Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FXobdihkXl4reFdI81TL8VerQZg.roa
File: FXobdihkXl4reFdI81TL8VerQZg.roa (raw, json)
Hash identifier: 8fYj5+rK4h7GkzvFFvuUXe4TTUiJUWZqQ67RHrkzY0Q=
Subject key identifier: 15:7A:1B:76:28:64:5E:5E:2B:78:57:48:F3:54:CB:F1:57:AB:41:98
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018BC99B91554E628130313F07ABB08EB4F8
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FXobdihkXl4reFdI81TL8VerQZg.roa
Signing time: Mon 13 Nov 2023 16:54:57 +0000
ROA not before: Mon 13 Nov 2023 16:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212416
IP address blocks: 194.104.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c9:9b:91:55:4e:62:81:30:31:3f:07:ab:b0:8e:b4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Nov 13 16:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=157a1b7628645e5e2b785748f354cbf157ab4198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:4c:dd:02:4d:f9:8b:0c:5d:c7:90:88:15:
a9:48:fc:76:e3:9c:8a:e8:32:b3:46:94:05:bb:85:
6e:d7:af:81:e1:b8:cd:e8:9e:b6:9d:fb:b9:30:67:
83:b1:6f:f6:03:83:d0:b1:53:a1:6e:2b:c4:16:18:
43:31:d9:b4:f7:9d:1a:54:d6:aa:58:c5:51:07:6c:
44:bc:ca:65:bc:5e:43:c5:f3:eb:42:1c:0d:d0:0a:
19:63:62:4e:4c:b6:ae:91:9e:70:7b:6e:66:a7:64:
4a:ec:36:cc:64:15:88:9c:61:a6:8f:56:a9:0f:62:
79:20:92:07:bb:e6:0d:1f:55:34:4a:57:03:c7:39:
65:58:38:72:f1:03:47:84:2a:df:d4:41:ba:4e:87:
34:0e:e2:78:9e:d9:e6:5d:95:7c:1e:8a:24:84:d5:
4e:97:c3:35:52:84:24:02:c2:cd:ac:4e:94:82:08:
f9:d0:4b:b6:30:88:40:5b:b8:92:bd:cb:0a:e5:18:
4c:9b:70:59:ec:d2:0d:28:55:a4:5d:4d:2f:bf:57:
bb:63:57:4d:4d:45:f2:79:06:8e:e7:08:f1:50:a9:
56:bf:5c:6d:d3:28:61:7e:48:68:5c:0b:61:86:e9:
d6:56:25:8d:6b:c1:ca:02:8e:92:54:7b:64:01:53:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:1B:76:28:64:5E:5E:2B:78:57:48:F3:54:CB:F1:57:AB:41:98
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FXobdihkXl4reFdI81TL8VerQZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.131.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b0:a0:0e:19:1b:89:71:20:cf:a0:d2:e6:7c:3d:36:c6:4f:
7a:95:68:8d:1f:f2:20:cf:6a:05:9a:f3:26:21:34:8b:27:5b:
75:9b:1b:da:54:ff:c7:65:26:02:dd:62:c9:f4:bd:3e:3e:b6:
f8:57:06:41:6c:51:15:4d:64:9d:cf:bb:b0:bc:13:d4:56:e8:
eb:af:42:ca:07:59:3b:0c:82:0a:eb:5d:98:2c:d4:a9:48:cf:
1b:18:49:eb:d3:15:df:d0:9b:5b:7b:15:74:56:30:d5:2d:eb:
99:fc:7e:d0:11:67:27:93:36:47:be:a8:a7:d8:62:14:15:fd:
10:97:e2:bd:de:43:a2:28:09:ff:43:fa:a5:64:ff:16:77:46:
c6:e2:56:95:3c:7f:b9:42:57:4d:41:93:0c:84:8b:11:43:d1:
85:4f:3b:71:b0:00:69:24:5c:02:05:aa:24:fa:4c:58:13:5e:
cd:89:e2:4d:f5:0b:00:cf:a4:98:50:62:bd:96:8c:f7:84:d1:
a1:50:fd:88:53:1d:a7:95:57:32:7a:f8:a4:89:41:8c:9e:42:
5d:39:80:08:a8:f3:2b:0b:3e:48:9d:d2:fe:59:5a:9b:1e:3c:
de:a9:9f:64:9e:f8:73:de:28:d7:37:97:38:ae:33:14:6b:64:
28:65:0c:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvJm5FVTmKBMDE/B6uwjrT4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjMxMTEzMTY1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTdhMWI3NjI4NjQ1ZTVlMmI3ODU3NDhmMzU0Y2JmMTU3YWI0MTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLZM3QJN+YsMXceQiBWpSPx245yK
6DKzRpQFu4Vu16+B4bjN6J62nfu5MGeDsW/2A4PQsVOhbivEFhhDMdm0950aVNaq
WMVRB2xEvMplvF5DxfPrQhwN0AoZY2JOTLaukZ5we25mp2RK7DbMZBWInGGmj1ap
D2J5IJIHu+YNH1U0SlcDxzllWDhy8QNHhCrf1EG6Toc0DuJ4ntnmXZV8HookhNVO
l8M1UoQkAsLNrE6Uggj50Eu2MIhAW7iSvcsK5RhMm3BZ7NINKFWkXU0vv1e7Y1dN
TUXyeQaO5wjxUKlWv1xt0yhhfkhoXAthhunWViWNa8HKAo6SVHtkAVMHOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBV6G3YoZF5eK3hXSPNUy/FXq0GYMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvRlhvYmRpaGtYbDRyZUZkSTgxVEw4VmVyUVpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmiDMA0G
CSqGSIb3DQEBCwUAA4IBAQB3sKAOGRuJcSDPoNLmfD02xk96lWiNH/Igz2oFmvMm
ITSLJ1t1mxvaVP/HZSYC3WLJ9L0+Prb4VwZBbFEVTWSdz7uwvBPUVujrr0LKB1k7
DIIK612YLNSpSM8bGEnr0xXf0JtbexV0VjDVLeuZ/H7QEWcnkzZHvqin2GIUFf0Q
l+K93kOiKAn/Q/qlZP8Wd0bG4laVPH+5QldNQZMMhIsRQ9GFTztxsABpJFwCBaok
+kxYE17NieJN9QsAz6SYUGK9loz3hNGhUP2IUx2nlVcyevikiUGMnkJdOYAIqPMr
Cz5IndL+WVqbHjzeqZ9knvhz3ijXN5c4rjMUa2QoZQyG
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:19 2024 by rpki-client on console-ams.rpki-client.org