Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/1-Uyk8r2CGOESpHnJy8q4oTAho_s.roa
File: 1-Uyk8r2CGOESpHnJy8q4oTAho_s.roa (raw, json)
Hash identifier: I8EDl1G3kscEB2FxAJdABdE7ERVy3zKP7wyFejjqFTM=
Subject key identifier: F9:4C:A4:F2:BD:82:18:E1:12:A4:79:C9:CB:CA:B8:A1:30:21:A3:FB
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 0187940D70CAB7C3C14BD9E7832105732867
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/1-Uyk8r2CGOESpHnJy8q4oTAho_s.roa
Signing time: Tue 18 Apr 2023 11:08:41 +0000
ROA not before: Tue 18 Apr 2023 11:08:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 194.36.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:0d:70:ca:b7:c3:c1:4b:d9:e7:83:21:05:73:28:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Apr 18 11:08:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f94ca4f2bd8218e112a479c9cbcab8a13021a3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:42:30:02:2b:29:17:da:57:21:71:e6:91:
63:3f:16:9c:6d:9c:9c:c5:3f:c5:33:3c:8a:9d:d4:
7d:e4:f8:5a:1c:c3:bf:54:c0:d6:da:e5:2f:55:db:
fc:2f:0e:4c:26:f5:12:c2:38:a7:57:cd:62:d5:10:
61:58:9b:fa:70:2f:10:b4:1f:49:6e:4b:e5:dd:06:
1d:26:b2:ac:85:f3:3d:6a:a5:54:5c:33:3b:ea:10:
91:fa:ca:0d:36:1e:86:67:60:df:0f:5b:74:3f:9c:
38:07:64:fb:87:a0:8b:50:85:4b:d1:df:75:6c:b0:
87:55:58:b7:3c:de:24:73:2c:b5:25:af:14:f2:3f:
5b:80:c4:fa:45:ce:6f:33:a9:7a:71:68:70:17:16:
22:3e:2f:bf:d5:19:a8:1b:65:59:55:34:47:79:52:
46:f4:48:e1:01:41:1a:c8:7f:88:47:42:e4:31:b6:
0c:7e:f8:56:e0:4e:0f:83:e0:87:d0:1c:72:8b:b3:
33:21:59:76:e2:1a:1f:f9:2d:f5:f2:46:4c:7a:73:
b1:a6:51:46:37:b6:a7:9f:60:2b:fd:23:06:8b:cf:
84:ed:e3:c1:7a:a5:09:e2:01:39:80:a3:0e:67:5d:
7f:22:06:15:db:3a:54:7c:a0:9b:bd:1d:c5:ec:40:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4C:A4:F2:BD:82:18:E1:12:A4:79:C9:CB:CA:B8:A1:30:21:A3:FB
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/1-Uyk8r2CGOESpHnJy8q4oTAho_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.32.0/24
Signature Algorithm: sha256WithRSAEncryption
14:9a:fe:63:09:55:6f:7c:7e:9e:a8:8f:71:d4:c9:ce:42:7f:
5a:9d:ea:61:5e:f1:51:a5:65:bc:9d:ad:83:2d:91:5c:b0:48:
3a:b8:a9:1f:f7:ea:79:98:d3:e4:77:23:d3:32:1a:5a:6e:2e:
39:48:09:44:8b:f5:4f:6f:9b:81:08:59:b0:f2:e1:bc:31:7a:
23:8e:ef:89:e7:89:2e:30:e0:5f:1d:ab:4c:06:61:8b:68:b7:
5d:5f:5d:f3:ce:f2:88:b5:1e:e0:82:7e:6a:d9:85:85:8f:0c:
43:0d:4d:aa:57:5d:7f:27:e9:77:cc:e4:f0:11:31:97:be:08:
6b:90:c1:99:79:43:1c:a5:ee:dc:63:45:4e:1f:a3:68:36:6c:
33:a6:96:28:88:bc:a1:75:74:16:5d:fc:50:bf:da:6d:24:3d:
1a:aa:79:ef:00:4d:33:b5:c3:04:61:b3:3b:b0:27:da:0b:96:
35:5f:39:f7:8e:a4:7d:7d:7f:ac:33:a3:b8:3a:ae:70:47:48:
a5:85:a7:ea:8a:8a:c4:65:69:f6:73:6b:9e:95:47:b1:c8:bb:
b3:67:b2:6c:1d:85:66:6e:eb:ce:05:04:2e:13:66:3f:15:c0:
00:52:d3:b6:40:c5:16:83:a7:90:38:58:83:09:a1:c9:aa:a9:
85:92:d7:17
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYeUDXDKt8PBS9nngyEFcyhnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZTU5ZDI0NWQxNTBkYzM4YzQ4OTYyNjNkY2JkY2JiZDY3
NDcwYTcwHhcNMjMwNDE4MTEwODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTRjYTRmMmJkODIxOGUxMTJhNDc5YzljYmNhYjhhMTMwMjFhM2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmxCMAIrKRfaVyFx5pFjPxacbZyc
xT/FMzyKndR95PhaHMO/VMDW2uUvVdv8Lw5MJvUSwjinV81i1RBhWJv6cC8QtB9J
bkvl3QYdJrKshfM9aqVUXDM76hCR+soNNh6GZ2DfD1t0P5w4B2T7h6CLUIVL0d91
bLCHVVi3PN4kcyy1Ja8U8j9bgMT6Rc5vM6l6cWhwFxYiPi+/1RmoG2VZVTRHeVJG
9EjhAUEayH+IR0LkMbYMfvhW4E4Pg+CH0Bxyi7MzIVl24hof+S318kZMenOxplFG
N7ann2Ar/SMGi8+E7ePBeqUJ4gE5gKMOZ11/IgYV2zpUfKCbvR3F7ECKewIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPlMpPK9ghjhEqR5ycvKuKEwIaP7MB8GA1UdIwQY
MBaAFJTlnSRdFQ3DjEiWJj3L3LvWdHCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDIt
ZWU5NWI2Y2MzNDc0LzEvMS1VeWs4cjJDR09FU3BIbkp5OHE0b1RBaG9fcy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTAvMjg3Y2QyLWYxZDgtNDRhOS1iZWQyLWVlOTViNmNjMzQ3
NC8xL2xPV2RKRjBWRGNPTVNKWW1QY3ZjdTlaMGNLYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMIkIDAN
BgkqhkiG9w0BAQsFAAOCAQEAFJr+YwlVb3x+nqiPcdTJzkJ/Wp3qYV7xUaVlvJ2t
gy2RXLBIOripH/fqeZjT5Hcj0zIaWm4uOUgJRIv1T2+bgQhZsPLhvDF6I47vieeJ
LjDgXx2rTAZhi2i3XV9d887yiLUe4IJ+atmFhY8MQw1Nqlddfyfpd8zk8BExl74I
a5DBmXlDHKXu3GNFTh+jaDZsM6aWKIi8oXV0Fl38UL/abSQ9Gqp57wBNM7XDBGGz
O7An2guWNV85946kfX1/rDOjuDqucEdIpYWn6oqKxGVp9nNrnpVHsci7s2eybB2F
Zm7rzgUELhNmPxXAAFLTtkDFFoOnkDhYgwmhyaqphZLXFw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org