Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/TOg3H1rN2A8xRFsv4YSLoLB51Zo.roa
File: TOg3H1rN2A8xRFsv4YSLoLB51Zo.roa (raw, json)
Hash identifier: +Ri/J65TGww25jiwMl9TuwoaHeACdrZX16vNJ7RvnCw=
Subject key identifier: 4C:E8:37:1F:5A:CD:D8:0F:31:44:5B:2F:E1:84:8B:A0:B0:79:D5:9A
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 0185FBA53CF9228DFE9D47581F7975DCB45E
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/TOg3H1rN2A8xRFsv4YSLoLB51Zo.roa
Signing time: Sun 29 Jan 2023 03:49:48 +0000
ROA not before: Sun 29 Jan 2023 03:49:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59643
IP address blocks: 188.95.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Feb 2023 20:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fb:a5:3c:f9:22:8d:fe:9d:47:58:1f:79:75:dc:b4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Jan 29 03:49:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ce8371f5acdd80f31445b2fe1848ba0b079d59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e3:80:70:19:63:88:eb:cd:4e:fc:3f:6b:75:
65:a5:23:b5:f4:79:b3:00:80:ba:30:ce:c8:41:00:
b7:6c:d7:d6:e3:6f:53:17:b2:ab:16:84:7b:77:c3:
7a:4f:1a:5a:4c:8e:6a:ba:ed:10:ef:92:96:4c:aa:
ae:81:d8:b1:be:12:2d:b2:43:b5:07:d4:45:ed:83:
df:dd:46:5a:02:16:21:5a:76:4f:93:46:da:5d:e3:
80:62:07:84:80:3f:af:01:0b:45:3e:b7:25:ca:7e:
70:c5:32:5f:e0:f7:e7:98:61:4e:9f:f8:2c:e8:aa:
09:d9:34:82:6f:46:ac:18:0f:75:6d:56:37:f7:ba:
35:3c:3d:ef:ba:d2:b2:8d:9f:23:47:05:fb:a2:46:
ef:be:f1:82:3f:13:05:69:db:85:b1:a3:0d:82:2c:
9c:d6:64:ea:b6:11:84:3b:cc:0d:5b:31:79:dd:67:
98:71:ce:60:f6:22:b6:e4:0d:c7:6e:d9:7c:a2:8e:
b8:6a:06:30:8b:6e:79:61:60:46:1d:22:a8:3d:8d:
76:04:21:67:7c:87:ed:1e:27:51:aa:71:2d:0f:e5:
d5:03:7d:cc:54:7c:72:1e:05:8a:96:ce:b3:9a:a5:
b8:67:4c:5e:b4:73:a0:71:69:e7:09:53:4d:49:98:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E8:37:1F:5A:CD:D8:0F:31:44:5B:2F:E1:84:8B:A0:B0:79:D5:9A
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/TOg3H1rN2A8xRFsv4YSLoLB51Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.89.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:1f:a8:0f:16:74:06:66:61:43:74:13:0f:60:48:f9:95:24:
d4:c0:41:b9:07:c8:ab:57:0b:ea:db:b9:22:98:85:f6:69:19:
36:40:74:e1:06:64:f1:90:bf:4e:97:9a:dd:93:00:a8:b2:c8:
67:de:99:89:82:bf:25:02:a2:cf:79:25:6f:b6:2b:c7:ce:77:
f9:67:c0:a6:1b:24:b1:b6:ab:20:1f:85:4c:90:fa:f7:b3:bb:
04:f7:d7:63:24:8b:6d:7f:a1:b4:e5:38:d7:9a:4b:8b:75:f5:
01:6d:4e:ee:df:bf:ae:45:5c:a0:39:6e:4c:ee:db:aa:51:2b:
b1:76:97:1c:e4:38:66:b4:db:7d:bc:a3:5c:17:55:7c:fc:5f:
79:d0:d1:01:f2:a7:29:20:c0:dd:fd:8d:6b:8f:9b:13:ee:2c:
89:e2:84:f5:24:08:5b:e9:22:61:c7:77:ec:2d:ab:aa:2d:5a:
ae:2b:48:41:34:33:59:9a:63:04:1e:60:ce:af:eb:e7:9e:c5:
63:6a:c7:b9:97:d0:df:2f:f6:84:f1:2d:bc:6a:24:ea:eb:53:
8e:0c:75:25:6d:50:fd:4d:37:8a:62:76:3b:b5:ca:4c:bb:4d:
8e:72:49:e0:4b:93:e5:65:91:91:7e:28:eb:d1:2c:8a:a4:b5:
6a:bd:2d:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYX7pTz5Io3+nUdYH3l13LReMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ODQ2NzQxMTM5MjYzMzg4ZDk4NGRiMWU5N2UwMzE2Njlj
NjQ4NmUwHhcNMjMwMTI5MDM0OTQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2U4MzcxZjVhY2RkODBmMzE0NDViMmZlMTg0OGJhMGIwNzlkNTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeOAcBljiOvNTvw/a3VlpSO19Hmz
AIC6MM7IQQC3bNfW429TF7KrFoR7d8N6TxpaTI5quu0Q75KWTKqugdixvhItskO1
B9RF7YPf3UZaAhYhWnZPk0baXeOAYgeEgD+vAQtFPrclyn5wxTJf4PfnmGFOn/gs
6KoJ2TSCb0asGA91bVY397o1PD3vutKyjZ8jRwX7okbvvvGCPxMFaduFsaMNgiyc
1mTqthGEO8wNWzF53WeYcc5g9iK25A3Hbtl8oo64agYwi255YWBGHSKoPY12BCFn
fIftHidRqnEtD+XVA33MVHxyHgWKls6zmqW4Z0xetHOgcWnnCVNNSZjb8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEzoNx9azdgPMURbL+GEi6CwedWaMB8GA1UdIwQY
MBaAFJSEZ0ETkmM4jZhNsel+AxZpxkhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbElSblFST1NZemlObUUyeDZYNERGbW5HU0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hNDkxMDItMDYxMi00N2EwLTgxMTct
Y2IxMTI1MDA3ZGZiLzEvVE9nM0gxck4yQTh4UkZzdjRZU0xvTEI1MVpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9hNDkxMDItMDYxMi00N2EwLTgxMTctY2IxMTI1MDA3ZGZi
LzEvbElSblFST1NZemlObUUyeDZYNERGbW5HU0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF9ZMA0G
CSqGSIb3DQEBCwUAA4IBAQDTH6gPFnQGZmFDdBMPYEj5lSTUwEG5B8irVwvq27ki
mIX2aRk2QHThBmTxkL9Ol5rdkwCosshn3pmJgr8lAqLPeSVvtivHznf5Z8CmGySx
tqsgH4VMkPr3s7sE99djJIttf6G05TjXmkuLdfUBbU7u37+uRVygOW5M7tuqUSux
dpcc5DhmtNt9vKNcF1V8/F950NEB8qcpIMDd/Y1rj5sT7iyJ4oT1JAhb6SJhx3fs
LauqLVquK0hBNDNZmmMEHmDOr+vnnsVjase5l9DfL/aE8S28aiTq61OODHUlbVD9
TTeKYnY7tcpMu02OckngS5PlZZGRfijr0SyKpLVqvS3u
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:51 2024 by rpki-client on console-fra.rpki-client.org