Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/xfNbPMMTsoDdAPVTGpGsfuxguxc.roa
File: xfNbPMMTsoDdAPVTGpGsfuxguxc.roa (raw, json)
Hash identifier: /ZKBXHJqxZojZAVKwv2o5cDirLYJ0B9nwB8QpjhC/pI=
Subject key identifier: C5:F3:5B:3C:C3:13:B2:80:DD:00:F5:53:1A:91:AC:7E:EC:60:BB:17
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 01856FF941CEDEE025E7C4AE6E374E3CC56A
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/xfNbPMMTsoDdAPVTGpGsfuxguxc.roa
Signing time: Mon 02 Jan 2023 00:54:43 +0000
ROA not before: Mon 02 Jan 2023 00:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43241
IP address blocks: 194.107.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:41:ce:de:e0:25:e7:c4:ae:6e:37:4e:3c:c5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 00:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5f35b3cc313b280dd00f5531a91ac7eec60bb17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:db:12:2e:e4:9d:1c:42:28:63:16:dc:f4:
de:d0:20:ed:23:42:05:f2:b8:7e:61:cb:11:73:42:
63:3d:c1:1d:14:ab:13:52:14:6b:12:90:c9:7f:f2:
7f:4d:0f:be:36:ac:67:93:58:3c:0a:26:01:56:1c:
e2:15:90:37:d7:69:fe:2e:cc:83:b7:64:fb:16:9e:
c1:d0:fe:13:44:7f:23:21:e4:b8:a8:bb:2b:e1:57:
4a:ce:d5:bf:d0:e2:f9:96:05:a2:8f:66:ac:45:f2:
fb:8d:93:09:7f:ea:bc:6e:f9:59:f7:35:81:b3:0d:
33:5f:39:d9:fd:13:31:90:19:ca:ea:e7:71:e2:44:
04:26:13:10:ef:9d:c5:cc:2d:08:a9:66:a9:82:2b:
f0:d4:b8:47:c9:45:c7:0f:cb:cd:1e:50:62:37:be:
b1:e1:57:f9:ae:78:4b:0c:98:e0:7f:77:82:f7:41:
0e:7f:88:5b:bc:50:b4:78:40:9b:4b:54:a6:68:40:
4a:3f:8e:3e:a1:9c:50:c2:44:f7:a7:28:ca:62:9f:
2a:76:19:18:83:04:fa:87:47:a0:e0:fe:af:db:a4:
04:f9:97:ea:f4:73:5a:ea:03:48:2d:6f:1d:e5:02:
19:fe:d5:47:d4:9f:15:d7:13:bd:0e:92:8c:69:59:
58:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F3:5B:3C:C3:13:B2:80:DD:00:F5:53:1A:91:AC:7E:EC:60:BB:17
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/xfNbPMMTsoDdAPVTGpGsfuxguxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.128.0/24
Signature Algorithm: sha256WithRSAEncryption
69:5d:1e:fb:60:c3:79:78:ec:70:4b:ec:d3:e6:92:8a:cf:f4:
d7:5a:5a:b5:5a:17:d2:9f:1d:ee:a9:85:10:a2:d2:ee:45:ce:
54:b3:4a:3e:ed:3d:bd:8f:e9:9b:fd:1d:1f:17:13:d8:72:da:
f4:15:3d:62:3f:f2:48:4b:3c:74:1b:d4:df:40:c5:b0:05:f5:
e1:2c:07:54:3c:c8:40:82:2d:82:85:b6:70:d8:14:f5:77:f7:
c9:74:7a:08:49:01:b9:df:cf:e3:df:bb:ff:04:2b:d9:7d:ba:
ca:34:4e:fc:d2:01:83:1c:64:ca:6b:7b:92:99:1f:60:00:75:
04:1f:52:43:09:60:e0:9e:ee:8d:f6:58:0f:8e:68:10:2e:2e:
fb:e0:87:80:fe:0e:9c:0b:10:06:b6:e7:78:54:cd:b3:71:01:
31:5c:83:c6:89:dd:c2:49:56:ba:ae:6e:69:20:d6:f3:76:f6:
fc:bf:55:91:94:a2:e8:aa:65:72:f8:ef:48:9e:15:fc:d3:cf:
5e:74:1d:00:3e:8e:bc:91:eb:8b:f8:da:4b:7e:22:c0:3a:74:
bd:f7:bf:7f:07:e6:55:32:98:34:d7:d2:a5:af:a6:de:ea:97:
c3:4d:de:a6:77:40:b3:64:53:ba:5b:f8:c4:6b:1e:f6:82:b0:
51:5b:75:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv+UHO3uAl58SubjdOPMVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj
NTBkMjAwHhcNMjMwMTAyMDA1NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWYzNWIzY2MzMTNiMjgwZGQwMGY1NTMxYTkxYWM3ZWVjNjBiYjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxTbEi7knRxCKGMW3PTe0CDtI0IF
8rh+YcsRc0JjPcEdFKsTUhRrEpDJf/J/TQ++Nqxnk1g8CiYBVhziFZA312n+LsyD
t2T7Fp7B0P4TRH8jIeS4qLsr4VdKztW/0OL5lgWij2asRfL7jZMJf+q8bvlZ9zWB
sw0zXznZ/RMxkBnK6udx4kQEJhMQ753FzC0IqWapgivw1LhHyUXHD8vNHlBiN76x
4Vf5rnhLDJjgf3eC90EOf4hbvFC0eECbS1SmaEBKP44+oZxQwkT3pyjKYp8qdhkY
gwT6h0eg4P6v26QE+Zfq9HNa6gNILW8d5QIZ/tVH1J8V1xO9DpKMaVlYqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMXzWzzDE7KA3QD1UxqRrH7sYLsXMB8GA1UdIwQY
MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt
YTY4NzNiMzc0ZTI2LzEveGZOYlBNTVRzb0RkQVBWVEdwR3NmdXhndXhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2
LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmuAMA0G
CSqGSIb3DQEBCwUAA4IBAQBpXR77YMN5eOxwS+zT5pKKz/TXWlq1WhfSnx3uqYUQ
otLuRc5Us0o+7T29j+mb/R0fFxPYctr0FT1iP/JISzx0G9TfQMWwBfXhLAdUPMhA
gi2ChbZw2BT1d/fJdHoISQG538/j37v/BCvZfbrKNE780gGDHGTKa3uSmR9gAHUE
H1JDCWDgnu6N9lgPjmgQLi774IeA/g6cCxAGtud4VM2zcQExXIPGid3CSVa6rm5p
INbzdvb8v1WRlKLoqmVy+O9InhX8089edB0APo68keuL+NpLfiLAOnS9979/B+ZV
Mpg019Klr6be6pfDTd6md0CzZFO6W/jEax72grBRW3UK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:26 2024 by rpki-client on console-fra.rpki-client.org