Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/U91IoR7i_FnnqKF6o778ue40HCA.roa
File: U91IoR7i_FnnqKF6o778ue40HCA.roa (raw, json)
Hash identifier: RVS6wysrBK0Jyk086LxRLGXmUBgEMid6Icdgz4BzzWU=
Subject key identifier: 53:DD:48:A1:1E:E2:FC:59:E7:A8:A1:7A:A3:BE:FC:B9:EE:34:1C:20
Certificate issuer: /CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Certificate serial: 018A3C6C851FBD81382ED7A2FEDB808A428D
Authority key identifier: 18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/U91IoR7i_FnnqKF6o778ue40HCA.roa
Signing time: Mon 28 Aug 2023 13:54:19 +0000
ROA not before: Mon 28 Aug 2023 13:54:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8430
IP address blocks: 195.49.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:6c:85:1f:bd:81:38:2e:d7:a2:fe:db:80:8a:42:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1847b59d21ea36b3062fca80ce75c1616af5119a
Validity
Not Before: Aug 28 13:54:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53dd48a11ee2fc59e7a8a17aa3befcb9ee341c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:f2:09:79:1b:4f:87:2d:e7:99:a2:c9:bf:
e6:ac:5c:78:38:eb:d0:d9:92:75:fc:d1:e0:f1:96:
3d:04:77:f7:b3:6f:a5:82:2b:80:05:33:9a:cd:77:
7f:65:5c:59:9f:4f:43:31:31:3e:f7:80:49:2c:63:
58:91:c8:ca:53:92:9b:17:6c:dd:b4:96:28:90:7c:
4c:0c:96:d9:e1:bf:b9:70:aa:0a:f8:fa:b5:19:54:
77:5e:1a:67:af:6a:0c:5f:4b:07:4e:04:e6:f5:55:
dd:19:05:20:5a:22:5a:08:39:3a:37:6a:72:d2:cc:
81:f9:97:e9:72:ad:b3:a4:8d:76:09:33:6c:b3:49:
98:d9:8d:0f:94:0d:be:b6:33:1c:85:be:eb:d2:c9:
ce:67:ec:92:1c:5e:90:64:2d:67:6c:e0:68:e1:61:
5b:08:5e:c1:e4:97:d8:09:ec:ab:13:e5:47:b9:26:
0e:1c:66:95:d3:b7:1e:a8:b4:bb:ec:72:97:1a:2d:
aa:80:45:34:34:7e:63:55:80:52:f1:72:3b:b9:4b:
31:67:f6:e1:0f:f6:77:f2:e0:37:f3:bd:27:2e:f2:
c6:19:ef:67:84:8e:42:33:54:8d:7d:69:53:b8:84:
04:e1:b2:16:40:17:15:c7:16:24:4e:a0:50:ab:5c:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DD:48:A1:1E:E2:FC:59:E7:A8:A1:7A:A3:BE:FC:B9:EE:34:1C:20
X509v3 Authority Key Identifier:
keyid:18:47:B5:9D:21:EA:36:B3:06:2F:CA:80:CE:75:C1:61:6A:F5:11:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEe1nSHqNrMGL8qAznXBYWr1EZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/U91IoR7i_FnnqKF6o778ue40HCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3824cd-e527-4adc-a412-f91bb5179217/1/GEe1nSHqNrMGL8qAznXBYWr1EZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.49.208.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:a9:f6:77:40:b6:a9:97:b8:27:55:0f:6c:46:48:ad:a1:5f:
98:04:b9:d6:46:4c:6b:bd:1b:fb:b5:96:aa:5f:23:a1:ed:0b:
77:58:2f:c4:e9:a0:8f:8f:5c:57:db:32:0b:ba:52:a0:39:69:
e3:0d:1c:47:10:83:f1:ee:9b:52:4b:1f:23:8b:4c:d6:68:b5:
ff:ef:fa:ee:d8:3c:77:b5:a5:f2:72:e0:6f:08:63:c4:02:c6:
be:54:5d:a9:c6:45:85:69:6e:c2:34:1f:b2:51:59:0c:89:e6:
dd:05:d4:a3:ae:58:fb:50:a4:a2:7a:cf:77:17:37:fa:39:11:
c0:3b:e3:9a:21:57:ad:c6:0a:f6:53:bd:69:74:6f:35:f4:0b:
f4:93:db:a8:f2:7c:5b:d1:01:3f:59:73:7f:67:29:bf:cb:13:
51:c3:39:44:14:76:5a:75:bf:02:2e:06:6c:c9:4b:dd:5c:07:
62:bb:7f:58:13:62:48:14:e3:e4:8c:92:b7:b5:d0:c2:76:fe:
41:0c:a9:af:b3:96:8a:49:3c:25:ff:49:cf:75:ea:19:94:6b:
bd:53:27:e9:b6:0b:b5:88:2d:fd:a0:e6:cb:08:11:6f:0b:42:
b9:1d:bb:77:0d:7a:6c:a9:94:27:ea:fc:33:6b:26:2e:3a:b5:
e3:43:c2:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYo8bIUfvYE4Ltei/tuAikKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NDdiNTlkMjFlYTM2YjMwNjJmY2E4MGNlNzVjMTYxNmFm
NTExOWEwHhcNMjMwODI4MTM1NDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2RkNDhhMTFlZTJmYzU5ZTdhOGExN2FhM2JlZmNiOWVlMzQxYzIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRXyCXkbT4ct55miyb/mrFx4OOvQ
2ZJ1/NHg8ZY9BHf3s2+lgiuABTOazXd/ZVxZn09DMTE+94BJLGNYkcjKU5KbF2zd
tJYokHxMDJbZ4b+5cKoK+Pq1GVR3Xhpnr2oMX0sHTgTm9VXdGQUgWiJaCDk6N2py
0syB+Zfpcq2zpI12CTNss0mY2Y0PlA2+tjMchb7r0snOZ+ySHF6QZC1nbOBo4WFb
CF7B5JfYCeyrE+VHuSYOHGaV07ceqLS77HKXGi2qgEU0NH5jVYBS8XI7uUsxZ/bh
D/Z38uA3870nLvLGGe9nhI5CM1SNfWlTuIQE4bIWQBcVxxYkTqBQq1yZKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFPdSKEe4vxZ56iheqO+/LnuNBwgMB8GA1UdIwQY
MBaAFBhHtZ0h6jazBi/KgM51wWFq9RGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTIt
ZjkxYmI1MTc5MjE3LzEvVTkxSW9SN2lfRm5ucUtGNm83Nzh1ZTQwSENBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zODI0Y2QtZTUyNy00YWRjLWE0MTItZjkxYmI1MTc5MjE3
LzEvR0VlMW5TSHFOck1HTDhxQXpuWEJZV3IxRVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzHQMA0G
CSqGSIb3DQEBCwUAA4IBAQCaqfZ3QLapl7gnVQ9sRkitoV+YBLnWRkxrvRv7tZaq
XyOh7Qt3WC/E6aCPj1xX2zILulKgOWnjDRxHEIPx7ptSSx8ji0zWaLX/7/ru2Dx3
taXycuBvCGPEAsa+VF2pxkWFaW7CNB+yUVkMiebdBdSjrlj7UKSies93Fzf6ORHA
O+OaIVetxgr2U71pdG819Av0k9uo8nxb0QE/WXN/Zym/yxNRwzlEFHZadb8CLgZs
yUvdXAdiu39YE2JIFOPkjJK3tdDCdv5BDKmvs5aKSTwl/0nPdeoZlGu9Uyfptgu1
iC39oObLCBFvC0K5Hbt3DXpsqZQn6vwzayYuOrXjQ8Is
-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:26 2024 by rpki-client on console-fra.rpki-client.org