Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/klnChaVjtb_BSljG4yzq3o1o10k.roa
File: klnChaVjtb_BSljG4yzq3o1o10k.roa (raw, json)
Hash identifier: LJgWdldQAZY/sF89zVRxdBPVVNQQMpP7w3HwR+IFZWU=
Subject key identifier: 92:59:C2:85:A5:63:B5:BF:C1:4A:58:C6:E3:2C:EA:DE:8D:68:D7:49
Certificate issuer: /CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Certificate serial: 018CC72707451270798584296B7F19B48C8E
Authority key identifier: E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/klnChaVjtb_BSljG4yzq3o1o10k.roa
Signing time: Mon 01 Jan 2024 22:31:12 +0000
ROA not before: Mon 01 Jan 2024 22:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 194.147.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:07:45:12:70:79:85:84:29:6b:7f:19:b4:8c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9accfd21abd7fe3fa0d6bb31df4820bfb5a4188
Validity
Not Before: Jan 1 22:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9259c285a563b5bfc14a58c6e32ceade8d68d749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:87:1c:6c:ca:91:1d:54:50:96:1c:4c:03:
d4:c4:79:74:ad:94:ae:14:df:29:5d:35:81:b0:33:
34:c4:a0:d8:44:72:e4:4c:ee:08:5a:cf:72:f9:04:
2b:ee:2c:42:c3:1c:48:10:e0:2e:23:1f:22:93:74:
4d:b2:25:93:04:9b:1c:f0:02:38:2d:b4:6d:f5:6c:
e9:b6:c2:09:e8:16:55:be:07:f0:14:69:f9:e9:27:
17:c9:40:ae:54:af:56:90:8e:c7:6d:73:0e:81:eb:
67:76:c0:30:21:dc:53:22:5c:b8:e6:51:7d:63:46:
c3:66:ae:cf:88:c2:4a:d9:19:a3:3f:be:46:11:07:
21:6e:ab:58:a2:dd:df:70:43:06:0d:2d:28:2c:24:
7b:9c:e9:db:67:8f:9a:5a:8b:f3:3f:94:c3:57:78:
b5:ea:9b:f1:ec:a5:9f:3e:cc:02:99:2d:c2:3e:a5:
a0:00:62:f3:5f:57:79:f9:47:5f:58:4e:d4:f5:8a:
e4:bf:3e:cc:3b:5b:90:93:2f:a6:ad:58:f2:ea:78:
c2:3f:51:9d:99:9f:ba:ff:a4:22:b9:62:e1:dd:09:
7e:b9:a5:d9:01:69:52:48:28:96:08:e2:cc:54:5d:
5b:88:b5:23:85:34:5b:95:0a:82:43:de:63:d3:0b:
91:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:59:C2:85:A5:63:B5:BF:C1:4A:58:C6:E3:2C:EA:DE:8D:68:D7:49
X509v3 Authority Key Identifier:
keyid:E9:AC:CF:D2:1A:BD:7F:E3:FA:0D:6B:B3:1D:F4:82:0B:FB:5A:41:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6azP0hq9f-P6DWuzHfSCC_taQYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/klnChaVjtb_BSljG4yzq3o1o10k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6f2886-2ff7-40b0-9673-75b684f890b4/1/6azP0hq9f-P6DWuzHfSCC_taQYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.112.0/24
Signature Algorithm: sha256WithRSAEncryption
79:36:46:f6:ea:d2:8e:3b:f6:61:28:a9:b6:1f:c0:38:ba:a3:
9a:37:e6:07:02:83:2d:eb:de:2c:9a:2f:bf:cc:d6:2c:f0:f1:
37:75:ae:fc:f4:cc:cc:69:5f:99:57:de:5b:d9:68:08:63:c3:
1d:fe:c9:bc:b9:c2:d4:61:47:e8:f9:4c:57:eb:a7:38:cf:6d:
9e:64:18:8f:94:fd:a3:9a:4a:42:6f:eb:af:47:98:53:4f:32:
60:c1:16:68:77:5a:3f:64:86:71:ff:13:da:07:17:6f:d6:12:
eb:c0:00:f0:1a:da:82:c7:82:72:fd:ff:ce:64:c8:71:72:46:
ab:b1:ac:1a:23:28:b9:aa:99:f1:bd:9f:76:bb:ac:63:8b:3d:
d4:cc:b3:6a:ad:a0:c1:97:29:0c:93:db:b3:7b:0c:12:b9:ee:
dc:7b:05:ad:50:a0:65:99:bd:e0:60:ee:bd:95:be:96:61:c3:
79:af:df:b2:f6:55:8f:37:94:e6:f3:64:f9:fb:e4:c9:39:07:
2d:7a:5b:19:bd:5d:a9:9b:7b:a5:e5:e2:98:97:0c:b1:7d:2d:
17:2c:8c:25:8e:d6:f8:cb:2f:8a:bd:1a:ed:1e:4a:b6:55:dc:
be:8a:42:ac:37:6f:a6:f7:8e:a9:91:d2:3d:15:d5:fb:dc:c5:
63:f8:32:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJwdFEnB5hYQpa38ZtIyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YWNjZmQyMWFiZDdmZTNmYTBkNmJiMzFkZjQ4MjBiZmI1
YTQxODgwHhcNMjQwMTAxMjIzMTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjU5YzI4NWE1NjNiNWJmYzE0YTU4YzZlMzJjZWFkZThkNjhkNzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqueHHGzKkR1UUJYcTAPUxHl0rZSu
FN8pXTWBsDM0xKDYRHLkTO4IWs9y+QQr7ixCwxxIEOAuIx8ik3RNsiWTBJsc8AI4
LbRt9WzptsIJ6BZVvgfwFGn56ScXyUCuVK9WkI7HbXMOgetndsAwIdxTIly45lF9
Y0bDZq7PiMJK2RmjP75GEQchbqtYot3fcEMGDS0oLCR7nOnbZ4+aWovzP5TDV3i1
6pvx7KWfPswCmS3CPqWgAGLzX1d5+UdfWE7U9Yrkvz7MO1uQky+mrVjy6njCP1Gd
mZ+6/6QiuWLh3Ql+uaXZAWlSSCiWCOLMVF1biLUjhTRblQqCQ95j0wuR8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJJZwoWlY7W/wUpYxuMs6t6NaNdJMB8GA1UdIwQY
MBaAFOmsz9IavX/j+g1rsx30ggv7WkGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82ZjI4ODYtMmZmNy00MGIwLTk2NzMt
NzViNjg0Zjg5MGI0LzEva2xuQ2hhVmp0Yl9CU2xqRzR5enEzbzFvMTBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC82ZjI4ODYtMmZmNy00MGIwLTk2NzMtNzViNjg0Zjg5MGI0
LzEvNmF6UDBocTlmLVA2RFd1ekhmU0NDX3RhUVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpNwMA0G
CSqGSIb3DQEBCwUAA4IBAQB5Nkb26tKOO/ZhKKm2H8A4uqOaN+YHAoMt694smi+/
zNYs8PE3da789MzMaV+ZV95b2WgIY8Md/sm8ucLUYUfo+UxX66c4z22eZBiPlP2j
mkpCb+uvR5hTTzJgwRZod1o/ZIZx/xPaBxdv1hLrwADwGtqCx4Jy/f/OZMhxckar
sawaIyi5qpnxvZ92u6xjiz3UzLNqraDBlykMk9uzewwSue7cewWtUKBlmb3gYO69
lb6WYcN5r9+y9lWPN5Tm82T5++TJOQctelsZvV2pm3ul5eKYlwyxfS0XLIwljtb4
yy+KvRrtHkq2Vdy+ikKsN2+m946pkdI9FdX73MVj+DLt
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:46 2025 by rpki-client