Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/a-_N3EN9OhX1YLwIwb9ER3fCk8I.roa
File: a-_N3EN9OhX1YLwIwb9ER3fCk8I.roa (raw, json)
Hash identifier: klgfPIbFlNHVP1nxnweHR1O5jr5AqrLIZqSQzUibKQA=
Subject key identifier: 6B:EF:CD:DC:43:7D:3A:15:F5:60:BC:08:C1:BF:44:47:77:C2:93:C2
Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial: 01856FF962A43E753DA1A0CEFCA00DF70029
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/a-_N3EN9OhX1YLwIwb9ER3fCk8I.roa
Signing time: Mon 02 Jan 2023 00:54:52 +0000
ROA not before: Mon 02 Jan 2023 00:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8412
IP address blocks: 194.113.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:62:a4:3e:75:3d:a1:a0:ce:fc:a0:0d:f7:00:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
Validity
Not Before: Jan 2 00:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6befcddc437d3a15f560bc08c1bf444777c293c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:9b:7f:49:2b:72:cc:3f:95:13:e3:a8:6a:
3f:9b:f1:46:ad:c8:84:ab:d7:19:32:91:78:f5:f3:
12:8b:a5:ce:2a:8e:0b:53:1c:30:52:ee:de:ad:7a:
76:c5:fd:e0:e8:3c:9e:57:b9:2b:1a:9e:ad:e5:8d:
f8:a5:e5:12:b6:a5:56:62:36:f9:09:a0:b9:e6:fb:
c9:47:42:6d:76:39:1b:44:81:c2:c0:bd:95:13:29:
60:a1:27:d4:f1:d8:8f:f0:ea:24:12:53:a6:17:8d:
70:11:f9:82:a0:47:76:59:29:f0:c8:5d:74:6a:61:
56:ab:f5:52:77:3d:5c:dc:7d:d7:e0:91:17:5f:6f:
80:3f:fd:97:65:3b:13:46:43:75:ba:c9:0b:61:50:
79:44:43:45:63:b4:de:30:c7:81:db:09:9d:35:30:
5f:7b:ab:f9:f0:ad:e6:be:74:af:4c:3f:7f:d4:c7:
83:e0:23:a4:b9:90:62:8c:b2:5a:32:35:fb:32:44:
26:40:94:e3:5e:2d:f9:c5:5b:61:bf:b1:76:96:1b:
55:3e:f8:e9:27:71:92:21:8c:a4:73:a0:fc:64:ba:
29:bc:96:e8:4c:11:9b:a4:5c:af:8b:45:c2:a6:78:
4f:dd:4a:92:01:91:24:20:80:0e:19:5c:2e:2d:61:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EF:CD:DC:43:7D:3A:15:F5:60:BC:08:C1:BF:44:47:77:C2:93:C2
X509v3 Authority Key Identifier:
keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/a-_N3EN9OhX1YLwIwb9ER3fCk8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.154.0/24
Signature Algorithm: sha256WithRSAEncryption
13:fc:77:cb:ee:65:16:d1:90:73:ca:d5:34:85:62:da:69:4e:
f9:f4:9f:3f:f3:f9:09:48:66:06:34:f3:35:f8:df:92:b1:85:
de:dc:1b:95:99:9f:13:83:d2:1e:c2:88:bd:e4:ae:4a:76:da:
08:88:49:37:24:bf:90:95:da:a6:8e:3f:2d:16:e5:e5:e3:a3:
e5:da:2a:8e:8c:a8:e7:28:c0:47:d2:5b:26:c8:08:43:29:00:
c4:b6:55:9c:93:f1:65:81:b5:f5:ae:c2:89:fb:ce:ef:c0:f1:
31:80:7a:84:0d:7f:5b:1c:7c:6b:94:a8:f4:4d:95:de:89:60:
5e:ec:8e:4a:1a:46:2f:9b:db:80:1e:42:df:db:56:cb:f3:9d:
e2:19:96:7f:29:b2:23:cc:ab:a2:08:62:c1:e6:52:be:d9:ef:
3c:83:16:6e:fc:3d:43:39:64:a2:f6:e8:1d:36:9c:8d:36:38:
ca:3f:16:1f:01:0e:4f:74:c0:a1:93:45:c3:82:d9:ae:84:1c:
ad:90:f0:ac:be:af:f0:c2:48:a5:44:16:ca:f4:38:80:ba:54:
78:6b:fb:dc:5c:16:c6:14:16:20:e6:25:21:55:b9:fe:6a:85:
d7:a2:4f:96:fb:b1:26:da:3a:ee:f4:76:17:c8:b6:15:2f:96:
00:64:df:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv+WKkPnU9oaDO/KAN9wApMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NGIzMTVhZTBmMjRjODkxZmNhMTg0NTZjNjY5MTc3OTJh
ZjE2NWUwHhcNMjMwMTAyMDA1NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmVmY2RkYzQzN2QzYTE1ZjU2MGJjMDhjMWJmNDQ0Nzc3YzI5M2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQybf0krcsw/lRPjqGo/m/FGrciE
q9cZMpF49fMSi6XOKo4LUxwwUu7erXp2xf3g6DyeV7krGp6t5Y34peUStqVWYjb5
CaC55vvJR0JtdjkbRIHCwL2VEylgoSfU8diP8OokElOmF41wEfmCoEd2WSnwyF10
amFWq/VSdz1c3H3X4JEXX2+AP/2XZTsTRkN1uskLYVB5RENFY7TeMMeB2wmdNTBf
e6v58K3mvnSvTD9/1MeD4COkuZBijLJaMjX7MkQmQJTjXi35xVthv7F2lhtVPvjp
J3GSIYykc6D8ZLopvJboTBGbpFyvi0XCpnhP3UqSAZEkIIAOGVwuLWEBNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGvvzdxDfToV9WC8CMG/REd3wpPCMB8GA1UdIwQY
MBaAFBRLMVrg8kyJH8oYRWxmkXeSrxZeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAt
MTE4MjhlMGU0MjdiLzEvYS1fTjNFTjlPaFgxWUx3SXdiOUVSM2ZDazhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAtMTE4MjhlMGU0Mjdi
LzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnGaMA0G
CSqGSIb3DQEBCwUAA4IBAQAT/HfL7mUW0ZBzytU0hWLaaU759J8/8/kJSGYGNPM1
+N+SsYXe3BuVmZ8Tg9Iewoi95K5KdtoIiEk3JL+Qldqmjj8tFuXl46Pl2iqOjKjn
KMBH0lsmyAhDKQDEtlWck/FlgbX1rsKJ+87vwPExgHqEDX9bHHxrlKj0TZXeiWBe
7I5KGkYvm9uAHkLf21bL853iGZZ/KbIjzKuiCGLB5lK+2e88gxZu/D1DOWSi9ugd
NpyNNjjKPxYfAQ5PdMChk0XDgtmuhBytkPCsvq/wwkilRBbK9DiAulR4a/vcXBbG
FBYg5iUhVbn+aoXXok+W+7Em2jru9HYXyLYVL5YAZN/F
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:35 2024 by rpki-client on console-fra.rpki-client.org