Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/1-B82OTgzrQXlbM1L--vjea5SQoE.roa
File: 1-B82OTgzrQXlbM1L--vjea5SQoE.roa (raw, json)
Hash identifier: /Sk0vdoggcHqUAvfREGcE6v7kc8fSL/zbxr/Vq10Bd8=
Subject key identifier: F8:1F:36:39:38:33:AD:05:E5:6C:CD:4B:FB:EB:E3:79:AE:52:42:81
Certificate issuer: /CN=79ab3bbb1677b2eb04d577cdae30d9570b8dde2e
Certificate serial: 018B1067DC33EF992EBAA9FAF3F2D99A3AEA
Authority key identifier: 79:AB:3B:BB:16:77:B2:EB:04:D5:77:CD:AE:30:D9:57:0B:8D:DE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eas7uxZ3susE1XfNrjDZVwuN3i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/1-B82OTgzrQXlbM1L--vjea5SQoE.roa
Signing time: Sun 08 Oct 2023 17:48:43 +0000
ROA not before: Sun 08 Oct 2023 17:48:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 194.147.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:10:67:dc:33:ef:99:2e:ba:a9:fa:f3:f2:d9:9a:3a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ab3bbb1677b2eb04d577cdae30d9570b8dde2e
Validity
Not Before: Oct 8 17:48:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f81f36393833ad05e56ccd4bfbebe379ae524281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:58:6f:b9:4e:dc:29:d5:22:c1:e6:ed:ef:d6:
95:d2:e2:3f:22:0b:ea:be:2d:7f:03:48:df:33:04:
af:dc:43:e2:f4:63:fd:66:0a:b1:f1:95:f0:ef:4b:
fc:d6:f9:40:4c:95:9a:a5:43:6e:c2:27:aa:f3:b3:
fc:5a:32:4b:87:16:11:fc:49:f8:9e:6c:79:bb:41:
96:43:65:2c:bd:09:f0:dc:1e:22:33:9c:3c:21:c7:
87:6f:eb:a8:e7:86:eb:e8:86:93:e8:a7:01:54:13:
62:c6:8b:69:74:af:c3:2d:10:fb:e7:d1:f6:47:40:
1b:39:37:cd:52:b9:4e:f9:3d:6a:35:99:a6:e5:0e:
ea:46:13:27:0b:a6:6c:3d:ce:fe:af:51:46:93:09:
11:9c:10:86:75:21:1a:8c:9c:72:f4:96:32:5f:7c:
55:af:be:e4:19:d7:e1:3e:2f:65:58:64:15:9d:dc:
c0:fc:a7:98:27:e0:5c:4b:96:6f:90:5b:4c:95:fc:
12:de:4d:14:90:05:20:f7:cf:e3:1b:28:6a:7d:af:
64:c3:6f:4a:8e:f1:ea:96:c9:ea:ee:1b:20:7f:46:
c6:2c:e2:56:1f:e2:94:12:3f:63:e5:05:c6:10:39:
05:81:31:f9:ea:15:36:ac:04:a0:65:76:e3:15:c3:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1F:36:39:38:33:AD:05:E5:6C:CD:4B:FB:EB:E3:79:AE:52:42:81
X509v3 Authority Key Identifier:
keyid:79:AB:3B:BB:16:77:B2:EB:04:D5:77:CD:AE:30:D9:57:0B:8D:DE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eas7uxZ3susE1XfNrjDZVwuN3i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/1-B82OTgzrQXlbM1L--vjea5SQoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3fdf85-565e-4f46-bc08-b3d10ed23fc0/1/eas7uxZ3susE1XfNrjDZVwuN3i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.220.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ef:ba:77:cb:ad:39:0f:68:cf:92:65:d3:96:54:2a:23:09:
05:f9:30:e5:2d:0d:67:b6:33:47:3d:77:df:ee:6a:89:ac:5d:
80:0b:4c:bc:b1:05:b0:53:11:7e:f6:4f:e9:6e:37:ca:f8:e4:
9b:96:07:79:f3:ee:59:15:a8:90:84:95:28:9e:58:f3:16:35:
42:a6:d5:e2:28:d3:ed:e7:20:86:41:f9:b2:18:c8:ab:84:f5:
16:c2:48:10:b6:83:96:83:7f:4b:1e:e5:5c:cd:e7:de:a4:b0:
cc:53:4a:3f:25:62:40:57:e9:40:4a:e5:6d:41:f9:83:d0:41:
9f:32:c8:99:94:2e:92:f6:f0:45:33:63:7a:e3:33:ce:51:cd:
34:a9:46:3f:31:c6:b6:fe:73:11:e2:70:b1:d5:c9:e9:a3:12:
af:c6:93:18:38:6a:ea:27:b9:2c:95:d3:95:64:ab:fe:bc:9f:
17:ac:c6:74:e6:93:a6:77:be:5d:f7:01:67:20:85:d1:55:12:
95:1f:d9:a1:cb:6e:77:a5:03:65:ef:72:37:8c:18:f0:3e:10:
36:25:fa:56:cc:3b:34:73:8c:68:55:97:58:79:5a:75:7d:ad:
38:8f:6d:3f:b0:3c:7d:9d:73:00:e9:68:94:ab:6e:b7:9a:0f:
c4:92:82:ac
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYsQZ9wz75kuuqn68/LZmjrqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YWIzYmJiMTY3N2IyZWIwNGQ1NzdjZGFlMzBkOTU3MGI4
ZGRlMmUwHhcNMjMxMDA4MTc0ODQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODFmMzYzOTM4MzNhZDA1ZTU2Y2NkNGJmYmViZTM3OWFlNTI0MjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklhvuU7cKdUiwebt79aV0uI/Igvq
vi1/A0jfMwSv3EPi9GP9Zgqx8ZXw70v81vlATJWapUNuwieq87P8WjJLhxYR/En4
nmx5u0GWQ2UsvQnw3B4iM5w8IceHb+uo54br6IaT6KcBVBNixotpdK/DLRD759H2
R0AbOTfNUrlO+T1qNZmm5Q7qRhMnC6ZsPc7+r1FGkwkRnBCGdSEajJxy9JYyX3xV
r77kGdfhPi9lWGQVndzA/KeYJ+BcS5ZvkFtMlfwS3k0UkAUg98/jGyhqfa9kw29K
jvHqlsnq7hsgf0bGLOJWH+KUEj9j5QXGEDkFgTH56hU2rASgZXbjFcPfTQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPgfNjk4M60F5WzNS/vr43muUkKBMB8GA1UdIwQY
MBaAFHmrO7sWd7LrBNV3za4w2VcLjd4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFzN3V4WjNzdXNFMVhmTnJqRFpWd3VOM2k0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zZmRmODUtNTY1ZS00ZjQ2LWJjMDgt
YjNkMTBlZDIzZmMwLzEvMS1CODJPVGd6clFYbGJNMUwtLXZqZWE1U1FvRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGQvM2ZkZjg1LTU2NWUtNGY0Ni1iYzA4LWIzZDEwZWQyM2Zj
MC8xL2Vhczd1eFozc3VzRTFYZk5yakRaVnd1TjNpNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMKT3DAN
BgkqhkiG9w0BAQsFAAOCAQEAN++6d8utOQ9oz5Jl05ZUKiMJBfkw5S0NZ7YzRz13
3+5qiaxdgAtMvLEFsFMRfvZP6W43yvjkm5YHefPuWRWokISVKJ5Y8xY1QqbV4ijT
7ecghkH5shjIq4T1FsJIELaDloN/Sx7lXM3n3qSwzFNKPyViQFfpQErlbUH5g9BB
nzLImZQukvbwRTNjeuMzzlHNNKlGPzHGtv5zEeJwsdXJ6aMSr8aTGDhq6ie5LJXT
lWSr/ryfF6zGdOaTpne+XfcBZyCF0VUSlR/Zoctud6UDZe9yN4wY8D4QNiX6Vsw7
NHOMaFWXWHladX2tOI9tP7A8fZ1zAOlolKtut5oPxJKCrA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:45 2024 by rpki-client on console-fra.rpki-client.org