Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/tOImKzSbaP6_MpT9YqZ4QMRDgiE.roa
File: tOImKzSbaP6_MpT9YqZ4QMRDgiE.roa (raw, json)
Hash identifier: YDaleAh5YpZGrooUi+9ajm4dTr4uQX1b41cwU037d0U=
Subject key identifier: B4:E2:26:2B:34:9B:68:FE:BF:32:94:FD:62:A6:78:40:C4:43:82:21
Certificate issuer: /CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Certificate serial: 018572FA7F510C306DE4D01E24E45E757865
Authority key identifier: F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/tOImKzSbaP6_MpT9YqZ4QMRDgiE.roa
Signing time: Mon 02 Jan 2023 14:54:57 +0000
ROA not before: Mon 02 Jan 2023 14:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41227
IP address blocks: 194.34.160.0/24 maxlen: 24
194.34.161.0/24 maxlen: 24
194.34.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:fa:7f:51:0c:30:6d:e4:d0:1e:24:e4:5e:75:78:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Validity
Not Before: Jan 2 14:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4e2262b349b68febf3294fd62a67840c4438221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1d:94:d2:cb:9f:5b:31:23:09:7f:ca:c6:76:
1e:df:53:e1:b1:54:99:ac:48:f5:79:7d:65:b2:8f:
8a:d9:b1:3f:a3:c6:02:9c:d0:59:1e:af:31:69:18:
f7:59:18:d2:d1:f5:26:19:f1:b2:e0:79:c0:fe:b0:
27:5d:ab:f6:da:fa:37:2a:33:9a:2c:82:c5:04:19:
58:86:66:1e:f1:e1:14:60:b6:16:de:4f:38:1b:a4:
ab:1e:26:7c:2e:f6:9b:f8:80:fe:34:ba:bb:17:10:
1b:9a:0a:c5:d5:9f:d5:3c:a0:c4:b5:8e:60:6d:bb:
47:43:ce:8b:2f:5c:6b:2c:6b:1e:92:e7:4b:1d:4e:
a7:38:b5:aa:22:1a:b2:5a:0b:d2:84:9b:d0:d6:41:
b6:51:2e:65:a0:96:f9:81:48:bf:43:3c:0c:62:72:
9b:73:cd:1d:c9:f7:de:53:a4:17:e7:67:c7:43:6c:
81:20:c7:01:e3:b3:e1:01:15:e3:63:22:18:9f:b3:
e9:c2:9e:04:f6:9c:b7:6c:9e:de:17:a0:bd:7d:d1:
e5:e3:69:ac:e7:e7:1d:3d:8b:3f:9f:7f:5b:f0:b9:
a6:2b:bb:62:5e:ea:22:93:69:85:d5:e3:df:71:18:
e8:52:78:aa:32:61:9d:39:7b:9a:84:89:77:1c:16:
ae:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E2:26:2B:34:9B:68:FE:BF:32:94:FD:62:A6:78:40:C4:43:82:21
X509v3 Authority Key Identifier:
keyid:F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/tOImKzSbaP6_MpT9YqZ4QMRDgiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.160.0-194.34.162.255
Signature Algorithm: sha256WithRSAEncryption
3c:68:8e:56:e6:75:8f:2c:a8:65:ec:2f:52:6e:7d:57:cb:60:
ec:82:de:0d:9a:7f:4b:40:cb:21:7d:df:b1:64:2d:b1:1b:22:
77:a3:a8:99:ac:5f:06:03:b0:d9:58:26:98:f6:56:09:2b:83:
04:41:52:5e:14:d9:24:b9:d2:75:46:25:d5:9f:6f:3d:08:a4:
57:e2:a5:bf:2d:80:0b:9f:e7:89:48:db:af:63:02:05:95:1f:
92:1e:7d:c0:95:aa:48:a7:ad:0b:20:fc:fc:30:c2:0d:22:a5:
f0:00:d0:a0:0e:06:3f:3a:30:25:64:c2:a7:04:78:b8:97:c2:
2c:c7:44:bd:13:5f:73:a9:af:72:08:cb:39:a1:55:76:2f:1f:
dc:91:5e:93:19:07:35:bd:81:a2:96:56:83:58:f1:48:0b:fd:
6d:9f:5b:a2:ec:ae:ec:41:de:35:16:fb:b7:63:f1:91:76:5a:
86:77:99:75:36:40:12:5c:9b:33:a6:2f:07:dd:ec:03:6c:96:
8a:8d:db:5c:bb:e3:4f:2a:92:4a:a2:f0:e2:3d:9d:70:d3:d7:
92:1a:4d:8e:9e:c9:e6:b7:52:31:94:58:ce:9e:8e:27:1c:3f:
e5:d1:87:b4:41:11:ef:a2:03:fc:b2:a5:d8:be:c6:62:ca:11:
c0:bb:9b:13
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVy+n9RDDBt5NAeJORedXhlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OWQ1NmM1MmM3NzMzZjgzYmU3NzRhZmE0N2JiZDU1ZDI4
Nzk3YWMwHhcNMjMwMTAyMTQ1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGUyMjYyYjM0OWI2OGZlYmYzMjk0ZmQ2MmE2Nzg0MGM0NDM4MjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlh2U0sufWzEjCX/KxnYe31PhsVSZ
rEj1eX1lso+K2bE/o8YCnNBZHq8xaRj3WRjS0fUmGfGy4HnA/rAnXav22vo3KjOa
LILFBBlYhmYe8eEUYLYW3k84G6SrHiZ8Lvab+ID+NLq7FxAbmgrF1Z/VPKDEtY5g
bbtHQ86LL1xrLGsekudLHU6nOLWqIhqyWgvShJvQ1kG2US5loJb5gUi/QzwMYnKb
c80dyffeU6QX52fHQ2yBIMcB47PhARXjYyIYn7Ppwp4E9py3bJ7eF6C9fdHl42ms
5+cdPYs/n39b8LmmK7tiXuoik2mF1ePfcRjoUniqMmGdOXuahIl3HBaueQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLTiJis0m2j+vzKU/WKmeEDEQ4IhMB8GA1UdIwQY
MBaAFPWdVsUsdzP4O+d0r6R7vVXSh5esMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVoxV3hTeDNNX2c3NTNTdnBIdTlWZEtIbDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYzEwMTMtNWRjYi00ZWJjLWI3OWUt
NWMwNjdiOGI5MWE1LzEvdE9JbUt6U2JhUDZfTXBUOVlxWjRRTVJEZ2lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jYzEwMTMtNWRjYi00ZWJjLWI3OWUtNWMwNjdiOGI5MWE1
LzEvOVoxV3hTeDNNX2c3NTNTdnBIdTlWZEtIbDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXCIqAD
BADCIqIwDQYJKoZIhvcNAQELBQADggEBADxojlbmdY8sqGXsL1JufVfLYOyC3g2a
f0tAyyF937FkLbEbInejqJmsXwYDsNlYJpj2VgkrgwRBUl4U2SS50nVGJdWfbz0I
pFfipb8tgAuf54lI269jAgWVH5IefcCVqkinrQsg/Pwwwg0ipfAA0KAOBj86MCVk
wqcEeLiXwizHRL0TX3Opr3IIyzmhVXYvH9yRXpMZBzW9gaKWVoNY8UgL/W2fW6Ls
ruxB3jUW+7dj8ZF2WoZ3mXU2QBJcmzOmLwfd7ANsloqN21y7408qkkqi8OI9nXDT
15IaTY6eyea3UjGUWM6ejiccP+XRh7RBEe+iA/yypdi+xmLKEcC7mxM=
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:18 2024 by rpki-client on console-ams.rpki-client.org