Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f9b3ca-04a0-4233-aed1-c6f9d0a8f36e/1/U0ABGj-n_5m6CPdYLaIyU5S4Xuc.roa
File: U0ABGj-n_5m6CPdYLaIyU5S4Xuc.roa (raw, json)
Hash identifier: 0bMYConxpUu8rKTHnM8jePwXglHPGGYkFrNJoMNe3F0=
Subject key identifier: 53:40:01:1A:3F:A7:FF:99:BA:08:F7:58:2D:A2:32:53:94:B8:5E:E7
Certificate issuer: /CN=aee8d6f56c5fbc904c9b913609013e5964865257
Certificate serial: 01857042A12B5867895B96BB5AE55326336C
Authority key identifier: AE:E8:D6:F5:6C:5F:BC:90:4C:9B:91:36:09:01:3E:59:64:86:52:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rujW9WxfvJBMm5E2CQE-WWSGUlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f9b3ca-04a0-4233-aed1-c6f9d0a8f36e/1/U0ABGj-n_5m6CPdYLaIyU5S4Xuc.roa
Signing time: Mon 02 Jan 2023 02:14:52 +0000
ROA not before: Mon 02 Jan 2023 02:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 195.20.19.0/24 maxlen: 24
2a13:49c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 07 Sep 2023 15:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:a1:2b:58:67:89:5b:96:bb:5a:e5:53:26:33:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee8d6f56c5fbc904c9b913609013e5964865257
Validity
Not Before: Jan 2 02:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5340011a3fa7ff99ba08f7582da2325394b85ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a3:bb:03:98:9b:8f:af:cb:e6:44:3f:db:c6:
b7:ff:87:b1:8b:e5:5b:45:35:00:f1:83:83:9e:b9:
af:c9:ee:07:56:bf:5e:bc:5c:84:58:b4:90:35:99:
73:62:e4:99:40:79:89:e0:6d:29:3f:72:92:0b:cc:
e4:07:6c:c2:6e:56:81:5d:55:b8:53:3b:18:5d:c0:
04:bd:6d:e8:eb:bd:22:eb:9a:f2:e3:41:fc:0b:81:
e5:e4:99:a8:3a:dc:d0:e5:60:e5:a5:3e:df:9d:7c:
d2:71:ba:37:b8:8d:2b:38:d7:74:3b:96:24:b8:91:
8e:75:c2:8e:6b:57:50:98:10:84:0a:f3:36:8f:a4:
47:fe:7c:18:ef:26:a7:af:03:86:01:02:62:3d:3e:
fa:c9:17:15:39:5b:16:f9:93:50:83:f0:78:50:1b:
c7:53:06:ea:d5:de:04:3d:b9:9b:be:e3:c0:4a:05:
48:d3:0a:37:31:4e:14:b6:ed:53:ef:2a:08:6a:77:
69:bf:64:c7:f7:de:ea:ba:09:d1:9a:51:1a:94:5c:
0f:9f:26:e9:d5:3b:19:85:93:07:2c:4f:58:6e:f9:
05:15:6f:db:df:d7:e2:7e:19:41:60:10:f3:98:07:
1a:94:32:24:c9:81:39:ae:ae:27:db:eb:bc:36:e4:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:40:01:1A:3F:A7:FF:99:BA:08:F7:58:2D:A2:32:53:94:B8:5E:E7
X509v3 Authority Key Identifier:
keyid:AE:E8:D6:F5:6C:5F:BC:90:4C:9B:91:36:09:01:3E:59:64:86:52:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujW9WxfvJBMm5E2CQE-WWSGUlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f9b3ca-04a0-4233-aed1-c6f9d0a8f36e/1/U0ABGj-n_5m6CPdYLaIyU5S4Xuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f9b3ca-04a0-4233-aed1-c6f9d0a8f36e/1/rujW9WxfvJBMm5E2CQE-WWSGUlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.19.0/24
IPv6:
2a13:49c0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:ee:d4:61:ed:d4:7f:2a:70:21:bf:6d:33:51:97:a2:8a:65:
29:73:3e:64:61:73:39:27:ce:76:03:45:c8:18:56:1a:49:af:
1c:1b:15:de:48:98:fa:72:cd:8d:b8:4c:3b:fe:c6:5a:a0:61:
e8:a2:ec:61:dd:5b:7b:9e:d3:19:0d:54:da:8b:5f:b6:a8:9d:
dc:19:f9:6c:d3:ae:f6:fe:4f:92:9b:28:ee:5e:d9:44:34:a4:
71:06:15:2f:3e:1f:d2:f4:64:7e:98:90:55:58:10:d9:81:cd:
20:ef:3e:32:92:fb:cb:eb:2b:cf:f5:5e:96:db:3a:32:4e:06:
d7:e3:9d:29:09:47:0c:30:9a:9c:de:51:72:e6:b5:97:7a:3b:
32:b3:45:67:68:f2:45:a7:df:0c:62:b2:e1:5f:3d:4c:2f:93:
37:e1:0e:d0:2b:d7:2b:b0:9b:27:22:cc:75:a0:1b:45:c1:23:
6d:b4:13:40:9c:95:32:05:ec:1b:bd:d1:f7:47:c7:cc:fa:9f:
3a:dc:26:ce:57:75:42:9b:91:3f:06:c2:40:15:b7:06:3a:99:
fe:38:d9:76:03:3d:87:9f:d8:c7:e7:76:65:a1:be:be:03:49:
72:4a:f5:e4:34:ad:86:8d:3c:e9:9d:b4:76:b3:8d:91:1d:4a:
7a:1b:66:21
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVwQqErWGeJW5a7WuVTJjNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZThkNmY1NmM1ZmJjOTA0YzliOTEzNjA5MDEzZTU5NjQ4
NjUyNTcwHhcNMjMwMTAyMDIxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzQwMDExYTNmYTdmZjk5YmEwOGY3NTgyZGEyMzI1Mzk0Yjg1ZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76O7A5ibj6/L5kQ/28a3/4exi+Vb
RTUA8YODnrmvye4HVr9evFyEWLSQNZlzYuSZQHmJ4G0pP3KSC8zkB2zCblaBXVW4
UzsYXcAEvW3o670i65ry40H8C4Hl5JmoOtzQ5WDlpT7fnXzScbo3uI0rONd0O5Yk
uJGOdcKOa1dQmBCECvM2j6RH/nwY7yanrwOGAQJiPT76yRcVOVsW+ZNQg/B4UBvH
Uwbq1d4EPbmbvuPASgVI0wo3MU4Utu1T7yoIandpv2TH997qugnRmlEalFwPnybp
1TsZhZMHLE9YbvkFFW/b39fifhlBYBDzmAcalDIkyYE5rq4n2+u8NuSxvQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFNAARo/p/+Zugj3WC2iMlOUuF7nMB8GA1UdIwQY
MBaAFK7o1vVsX7yQTJuRNgkBPllkhlJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVqVzlXeGZ2SkJNbTVFMkNRRS1XV1NHVWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mOWIzY2EtMDRhMC00MjMzLWFlZDEt
YzZmOWQwYThmMzZlLzEvVTBBQkdqLW5fNW02Q1BkWUxhSXlVNVM0WHVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mOWIzY2EtMDRhMC00MjMzLWFlZDEtYzZmOWQwYThmMzZl
LzEvcnVqVzlXeGZ2SkJNbTVFMkNRRS1XV1NHVWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwxQTMA0E
AgACMAcDBQMqE0nAMA0GCSqGSIb3DQEBCwUAA4IBAQCe7tRh7dR/KnAhv20zUZei
imUpcz5kYXM5J852A0XIGFYaSa8cGxXeSJj6cs2NuEw7/sZaoGHoouxh3Vt7ntMZ
DVTai1+2qJ3cGfls0672/k+SmyjuXtlENKRxBhUvPh/S9GR+mJBVWBDZgc0g7z4y
kvvL6yvP9V6W2zoyTgbX450pCUcMMJqc3lFy5rWXejsys0VnaPJFp98MYrLhXz1M
L5M34Q7QK9crsJsnIsx1oBtFwSNttBNAnJUyBewbvdH3R8fM+p863CbOV3VCm5E/
BsJAFbcGOpn+ONl2Az2Hn9jH53Zlob6+A0lySvXkNK2GjTzpnbR2s42RHUp6G2Yh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:29 2024 by rpki-client on console-fra.rpki-client.org