Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/yI6GMx58WuwCfhJNJEH9X2occtc.roa
File: yI6GMx58WuwCfhJNJEH9X2occtc.roa (raw, json)
Hash identifier: 2hRWpltL4WGA/X/ZBEwIPsbLeazgbJQwW5+UTnrrOxI=
Subject key identifier: C8:8E:86:33:1E:7C:5A:EC:02:7E:12:4D:24:41:FD:5F:6A:1C:72:D7
Certificate issuer: /CN=94846741139263388d984db1e97e031669c6486e
Certificate serial: 018CC56E6F551B802B7D37646D76237CB8A1
Authority key identifier: 94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/yI6GMx58WuwCfhJNJEH9X2occtc.roa
Signing time: Mon 01 Jan 2024 14:29:58 +0000
ROA not before: Mon 01 Jan 2024 14:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209279
IP address blocks: 195.182.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 Aug 2024 11:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:6f:55:1b:80:2b:7d:37:64:6d:76:23:7c:b8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94846741139263388d984db1e97e031669c6486e
Validity
Not Before: Jan 1 14:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c88e86331e7c5aec027e124d2441fd5f6a1c72d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:e7:bd:13:65:3c:d3:26:fc:a4:9e:05:5f:
de:83:41:3c:92:92:3e:f6:7a:3f:5c:4f:1a:fc:94:
e5:ce:8c:ed:4b:b9:2f:de:55:90:db:55:8a:b8:fe:
69:89:e7:06:00:01:78:9b:76:a4:b9:b0:cf:d4:24:
79:bb:74:c9:94:cd:4d:ca:6b:17:1e:2b:fd:e6:9e:
30:ed:61:8d:60:6d:db:45:fd:40:fa:69:28:45:c4:
86:1b:96:86:aa:42:87:4e:f1:a4:78:4a:d7:cc:f1:
59:f2:5b:62:fa:c9:fc:52:49:7e:84:2d:db:d5:48:
99:ff:51:52:10:5a:d0:89:89:97:44:a6:ed:f9:12:
80:a5:de:cd:0d:f8:5f:9b:f1:da:09:e3:b2:61:70:
34:98:40:74:33:f5:f6:ca:6b:3d:bb:5b:d4:43:ed:
54:77:a2:b1:07:2a:b6:e0:d0:14:37:64:55:25:af:
41:23:3a:05:c8:24:66:c9:8c:17:91:03:43:4f:ef:
86:67:93:0b:ec:ee:65:e5:0c:27:cb:ff:0b:c2:82:
70:47:1e:cf:b5:64:d3:ed:aa:d2:fc:a6:da:06:5f:
a7:4c:c6:d8:4c:64:36:a9:6b:98:ab:fd:de:be:7f:
c2:f9:09:08:37:0c:c5:d1:c7:cc:99:9d:05:d6:ce:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8E:86:33:1E:7C:5A:EC:02:7E:12:4D:24:41:FD:5F:6A:1C:72:D7
X509v3 Authority Key Identifier:
keyid:94:84:67:41:13:92:63:38:8D:98:4D:B1:E9:7E:03:16:69:C6:48:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIRnQROSYziNmE2x6X4DFmnGSG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/yI6GMx58WuwCfhJNJEH9X2occtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a49102-0612-47a0-8117-cb1125007dfb/1/lIRnQROSYziNmE2x6X4DFmnGSG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:97:b6:ea:de:db:00:8d:bb:0c:bb:97:4f:c1:09:a6:00:26:
76:d7:01:af:11:76:17:74:48:9a:77:d2:3e:81:94:93:e6:16:
8c:0e:f7:53:4e:4d:d6:af:ba:ee:8c:bd:ea:06:fa:d8:f8:96:
81:9f:f9:05:2a:09:44:c5:f7:63:e5:c1:dc:c3:01:6f:16:25:
25:c4:0a:c9:2a:4d:14:ab:b7:d9:5d:b2:b1:b5:e5:95:4d:1d:
89:a8:1e:9d:31:4c:26:9b:b0:f3:53:71:0b:d0:99:6d:15:d2:
18:65:2c:c9:96:77:6e:38:ca:2c:d5:6a:4c:93:12:34:77:ec:
87:09:f0:c9:37:5a:d5:57:1e:53:11:93:28:ed:79:ef:c2:cd:
dd:a7:eb:18:98:33:98:f3:c0:09:be:49:e5:24:dc:a4:9f:9e:
0f:51:ef:fe:7d:e3:81:0c:8f:76:8f:dd:00:26:12:fc:16:5c:
64:03:76:e9:b6:f0:e6:00:da:ff:53:40:76:41:49:20:31:13:
6b:c1:66:dc:63:e4:d4:9e:2d:40:14:f2:ec:5e:c7:6b:c4:e2:
8d:ae:12:77:6b:0e:db:43:62:42:e7:51:18:f2:47:7a:be:f5:
64:4b:b5:5b:94:12:10:5c:01:81:dc:73:33:10:32:0e:79:39:
6c:89:2b:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbm9VG4ArfTdkbXYjfLihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ODQ2NzQxMTM5MjYzMzg4ZDk4NGRiMWU5N2UwMzE2Njlj
NjQ4NmUwHhcNMjQwMTAxMTQyOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODhlODYzMzFlN2M1YWVjMDI3ZTEyNGQyNDQxZmQ1ZjZhMWM3MmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd7nvRNlPNMm/KSeBV/eg0E8kpI+
9no/XE8a/JTlzoztS7kv3lWQ21WKuP5piecGAAF4m3akubDP1CR5u3TJlM1NymsX
Hiv95p4w7WGNYG3bRf1A+mkoRcSGG5aGqkKHTvGkeErXzPFZ8lti+sn8Ukl+hC3b
1UiZ/1FSEFrQiYmXRKbt+RKApd7NDfhfm/HaCeOyYXA0mEB0M/X2yms9u1vUQ+1U
d6KxByq24NAUN2RVJa9BIzoFyCRmyYwXkQNDT++GZ5ML7O5l5Qwny/8LwoJwRx7P
tWTT7arS/KbaBl+nTMbYTGQ2qWuYq/3evn/C+QkINwzF0cfMmZ0F1s6vjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMiOhjMefFrsAn4STSRB/V9qHHLXMB8GA1UdIwQY
MBaAFJSEZ0ETkmM4jZhNsel+AxZpxkhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbElSblFST1NZemlObUUyeDZYNERGbW5HU0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9hNDkxMDItMDYxMi00N2EwLTgxMTct
Y2IxMTI1MDA3ZGZiLzEveUk2R014NThXdXdDZmhKTkpFSDlYMm9jY3RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9hNDkxMDItMDYxMi00N2EwLTgxMTctY2IxMTI1MDA3ZGZi
LzEvbElSblFST1NZemlObUUyeDZYNERGbW5HU0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7YmMA0G
CSqGSIb3DQEBCwUAA4IBAQBvl7bq3tsAjbsMu5dPwQmmACZ21wGvEXYXdEiad9I+
gZST5haMDvdTTk3Wr7rujL3qBvrY+JaBn/kFKglExfdj5cHcwwFvFiUlxArJKk0U
q7fZXbKxteWVTR2JqB6dMUwmm7DzU3EL0JltFdIYZSzJlnduOMos1WpMkxI0d+yH
CfDJN1rVVx5TEZMo7Xnvws3dp+sYmDOY88AJvknlJNykn54PUe/+feOBDI92j90A
JhL8FlxkA3bptvDmANr/U0B2QUkgMRNrwWbcY+TUni1AFPLsXsdrxOKNrhJ3aw7b
Q2JC51EY8kd6vvVkS7VblBIQXAGB3HMzEDIOeTlsiStC
-----END CERTIFICATE-----
Generated at Sat Aug 31 13:33:19 2024 by rpki-client on console-ams.rpki-client.org