpF6cmbHiq5Pt8Fke94+VfIU8rfzuNRwObo
RQOJn/EbJztsACxgHLNBxWVIWiXdmH5RLg+QQty47CPCGOij/UtBMgb5s6bjai7W
FIJOMTw5pcaRcUXaZn3KOyUEq+pT3922MZCGBO8787cC2hk1+4rWP/vrXSD9yGXe
UGzkS2M4vN7UJ+Bn+IsmZWjtXYsC5KN1uOjNTC2wDb3ud3l5HzzJDQqvj8DDPFKC
afD0WArdoWudbOB2hIgwF+4aVYRv8DFSwbhbYO3moIm2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:28 2024 by rpki-client on console-fra.rpki-client.org