Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1UlAokGqZR0mrDqZmX_GtGWtevc.roa
File: 1UlAokGqZR0mrDqZmX_GtGWtevc.roa (raw, json)
Hash identifier: JtHH/du5Q8wLVWZmXJjbqjZnMeNtybz3NdXUKfTTawk=
Subject key identifier: D5:49:40:A2:41:AA:65:1D:26:AC:3A:99:99:7F:C6:B4:65:AD:7A:F7
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018FE44F3709AFF2415375A70ABDB05C83D2
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1UlAokGqZR0mrDqZmX_GtGWtevc.roa
Signing time: Tue 04 Jun 2024 17:32:27 +0000
ROA not before: Tue 04 Jun 2024 17:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 146.19.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 09:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e4:4f:37:09:af:f2:41:53:75:a7:0a:bd:b0:5c:83:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 4 17:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d54940a241aa651d26ac3a99997fc6b465ad7af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:cd:aa:eb:0c:86:6c:e2:5e:b0:75:a9:ed:
7d:e0:bb:4f:ab:2b:9a:8f:25:d3:ba:ce:69:b7:9b:
eb:bd:69:db:84:75:f5:1e:4c:97:da:15:45:72:80:
de:95:0f:68:51:3b:9d:68:a8:6f:25:a2:ce:af:5c:
51:ae:2e:d8:17:08:a4:13:66:a4:ea:8f:07:04:d2:
bd:fe:88:b7:9c:7f:c7:73:22:b7:4c:8d:c2:00:29:
c1:fa:31:57:ca:ca:08:03:3d:10:7f:37:b8:14:32:
2d:7e:95:5b:1d:fc:78:c2:5c:e2:51:d8:ee:6c:18:
be:bd:ab:5e:88:29:ac:27:6d:d8:f7:8d:e4:b1:04:
8b:29:ee:bf:44:ff:f0:6b:a2:28:de:2e:a4:25:ab:
f1:e1:15:54:ab:db:6b:72:a8:b6:40:61:eb:01:d7:
83:b4:17:9a:18:88:04:dc:8c:ff:09:4b:6a:8a:ec:
89:95:b2:19:df:8e:78:10:ea:2c:af:e3:e0:16:6a:
7e:71:35:0d:31:1d:e5:4b:a0:39:56:c9:fb:1d:69:
7a:d2:51:68:7a:ef:99:a1:93:f7:3d:8c:00:72:a2:
9d:53:e0:26:dd:33:d1:aa:15:67:0a:d3:90:be:a6:
f4:4e:46:d8:35:16:83:72:d1:54:d3:53:76:e0:98:
66:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:49:40:A2:41:AA:65:1D:26:AC:3A:99:99:7F:C6:B4:65:AD:7A:F7
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/1UlAokGqZR0mrDqZmX_GtGWtevc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.93.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:da:a6:88:ff:55:aa:27:9c:8e:8f:72:64:5b:05:d0:ac:b7:
bd:8b:1d:d5:40:3c:3f:06:27:c6:0e:c9:67:88:ce:61:98:3f:
17:c6:f7:eb:1a:e0:86:63:5e:6b:46:06:f5:7b:ee:8e:39:eb:
99:3b:18:74:70:15:11:4b:92:54:d0:e0:ba:38:e3:40:e2:4b:
58:9a:91:b4:dd:9f:41:f2:c7:10:df:36:f3:8c:78:02:3e:a3:
37:ee:94:06:76:83:d6:e7:fd:42:eb:de:f6:9a:bd:91:d4:8d:
c9:ec:85:59:02:e0:7b:50:61:1f:ab:a2:f8:a7:82:7f:47:5a:
68:52:a9:35:a2:79:ed:a7:8c:01:cf:d9:82:46:d9:4c:e7:40:
5e:0e:f4:47:7c:74:9f:c2:48:27:1a:2d:8c:ee:37:7d:20:08:
47:97:d1:58:5c:28:f9:a3:ca:fc:8e:1f:5a:e2:9d:60:de:ae:
a6:f8:94:8a:dd:0e:0a:ee:19:e7:44:1f:99:85:e6:4e:31:92:
1e:fd:f8:75:c1:34:a6:ca:f9:73:33:dd:25:1b:03:f2:78:d1:
a3:29:93:af:cf:72:84:7a:a1:75:c9:38:fa:c4:79:89:3d:19:
f8:53:33:e2:e5:2b:10:58:5a:b4:04:51:26:d9:c5:d2:cd:5b:
cd:9c:9b:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/kTzcJr/JBU3WnCr2wXIPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjQwNjA0MTczMjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTQ5NDBhMjQxYWE2NTFkMjZhYzNhOTk5OTdmYzZiNDY1YWQ3YWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQHNqusMhmziXrB1qe194LtPqyua
jyXTus5pt5vrvWnbhHX1HkyX2hVFcoDelQ9oUTudaKhvJaLOr1xRri7YFwikE2ak
6o8HBNK9/oi3nH/HcyK3TI3CACnB+jFXysoIAz0Qfze4FDItfpVbHfx4wlziUdju
bBi+vateiCmsJ23Y943ksQSLKe6/RP/wa6Io3i6kJavx4RVUq9trcqi2QGHrAdeD
tBeaGIgE3Iz/CUtqiuyJlbIZ3454EOosr+PgFmp+cTUNMR3lS6A5Vsn7HWl60lFo
eu+ZoZP3PYwAcqKdU+Am3TPRqhVnCtOQvqb0TkbYNRaDctFU01N24JhmGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNVJQKJBqmUdJqw6mZl/xrRlrXr3MB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvMVVsQW9rR3FaUjBtckRxWm1YX0d0R1d0ZXZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhNdMA0G
CSqGSIb3DQEBCwUAA4IBAQCa2qaI/1WqJ5yOj3JkWwXQrLe9ix3VQDw/BifGDsln
iM5hmD8XxvfrGuCGY15rRgb1e+6OOeuZOxh0cBURS5JU0OC6OONA4ktYmpG03Z9B
8scQ3zbzjHgCPqM37pQGdoPW5/1C6972mr2R1I3J7IVZAuB7UGEfq6L4p4J/R1po
Uqk1onntp4wBz9mCRtlM50BeDvRHfHSfwkgnGi2M7jd9IAhHl9FYXCj5o8r8jh9a
4p1g3q6m+JSK3Q4K7hnnRB+ZheZOMZIe/fh1wTSmyvlzM90lGwPyeNGjKZOvz3KE
eqF1yTj6xHmJPRn4UzPi5SsQWFq0BFEm2cXSzVvNnJvW
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:19 2024 by rpki-client on console-ams.rpki-client.org