Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/MO6jaz_KGG5LR1-vt_7N0kWcrwg.roa
File: MO6jaz_KGG5LR1-vt_7N0kWcrwg.roa (raw, json)
Hash identifier: 7kXIn8QHzdzmuIpG6HZJpkczGztpuxYvi6zg7Fzph+Q=
Subject key identifier: 30:EE:A3:6B:3F:CA:18:6E:4B:47:5F:AF:B7:FE:CD:D2:45:9C:AF:08
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01856E38D13FBEAA122A060163F059AF4E57
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/MO6jaz_KGG5LR1-vt_7N0kWcrwg.roa
Signing time: Sun 01 Jan 2023 16:44:55 +0000
ROA not before: Sun 01 Jan 2023 16:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208643
IP address blocks: 195.178.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:d1:3f:be:aa:12:2a:06:01:63:f0:59:af:4e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Jan 1 16:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30eea36b3fca186e4b475fafb7fecdd2459caf08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:4c:2d:f0:e4:4f:ab:f8:fa:3b:ec:01:f2:
52:aa:85:9e:23:1b:97:1b:5c:a2:1d:7b:49:32:ae:
68:5b:ff:9b:18:90:4e:34:61:a7:9f:99:d6:55:28:
cc:57:c9:a3:c9:dc:68:c5:5f:74:46:6d:d3:95:0b:
4a:48:ef:cb:d9:3f:ef:d0:ea:eb:71:25:01:9e:46:
f7:97:c2:d7:0b:a8:aa:63:5d:2a:93:bc:6b:87:d0:
d3:1c:ad:d0:3a:8a:55:d6:16:10:78:ab:a8:d7:e3:
a4:2c:c7:67:40:a2:29:5d:76:48:6a:76:5a:9f:0a:
61:9a:d7:00:0f:da:28:61:a0:40:2c:c1:21:d7:6f:
50:70:18:1d:4c:bb:ab:6d:cd:32:db:d0:ff:63:48:
51:c6:9a:c3:ee:e7:bd:53:cb:cc:f0:da:1f:d6:6b:
f8:ae:d9:24:e2:63:34:25:aa:7c:2e:f1:16:51:92:
16:fc:d1:5a:2d:a0:8d:1b:b5:ca:1f:bf:de:7e:2c:
a8:1f:8b:91:30:aa:65:87:95:7d:66:36:66:36:54:
68:ed:f7:14:38:27:ea:93:37:ee:d5:ec:d3:6f:da:
82:3e:57:3e:87:a1:09:9e:8b:58:44:c4:2a:55:a8:
e3:db:78:a5:c6:ed:a2:d3:91:9d:13:70:34:85:26:
66:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:EE:A3:6B:3F:CA:18:6E:4B:47:5F:AF:B7:FE:CD:D2:45:9C:AF:08
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/MO6jaz_KGG5LR1-vt_7N0kWcrwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.157.0/24
Signature Algorithm: sha256WithRSAEncryption
10:0d:42:08:35:2c:b0:82:2e:29:d2:ec:cf:d7:f3:96:2d:ea:
51:2d:b6:62:d5:2d:b6:b5:08:85:d9:65:b0:8a:74:ea:82:25:
a2:55:3a:ee:eb:4b:14:f3:bc:95:85:1c:a3:b7:8e:5c:aa:76:
4b:8d:27:16:bd:bc:d6:39:58:d2:97:f4:17:ae:0a:e2:0d:50:
be:c8:65:63:0d:91:31:f4:85:18:8c:ea:cf:f2:c3:79:bb:6c:
d2:7f:43:e2:92:22:72:6f:64:69:63:4c:20:c2:7d:41:24:b3:
16:9a:0a:b4:39:f7:d5:b9:c9:8f:3f:a6:55:0e:da:83:15:b9:
14:00:fa:31:7f:01:22:7a:7e:e1:e3:2d:11:79:a4:24:5b:84:
1a:f4:5b:ca:a4:09:03:2a:7e:6d:c3:a4:cb:9e:73:26:42:ac:
50:3f:37:0a:c0:7b:1f:94:f5:1d:8e:9e:51:cc:48:77:3f:69:
9f:d4:b5:6e:af:d0:e5:b2:d6:bf:77:f8:b1:7a:c5:59:f3:3f:
d3:69:d1:f3:55:eb:10:5d:e4:93:79:b5:7e:c0:ee:c7:74:19:
e1:bb:f1:3d:36:9b:63:63:4b:44:99:4b:c0:29:43:e5:69:41:
fd:52:7f:e1:3d:f0:81:4e:4f:71:fe:09:a3:0e:43:29:ca:79:
e9:98:3b:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuONE/vqoSKgYBY/BZr05XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjMwMTAxMTY0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGVlYTM2YjNmY2ExODZlNGI0NzVmYWZiN2ZlY2RkMjQ1OWNhZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqJMLfDkT6v4+jvsAfJSqoWeIxuX
G1yiHXtJMq5oW/+bGJBONGGnn5nWVSjMV8mjydxoxV90Rm3TlQtKSO/L2T/v0Orr
cSUBnkb3l8LXC6iqY10qk7xrh9DTHK3QOopV1hYQeKuo1+OkLMdnQKIpXXZIanZa
nwphmtcAD9ooYaBALMEh129QcBgdTLurbc0y29D/Y0hRxprD7ue9U8vM8Nof1mv4
rtkk4mM0Jap8LvEWUZIW/NFaLaCNG7XKH7/efiyoH4uRMKplh5V9ZjZmNlRo7fcU
OCfqkzfu1ezTb9qCPlc+h6EJnotYRMQqVajj23ilxu2i05GdE3A0hSZmdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDDuo2s/yhhuS0dfr7f+zdJFnK8IMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvTU82amF6X0tHRzVMUjEtdnRfN04wa1djcndnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7KdMA0G
CSqGSIb3DQEBCwUAA4IBAQAQDUIINSywgi4p0uzP1/OWLepRLbZi1S22tQiF2WWw
inTqgiWiVTru60sU87yVhRyjt45cqnZLjScWvbzWOVjSl/QXrgriDVC+yGVjDZEx
9IUYjOrP8sN5u2zSf0PikiJyb2RpY0wgwn1BJLMWmgq0OffVucmPP6ZVDtqDFbkU
APoxfwEien7h4y0ReaQkW4Qa9FvKpAkDKn5tw6TLnnMmQqxQPzcKwHsflPUdjp5R
zEh3P2mf1LVur9Dlsta/d/ixesVZ8z/TadHzVesQXeSTebV+wO7HdBnhu/E9Nptj
Y0tEmUvAKUPlaUH9Un/hPfCBTk9x/gmjDkMpynnpmDst
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org