Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/IENGrFGJ4LI8YB4s3yWKwrkzUME.roa
File: IENGrFGJ4LI8YB4s3yWKwrkzUME.roa (raw, json)
Hash identifier: u+44pLZGZ+pXn6Uc9PqD2kHwr49hQx/JCjya9jcO2Dk=
Subject key identifier: 20:43:46:AC:51:89:E0:B2:3C:60:1E:2C:DF:25:8A:C2:B9:33:50:C1
Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial: 018571D7DD22F0CE0690FBECE2E07DFC7ED0
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/IENGrFGJ4LI8YB4s3yWKwrkzUME.roa
Signing time: Mon 02 Jan 2023 09:37:30 +0000
ROA not before: Mon 02 Jan 2023 09:37:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8708
IP address blocks: 194.105.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:dd:22:f0:ce:06:90:fb:ec:e2:e0:7d:fc:7e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Validity
Not Before: Jan 2 09:37:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=204346ac5189e0b23c601e2cdf258ac2b93350c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:4d:91:90:4f:f8:db:4a:d8:a0:51:af:4b:
2f:d8:c9:05:2a:65:25:03:f5:88:f6:19:18:76:46:
b1:1f:35:c9:8f:5a:65:9e:18:67:7b:a0:aa:ae:f4:
b2:ac:9c:c9:27:0f:79:3a:aa:7e:b1:ea:2b:d1:42:
6a:e1:25:3d:62:b0:91:6d:47:5a:7a:89:af:c5:e7:
9a:d2:de:c6:24:8f:ef:95:13:5d:a9:0c:eb:b5:73:
6b:c1:9a:c7:4f:d7:b0:17:ed:d8:a7:e1:62:92:be:
8f:6e:cc:c7:37:48:71:dd:88:59:16:78:ae:2d:e7:
9c:fe:ef:33:9b:67:2c:1a:8f:b2:6c:68:fc:f3:f2:
04:de:3d:22:74:44:ad:f5:90:8f:d5:ca:94:d5:02:
9f:97:20:d3:82:5a:b0:ad:11:72:1f:85:86:22:d4:
a4:b6:52:04:36:f1:1d:79:fa:c2:f6:a1:15:7b:e9:
fb:88:77:bb:bf:71:34:a2:21:69:70:70:a4:65:b3:
c1:71:60:77:47:4f:a9:80:ca:25:07:fd:7c:39:47:
92:08:c5:27:3f:f6:29:b7:3a:82:70:39:30:da:63:
21:62:f9:1c:d4:8a:4b:b1:45:e1:49:ef:9c:a6:50:
2e:be:14:b1:b1:45:21:70:04:db:e6:7c:e5:bb:21:
cc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:43:46:AC:51:89:E0:B2:3C:60:1E:2C:DF:25:8A:C2:B9:33:50:C1
X509v3 Authority Key Identifier:
keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/IENGrFGJ4LI8YB4s3yWKwrkzUME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.19.0/24
Signature Algorithm: sha256WithRSAEncryption
94:cd:d0:21:35:87:dd:39:44:af:ea:b5:e6:29:01:13:de:8d:
bd:6f:81:5e:07:6a:85:90:4e:87:85:23:39:cc:34:f2:90:e5:
fe:2d:2d:a3:ff:f6:45:94:65:9e:88:06:b7:00:3b:4b:e0:32:
b4:85:23:b6:ed:b8:d6:5b:9c:f3:f5:7b:d2:67:d9:71:27:eb:
57:c7:63:b4:38:af:7c:f5:f0:bf:a1:55:eb:14:6e:7f:d4:59:
b9:9b:45:20:f4:cd:d4:e3:88:da:9c:b7:fa:ee:ea:62:12:e6:
51:2e:ed:b8:4a:bc:45:e7:2e:4e:e3:49:f2:6e:75:a6:68:7a:
c0:ad:0f:71:b0:e5:7d:92:00:61:98:62:52:2d:3c:d2:c1:84:
c2:44:50:9e:d1:17:69:09:99:dc:5e:86:fd:53:b1:a5:b8:65:
7d:1f:0e:80:a8:9f:4a:17:83:c7:bb:93:51:19:05:de:fe:17:
87:7a:da:76:5a:01:4a:86:29:7c:3c:f8:86:c7:5b:6a:54:27:
83:f6:41:ea:76:e1:cb:a5:18:96:94:c9:aa:a3:cb:25:d8:d4:
0e:2b:15:1b:c5:cc:51:3d:58:96:0c:5b:b3:61:d8:22:7e:61:
5a:7f:95:32:e6:8c:e2:b1:77:a5:80:75:2b:37:e4:9d:35:c1:
16:e3:8a:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx190i8M4GkPvs4uB9/H7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZTEzOWFmMDg5OWY1ZDZiNWIzMjU4MTM3M2VkYTMwMzdl
YTMwYzAwHhcNMjMwMTAyMDkzNzMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDQzNDZhYzUxODllMGIyM2M2MDFlMmNkZjI1OGFjMmI5MzM1MGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrtNkZBP+NtK2KBRr0sv2MkFKmUl
A/WI9hkYdkaxHzXJj1plnhhne6CqrvSyrJzJJw95Oqp+seor0UJq4SU9YrCRbUda
eomvxeea0t7GJI/vlRNdqQzrtXNrwZrHT9ewF+3Yp+Fikr6PbszHN0hx3YhZFniu
Leec/u8zm2csGo+ybGj88/IE3j0idESt9ZCP1cqU1QKflyDTglqwrRFyH4WGItSk
tlIENvEdefrC9qEVe+n7iHe7v3E0oiFpcHCkZbPBcWB3R0+pgMolB/18OUeSCMUn
P/YptzqCcDkw2mMhYvkc1IpLsUXhSe+cplAuvhSxsUUhcATb5nzluyHMVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCBDRqxRieCyPGAeLN8lisK5M1DBMB8GA1UdIwQY
MBaAFIrhOa8ImfXWtbMlgTc+2jA36jDAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEt
ZjllMmMyZmRiZjM1LzEvSUVOR3JGR0o0TEk4WUI0czN5V0t3cmt6VU1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEtZjllMmMyZmRiZjM1
LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmkTMA0G
CSqGSIb3DQEBCwUAA4IBAQCUzdAhNYfdOUSv6rXmKQET3o29b4FeB2qFkE6HhSM5
zDTykOX+LS2j//ZFlGWeiAa3ADtL4DK0hSO27bjWW5zz9XvSZ9lxJ+tXx2O0OK98
9fC/oVXrFG5/1Fm5m0Ug9M3U44janLf67upiEuZRLu24SrxF5y5O40nybnWmaHrA
rQ9xsOV9kgBhmGJSLTzSwYTCRFCe0RdpCZncXob9U7GluGV9Hw6AqJ9KF4PHu5NR
GQXe/heHetp2WgFKhil8PPiGx1tqVCeD9kHqduHLpRiWlMmqo8sl2NQOKxUbxcxR
PViWDFuzYdgifmFaf5Uy5ozisXelgHUrN+SdNcEW44pI
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:36 2024 by rpki-client on console-ams.rpki-client.org