Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/E27EsoLqG4CMpuNeWiUngGIUGZ8.roa
File: E27EsoLqG4CMpuNeWiUngGIUGZ8.roa (raw, json)
Hash identifier: 9FIdveBAFLHQwVY1EI73eanSbvSQEJhgb0t4R0S7hVw=
Subject key identifier: 13:6E:C4:B2:82:EA:1B:80:8C:A6:E3:5E:5A:25:27:80:62:14:19:9F
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 018CC64AF100DB0485BE9B22F1804EA226BA
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/E27EsoLqG4CMpuNeWiUngGIUGZ8.roa
Signing time: Mon 01 Jan 2024 18:30:49 +0000
ROA not before: Mon 01 Jan 2024 18:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 194.76.122.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 30 Mar 2024 10:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f1:00:db:04:85:be:9b:22:f1:80:4e:a2:26:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Jan 1 18:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=136ec4b282ea1b808ca6e35e5a2527806214199f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:65:7e:c4:fe:37:a4:17:da:6c:8a:ce:78:
19:14:e1:69:d7:67:8a:90:d5:47:38:78:48:4d:69:
d5:8a:76:3d:7f:6d:c9:18:3a:95:50:18:f5:9a:9f:
42:d0:61:48:3e:c5:a8:2b:c5:28:69:f9:a6:20:c3:
ad:8d:c5:9f:f1:ad:78:bd:59:08:ad:97:90:91:90:
18:17:a2:9a:38:55:f1:f2:8d:a7:f6:c6:71:01:42:
d1:35:d5:1a:ef:ab:41:06:34:a8:01:b0:cc:aa:83:
e5:b0:7d:86:a6:2a:b4:21:e2:78:12:1e:2d:42:c8:
44:53:fa:65:1b:bd:85:92:e7:68:0f:d1:7e:85:eb:
b0:ff:78:f9:f9:e3:56:12:de:39:bc:a7:2c:64:fb:
f1:32:27:4b:2b:e4:d1:11:aa:cc:ef:17:8b:da:08:
b9:06:d4:14:c9:34:1d:aa:e3:0e:0b:2c:99:2d:0e:
f3:cf:6f:f9:72:76:93:71:1d:b1:79:2b:fe:9c:fe:
0d:9f:59:6a:10:e0:21:82:f3:b6:6a:7b:1a:c8:bf:
03:dd:0d:ac:f9:6e:5a:15:eb:f1:ee:8b:45:de:5e:
d2:32:f7:51:ed:d0:c2:ba:4c:6f:f2:2a:1e:15:88:
d1:83:03:1d:ae:96:9c:4c:ae:76:7a:8d:b0:46:3d:
f5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6E:C4:B2:82:EA:1B:80:8C:A6:E3:5E:5A:25:27:80:62:14:19:9F
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/E27EsoLqG4CMpuNeWiUngGIUGZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.122.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:35:ef:67:ef:10:a9:07:42:1f:19:81:93:6f:05:27:3c:78:
a4:3f:27:bd:a1:42:6c:07:59:dc:30:ab:0d:2d:80:80:8f:b4:
c7:c9:3f:6f:5f:5a:f3:14:cf:de:43:da:68:b0:2b:9c:33:f8:
b1:23:8e:5d:26:ce:46:5e:7f:fd:f1:51:cf:30:6f:da:6c:df:
8f:57:2b:88:dd:f1:74:86:53:b0:8e:19:10:8b:39:d1:64:37:
fa:a8:45:64:fe:0a:59:89:32:59:09:a2:ee:58:b8:03:f2:c4:
73:f0:33:91:1f:49:ee:df:53:fa:ea:9c:9d:1d:42:7a:ca:9a:
b9:77:bc:7e:83:a3:c6:6c:79:b8:c3:30:df:73:fb:4f:b3:9a:
79:2e:55:03:3c:39:be:c3:fe:b0:24:b5:47:ce:a4:76:13:bd:
c8:c9:e7:83:f8:94:82:ad:24:3e:ff:79:de:f8:ec:c3:12:58:
bb:5b:0f:bf:43:8c:ad:d6:df:a8:b2:a2:0c:0c:a4:f3:74:19:
cd:a3:b3:44:be:6a:7a:95:cb:e2:13:bf:d4:eb:ff:62:94:62:
0d:30:1c:7c:4a:dc:ae:c1:9f:6a:a8:bf:24:fc:ab:a0:c7:27:
bb:b4:37:01:9b:29:9e:50:03:3a:4f:3d:18:97:72:b9:34:82:
9d:fa:c6:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSvEA2wSFvpsi8YBOoia6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm
YTJmYWMwHhcNMjQwMTAxMTgzMDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzZlYzRiMjgyZWExYjgwOGNhNmUzNWU1YTI1Mjc4MDYyMTQxOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+xlfsT+N6QX2myKzngZFOFp12eK
kNVHOHhITWnVinY9f23JGDqVUBj1mp9C0GFIPsWoK8UoafmmIMOtjcWf8a14vVkI
rZeQkZAYF6KaOFXx8o2n9sZxAULRNdUa76tBBjSoAbDMqoPlsH2Gpiq0IeJ4Eh4t
QshEU/plG72FkudoD9F+heuw/3j5+eNWEt45vKcsZPvxMidLK+TREarM7xeL2gi5
BtQUyTQdquMOCyyZLQ7zz2/5cnaTcR2xeSv+nP4Nn1lqEOAhgvO2ansayL8D3Q2s
+W5aFevx7otF3l7SMvdR7dDCukxv8ioeFYjRgwMdrpacTK52eo2wRj31NQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBNuxLKC6huAjKbjXlolJ4BiFBmfMB8GA1UdIwQY
MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt
ODQzZTI2MmRkOGRjLzEvRTI3RXNvTHFHNENNcHVOZVdpVW5nR0lVR1o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj
LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwkx6MA0G
CSqGSIb3DQEBCwUAA4IBAQChNe9n7xCpB0IfGYGTbwUnPHikPye9oUJsB1ncMKsN
LYCAj7THyT9vX1rzFM/eQ9posCucM/ixI45dJs5GXn/98VHPMG/abN+PVyuI3fF0
hlOwjhkQiznRZDf6qEVk/gpZiTJZCaLuWLgD8sRz8DORH0nu31P66pydHUJ6ypq5
d7x+g6PGbHm4wzDfc/tPs5p5LlUDPDm+w/6wJLVHzqR2E73IyeeD+JSCrSQ+/3ne
+OzDEli7Ww+/Q4yt1t+osqIMDKTzdBnNo7NEvmp6lcviE7/U6/9ilGINMBx8Styu
wZ9qqL8k/Kugxye7tDcBmymeUAM6Tz0Yl3K5NIKd+sZy
-----END CERTIFICATE-----
Generated at Sat Mar 30 10:52:31 2024 by rpki-client on console-fra.rpki-client.org