Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/wAm6m3CUz1WWGtxEC5rceJAHCL4.roa
File: wAm6m3CUz1WWGtxEC5rceJAHCL4.roa (raw, json)
Hash identifier: RTIFWhjUoYisMKVLi6lhp9sgdSuvX3eVkh6YlO07HKo=
Subject key identifier: C0:09:BA:9B:70:94:CF:55:96:1A:DC:44:0B:9A:DC:78:90:07:08:BE
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 018B1E18AEEC2A5A19A8AE7B2D1C73C39476
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/wAm6m3CUz1WWGtxEC5rceJAHCL4.roa
Signing time: Wed 11 Oct 2023 09:36:55 +0000
ROA not before: Wed 11 Oct 2023 09:36:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 194.107.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:18:ae:ec:2a:5a:19:a8:ae:7b:2d:1c:73:c3:94:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Oct 11 09:36:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c009ba9b7094cf55961adc440b9adc78900708be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:23:b4:d9:29:92:21:98:d2:56:6a:c1:99:
84:1f:d8:de:3e:d7:a4:c6:3a:d7:bb:e2:2e:c0:10:
52:fc:a2:3c:11:b4:72:64:d4:f9:32:fd:7c:e2:32:
a7:a5:03:d6:b6:66:94:90:94:72:2c:23:f1:c8:30:
5d:55:94:22:89:a2:d4:e4:ad:b7:da:2d:52:69:07:
93:b6:72:76:36:c6:6b:98:29:73:23:58:30:2e:69:
67:25:b1:df:0c:fe:39:42:2f:f8:ce:78:93:00:ad:
87:5b:49:57:84:88:31:f4:3c:63:ff:c8:f3:8f:c4:
e4:01:fd:fc:bb:aa:76:1d:b6:3b:4f:18:f6:b3:fc:
0c:0b:45:17:e3:af:24:27:77:ba:36:ee:bf:8b:9d:
e0:ae:16:2b:9b:79:73:70:0a:1c:b9:e9:3c:55:22:
13:08:85:ae:5c:e6:c8:70:06:fe:94:f3:87:3f:d0:
de:ce:73:4f:85:73:2c:27:f5:be:74:10:b3:22:ea:
0f:51:af:15:e8:cb:bb:32:db:99:4a:6a:5d:41:ef:
72:67:37:01:22:fd:a4:85:5c:20:5a:be:ba:b2:e3:
3e:d2:ff:4f:64:a4:48:10:25:7f:7f:50:5a:9b:38:
e2:a3:97:b9:e4:77:f2:1f:9b:60:17:1f:87:01:d1:
3b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:09:BA:9B:70:94:CF:55:96:1A:DC:44:0B:9A:DC:78:90:07:08:BE
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/wAm6m3CUz1WWGtxEC5rceJAHCL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.161.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:41:a3:12:59:72:bb:e4:34:50:cb:dc:87:3d:1b:d8:9f:34:
0c:f8:c9:bd:75:34:93:42:27:a2:17:cd:c1:e9:3a:53:f8:b5:
88:fa:3c:b6:92:7a:89:23:40:d0:c1:82:92:d1:59:8e:cb:25:
df:3c:40:64:93:f5:c3:bb:23:4e:c5:61:88:0b:6b:76:91:15:
40:d6:e5:c7:0f:7c:2f:ae:57:7d:1d:01:9b:c1:e5:f1:e4:45:
ca:34:a1:fc:ed:a9:a7:27:36:c8:f3:d3:03:0b:5e:e8:a8:a5:
e7:7e:a2:b0:99:47:37:da:bf:9b:6f:18:c0:4e:90:eb:b5:fb:
04:b6:1b:1f:86:bf:64:84:e2:4f:0d:9f:d4:6d:c3:8c:e5:a8:
d9:2a:e5:1b:db:f7:45:d2:27:1e:23:06:94:f2:36:41:54:8e:
87:a4:c0:a8:87:b7:17:42:ac:af:2d:02:7b:1c:2a:92:bc:60:
a9:e9:4e:17:29:d6:1b:e8:1f:01:0d:83:23:b5:f8:a7:0c:98:
09:9b:23:a8:e4:70:03:0c:08:73:87:37:fd:16:a2:35:c6:00:
7b:0e:18:81:8f:18:35:be:ba:85:34:49:70:b8:45:f2:1b:65:
5e:ed:e3:bf:c0:b1:d9:d8:dc:9f:d7:fd:b1:48:c4:f7:ed:4d:
11:40:9b:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYseGK7sKloZqK57LRxzw5R2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZTU5ZDI0NWQxNTBkYzM4YzQ4OTYyNjNkY2JkY2JiZDY3
NDcwYTcwHhcNMjMxMDExMDkzNjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDA5YmE5YjcwOTRjZjU1OTYxYWRjNDQwYjlhZGM3ODkwMDcwOGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn34jtNkpkiGY0lZqwZmEH9jePtek
xjrXu+IuwBBS/KI8EbRyZNT5Mv184jKnpQPWtmaUkJRyLCPxyDBdVZQiiaLU5K23
2i1SaQeTtnJ2NsZrmClzI1gwLmlnJbHfDP45Qi/4zniTAK2HW0lXhIgx9Dxj/8jz
j8TkAf38u6p2HbY7Txj2s/wMC0UX468kJ3e6Nu6/i53grhYrm3lzcAocuek8VSIT
CIWuXObIcAb+lPOHP9DeznNPhXMsJ/W+dBCzIuoPUa8V6Mu7MtuZSmpdQe9yZzcB
Iv2khVwgWr66suM+0v9PZKRIECV/f1Bamzjio5e55HfyH5tgFx+HAdE7vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMAJuptwlM9VlhrcRAua3HiQBwi+MB8GA1UdIwQY
MBaAFJTlnSRdFQ3DjEiWJj3L3LvWdHCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDIt
ZWU5NWI2Y2MzNDc0LzEvd0FtNm0zQ1V6MVdXR3R4RUM1cmNlSkFIQ0w0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDItZWU5NWI2Y2MzNDc0
LzEvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmuhMA0G
CSqGSIb3DQEBCwUAA4IBAQCKQaMSWXK75DRQy9yHPRvYnzQM+Mm9dTSTQieiF83B
6TpT+LWI+jy2knqJI0DQwYKS0VmOyyXfPEBkk/XDuyNOxWGIC2t2kRVA1uXHD3wv
rld9HQGbweXx5EXKNKH87amnJzbI89MDC17oqKXnfqKwmUc32r+bbxjATpDrtfsE
thsfhr9khOJPDZ/UbcOM5ajZKuUb2/dF0iceIwaU8jZBVI6HpMCoh7cXQqyvLQJ7
HCqSvGCp6U4XKdYb6B8BDYMjtfinDJgJmyOo5HADDAhzhzf9FqI1xgB7DhiBjxg1
vrqFNElwuEXyG2Ve7eO/wLHZ2Nyf1/2xSMT37U0RQJtj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:39 2024 by rpki-client on console-ams.rpki-client.org