Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ueeSlcH9uEEQU3z6V1jbdYonpnI.roa
File: ueeSlcH9uEEQU3z6V1jbdYonpnI.roa (raw, json)
Hash identifier: o7oGIUYnHAVnCpoOscCmm8YzsC0nmpRDYpOCvuP3fJA=
Subject key identifier: B9:E7:92:95:C1:FD:B8:41:10:53:7C:FA:57:58:DB:75:8A:27:A6:72
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0192900F417F6083E3AD4CEA11E0CD219816
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ueeSlcH9uEEQU3z6V1jbdYonpnI.roa
Signing time: Tue 15 Oct 2024 12:02:51 +0000
ROA not before: Tue 15 Oct 2024 12:02:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60707
IP address blocks: 195.211.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 21:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:0f:41:7f:60:83:e3:ad:4c:ea:11:e0:cd:21:98:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 15 12:02:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9e79295c1fdb84110537cfa5758db758a27a672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d1:41:6d:46:03:93:8f:8f:12:0d:73:30:23:
49:75:c8:e2:bb:03:c6:29:c7:67:94:38:a2:3f:36:
ca:ce:58:82:da:21:89:39:e6:89:6f:e1:2b:f3:c6:
f0:3e:df:25:32:d5:f9:e3:04:e9:1e:a0:fe:5c:04:
7c:d6:d9:e7:b7:20:61:30:2f:4f:3c:89:f2:1c:9f:
e2:7b:c0:2f:52:08:55:3e:0c:c3:39:6b:8a:a5:b4:
76:9b:6f:22:80:98:68:25:80:f0:55:2d:fc:c1:c8:
37:b7:7a:92:c7:67:3a:ab:f1:96:18:39:ae:9a:38:
05:72:b8:2c:3f:1e:22:24:05:cc:5c:a5:c9:10:7c:
b8:72:be:e1:56:cf:d4:a3:9e:96:dd:8d:25:c1:e1:
a3:27:21:4b:a0:7b:95:c1:0d:34:ad:b0:05:20:f1:
68:10:e1:5e:c0:c0:11:09:94:82:83:d4:98:e9:03:
d2:21:56:4c:14:cd:2a:98:27:eb:5f:55:c2:70:ac:
e5:e8:85:8a:0f:22:49:23:d6:fe:1b:79:5e:4d:88:
d5:16:54:1e:c7:cb:6a:3f:f3:6d:79:e1:21:cc:77:
4a:50:18:cd:12:98:5c:35:f2:f6:9f:a9:93:82:8a:
fc:52:46:1b:43:6b:9c:5a:5f:da:f1:92:0a:b1:b9:
f2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E7:92:95:C1:FD:B8:41:10:53:7C:FA:57:58:DB:75:8A:27:A6:72
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ueeSlcH9uEEQU3z6V1jbdYonpnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.190.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:4a:38:ee:44:51:34:f4:cf:9c:f4:e8:10:39:f6:93:cb:f4:
d0:ed:9a:56:bb:4b:b6:3f:08:f4:e0:80:7f:a0:09:af:00:80:
61:29:31:b5:c9:fc:25:4d:be:2d:3a:a9:1b:1d:00:2b:85:20:
be:b7:3b:68:db:94:7c:3a:78:d1:62:1b:ea:79:7f:b9:b2:4b:
7f:f0:44:33:85:2e:47:d1:c3:d2:a4:7c:7a:67:69:bb:39:b0:
1e:74:68:5d:81:8f:c3:53:b9:f0:26:70:b8:6e:30:b0:d0:37:
22:f6:16:5f:5e:f4:98:84:3c:8a:61:b9:32:99:52:8c:75:98:
60:19:76:d2:c4:47:51:fa:bf:d5:0f:88:3a:e4:6d:a4:1d:fe:
37:db:d5:1e:e5:69:83:3e:d2:38:f5:4e:9c:c1:ab:eb:e4:50:
c1:67:5d:a6:05:bb:e3:48:e8:f7:03:06:7e:85:07:e6:b9:b9:
60:ff:95:61:06:87:fc:67:1d:d4:1a:a7:79:a9:c8:98:34:5e:
6c:b0:d4:ca:ef:8f:0b:63:e0:bf:76:33:32:76:6a:a9:2d:8b:
0f:67:c1:df:72:cf:65:06:cf:fb:b9:e4:21:e4:51:47:99:57:
53:10:3b:07:74:41:70:e0:07:4f:f8:bf:13:cc:0c:09:ff:82:
74:2c:45:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKQD0F/YIPjrUzqEeDNIZgWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQxMDE1MTIwMjUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWU3OTI5NWMxZmRiODQxMTA1MzdjZmE1NzU4ZGI3NThhMjdhNjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNFBbUYDk4+PEg1zMCNJdcjiuwPG
KcdnlDiiPzbKzliC2iGJOeaJb+Er88bwPt8lMtX54wTpHqD+XAR81tnntyBhMC9P
PInyHJ/ie8AvUghVPgzDOWuKpbR2m28igJhoJYDwVS38wcg3t3qSx2c6q/GWGDmu
mjgFcrgsPx4iJAXMXKXJEHy4cr7hVs/Uo56W3Y0lweGjJyFLoHuVwQ00rbAFIPFo
EOFewMARCZSCg9SY6QPSIVZMFM0qmCfrX1XCcKzl6IWKDyJJI9b+G3leTYjVFlQe
x8tqP/NteeEhzHdKUBjNEphcNfL2n6mTgor8UkYbQ2ucWl/a8ZIKsbnyDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLnnkpXB/bhBEFN8+ldY23WKJ6ZyMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvdWVlU2xjSDl1RUVRVTN6NlYxamJkWW9ucG5JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9O+MA0G
CSqGSIb3DQEBCwUAA4IBAQCPSjjuRFE09M+c9OgQOfaTy/TQ7ZpWu0u2Pwj04IB/
oAmvAIBhKTG1yfwlTb4tOqkbHQArhSC+tzto25R8OnjRYhvqeX+5skt/8EQzhS5H
0cPSpHx6Z2m7ObAedGhdgY/DU7nwJnC4bjCw0Dci9hZfXvSYhDyKYbkymVKMdZhg
GXbSxEdR+r/VD4g65G2kHf4329Ue5WmDPtI49U6cwavr5FDBZ12mBbvjSOj3AwZ+
hQfmublg/5VhBof8Zx3UGqd5qciYNF5ssNTK748LY+C/djMydmqpLYsPZ8Hfcs9l
Bs/7ueQh5FFHmVdTEDsHdEFw4AdP+L8TzAwJ/4J0LEWF
-----END CERTIFICATE-----
Generated at Wed Nov 20 00:06:56 2024 by rpki-client on console-ams.rpki-client.org