Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/b8ukzcDRrK6-NHJ0zwsInytJ2gE.roa
File: b8ukzcDRrK6-NHJ0zwsInytJ2gE.roa (raw, json)
Hash identifier: +THw4dUUuAw5AGM0pL1XLN4Sl/0JD4I0KEtdoFDI5/8=
Subject key identifier: 6F:CB:A4:CD:C0:D1:AC:AE:BE:34:72:74:CF:0B:08:9F:2B:49:DA:01
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 01856F2FE409E65B5A312E816A8B908DF2C2
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/b8ukzcDRrK6-NHJ0zwsInytJ2gE.roa
Signing time: Sun 01 Jan 2023 21:14:47 +0000
ROA not before: Sun 01 Jan 2023 21:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34353
IP address blocks: 193.178.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:e4:09:e6:5b:5a:31:2e:81:6a:8b:90:8d:f2:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Jan 1 21:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fcba4cdc0d1acaebe347274cf0b089f2b49da01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bb:b5:00:54:1a:f2:cf:2e:a1:ea:5c:92:f5:
95:06:c5:c2:6f:d9:0e:75:9e:d0:fb:c0:2c:c1:64:
5a:37:9f:e1:47:ec:e8:49:d8:68:d6:2a:fe:c4:b3:
cc:fd:fe:bd:8c:5b:7f:e5:48:fe:3c:d6:ab:c4:af:
21:c1:51:92:2b:c9:d7:2e:f3:09:4c:da:5c:65:17:
bc:c1:1f:75:dc:3a:fc:ea:b4:3b:8f:e8:cd:06:b9:
6e:11:eb:8b:85:e9:0c:b6:38:bf:1c:9a:b1:fd:c1:
db:a3:ca:29:61:cb:ad:3c:a1:2d:f8:d6:aa:d2:2c:
c9:c3:2f:e5:98:1b:72:d5:c2:f6:f2:10:0b:4c:8a:
a4:ab:07:e8:a9:f6:4f:6e:71:d5:fe:d0:f9:e4:ce:
17:9e:35:0f:6c:7e:c3:aa:59:c2:4d:14:09:5d:cc:
86:e4:10:8c:56:46:67:c1:0c:1c:cb:9d:78:8e:fe:
9c:92:95:a1:5a:bf:cf:41:70:99:14:92:58:a4:ba:
18:e5:1b:66:71:90:1e:38:15:15:88:65:1d:b0:c5:
50:45:3e:10:da:c8:5c:07:b9:68:de:32:98:1d:57:
58:f8:fe:08:1e:df:e9:3a:43:ee:2a:dc:86:46:b0:
16:62:10:c8:a6:d0:c2:4d:08:d6:61:c3:55:a0:02:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CB:A4:CD:C0:D1:AC:AE:BE:34:72:74:CF:0B:08:9F:2B:49:DA:01
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/b8ukzcDRrK6-NHJ0zwsInytJ2gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.141.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:1e:56:31:80:a3:49:01:e5:1a:2e:d6:54:7d:99:bd:87:b4:
2c:28:f3:4a:7b:7e:d0:43:c0:ae:6a:fb:82:10:f5:7a:88:34:
5a:7b:b4:ef:df:fa:f2:a6:b2:d4:23:9e:58:f1:5b:bf:64:3e:
51:b8:c6:a0:14:12:f2:94:8b:18:32:c7:d7:74:10:db:1c:4a:
08:a9:09:85:e1:19:a6:14:b1:5b:2d:12:5f:ba:6f:9c:a1:23:
91:0d:fe:aa:04:36:c5:72:c2:91:86:5b:36:40:ae:43:fe:65:
ea:2d:45:3c:8b:c9:42:9d:b1:5d:4f:4d:ab:9b:24:64:05:54:
2f:c1:8a:e2:c6:1b:ad:96:ba:d4:8f:10:ae:77:8d:b5:3c:b2:
86:39:23:9e:cd:92:58:75:bd:a0:a1:03:cb:04:f7:85:02:76:
9d:f4:38:4e:8f:32:f3:5c:8d:cb:fb:54:1f:03:7e:7a:21:a2:
8c:2f:44:32:ce:6b:f4:ee:f5:a1:9d:f2:a7:db:3d:7f:f4:89:
20:72:95:f9:6e:a9:ae:ae:0c:ae:bd:b8:b3:b7:04:36:29:f3:
ed:23:1c:ed:1e:24:28:55:33:5e:f1:2e:a2:a9:a4:6e:8b:3a:
ed:39:f4:f4:3c:94:07:e5:ed:2e:ca:ea:5e:ee:e4:6c:96:0b:
d1:c7:78:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvL+QJ5ltaMS6BaouQjfLCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDU2Y2M1YjdjZTNjMjA3OWY3ODZmZWMxZGZiY2IyNTI0
Mzk5NDEwHhcNMjMwMTAxMjExNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmNiYTRjZGMwZDFhY2FlYmUzNDcyNzRjZjBiMDg5ZjJiNDlkYTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLu1AFQa8s8uoepckvWVBsXCb9kO
dZ7Q+8AswWRaN5/hR+zoSdho1ir+xLPM/f69jFt/5Uj+PNarxK8hwVGSK8nXLvMJ
TNpcZRe8wR913Dr86rQ7j+jNBrluEeuLhekMtji/HJqx/cHbo8opYcutPKEt+Naq
0izJwy/lmBty1cL28hALTIqkqwfoqfZPbnHV/tD55M4XnjUPbH7DqlnCTRQJXcyG
5BCMVkZnwQwcy514jv6ckpWhWr/PQXCZFJJYpLoY5RtmcZAeOBUViGUdsMVQRT4Q
2shcB7lo3jKYHVdY+P4IHt/pOkPuKtyGRrAWYhDIptDCTQjWYcNVoALqUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG/LpM3A0ayuvjRydM8LCJ8rSdoBMB8GA1UdIwQY
MBaAFB9FbMW3zjwgefeG/sHfvLJSQ5lBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzIt
YmQ3ZDM0NTFhYTY2LzEvYjh1a3pjRFJySzYtTkhKMHp3c0lueXRKMmdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9kYWUyOTAtMWI4NC00ZmQwLTkwNzItYmQ3ZDM0NTFhYTY2
LzEvSDBWc3hiZk9QQ0I1OTRiLXdkLThzbEpEbVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbKNMA0G
CSqGSIb3DQEBCwUAA4IBAQAbHlYxgKNJAeUaLtZUfZm9h7QsKPNKe37QQ8CuavuC
EPV6iDRae7Tv3/ryprLUI55Y8Vu/ZD5RuMagFBLylIsYMsfXdBDbHEoIqQmF4Rmm
FLFbLRJfum+coSORDf6qBDbFcsKRhls2QK5D/mXqLUU8i8lCnbFdT02rmyRkBVQv
wYrixhutlrrUjxCud421PLKGOSOezZJYdb2goQPLBPeFAnad9DhOjzLzXI3L+1Qf
A356IaKML0Qyzmv07vWhnfKn2z1/9IkgcpX5bqmurgyuvbiztwQ2KfPtIxztHiQo
VTNe8S6iqaRuizrtOfT0PJQH5e0uyupe7uRslgvRx3iB
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:23 2024 by rpki-client on console-ams.rpki-client.org