Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/XScDtjCJp1wR5f-c5YEkRB_pRdk.roa
File: XScDtjCJp1wR5f-c5YEkRB_pRdk.roa (raw, json)
Hash identifier: IAbbEa8zb5Mjy0NzBFQhEJgc5nT0+/EQRrGk9p/3BhY=
Subject key identifier: 5D:27:03:B6:30:89:A7:5C:11:E5:FF:9C:E5:81:24:44:1F:E9:45:D9
Certificate issuer: /CN=52056867e4d2885e99b549ed6fb786330adf8f44
Certificate serial: 01856C65C361961C0594A8CBEE53F3EAF2D8
Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/XScDtjCJp1wR5f-c5YEkRB_pRdk.roa
Signing time: Sun 01 Jan 2023 08:14:46 +0000
ROA not before: Sun 01 Jan 2023 08:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49143
IP address blocks: 195.88.186.0/24 maxlen: 24
195.88.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:c3:61:96:1c:05:94:a8:cb:ee:53:f3:ea:f2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44
Validity
Not Before: Jan 1 08:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d2703b63089a75c11e5ff9ce58124441fe945d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:88:d1:80:74:62:0c:97:18:1e:5a:c0:69:0d:
06:5d:3a:8b:c7:12:78:6c:31:11:63:e1:84:51:e3:
3a:4f:c7:47:28:94:05:62:be:be:3a:3f:8c:3f:cc:
5f:f4:f9:f2:93:b2:7a:77:1c:5d:9d:e4:ee:56:f4:
3a:82:8b:71:9d:8f:14:af:9a:33:c6:6d:89:24:d3:
ee:55:66:ae:d9:bd:50:92:b8:83:a3:e3:94:ff:7f:
c1:f2:ec:a5:39:9e:92:9d:90:dd:22:6a:bc:f2:36:
e4:d9:64:a2:35:df:d1:30:95:6b:34:6c:99:dd:de:
0a:1c:7b:62:d0:3d:b6:ae:11:12:82:3c:9a:e1:fa:
f2:42:bf:3d:a3:00:18:27:3a:5a:0e:3a:e6:bd:c4:
9d:e1:1d:33:47:e5:0c:51:70:eb:59:66:f2:77:1d:
54:79:8e:24:b1:a4:6b:c2:a2:d5:a0:78:c3:1b:34:
8d:84:2a:20:4e:cf:dd:76:65:63:46:0d:03:a2:75:
ec:18:1d:3d:45:87:83:ab:d2:26:cf:bc:01:46:9e:
27:93:8a:89:d7:98:f9:88:28:08:42:4a:ad:da:93:
30:3c:45:30:30:de:2d:40:03:f8:29:77:1b:73:bd:
89:e5:6a:d5:e2:b8:14:c5:76:73:e6:81:ab:9a:3b:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:27:03:B6:30:89:A7:5C:11:E5:FF:9C:E5:81:24:44:1F:E9:45:D9
X509v3 Authority Key Identifier:
keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/XScDtjCJp1wR5f-c5YEkRB_pRdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.186.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:7d:e2:01:25:a7:40:06:4b:4a:b9:e5:73:53:3d:b7:a7:4f:
0c:51:91:c7:1c:29:7a:eb:f4:86:00:3a:0d:53:e3:5a:aa:5a:
69:aa:dc:47:c7:07:01:38:c4:8a:34:9b:34:d4:6e:16:ca:2e:
3c:c4:59:e1:50:03:2e:02:37:58:92:52:77:76:7f:ae:a3:07:
73:22:8e:3f:56:66:d5:71:71:2d:05:7c:c0:c3:29:4f:13:14:
fa:72:13:b2:21:2a:02:ba:18:f6:69:2a:a5:44:63:e5:4c:65:
7e:21:c2:a7:a8:d3:d7:d3:71:fa:32:97:20:7a:fb:f6:3d:93:
22:1f:45:13:3f:40:fd:d4:36:f6:97:0d:d0:65:9d:29:0d:b5:
ee:0e:3b:f2:33:c6:91:87:74:e8:0d:f4:04:93:c3:b4:3a:f9:
d7:c1:56:4a:a2:fa:7a:dd:2a:c5:7a:52:da:3a:d4:3f:26:aa:
1d:04:32:ce:1f:7d:d0:ec:3d:e0:c7:33:a0:c7:2b:0d:51:e8:
58:d3:2f:94:f5:e1:6f:71:87:d6:6e:33:59:1d:2a:7f:bb:1a:
d4:15:39:38:5c:00:1e:6a:c2:16:04:52:85:e4:5d:6f:bc:15:
f0:cc:ba:29:94:b9:3b:b3:d9:d5:6f:a6:c0:b6:9b:74:68:3a:
ab:9d:b5:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsZcNhlhwFlKjL7lPz6vLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMDU2ODY3ZTRkMjg4NWU5OWI1NDllZDZmYjc4NjMzMGFk
ZjhmNDQwHhcNMjMwMTAxMDgxNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDI3MDNiNjMwODlhNzVjMTFlNWZmOWNlNTgxMjQ0NDFmZTk0NWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmojRgHRiDJcYHlrAaQ0GXTqLxxJ4
bDERY+GEUeM6T8dHKJQFYr6+Oj+MP8xf9Pnyk7J6dxxdneTuVvQ6gotxnY8Ur5oz
xm2JJNPuVWau2b1QkriDo+OU/3/B8uylOZ6SnZDdImq88jbk2WSiNd/RMJVrNGyZ
3d4KHHti0D22rhESgjya4fryQr89owAYJzpaDjrmvcSd4R0zR+UMUXDrWWbydx1U
eY4ksaRrwqLVoHjDGzSNhCogTs/ddmVjRg0DonXsGB09RYeDq9Imz7wBRp4nk4qJ
15j5iCgIQkqt2pMwPEUwMN4tQAP4KXcbc72J5WrV4rgUxXZz5oGrmjspLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF0nA7YwiadcEeX/nOWBJEQf6UXZMB8GA1UdIwQY
MBaAFFIFaGfk0ohembVJ7W+3hjMK349EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iMjdkNDUtMDhjYy00N2ExLWFjNWEt
NWY0ODM2MDgzYTMwLzEvWFNjRHRqQ0pwMXdSNWYtYzVZRWtSQl9wUmRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9iMjdkNDUtMDhjYy00N2ExLWFjNWEtNWY0ODM2MDgzYTMw
LzEvVWdWb1otVFNpRjZadFVudGI3ZUdNd3JmajBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1i6MA0G
CSqGSIb3DQEBCwUAA4IBAQC1feIBJadABktKueVzUz23p08MUZHHHCl66/SGADoN
U+NaqlppqtxHxwcBOMSKNJs01G4Wyi48xFnhUAMuAjdYklJ3dn+uowdzIo4/VmbV
cXEtBXzAwylPExT6chOyISoCuhj2aSqlRGPlTGV+IcKnqNPX03H6Mpcgevv2PZMi
H0UTP0D91Db2lw3QZZ0pDbXuDjvyM8aRh3ToDfQEk8O0OvnXwVZKovp63SrFelLa
OtQ/JqodBDLOH33Q7D3gxzOgxysNUehY0y+U9eFvcYfWbjNZHSp/uxrUFTk4XAAe
asIWBFKF5F1vvBXwzLoplLk7s9nVb6bAtpt0aDqrnbXE
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:15 2024 by rpki-client on console-ams.rpki-client.org