Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/PAtHAG1Ajrn58MOKIOIgFYUlHWc.roa
File: PAtHAG1Ajrn58MOKIOIgFYUlHWc.roa (raw, json)
Hash identifier: QkBiAvuFA/EfLhOC16KQFjvqnCQWITiLNcr57w5SxZ0=
Subject key identifier: 3C:0B:47:00:6D:40:8E:B9:F9:F0:C3:8A:20:E2:20:15:85:25:1D:67
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 018C410411F8AE525233C78EC4E3B0162E6A
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/PAtHAG1Ajrn58MOKIOIgFYUlHWc.roa
Signing time: Wed 06 Dec 2023 21:23:54 +0000
ROA not before: Wed 06 Dec 2023 21:23:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5650
IP address blocks: 195.210.112.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:41:04:11:f8:ae:52:52:33:c7:8e:c4:e3:b0:16:2e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Dec 6 21:23:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c0b47006d408eb9f9f0c38a20e2201585251d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:09:a4:e3:5a:e9:28:c8:1c:0f:bb:7a:c9:36:
51:76:60:66:f4:0d:ed:b6:a5:05:9f:ff:d6:28:48:
a7:ed:01:ef:22:c6:5d:d4:f0:82:6e:88:f5:76:9b:
b5:03:1f:7b:c4:94:75:69:52:4c:fd:01:92:00:45:
4c:ca:b5:1b:56:56:06:5d:ab:ce:ce:47:46:66:77:
f7:86:ca:37:82:02:70:ef:52:93:00:59:af:22:ad:
95:b8:77:72:27:8b:8f:c7:84:8e:4e:08:49:e7:3a:
89:ae:b5:f0:27:d2:f9:7b:06:9f:2e:78:b5:0d:e7:
9b:c5:17:a1:26:c3:f3:fc:ad:e3:f7:0f:12:98:00:
ae:30:e1:02:8f:9c:85:1a:ab:57:5d:2d:b3:2f:da:
74:f9:c9:95:5f:1e:d9:bf:85:10:50:b0:21:23:b5:
08:99:52:3a:c2:3b:99:cb:3a:9c:31:48:f9:50:3a:
cb:c5:f3:10:af:4b:74:31:13:f6:94:ef:30:14:b9:
51:ad:7c:38:29:cb:3b:d8:f3:5b:ce:44:e7:b9:b8:
5b:41:76:12:23:00:d9:53:3c:48:8f:a5:b0:65:c6:
67:39:36:ff:96:25:84:d0:46:23:15:c9:88:88:0b:
31:77:38:b1:f8:e4:83:1a:bc:a1:09:54:80:53:17:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0B:47:00:6D:40:8E:B9:F9:F0:C3:8A:20:E2:20:15:85:25:1D:67
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/PAtHAG1Ajrn58MOKIOIgFYUlHWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.210.112.0/22
Signature Algorithm: sha256WithRSAEncryption
80:aa:7d:0e:12:71:6f:a3:aa:48:3c:2e:7c:cb:72:0b:0c:41:
1e:25:79:c4:0e:7e:0b:eb:af:ef:82:ca:ec:5d:18:47:fb:20:
81:2b:2c:3f:a0:99:e9:cc:57:48:e6:c7:43:56:66:bf:e0:ed:
01:9f:92:b8:67:33:fd:a0:62:6b:28:9c:fb:be:f7:2c:b2:0f:
7a:70:08:48:ea:57:82:86:32:6c:bf:89:5f:5c:4b:fe:f5:a3:
f1:d6:31:dc:a4:0c:b9:af:19:40:19:71:4e:e0:e0:04:b6:e5:
b2:72:ef:03:05:a0:4b:9b:27:09:2a:5f:29:f4:5e:7d:e7:cf:
1c:8a:52:fa:69:8f:d0:72:72:a5:67:02:fe:7c:b8:97:33:36:
0b:7c:df:c8:56:df:84:d1:35:35:ca:75:b6:8d:c3:65:89:94:
ac:31:07:93:0f:ee:fb:63:19:e6:53:a6:3b:a9:e4:fb:d3:79:
c7:69:af:2f:c9:d8:7b:4c:f8:02:a7:c6:cd:e4:50:f6:01:c0:
58:56:a1:a5:df:4f:ad:87:cf:94:db:ca:fd:f7:00:ea:76:a3:
d8:00:1a:a0:8b:62:06:76:13:80:2d:dc:28:00:61:fc:b8:25:
1e:08:a4:8a:ad:14:73:45:c8:b8:c7:75:c4:92:f1:be:fe:06:
60:c7:1a:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxBBBH4rlJSM8eOxOOwFi5qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYjg0ZDlmOGY5ZTMzMTU2NTg5YTVlYmY3MjIyMDNhODk5
ZTBhNTEwHhcNMjMxMjA2MjEyMzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzBiNDcwMDZkNDA4ZWI5ZjlmMGMzOGEyMGUyMjAxNTg1MjUxZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAmk41rpKMgcD7t6yTZRdmBm9A3t
tqUFn//WKEin7QHvIsZd1PCCboj1dpu1Ax97xJR1aVJM/QGSAEVMyrUbVlYGXavO
zkdGZnf3hso3ggJw71KTAFmvIq2VuHdyJ4uPx4SOTghJ5zqJrrXwJ9L5ewafLni1
DeebxRehJsPz/K3j9w8SmACuMOECj5yFGqtXXS2zL9p0+cmVXx7Zv4UQULAhI7UI
mVI6wjuZyzqcMUj5UDrLxfMQr0t0MRP2lO8wFLlRrXw4Kcs72PNbzkTnubhbQXYS
IwDZUzxIj6WwZcZnOTb/liWE0EYjFcmIiAsxdzix+OSDGryhCVSAUxcM2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDwLRwBtQI65+fDDiiDiIBWFJR1nMB8GA1UdIwQY
MBaAFP64TZ+PnjMVZYml6/ciIDqJngpRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMt
YWYxY2MyMzE3ZTM5LzEvUEF0SEFHMUFqcm41OE1PS0lPSWdGWVVsSFdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82MTRlNWMtMjk5Yi00ZmQ0LWEwYmMtYWYxY2MyMzE3ZTM5
LzEvX3JoTm40LWVNeFZsaWFYcjl5SWdPb21lQ2xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw9JwMA0G
CSqGSIb3DQEBCwUAA4IBAQCAqn0OEnFvo6pIPC58y3ILDEEeJXnEDn4L66/vgsrs
XRhH+yCBKyw/oJnpzFdI5sdDVma/4O0Bn5K4ZzP9oGJrKJz7vvcssg96cAhI6leC
hjJsv4lfXEv+9aPx1jHcpAy5rxlAGXFO4OAEtuWycu8DBaBLmycJKl8p9F59588c
ilL6aY/QcnKlZwL+fLiXMzYLfN/IVt+E0TU1ynW2jcNliZSsMQeTD+77YxnmU6Y7
qeT703nHaa8vydh7TPgCp8bN5FD2AcBYVqGl30+th8+U28r99wDqdqPYABqgi2IG
dhOALdwoAGH8uCUeCKSKrRRzRci4x3XEkvG+/gZgxxpK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:49 2024 by rpki-client on console-fra.rpki-client.org