Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/3MlAnYNYmpnnucH0i9X2-d_jBwM.roa
File: 3MlAnYNYmpnnucH0i9X2-d_jBwM.roa (raw, json)
Hash identifier: UsXEbfTw/yVkUEMUAXPUAC5D2jht3sHEf3hrfVk9eCA=
Subject key identifier: DC:C9:40:9D:83:58:9A:99:E7:B9:C1:F4:8B:D5:F6:F9:DF:E3:07:03
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 018CC64AF158908EB2B9A3B9DACCFCAF086E
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/3MlAnYNYmpnnucH0i9X2-d_jBwM.roa
Signing time: Mon 01 Jan 2024 18:30:49 +0000
ROA not before: Mon 01 Jan 2024 18:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203526
IP address blocks: 194.76.122.0/23 maxlen: 24
2001:678:e28::/48 maxlen: 56
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f1:58:90:8e:b2:b9:a3:b9:da:cc:fc:af:08:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Jan 1 18:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcc9409d83589a99e7b9c1f48bd5f6f9dfe30703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:1f:b0:17:a3:38:50:32:bd:7d:e0:5a:aa:
fa:61:0c:c6:25:17:ea:20:df:7c:e9:ea:1f:24:ce:
3c:de:5f:b2:40:a1:ca:1f:14:01:cc:4b:50:e0:0a:
ea:e9:ba:20:f4:41:f4:55:a7:65:7d:79:5c:19:6d:
00:cd:08:ed:5f:00:e2:cd:99:bd:b2:af:12:a7:48:
92:6d:6f:4e:61:fc:c9:13:12:a1:2b:17:a2:85:d7:
20:85:4d:e4:b5:0c:08:dc:a0:62:94:2c:7b:39:eb:
31:97:34:71:06:e1:68:28:0d:5d:f0:17:77:e1:6f:
ef:b2:ad:fb:b9:6c:7e:fe:f8:f0:48:da:ae:f7:a1:
98:b8:2f:6d:40:3a:6e:47:6e:33:15:83:90:8d:18:
ad:37:db:e8:0f:3f:02:18:95:4e:82:18:53:98:4b:
d6:a3:f7:fb:59:de:be:d3:e8:fa:31:4b:a2:1c:71:
bb:58:48:0c:4b:92:c6:0a:01:20:58:bd:59:0e:85:
52:e4:3f:ce:73:00:a8:48:e7:d8:83:77:ff:1e:18:
b6:1b:cc:7d:7e:ec:8b:52:d6:9f:c8:43:61:a9:4a:
fe:08:31:e6:6d:46:95:01:f1:d5:5a:9b:f8:31:28:
ec:b0:3c:e0:c1:71:19:6f:04:98:96:33:d4:c2:b2:
06:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C9:40:9D:83:58:9A:99:E7:B9:C1:F4:8B:D5:F6:F9:DF:E3:07:03
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/3MlAnYNYmpnnucH0i9X2-d_jBwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.122.0/23
IPv6:
2001:678:e28::/48
Signature Algorithm: sha256WithRSAEncryption
0b:05:ef:08:95:7d:ff:ff:22:24:4d:60:4f:1d:e5:e7:ee:a7:
e8:fd:7d:e9:77:20:1e:ef:4b:e4:67:a1:a7:0a:ee:50:3c:67:
31:5e:89:fd:aa:6b:c8:9e:be:81:fa:ef:e6:b3:74:05:cd:12:
c9:8e:67:cb:04:f3:58:76:1f:7e:bf:b8:32:e0:13:ab:70:52:
39:c9:82:5a:a8:9a:15:dc:c4:c3:c4:ec:24:3c:29:cb:f3:92:
8a:ad:d4:c2:e5:00:0a:a0:c0:96:41:fd:c5:c6:aa:96:6b:63:
bd:9f:66:53:e2:8a:eb:76:17:d2:94:fc:fc:fd:86:f7:29:44:
f0:1f:3e:64:5c:41:ed:93:2f:45:b4:cc:9b:2f:cd:8b:bf:42:
7e:d5:f8:aa:54:58:70:b1:c0:cf:e5:90:d4:5e:41:69:6d:0a:
6a:4b:7e:ba:56:d5:6d:78:c2:86:60:f6:91:71:17:f9:24:89:
0b:6e:aa:42:1e:97:be:6f:f6:3d:43:a9:2c:5e:52:6d:26:14:
43:86:ca:56:a8:eb:dc:ed:a8:9d:5b:01:23:56:b9:82:08:be:
0f:79:66:48:e7:8b:9f:67:26:38:fd:cf:bf:de:c8:04:bf:d8:
39:2c:ef:7f:b4:d0:b6:f9:8e:2e:b1:e3:75:99:9c:fa:3d:c6:
4f:58:59:3d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzGSvFYkI6yuaO52sz8rwhuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm
YTJmYWMwHhcNMjQwMTAxMTgzMDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2M5NDA5ZDgzNTg5YTk5ZTdiOWMxZjQ4YmQ1ZjZmOWRmZTMwNzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8AfsBejOFAyvX3gWqr6YQzGJRfq
IN986eofJM483l+yQKHKHxQBzEtQ4Arq6bog9EH0VadlfXlcGW0AzQjtXwDizZm9
sq8Sp0iSbW9OYfzJExKhKxeihdcghU3ktQwI3KBilCx7OesxlzRxBuFoKA1d8Bd3
4W/vsq37uWx+/vjwSNqu96GYuC9tQDpuR24zFYOQjRitN9voDz8CGJVOghhTmEvW
o/f7Wd6+0+j6MUuiHHG7WEgMS5LGCgEgWL1ZDoVS5D/OcwCoSOfYg3f/Hhi2G8x9
fuyLUtafyENhqUr+CDHmbUaVAfHVWpv4MSjssDzgwXEZbwSYljPUwrIG6QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNzJQJ2DWJqZ57nB9IvV9vnf4wcDMB8GA1UdIwQY
MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt
ODQzZTI2MmRkOGRjLzEvM01sQW5ZTlltcG5udWNIMGk5WDItZF9qQndNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj
LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwkx6MA8E
AgACMAkDBwAgAQZ4DigwDQYJKoZIhvcNAQELBQADggEBAAsF7wiVff//IiRNYE8d
5efup+j9fel3IB7vS+RnoacK7lA8ZzFeif2qa8ievoH67+azdAXNEsmOZ8sE81h2
H36/uDLgE6twUjnJglqomhXcxMPE7CQ8Kcvzkoqt1MLlAAqgwJZB/cXGqpZrY72f
ZlPiiut2F9KU/Pz9hvcpRPAfPmRcQe2TL0W0zJsvzYu/Qn7V+KpUWHCxwM/lkNRe
QWltCmpLfrpW1W14woZg9pFxF/kkiQtuqkIel75v9j1DqSxeUm0mFEOGylao69zt
qJ1bASNWuYIIvg95Zkjni59nJjj9z7/eyAS/2Dks73+00Lb5ji6x43WZnPo9xk9Y
WT0=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:14 2025 by rpki-client