Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/nolVBQMsdD3Cim807CDLfPjeTQM.roa
File: nolVBQMsdD3Cim807CDLfPjeTQM.roa (raw, json)
Hash identifier: 6vm7YCY4YMErHSvPm9g8hTEqA+rxoG4ryB5ZS41e9FU=
Subject key identifier: 9E:89:55:05:03:2C:74:3D:C2:8A:6F:34:EC:20:CB:7C:F8:DE:4D:03
Certificate issuer: /CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Certificate serial: 019068777A360D39FCC4064BD85541E8263E
Authority key identifier: 5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/nolVBQMsdD3Cim807CDLfPjeTQM.roa
Signing time: Sun 30 Jun 2024 09:26:18 +0000
ROA not before: Sun 30 Jun 2024 09:26:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61397
IP address blocks: 195.242.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:68:77:7a:36:0d:39:fc:c4:06:4b:d8:55:41:e8:26:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Validity
Not Before: Jun 30 09:26:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e895505032c743dc28a6f34ec20cb7cf8de4d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:98:55:f2:35:a9:e5:b1:5b:44:74:3a:95:
69:5b:ff:53:a9:a8:23:04:55:4b:a7:2c:f8:41:57:
f4:c4:5b:f4:55:bb:46:cb:50:51:1b:e2:48:fc:b6:
7d:38:ae:a7:1a:2d:b6:e3:46:89:49:e9:4e:21:88:
34:ac:17:4f:24:45:24:81:08:6f:7d:de:dc:3e:b9:
41:39:04:82:d2:2d:f4:7e:41:96:c6:e6:84:6b:be:
c7:44:ea:89:14:29:80:b6:ae:af:22:7d:10:1b:54:
d6:cf:f9:6c:70:c0:8d:6d:82:43:e5:a3:7a:93:7e:
e7:b1:bd:bc:f7:82:7f:74:57:08:82:6a:40:f9:c2:
2f:24:20:81:27:74:fa:50:ef:60:40:da:fa:d7:94:
b4:b2:f0:df:e0:a8:0b:35:d7:bf:7c:83:fa:86:c1:
7a:5a:5f:0a:e4:76:3b:ca:7e:89:95:11:6c:92:ed:
c9:df:43:22:5b:52:e2:c9:90:a5:ef:7f:4f:59:36:
ba:1b:5c:e7:4b:1e:cf:23:6d:98:7a:c1:b7:1b:19:
a5:3d:08:87:0d:fe:fd:3d:43:1c:71:31:bd:ce:c8:
54:94:86:4b:91:f2:d2:ca:69:53:be:7a:52:db:57:
ee:c3:bd:17:9a:b6:1f:0b:51:26:85:69:c9:e3:24:
50:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:89:55:05:03:2C:74:3D:C2:8A:6F:34:EC:20:CB:7C:F8:DE:4D:03
X509v3 Authority Key Identifier:
keyid:5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/nolVBQMsdD3Cim807CDLfPjeTQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.192.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:7e:13:02:8b:38:5e:1a:d2:bd:96:0c:f4:3a:17:8e:3a:7d:
8b:59:77:52:2c:3e:ad:47:3f:65:ef:45:d6:8c:97:bf:df:b5:
45:b2:dd:98:0d:4c:7e:f7:e2:df:86:20:92:76:48:2a:21:2f:
eb:34:7a:10:a8:5a:1e:26:c6:16:12:a0:9a:f2:c3:d1:f1:32:
74:47:ec:30:43:74:23:ab:9e:2a:39:d1:39:a7:d8:ec:53:72:
99:3c:6d:0a:27:00:61:d6:ac:e6:8d:70:98:1a:1f:b3:cd:89:
8c:35:2e:98:c0:c7:97:02:e6:6d:00:05:84:f2:45:fb:e1:94:
3c:f3:e9:d0:6c:66:4e:62:7d:b8:8e:19:19:b8:88:e7:9d:0a:
03:6e:f3:df:3a:b8:c4:9c:12:19:80:eb:53:f9:5f:56:2c:17:
5f:7e:32:8b:9a:24:e1:5e:56:b8:0f:59:ab:d6:d5:9d:13:0d:
97:1b:7d:a5:ad:4d:b8:6a:0f:8b:61:d0:86:36:8c:13:a4:03:
c7:a3:3c:af:f7:12:de:39:2a:48:6b:41:76:63:b9:e5:ac:f3:
76:db:18:c5:1a:bb:9c:86:53:6c:f9:aa:37:b7:59:c2:28:aa:
00:c1:b3:c4:4e:6f:0c:4e:52:d7:91:f3:1d:1d:4e:dc:dc:90:
49:18:3f:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBod3o2DTn8xAZL2FVB6CY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNmZhNjY5MDk5NzQxMmU3MTY2MTZjODFlNGY3YzA4NzVm
ZmQ5NzYwHhcNMjQwNjMwMDkyNjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTg5NTUwNTAzMmM3NDNkYzI4YTZmMzRlYzIwY2I3Y2Y4ZGU0ZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC6YVfI1qeWxW0R0OpVpW/9Tqagj
BFVLpyz4QVf0xFv0VbtGy1BRG+JI/LZ9OK6nGi2240aJSelOIYg0rBdPJEUkgQhv
fd7cPrlBOQSC0i30fkGWxuaEa77HROqJFCmAtq6vIn0QG1TWz/lscMCNbYJD5aN6
k37nsb2894J/dFcIgmpA+cIvJCCBJ3T6UO9gQNr615S0svDf4KgLNde/fIP6hsF6
Wl8K5HY7yn6JlRFsku3J30MiW1LiyZCl739PWTa6G1znSx7PI22YesG3GxmlPQiH
Df79PUMccTG9zshUlIZLkfLSymlTvnpS21fuw70XmrYfC1EmhWnJ4yRQcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ6JVQUDLHQ9wopvNOwgy3z43k0DMB8GA1UdIwQY
MBaAFFtvpmkJl0EucWYWyB5PfAh1/9l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yOTRjNGUtNWEyYi00YmVlLWJjNTct
MTJhZDE0NjY1NWNlLzEvbm9sVkJRTXNkRDNDaW04MDdDRExmUGplVFFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yOTRjNGUtNWEyYi00YmVlLWJjNTctMTJhZDE0NjY1NWNl
LzEvVzItbWFRbVhRUzV4WmhiSUhrOThDSFhfMlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw/LAMA0G
CSqGSIb3DQEBCwUAA4IBAQCKfhMCizheGtK9lgz0OheOOn2LWXdSLD6tRz9l70XW
jJe/37VFst2YDUx+9+LfhiCSdkgqIS/rNHoQqFoeJsYWEqCa8sPR8TJ0R+wwQ3Qj
q54qOdE5p9jsU3KZPG0KJwBh1qzmjXCYGh+zzYmMNS6YwMeXAuZtAAWE8kX74ZQ8
8+nQbGZOYn24jhkZuIjnnQoDbvPfOrjEnBIZgOtT+V9WLBdffjKLmiThXla4D1mr
1tWdEw2XG32lrU24ag+LYdCGNowTpAPHozyv9xLeOSpIa0F2Y7nlrPN22xjFGruc
hlNs+ao3t1nCKKoAwbPETm8MTlLXkfMdHU7c3JBJGD/G
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:59 2025 by rpki-client