Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/1-OjNrJk3QZMjpeA1U8YBhiDc-6Y.roa
File: 1-OjNrJk3QZMjpeA1U8YBhiDc-6Y.roa (raw, json)
Hash identifier: fzfnd/UHFVn7pw/m1FaXC3abjC2IBHClAls+IuRLwCI=
Subject key identifier: F8:E8:CD:AC:99:37:41:93:23:A5:E0:35:53:C6:01:86:20:DC:FB:A6
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 01856ECB8084244E3F8A97C24E934B9A7481
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/1-OjNrJk3QZMjpeA1U8YBhiDc-6Y.roa
Signing time: Sun 01 Jan 2023 19:25:08 +0000
ROA not before: Sun 01 Jan 2023 19:25:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200076
IP address blocks: 194.59.24.0/22 maxlen: 22
2a0c:fac0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:80:84:24:4e:3f:8a:97:c2:4e:93:4b:9a:74:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Jan 1 19:25:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8e8cdac9937419323a5e03553c6018620dcfba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c1:4f:41:6d:0f:41:d6:aa:b4:4b:e6:c3:11:
40:5f:a1:d5:13:7c:86:d4:9a:fa:85:44:e3:46:52:
c1:9b:07:ef:5e:20:40:03:93:93:99:1b:dc:b1:7d:
c3:9d:3a:33:54:3c:68:04:ba:28:2d:dd:97:90:1f:
9d:86:70:93:48:18:5a:5b:ce:40:a3:c1:bb:1d:59:
a9:29:cb:f9:7d:5b:c7:a4:94:68:01:af:be:67:5e:
32:04:df:99:33:f7:9d:89:d4:47:a1:cf:b6:15:e3:
a3:4a:27:02:6b:92:41:f8:bc:19:b7:84:35:58:63:
75:b5:36:66:eb:a4:b5:2f:03:bf:7c:76:4b:5c:fa:
cc:1f:3d:92:fc:d0:5b:d9:fc:86:cb:32:78:44:20:
b0:1f:cd:97:15:ab:71:17:b8:b3:fa:97:15:1c:be:
2f:fc:65:d1:bb:c9:8a:9a:1b:33:c8:b6:55:cc:34:
6d:2f:ac:df:6c:bb:3f:5c:b2:60:63:f1:f2:dc:a7:
81:66:e2:aa:f5:eb:cb:a4:df:e2:dd:a2:12:a0:58:
dd:c5:5d:98:2a:7b:bb:f5:00:82:4e:d3:90:20:81:
2a:d2:d9:cf:d7:d4:92:ab:96:7f:98:25:aa:5d:74:
8a:51:8c:d9:f5:a3:45:ed:c2:42:be:4f:81:5c:9b:
4c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E8:CD:AC:99:37:41:93:23:A5:E0:35:53:C6:01:86:20:DC:FB:A6
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/1-OjNrJk3QZMjpeA1U8YBhiDc-6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.24.0/22
IPv6:
2a0c:fac0::/48
Signature Algorithm: sha256WithRSAEncryption
29:0d:16:93:88:e6:19:04:74:f5:d4:5c:61:07:f8:19:2a:65:
18:9e:4c:bf:1c:83:af:ef:b3:5a:55:82:ba:e3:f3:15:cd:a2:
9f:ae:96:6b:2e:fa:ad:1a:af:34:ab:49:26:06:79:c6:05:08:
10:36:66:f1:02:e0:2e:88:f8:8b:ae:b5:91:cb:18:72:c4:14:
94:7a:1a:b8:d1:3e:4c:0a:ed:a4:a3:2a:6e:4c:d7:d0:a3:d7:
bb:bb:71:cb:e4:c9:ab:f2:87:a4:d9:a1:02:18:82:dd:05:4c:
38:38:1b:62:0d:84:f9:fa:a2:28:1a:a3:a3:ff:b3:4b:3b:1c:
e7:84:30:d3:59:5c:24:7f:2f:5f:9e:45:59:c1:34:89:63:d7:
d5:84:40:f3:d8:77:99:e5:6a:49:88:15:38:be:d3:78:ab:9a:
98:19:6c:42:61:e3:2e:68:12:31:c4:d9:ed:eb:44:a6:4c:d2:
b9:4d:26:d4:ac:1b:65:e3:43:28:c1:f1:82:d4:8e:9b:dc:7d:
d2:44:0f:cd:03:93:06:2e:02:eb:67:c2:46:40:bb:62:c4:03:
ad:a3:3a:fc:b5:f9:64:78:88:46:55:a8:9f:7d:3a:e2:56:c3:
bb:27:cc:e6:20:33:87:02:f7:f0:0e:c3:87:37:5b:3d:59:c2:
2c:70:f4:25
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVuy4CEJE4/ipfCTpNLmnSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMTMzMWVjY2Q5NmQwMmMxMDM1NzM0Y2QwMGEzOTBlODMx
MWQ5NDIwHhcNMjMwMTAxMTkyNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGU4Y2RhYzk5Mzc0MTkzMjNhNWUwMzU1M2M2MDE4NjIwZGNmYmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38FPQW0PQdaqtEvmwxFAX6HVE3yG
1Jr6hUTjRlLBmwfvXiBAA5OTmRvcsX3DnTozVDxoBLooLd2XkB+dhnCTSBhaW85A
o8G7HVmpKcv5fVvHpJRoAa++Z14yBN+ZM/edidRHoc+2FeOjSicCa5JB+LwZt4Q1
WGN1tTZm66S1LwO/fHZLXPrMHz2S/NBb2fyGyzJ4RCCwH82XFatxF7iz+pcVHL4v
/GXRu8mKmhszyLZVzDRtL6zfbLs/XLJgY/Hy3KeBZuKq9evLpN/i3aISoFjdxV2Y
Knu79QCCTtOQIIEq0tnP19SSq5Z/mCWqXXSKUYzZ9aNF7cJCvk+BXJtM4wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPjozayZN0GTI6XgNVPGAYYg3PumMB8GA1UdIwQY
MBaAFGATMezNltAsEDVzTNAKOQ6DEdlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUJNeDdNMlcwQ3dRTlhOTTBBbzVEb01SMlVJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iZjY1NmItZmY5My00NTRiLWEzOWUt
M2IxMTMxZTUwNGI4LzEvMS1Pak5ySmszUVpNanBlQTFVOFlCaGlEYy02WS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTYvYmY2NTZiLWZmOTMtNDU0Yi1hMzllLTNiMTEzMWU1MDRi
OC8xL1lCTXg3TTJXMEN3UU5YTk0wQW81RG9NUjJVSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAsI7GDAP
BAIAAjAJAwcAKgz6wAAAMA0GCSqGSIb3DQEBCwUAA4IBAQApDRaTiOYZBHT11Fxh
B/gZKmUYnky/HIOv77NaVYK64/MVzaKfrpZrLvqtGq80q0kmBnnGBQgQNmbxAuAu
iPiLrrWRyxhyxBSUehq40T5MCu2koypuTNfQo9e7u3HL5Mmr8oek2aECGILdBUw4
OBtiDYT5+qIoGqOj/7NLOxznhDDTWVwkfy9fnkVZwTSJY9fVhEDz2HeZ5WpJiBU4
vtN4q5qYGWxCYeMuaBIxxNnt60SmTNK5TSbUrBtl40MowfGC1I6b3H3SRA/NA5MG
LgLrZ8JGQLtixAOtozr8tflkeIhGVaiffTriVsO7J8zmIDOHAvfwDsOHN1s9WcIs
cPQl
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:25 2024 by rpki-client on console-ams.rpki-client.org