Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/t3qAoWwOl9_uc6yfPTNt30DNw84.roa
File: t3qAoWwOl9_uc6yfPTNt30DNw84.roa (raw, json)
Hash identifier: KOXgyH5t09JZVliqBtwfUJouGMqHzyE0wJ+nCoTmWbw=
Subject key identifier: B7:7A:80:A1:6C:0E:97:DF:EE:73:AC:9F:3D:33:6D:DF:40:CD:C3:CE
Certificate issuer: /CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Certificate serial: 01856CE636270E9BBE17EB928EEE3A1ED1C3
Authority key identifier: BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/t3qAoWwOl9_uc6yfPTNt30DNw84.roa
Signing time: Sun 01 Jan 2023 10:35:04 +0000
ROA not before: Sun 01 Jan 2023 10:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 194.33.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:36:27:0e:9b:be:17:eb:92:8e:ee:3a:1e:d1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf6c1df662374d4aecd0c8b3f84312df42125599
Validity
Not Before: Jan 1 10:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b77a80a16c0e97dfee73ac9f3d336ddf40cdc3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a0:29:f9:ec:be:4f:df:3c:6c:ce:44:39:4d:
62:7d:80:17:f1:cf:2f:21:d3:39:4e:9a:ea:11:c8:
81:f9:1e:1a:6d:18:41:9f:d6:8b:b8:76:c5:ae:d7:
5b:2a:6b:bb:9e:86:78:87:68:5e:dd:0b:1e:be:52:
9f:a9:95:ce:d4:44:5d:21:06:df:e7:15:45:52:ad:
a1:53:f0:5e:37:e0:de:16:fb:04:fb:02:18:11:eb:
d4:76:92:3f:94:98:d9:d2:07:86:87:21:4e:ca:2e:
b0:22:05:81:aa:83:9d:69:29:34:61:7a:ff:6d:24:
c6:4c:cd:81:78:be:81:10:17:0c:61:95:de:fe:63:
c1:ac:ef:c2:9c:3c:0f:9f:ec:6d:b4:7d:36:7b:22:
67:37:be:0c:8b:f5:47:55:3d:cb:9f:4f:42:17:01:
fc:3f:f4:60:52:a3:73:1d:a6:55:bb:f6:c2:6f:05:
83:b6:92:ba:65:8a:26:cf:ec:ee:07:c1:7b:a0:36:
eb:66:45:cd:11:a7:d4:86:0d:7e:36:92:8d:95:06:
e1:11:b9:5a:24:92:b7:dd:8c:3c:d5:25:6c:48:42:
d1:64:a4:b1:c8:16:82:75:d5:9b:92:c8:e5:22:2f:
65:0a:e2:87:66:f2:f9:8b:ee:d9:57:06:5d:11:02:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7A:80:A1:6C:0E:97:DF:EE:73:AC:9F:3D:33:6D:DF:40:CD:C3:CE
X509v3 Authority Key Identifier:
keyid:BF:6C:1D:F6:62:37:4D:4A:EC:D0:C8:B3:F8:43:12:DF:42:12:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2wd9mI3TUrs0Miz-EMS30ISVZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/t3qAoWwOl9_uc6yfPTNt30DNw84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fd220b-5f70-49c2-9cc7-908419d39401/1/v2wd9mI3TUrs0Miz-EMS30ISVZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.184.0/24
Signature Algorithm: sha256WithRSAEncryption
83:96:cc:11:2d:c7:aa:69:e4:b1:53:6f:8a:3d:64:2d:2b:f0:
a0:f9:5a:58:87:e6:3f:6c:5d:31:66:5b:9f:50:91:b3:a5:84:
f3:63:d2:7f:80:3e:56:0c:9d:58:e4:b9:d7:8b:aa:92:bf:83:
8a:7d:5d:26:28:a2:cc:1f:d2:fc:e5:4d:c0:b9:46:f4:f4:3c:
93:c8:36:8e:37:0c:db:85:22:90:37:86:c2:d1:c5:3d:82:a8:
92:f8:2c:b5:b7:49:91:33:f3:40:a8:f7:53:d6:1d:db:5f:e9:
53:8f:5d:24:be:5b:7d:21:f1:5e:3b:b8:82:cb:29:c1:83:7b:
3b:23:8c:54:50:25:8c:da:04:f8:3d:73:f2:09:10:f3:bd:a1:
6d:00:4a:f2:df:d7:f5:1f:8c:54:09:c6:bc:7e:70:13:9f:b6:
c3:38:da:13:dc:2f:27:ac:0e:4b:4e:e4:99:4f:43:21:d1:26:
34:87:b7:50:48:14:f2:2c:b2:fd:76:77:61:b6:e7:41:ac:52:
81:a5:45:b3:28:a2:91:70:8c:5d:7b:ff:5e:77:13:2c:cd:3b:
47:95:95:6a:55:57:5c:ed:f2:28:74:8a:81:a6:7f:f0:eb:9a:
b5:9a:c7:1a:32:96:08:92:95:90:d3:25:85:a6:18:ed:81:85:
b0:67:8e:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVs5jYnDpu+F+uSju46HtHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNmMxZGY2NjIzNzRkNGFlY2QwYzhiM2Y4NDMxMmRmNDIx
MjU1OTkwHhcNMjMwMTAxMTAzNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzdhODBhMTZjMGU5N2RmZWU3M2FjOWYzZDMzNmRkZjQwY2RjM2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6Ap+ey+T988bM5EOU1ifYAX8c8v
IdM5TprqEciB+R4abRhBn9aLuHbFrtdbKmu7noZ4h2he3QsevlKfqZXO1ERdIQbf
5xVFUq2hU/BeN+DeFvsE+wIYEevUdpI/lJjZ0geGhyFOyi6wIgWBqoOdaSk0YXr/
bSTGTM2BeL6BEBcMYZXe/mPBrO/CnDwPn+xttH02eyJnN74Mi/VHVT3Ln09CFwH8
P/RgUqNzHaZVu/bCbwWDtpK6ZYomz+zuB8F7oDbrZkXNEafUhg1+NpKNlQbhEbla
JJK33Yw81SVsSELRZKSxyBaCddWbksjlIi9lCuKHZvL5i+7ZVwZdEQKTyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLd6gKFsDpff7nOsnz0zbd9AzcPOMB8GA1UdIwQY
MBaAFL9sHfZiN01K7NDIs/hDEt9CElWZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzct
OTA4NDE5ZDM5NDAxLzEvdDNxQW9Xd09sOV91YzZ5ZlBUTnQzMEROdzg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mZDIyMGItNWY3MC00OWMyLTljYzctOTA4NDE5ZDM5NDAx
LzEvdjJ3ZDltSTNUVXJzME1pei1FTVMzMElTVlprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiG4MA0G
CSqGSIb3DQEBCwUAA4IBAQCDlswRLceqaeSxU2+KPWQtK/Cg+VpYh+Y/bF0xZluf
UJGzpYTzY9J/gD5WDJ1Y5LnXi6qSv4OKfV0mKKLMH9L85U3AuUb09DyTyDaONwzb
hSKQN4bC0cU9gqiS+Cy1t0mRM/NAqPdT1h3bX+lTj10kvlt9IfFeO7iCyynBg3s7
I4xUUCWM2gT4PXPyCRDzvaFtAEry39f1H4xUCca8fnATn7bDONoT3C8nrA5LTuSZ
T0Mh0SY0h7dQSBTyLLL9dndhtudBrFKBpUWzKKKRcIxde/9edxMszTtHlZVqVVdc
7fIodIqBpn/w65q1mscaMpYIkpWQ0yWFphjtgYWwZ47h
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:03 2024 by rpki-client on console-ams.rpki-client.org