Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/8MQvE0bcT48BVwYBx3AiAocUQhk.roa
File: 8MQvE0bcT48BVwYBx3AiAocUQhk.roa (raw, json)
Hash identifier: ukQbQJMScPfnxFSIawwsyzAG+R8EXGhMlWQuMKbkYRQ=
Subject key identifier: F0:C4:2F:13:46:DC:4F:8F:01:57:06:01:C7:70:22:02:87:14:42:19
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 01856C53F5915BE2933DE85CF7C25688FF8A
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/8MQvE0bcT48BVwYBx3AiAocUQhk.roa
Signing time: Sun 01 Jan 2023 07:55:19 +0000
ROA not before: Sun 01 Jan 2023 07:55:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210340
IP address blocks: 195.114.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f5:91:5b:e2:93:3d:e8:5c:f7:c2:56:88:ff:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 07:55:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0c42f1346dc4f8f01570601c770220287144219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:30:0c:08:48:e5:09:43:ef:b0:34:e4:6c:3f:
6c:01:9a:e5:2b:e7:7a:56:f0:64:c9:a9:75:2b:bc:
f7:b8:88:54:a8:b8:a6:a8:cf:5a:b2:f0:49:0a:64:
e6:fe:09:94:93:51:3f:e8:29:90:42:44:21:fd:4b:
70:51:c9:dc:47:c4:61:0e:e0:af:0a:25:95:7f:eb:
2b:02:fa:47:84:e2:42:00:fd:82:c8:53:db:5e:1e:
0e:1e:99:13:05:73:72:94:d2:4d:48:d3:38:09:ac:
f7:d2:18:1b:d8:84:47:1a:66:30:fb:77:39:c5:74:
22:49:d8:f5:89:fe:2a:89:90:4f:62:75:f3:59:0c:
d5:f3:18:b8:aa:07:9f:70:e5:5f:f7:c3:ba:af:f9:
fd:a8:b8:16:c5:ea:d2:05:00:c4:a0:4d:a9:02:5b:
32:53:8f:7b:ef:39:44:24:44:c0:a7:ed:97:f1:de:
fe:c0:2f:a0:ff:89:63:18:0d:d6:b0:64:3c:8d:2b:
58:bf:d7:d4:83:e0:9d:bf:21:46:eb:b1:82:38:90:
58:76:59:ee:6c:d2:74:17:62:8f:01:7f:24:81:c9:
71:34:41:cb:a4:1b:1d:27:47:14:af:df:74:ad:27:
02:75:36:52:f0:85:fa:ce:16:ba:38:6b:a7:c9:d5:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C4:2F:13:46:DC:4F:8F:01:57:06:01:C7:70:22:02:87:14:42:19
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/8MQvE0bcT48BVwYBx3AiAocUQhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.134.0/24
Signature Algorithm: sha256WithRSAEncryption
78:85:30:c2:74:d2:23:eb:c4:b7:d5:f6:a8:6a:af:66:28:6c:
3b:bd:3b:d8:ff:f5:b6:5e:50:df:de:59:be:0d:9e:8e:af:be:
e3:b2:af:8a:c3:a6:f2:93:c8:a2:59:3a:30:59:1f:01:04:40:
c2:4e:76:78:6e:05:e8:9c:3b:da:d6:c1:5a:41:b8:d0:85:5f:
4d:d5:b9:23:79:30:1c:f0:39:94:22:d6:7c:44:08:95:6c:6d:
f9:15:9b:9a:6c:ac:04:d6:28:ab:7e:87:3a:6e:07:02:b1:8e:
68:fa:bd:00:a4:4e:3a:2b:d1:62:ca:76:e4:6c:d9:cc:ab:4c:
00:fe:28:e7:61:9f:f1:90:8f:39:71:7a:2c:bd:90:5b:ea:e1:
27:c8:83:d4:de:c1:a5:6e:ac:e5:70:be:cc:87:f0:4b:22:bf:
c8:cc:ee:6d:a5:38:e1:d4:fd:17:0c:15:f1:a1:8d:b9:5b:01:
b8:c9:54:25:f0:27:44:86:ea:40:d6:84:48:27:0a:31:eb:81:
52:63:32:65:95:b7:04:67:30:d2:3d:9a:3c:78:11:30:3c:20:
bd:d8:a8:bf:7b:63:0d:c9:9e:8e:cd:97:0f:d6:2c:e6:ba:fb:
86:60:cb:06:3f:c4:30:b1:ef:60:38:30:43:4c:44:c0:d6:0c:
11:c1:0c:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU/WRW+KTPehc98JWiP+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky
OTMxNDAwHhcNMjMwMTAxMDc1NTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGM0MmYxMzQ2ZGM0ZjhmMDE1NzA2MDFjNzcwMjIwMjg3MTQ0MjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDAMCEjlCUPvsDTkbD9sAZrlK+d6
VvBkyal1K7z3uIhUqLimqM9asvBJCmTm/gmUk1E/6CmQQkQh/UtwUcncR8RhDuCv
CiWVf+srAvpHhOJCAP2CyFPbXh4OHpkTBXNylNJNSNM4Caz30hgb2IRHGmYw+3c5
xXQiSdj1if4qiZBPYnXzWQzV8xi4qgefcOVf98O6r/n9qLgWxerSBQDEoE2pAlsy
U4977zlEJETAp+2X8d7+wC+g/4ljGA3WsGQ8jStYv9fUg+CdvyFG67GCOJBYdlnu
bNJ0F2KPAX8kgclxNEHLpBsdJ0cUr990rScCdTZS8IX6zha6OGunydX7LwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPDELxNG3E+PAVcGAcdwIgKHFEIZMB8GA1UdIwQY
MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt
MzA1NmFmOWEzMzVlLzEvOE1RdkUwYmNUNDhCVndZQngzQWlBb2NVUWhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl
LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw3KGMA0G
CSqGSIb3DQEBCwUAA4IBAQB4hTDCdNIj68S31faoaq9mKGw7vTvY//W2XlDf3lm+
DZ6Or77jsq+Kw6byk8iiWTowWR8BBEDCTnZ4bgXonDva1sFaQbjQhV9N1bkjeTAc
8DmUItZ8RAiVbG35FZuabKwE1iirfoc6bgcCsY5o+r0ApE46K9FiynbkbNnMq0wA
/ijnYZ/xkI85cXosvZBb6uEnyIPU3sGlbqzlcL7Mh/BLIr/IzO5tpTjh1P0XDBXx
oY25WwG4yVQl8CdEhupA1oRIJwox64FSYzJllbcEZzDSPZo8eBEwPCC92Ki/e2MN
yZ6OzZcP1izmuvuGYMsGP8Qwse9gODBDTETA1gwRwQxU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:04 2024 by rpki-client on console-ams.rpki-client.org