Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/3-0g1k6C_BKqJpPO91E4ew9gNH4.roa
File: 3-0g1k6C_BKqJpPO91E4ew9gNH4.roa (raw, json)
Hash identifier: IdF7/lZ0kibY8krAYRIQVM7q6wz6Z5qhJVVCU1vpYHY=
Subject key identifier: DF:ED:20:D6:4E:82:FC:12:AA:26:93:CE:F7:51:38:7B:0F:60:34:7E
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019206564091F34CFFCAC0FE76518AB61EF3
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/3-0g1k6C_BKqJpPO91E4ew9gNH4.roa
Signing time: Wed 18 Sep 2024 18:12:48 +0000
ROA not before: Wed 18 Sep 2024 18:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214943
IP address blocks: 193.168.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Oct 2024 15:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:06:56:40:91:f3:4c:ff:ca:c0:fe:76:51:8a:b6:1e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Sep 18 18:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfed20d64e82fc12aa2693cef751387b0f60347e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a7:0f:e0:40:b8:dd:17:30:98:93:6d:a1:c2:
2c:73:40:65:03:84:e7:6d:02:18:b3:2c:ad:51:ba:
85:f8:2c:69:4b:89:3c:e6:4e:69:5f:d0:7b:ff:f7:
ca:f0:fe:f6:19:0c:70:e5:80:f3:31:b6:c1:c0:9d:
99:ea:b4:53:93:57:d0:ca:bb:03:d3:6b:de:9a:ff:
95:2c:d9:82:44:94:2d:9f:16:61:bd:5b:71:30:7c:
d4:3a:86:1c:e1:2b:1a:81:c4:06:98:77:16:d1:28:
9b:b6:54:74:92:53:0a:50:cc:8f:d0:3b:60:e7:e1:
41:04:2d:25:94:1c:a9:2b:0d:77:a8:6a:2a:12:04:
16:2c:34:8b:d3:ec:11:17:b1:67:98:bd:73:1c:75:
8d:d6:b5:38:72:d8:a2:d7:b9:86:4e:d8:66:d1:3f:
c5:b2:02:86:15:f0:44:05:ec:c3:54:4c:bd:be:68:
da:5a:24:4d:3e:e8:a8:df:5f:77:91:77:5e:f0:34:
4c:6b:dd:b7:1c:46:39:f6:5e:cf:1c:18:d1:96:01:
ac:2d:95:cf:a5:53:5a:6e:9f:ab:40:ce:ca:e0:34:
0b:63:6d:ec:63:57:bd:6a:ce:6b:bb:7c:73:0b:04:
23:55:ee:d8:89:0a:52:68:a7:0c:9f:62:89:eb:01:
56:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:ED:20:D6:4E:82:FC:12:AA:26:93:CE:F7:51:38:7B:0F:60:34:7E
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/3-0g1k6C_BKqJpPO91E4ew9gNH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.200.0/24
Signature Algorithm: sha256WithRSAEncryption
83:fc:e4:7c:b8:3b:73:8f:6b:27:d0:c4:ee:96:a8:fa:eb:10:
88:ad:21:8a:af:19:ed:04:48:a1:96:88:2d:28:05:76:29:36:
b3:84:fc:ed:46:a4:ec:69:7c:19:af:df:28:b6:24:fe:b9:76:
46:f3:3d:ae:62:51:0f:d5:a3:28:55:28:86:dc:ae:32:8b:9b:
5a:1f:cc:99:35:c7:0f:46:b5:fe:71:77:77:40:03:d9:ec:9e:
4d:a3:57:49:61:01:62:f1:ad:64:53:d1:ef:de:05:17:c3:0d:
97:87:6b:7f:e7:c9:ab:c5:e2:43:32:70:a1:36:c8:0c:79:4b:
82:f6:d7:04:df:f0:85:cd:00:76:ef:95:85:62:44:a2:22:a9:
1a:bb:79:26:3d:4a:4d:db:b2:4b:5c:38:ec:d2:4f:c6:c0:c8:
da:3f:bc:46:26:ca:22:0a:23:61:1e:95:59:95:d2:2b:b1:18:
21:51:e5:f5:f7:c0:18:90:db:a2:5f:d5:33:cc:94:8d:bf:f0:
95:74:39:a4:e9:f7:86:34:ba:c7:a4:ac:95:da:cd:df:bb:2b:
5f:1e:c3:8c:fc:eb:9e:a0:1e:22:c7:be:9e:b9:10:6d:16:db:
1b:61:6d:f6:f3:51:4e:28:48:7e:9e:b1:61:1d:07:d8:dd:b7:
7d:a5:27:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIGVkCR80z/ysD+dlGKth7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjQwOTE4MTgxMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmVkMjBkNjRlODJmYzEyYWEyNjkzY2VmNzUxMzg3YjBmNjAzNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKcP4EC43RcwmJNtocIsc0BlA4Tn
bQIYsyytUbqF+CxpS4k85k5pX9B7//fK8P72GQxw5YDzMbbBwJ2Z6rRTk1fQyrsD
02vemv+VLNmCRJQtnxZhvVtxMHzUOoYc4SsagcQGmHcW0SibtlR0klMKUMyP0Dtg
5+FBBC0llBypKw13qGoqEgQWLDSL0+wRF7FnmL1zHHWN1rU4ctii17mGTthm0T/F
sgKGFfBEBezDVEy9vmjaWiRNPuio3193kXde8DRMa923HEY59l7PHBjRlgGsLZXP
pVNabp+rQM7K4DQLY23sY1e9as5ru3xzCwQjVe7YiQpSaKcMn2KJ6wFWzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN/tINZOgvwSqiaTzvdROHsPYDR+MB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvMy0wZzFrNkNfQktxSnBQTzkxRTRldzlnTkg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwajIMA0G
CSqGSIb3DQEBCwUAA4IBAQCD/OR8uDtzj2sn0MTulqj66xCIrSGKrxntBEihlogt
KAV2KTazhPztRqTsaXwZr98otiT+uXZG8z2uYlEP1aMoVSiG3K4yi5taH8yZNccP
RrX+cXd3QAPZ7J5No1dJYQFi8a1kU9Hv3gUXww2Xh2t/58mrxeJDMnChNsgMeUuC
9tcE3/CFzQB275WFYkSiIqkau3kmPUpN27JLXDjs0k/GwMjaP7xGJsoiCiNhHpVZ
ldIrsRghUeX198AYkNuiX9UzzJSNv/CVdDmk6feGNLrHpKyV2s3fuytfHsOM/Oue
oB4ix76euRBtFtsbYW3281FOKEh+nrFhHQfY3bd9pSfs
-----END CERTIFICATE-----
Generated at Sun Oct 20 17:47:47 2024 by rpki-client on console-fra.rpki-client.org