Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/1-s1o8CnXdTjr038t19GW9Oe-_68.roa
File: 1-s1o8CnXdTjr038t19GW9Oe-_68.roa (raw, json)
Hash identifier: 6P2LFk/0Q+WguzdHlA9sLYfu77WYL5zoYNd5g5p8eyo=
Subject key identifier: FA:CD:68:F0:29:D7:75:38:EB:D3:7F:2D:D7:D1:96:F4:E7:BE:FF:AF
Certificate issuer: /CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Certificate serial: 0186DFB9965B1C8D3008A8FFCEA10971BE17
Authority key identifier: 70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/1-s1o8CnXdTjr038t19GW9Oe-_68.roa
Signing time: Tue 14 Mar 2023 10:45:27 +0000
ROA not before: Tue 14 Mar 2023 10:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207009
IP address blocks: 209.251.196.0/23 maxlen: 23
209.251.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 11:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:b9:96:5b:1c:8d:30:08:a8:ff:ce:a1:09:71:be:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700c030930a9d2e4da88d81852a44c3f78bfb440
Validity
Not Before: Mar 14 10:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=facd68f029d77538ebd37f2dd7d196f4e7beffaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fc:4b:7c:39:15:1b:f6:92:49:1d:f6:6a:bb:
4a:83:66:08:d4:55:00:15:96:6e:77:d8:f3:8a:b5:
a6:40:de:6d:00:93:bf:4d:d6:4c:67:a1:d5:93:a2:
af:80:2d:a6:fa:96:bc:32:a1:b7:2e:50:35:c6:e3:
10:55:79:41:da:76:08:dd:4b:08:27:a3:21:96:5b:
2b:e8:d2:ce:5f:46:27:9a:ab:c4:54:9b:08:1a:e3:
ae:41:3a:6d:dd:7f:3c:cf:ef:d2:a0:a7:52:51:d0:
13:5d:45:19:eb:ea:e3:bb:66:b9:f6:b0:a4:65:d4:
c2:76:55:66:cb:c0:b7:2f:ca:7a:f6:0c:51:e3:5a:
36:c7:ef:69:44:d2:d8:fd:73:24:fd:bf:f1:a6:6f:
ff:bd:d9:22:0f:8c:8f:8f:d3:0c:26:4a:66:3f:7a:
89:8e:0a:f9:f2:c0:7f:df:c6:76:fa:02:ed:77:d8:
1f:1e:b7:6a:e1:7a:21:b6:85:8c:90:c8:98:08:76:
93:ad:6d:54:8b:06:08:5d:fd:84:6f:6e:23:5d:d5:
a3:07:28:4a:32:24:6a:63:e8:c5:53:dd:28:f8:47:
08:54:b9:c4:13:3e:bd:90:32:c3:77:00:73:99:03:
93:fb:51:fd:3e:63:25:2e:fc:fb:23:9f:62:e9:1b:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CD:68:F0:29:D7:75:38:EB:D3:7F:2D:D7:D1:96:F4:E7:BE:FF:AF
X509v3 Authority Key Identifier:
keyid:70:0C:03:09:30:A9:D2:E4:DA:88:D8:18:52:A4:4C:3F:78:BF:B4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAwDCTCp0uTaiNgYUqRMP3i_tEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/1-s1o8CnXdTjr038t19GW9Oe-_68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/068cb9-6cba-453d-858a-c5bbf95f8584/1/cAwDCTCp0uTaiNgYUqRMP3i_tEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.251.195.0-209.251.197.255
Signature Algorithm: sha256WithRSAEncryption
03:65:c3:4e:b3:72:38:49:90:61:0c:91:a1:9a:86:94:98:7e:
f0:19:53:f4:2f:eb:92:31:6a:46:bf:6a:31:1a:c0:59:af:4d:
40:b8:1e:12:e3:e7:4a:75:a4:eb:95:24:7f:a4:eb:7a:39:62:
4c:46:01:26:14:8b:e4:92:bd:39:df:4c:3a:24:43:69:f7:ea:
00:0e:14:48:2b:55:40:81:91:a3:53:10:3a:e5:7a:09:1f:d9:
28:2e:0d:26:2c:ac:83:fc:3c:76:55:83:14:3e:82:4a:fe:89:
33:f7:c1:65:13:0e:7e:f4:24:33:05:f1:39:6e:17:30:97:2f:
67:31:a8:9c:d7:71:59:d8:a8:52:15:9d:3e:4b:18:62:63:70:
79:35:5a:b9:38:2f:5b:04:77:07:9d:4e:a3:08:c7:24:04:1d:
48:9e:76:04:71:9f:49:85:76:c5:7d:e6:c7:cc:3f:b5:c2:a2:
76:1e:47:5d:2a:ef:58:c8:22:42:d4:44:e2:f8:ab:a0:6b:b4:
51:65:bc:af:ca:96:5e:2f:52:9d:79:13:16:8b:5a:bc:06:ce:
ff:0f:d3:4c:ec:03:f8:30:09:70:0c:18:17:46:73:5f:f0:4c:
cb:a1:9a:c0:12:97:c5:c3:26:bf:10:c0:16:43:f7:f9:dc:74:
c0:33:8f:78
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgISAYbfuZZbHI0wCKj/zqEJcb4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGMwMzA5MzBhOWQyZTRkYTg4ZDgxODUyYTQ0YzNmNzhi
ZmI0NDAwHhcNMjMwMzE0MTA0NTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWNkNjhmMDI5ZDc3NTM4ZWJkMzdmMmRkN2QxOTZmNGU3YmVmZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvxLfDkVG/aSSR32artKg2YI1FUA
FZZud9jzirWmQN5tAJO/TdZMZ6HVk6KvgC2m+pa8MqG3LlA1xuMQVXlB2nYI3UsI
J6Mhllsr6NLOX0YnmqvEVJsIGuOuQTpt3X88z+/SoKdSUdATXUUZ6+rju2a59rCk
ZdTCdlVmy8C3L8p69gxR41o2x+9pRNLY/XMk/b/xpm//vdkiD4yPj9MMJkpmP3qJ
jgr58sB/38Z2+gLtd9gfHrdq4XohtoWMkMiYCHaTrW1UiwYIXf2Eb24jXdWjByhK
MiRqY+jFU90o+EcIVLnEEz69kDLDdwBzmQOT+1H9PmMlLvz7I59i6RtKUQIDAQAB
o4ICEjCCAg4wHQYDVR0OBBYEFPrNaPAp13U469N/LdfRlvTnvv+vMB8GA1UdIwQY
MBaAFHAMAwkwqdLk2ojYGFKkTD94v7RAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0F3RENUQ3AwdVRhaU5nWVVxUk1QM2lfdEVBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wNjhjYjktNmNiYS00NTNkLTg1OGEt
YzViYmY5NWY4NTg0LzEvMS1zMW84Q25YZFRqcjAzOHQxOUdXOU9lLV82OC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzEvMDY4Y2I5LTZjYmEtNDUzZC04NThhLWM1YmJmOTVmODU4
NC8xL2NBd0RDVENwMHVUYWlOZ1lVcVJNUDNpX3RFQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQA0fvD
AwQB0fvEMA0GCSqGSIb3DQEBCwUAA4IBAQADZcNOs3I4SZBhDJGhmoaUmH7wGVP0
L+uSMWpGv2oxGsBZr01AuB4S4+dKdaTrlSR/pOt6OWJMRgEmFIvkkr0530w6JENp
9+oADhRIK1VAgZGjUxA65XoJH9koLg0mLKyD/Dx2VYMUPoJK/okz98FlEw5+9CQz
BfE5bhcwly9nMaic13FZ2KhSFZ0+SxhiY3B5NVq5OC9bBHcHnU6jCMckBB1InnYE
cZ9JhXbFfebHzD+1wqJ2HkddKu9YyCJC1ETi+Kuga7RRZbyvypZeL1KdeRMWi1q8
Bs7/D9NM7AP4MAlwDBgXRnNf8EzLoZrAEpfFwya/EMAWQ/f53HTAM494
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:25 2024 by rpki-client on console-ams.rpki-client.org