Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/r8NZbiRQ9BMkmMu8NmXVIw-iPaE.roa
File: r8NZbiRQ9BMkmMu8NmXVIw-iPaE.roa (raw, json)
Hash identifier: gcbburg5uYsZatuaKVkbgeMx4sR1kaU3MW7DxWkfG94=
Subject key identifier: AF:C3:59:6E:24:50:F4:13:24:98:CB:BC:36:65:D5:23:0F:A2:3D:A1
Certificate issuer: /CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Certificate serial: 01856D2F25A86CAF178A0E46A7FF618BF078
Authority key identifier: 11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/r8NZbiRQ9BMkmMu8NmXVIw-iPaE.roa
Signing time: Sun 01 Jan 2023 11:54:44 +0000
ROA not before: Sun 01 Jan 2023 11:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200167
IP address blocks: 195.141.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:25:a8:6c:af:17:8a:0e:46:a7:ff:61:8b:f0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=115dbc00433e29f2adeb038fea2fbd7048fb632f
Validity
Not Before: Jan 1 11:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afc3596e2450f4132498cbbc3665d5230fa23da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:8f:82:f5:5b:c4:e7:4f:41:51:77:d7:a7:
af:c8:14:76:d9:44:6c:ac:69:35:70:cd:0e:5a:f3:
15:b2:24:1c:02:b7:a6:74:39:19:dc:ac:e9:09:6b:
56:0c:8d:79:47:2c:3a:76:22:5b:77:c7:3b:29:88:
ee:1f:5b:eb:29:a4:cf:dd:52:41:93:6d:8a:52:2a:
27:bf:43:32:ac:b0:28:bf:a3:4d:e9:f1:92:94:6d:
a1:57:f9:42:9b:ca:f8:98:cf:b8:9c:9b:91:af:e7:
4b:0b:b5:4f:37:f1:d2:0a:83:a2:56:b9:a8:d1:a7:
d7:02:fc:3e:4b:0f:a6:39:a6:7a:89:d2:89:83:ae:
b4:c3:f9:e6:a9:7e:ca:cc:7b:a7:97:85:93:79:8b:
77:aa:37:29:02:3e:8b:3a:34:a3:ad:0a:16:a8:e4:
0c:87:a1:6b:85:8c:ce:87:40:7f:77:d1:98:5a:54:
a2:07:db:f6:e5:60:3a:31:c9:3e:6e:bc:90:c8:9e:
fa:5e:ac:7e:fe:bb:7e:d7:d0:44:0b:14:72:5e:aa:
ec:6f:6f:d3:22:7c:49:44:3f:b6:82:7c:b2:6d:31:
97:bc:e2:c4:b3:ac:95:22:ac:85:59:3d:55:e1:3c:
31:54:de:4c:6d:35:4c:b0:66:e6:59:77:68:77:ef:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C3:59:6E:24:50:F4:13:24:98:CB:BC:36:65:D5:23:0F:A2:3D:A1
X509v3 Authority Key Identifier:
keyid:11:5D:BC:00:43:3E:29:F2:AD:EB:03:8F:EA:2F:BD:70:48:FB:63:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EV28AEM-KfKt6wOP6i-9cEj7Yy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/r8NZbiRQ9BMkmMu8NmXVIw-iPaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/65a71d-0236-44d5-8ce9-229b4ae742de/1/EV28AEM-KfKt6wOP6i-9cEj7Yy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.141.124.0/24
Signature Algorithm: sha256WithRSAEncryption
80:30:a7:8b:4a:7b:0e:9f:32:20:9a:10:e2:31:88:4b:86:f4:
ba:62:86:b6:4e:88:99:34:b6:77:68:46:c6:c1:ce:e0:1a:d9:
55:2c:dc:c6:70:3c:1c:bd:87:8d:83:0e:f1:72:cc:cc:27:28:
d3:13:79:5f:5f:55:1a:1f:26:e7:78:c0:ec:19:e6:3a:d6:02:
3e:7a:2b:c4:fe:d8:a4:bd:a3:12:cb:13:9a:50:d6:54:de:0d:
e2:07:38:1d:bb:21:f3:23:cb:ef:ae:95:94:15:09:18:dd:7a:
9f:6b:7b:b9:bd:06:92:a5:af:40:06:6e:97:77:1a:89:1e:39:
ec:47:cb:8b:6e:f2:76:78:7d:f5:26:6b:6f:e9:38:21:08:d2:
31:b9:1c:5d:14:f9:50:30:ac:52:40:f8:cd:36:4e:93:25:0d:
1e:ac:47:b9:8b:f4:8c:39:44:34:03:74:89:29:37:2e:1f:3d:
b8:d1:82:bc:e5:37:a8:c1:3e:74:78:0a:d3:42:54:29:60:b9:
98:a7:63:2b:17:91:2c:f9:7d:eb:52:ef:66:21:5f:b3:d6:ef:
e6:c4:d1:8b:41:26:70:e5:c9:33:ab:a6:11:ef:86:97:4b:db:
97:d5:46:dc:f4:f4:5f:6e:a5:6a:fc:63:a1:69:fb:34:c0:d7:
8b:42:1b:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtLyWobK8Xig5Gp/9hi/B4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNWRiYzAwNDMzZTI5ZjJhZGViMDM4ZmVhMmZiZDcwNDhm
YjYzMmYwHhcNMjMwMTAxMTE1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmMzNTk2ZTI0NTBmNDEzMjQ5OGNiYmMzNjY1ZDUyMzBmYTIzZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBKPgvVbxOdPQVF316evyBR22URs
rGk1cM0OWvMVsiQcAremdDkZ3KzpCWtWDI15Ryw6diJbd8c7KYjuH1vrKaTP3VJB
k22KUionv0MyrLAov6NN6fGSlG2hV/lCm8r4mM+4nJuRr+dLC7VPN/HSCoOiVrmo
0afXAvw+Sw+mOaZ6idKJg660w/nmqX7KzHunl4WTeYt3qjcpAj6LOjSjrQoWqOQM
h6FrhYzOh0B/d9GYWlSiB9v25WA6Mck+bryQyJ76Xqx+/rt+19BECxRyXqrsb2/T
InxJRD+2gnyybTGXvOLEs6yVIqyFWT1V4TwxVN5MbTVMsGbmWXdod+8gFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK/DWW4kUPQTJJjLvDZl1SMPoj2hMB8GA1UdIwQY
MBaAFBFdvABDPinyresDj+ovvXBI+2MvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTkt
MjI5YjRhZTc0MmRlLzEvcjhOWmJpUlE5Qk1rbU11OE5tWFZJdy1pUGFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82NWE3MWQtMDIzNi00NGQ1LThjZTktMjI5YjRhZTc0MmRl
LzEvRVYyOEFFTS1LZkt0NndPUDZpLTljRWo3WXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw418MA0G
CSqGSIb3DQEBCwUAA4IBAQCAMKeLSnsOnzIgmhDiMYhLhvS6Yoa2ToiZNLZ3aEbG
wc7gGtlVLNzGcDwcvYeNgw7xcszMJyjTE3lfX1UaHybneMDsGeY61gI+eivE/tik
vaMSyxOaUNZU3g3iBzgduyHzI8vvrpWUFQkY3Xqfa3u5vQaSpa9ABm6XdxqJHjns
R8uLbvJ2eH31Jmtv6TghCNIxuRxdFPlQMKxSQPjNNk6TJQ0erEe5i/SMOUQ0A3SJ
KTcuHz240YK85TeowT50eArTQlQpYLmYp2MrF5Es+X3rUu9mIV+z1u/mxNGLQSZw
5ckzq6YR74aXS9uX1Ubc9PRfbqVq/GOhafs0wNeLQhsg
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:53 2024 by rpki-client on console-ams.rpki-client.org