Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/kl6CkT_oMJTv_RTo-30sOe0nDUg.roa
File: kl6CkT_oMJTv_RTo-30sOe0nDUg.roa (raw, json)
Hash identifier: FaTSvVEnyDH3lHrOeKtgElqokIp6wdbOLPF3MgGd0sg=
Subject key identifier: 92:5E:82:91:3F:E8:30:94:EF:FD:14:E8:FB:7D:2C:39:ED:27:0D:48
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018D26BEF1893D7C303A1B225C98755DB9E3
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/kl6CkT_oMJTv_RTo-30sOe0nDUg.roa
Signing time: Sat 20 Jan 2024 12:01:04 +0000
ROA not before: Sat 20 Jan 2024 12:01:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50225
IP address blocks: 194.120.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 05:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:26:be:f1:89:3d:7c:30:3a:1b:22:5c:98:75:5d:b9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 20 12:01:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=925e82913fe83094effd14e8fb7d2c39ed270d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b0:41:c2:fa:e0:d1:26:72:ff:d8:fd:75:af:
e0:70:90:4a:96:9f:46:d9:ec:4d:61:47:48:6c:09:
70:68:ef:01:5d:68:1a:44:8e:8f:01:1a:64:4a:db:
72:da:f5:e0:bb:8a:c2:44:3c:3d:e6:e5:cb:29:d3:
15:05:bd:f1:e8:17:9a:4b:22:c3:13:69:40:de:c3:
06:36:2e:ce:5f:36:55:27:8f:47:d4:19:87:80:af:
dc:74:ae:23:f1:0e:e7:c0:8e:02:93:48:25:54:ce:
96:72:6e:6c:31:e8:50:1f:7c:67:b2:0b:b7:8e:7e:
f7:4e:c9:91:4d:49:de:6d:ba:fb:16:70:dc:e3:5a:
7e:ff:f2:64:0a:4d:1c:93:7b:50:6e:ee:78:60:68:
20:d1:7a:31:8e:ae:d4:ee:b5:6c:27:f0:66:8a:e6:
75:44:43:b4:d7:f6:01:da:3a:8d:73:53:df:da:47:
24:ae:ad:d7:aa:40:e8:1f:db:24:96:24:a6:4a:2f:
de:34:84:8a:ca:11:e2:aa:2e:e1:bc:ad:bd:b5:62:
34:05:15:98:1a:4a:d5:03:5f:29:af:96:68:98:79:
8c:f5:f4:eb:4a:fe:3e:2e:46:e6:02:b9:66:78:2a:
e6:9c:a2:d0:73:7a:1b:ab:39:8c:b1:37:7f:59:71:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5E:82:91:3F:E8:30:94:EF:FD:14:E8:FB:7D:2C:39:ED:27:0D:48
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/kl6CkT_oMJTv_RTo-30sOe0nDUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.144.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:fc:c1:12:d3:a3:67:af:f1:24:f6:62:fd:fe:51:57:e7:c4:
14:c1:ae:4f:f1:c6:d4:74:fc:5a:ea:19:c6:ef:81:20:e4:95:
b3:2f:f6:f8:61:27:6d:2d:a4:77:02:a3:f3:43:cf:8e:18:5f:
1c:e7:42:80:22:8e:90:e7:cb:92:14:e7:f6:ad:bb:74:cc:be:
ac:91:e5:bc:16:ae:c4:30:f3:f3:57:d2:36:57:c5:9a:9c:ff:
08:36:e0:8e:3a:c4:95:9a:bc:dc:bc:bc:94:db:f6:8a:75:10:
8b:77:ea:c6:9f:e3:bf:a1:3e:8c:2c:e4:30:6f:a4:92:1c:b7:
a1:41:0d:d6:d6:d4:8d:eb:83:a3:20:4e:41:c2:3c:da:1b:ef:
dd:5d:39:5e:6c:d9:6d:ae:0d:20:44:b9:34:ec:a5:23:cd:7c:
5a:ad:5d:73:91:33:83:21:cf:ef:94:db:eb:04:f0:4f:25:ad:
c2:92:e4:c6:6b:e8:d8:64:c1:79:7b:cb:89:8d:72:f4:19:6b:
13:91:99:3a:b6:13:4d:24:7e:70:42:5e:0c:a9:3e:06:8d:b0:
b9:04:42:6b:7f:8c:93:6f:e0:f0:5c:ab:dd:e4:4f:87:77:fb:
9d:1f:f9:30:c0:0b:39:ad:6a:60:05:fc:48:4d:f6:04:c1:f0:
81:66:46:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0mvvGJPXwwOhsiXJh1XbnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwMTIwMTIwMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjVlODI5MTNmZTgzMDk0ZWZmZDE0ZThmYjdkMmMzOWVkMjcwZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7BBwvrg0SZy/9j9da/gcJBKlp9G
2exNYUdIbAlwaO8BXWgaRI6PARpkStty2vXgu4rCRDw95uXLKdMVBb3x6BeaSyLD
E2lA3sMGNi7OXzZVJ49H1BmHgK/cdK4j8Q7nwI4Ck0glVM6Wcm5sMehQH3xnsgu3
jn73TsmRTUnebbr7FnDc41p+//JkCk0ck3tQbu54YGgg0Xoxjq7U7rVsJ/BmiuZ1
REO01/YB2jqNc1Pf2kckrq3XqkDoH9skliSmSi/eNISKyhHiqi7hvK29tWI0BRWY
GkrVA18pr5ZomHmM9fTrSv4+LkbmArlmeCrmnKLQc3obqzmMsTd/WXFmEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJJegpE/6DCU7/0U6Pt9LDntJw1IMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEva2w2Q2tUX29NSlR2X1JUby0zMHNPZTBuRFVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwniQMA0G
CSqGSIb3DQEBCwUAA4IBAQCd/MES06Nnr/Ek9mL9/lFX58QUwa5P8cbUdPxa6hnG
74Eg5JWzL/b4YSdtLaR3AqPzQ8+OGF8c50KAIo6Q58uSFOf2rbt0zL6skeW8Fq7E
MPPzV9I2V8WanP8INuCOOsSVmrzcvLyU2/aKdRCLd+rGn+O/oT6MLOQwb6SSHLeh
QQ3W1tSN64OjIE5BwjzaG+/dXTlebNltrg0gRLk07KUjzXxarV1zkTODIc/vlNvr
BPBPJa3CkuTGa+jYZMF5e8uJjXL0GWsTkZk6thNNJH5wQl4MqT4GjbC5BEJrf4yT
b+DwXKvd5E+Hd/udH/kwwAs5rWpgBfxITfYEwfCBZkbt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org