Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/sQnLgveK304AEtVHBhrkfkL-Pa8.roa
File: sQnLgveK304AEtVHBhrkfkL-Pa8.roa (raw, json)
Hash identifier: Kecv0hitibdaVISonb2/a2acHfRI4MpNzENGgydZdyE=
Subject key identifier: B1:09:CB:82:F7:8A:DF:4E:00:12:D5:47:06:1A:E4:7E:42:FE:3D:AF
Certificate issuer: /CN=1ba06c322369d449e174fa731047b339723fb01d
Certificate serial: 01856FF961448DDA88824290B9C30881C043
Authority key identifier: 1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/sQnLgveK304AEtVHBhrkfkL-Pa8.roa
Signing time: Mon 02 Jan 2023 00:54:52 +0000
ROA not before: Mon 02 Jan 2023 00:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57915
IP address blocks: 194.1.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:61:44:8d:da:88:82:42:90:b9:c3:08:81:c0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba06c322369d449e174fa731047b339723fb01d
Validity
Not Before: Jan 2 00:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b109cb82f78adf4e0012d547061ae47e42fe3daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:67:bf:e5:56:5a:3f:9b:19:40:a4:18:bd:06:
d7:21:b8:88:de:9a:6d:99:72:44:e2:e5:00:b5:76:
74:b9:c7:23:e2:84:b8:02:ac:3a:a2:f8:2b:9b:25:
e0:e4:13:eb:ef:55:11:b8:09:18:fc:1a:22:4b:5c:
db:04:5c:04:1e:b4:90:80:68:b7:ea:20:cc:79:93:
04:ec:9a:c4:bb:3a:52:ef:ae:e2:30:28:91:a2:22:
26:23:80:0b:6a:cb:8c:69:7e:07:4f:1f:eb:eb:36:
fd:a1:f7:38:cc:32:f4:82:d5:d7:45:3c:dc:c5:5d:
db:4f:fe:ba:95:c2:47:90:6e:f9:87:cd:11:11:89:
f0:25:23:03:e9:fa:36:85:ff:e8:36:92:bf:57:ae:
4d:0e:8b:36:14:f9:5a:11:53:c5:a7:61:62:ef:95:
95:32:4a:a7:3f:b0:7b:93:1a:dd:6f:7f:8a:a3:8e:
d2:6e:60:16:06:f5:09:3e:75:7d:c9:a7:7e:04:a5:
a2:30:e5:7f:16:ad:fc:81:35:bb:47:0a:ab:43:9a:
b7:ed:5c:ec:01:45:91:c3:b9:68:54:f5:81:a6:9a:
4e:c6:59:69:a6:01:c5:5c:67:07:4a:fe:e0:6a:f2:
ab:79:95:0f:1d:fd:e2:7a:80:b4:d9:57:78:92:ef:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:09:CB:82:F7:8A:DF:4E:00:12:D5:47:06:1A:E4:7E:42:FE:3D:AF
X509v3 Authority Key Identifier:
keyid:1B:A0:6C:32:23:69:D4:49:E1:74:FA:73:10:47:B3:39:72:3F:B0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6BsMiNp1EnhdPpzEEezOXI_sB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/sQnLgveK304AEtVHBhrkfkL-Pa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcea2a-7360-4707-a518-296c42229f86/1/G6BsMiNp1EnhdPpzEEezOXI_sB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.219.0/24
Signature Algorithm: sha256WithRSAEncryption
81:9a:4e:f2:12:ca:a7:11:82:84:fd:1e:79:db:9b:33:bf:c1:
4b:14:c9:ed:2d:eb:be:71:fd:2b:2a:81:7f:8e:bd:5c:33:93:
6b:d7:ec:f3:65:49:1b:01:2f:a3:39:a8:1b:cc:c1:d9:be:fc:
77:50:55:14:ec:40:e1:8a:47:79:cf:18:bd:38:0d:d4:ac:b6:
a8:e9:ed:c4:47:d4:2e:c1:05:b4:90:f1:e2:b3:d7:11:f6:ed:
f0:19:75:0e:c1:0e:cc:65:fc:05:bb:f7:ba:17:0b:9c:32:31:
aa:54:3f:a7:3d:40:c4:70:dc:97:80:ce:63:a1:e7:3c:a6:ee:
4a:3d:6c:e5:86:ad:d9:a6:c5:4b:06:9e:94:34:75:c3:63:9c:
52:85:bf:44:a3:71:2d:57:5e:03:42:10:ce:78:c6:58:f4:e5:
cf:b8:1e:2a:3f:0a:e6:9a:e1:2e:68:a2:99:07:92:23:33:66:
41:d0:40:f4:e2:12:dc:b7:8e:50:e5:83:72:7a:38:b6:0d:52:
a7:1b:d8:be:58:c0:76:4c:ab:7f:ee:e5:13:5e:7e:ce:2e:aa:
95:06:7c:e0:bc:44:da:c5:f8:e3:e5:b2:8c:10:d9:f4:df:86:
20:33:58:ae:92:c5:74:8e:4c:94:69:e1:6f:ce:29:61:41:36:
3d:09:06:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv+WFEjdqIgkKQucMIgcBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYTA2YzMyMjM2OWQ0NDllMTc0ZmE3MzEwNDdiMzM5NzIz
ZmIwMWQwHhcNMjMwMTAyMDA1NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTA5Y2I4MmY3OGFkZjRlMDAxMmQ1NDcwNjFhZTQ3ZTQyZmUzZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgme/5VZaP5sZQKQYvQbXIbiI3ppt
mXJE4uUAtXZ0uccj4oS4Aqw6ovgrmyXg5BPr71URuAkY/BoiS1zbBFwEHrSQgGi3
6iDMeZME7JrEuzpS767iMCiRoiImI4ALasuMaX4HTx/r6zb9ofc4zDL0gtXXRTzc
xV3bT/66lcJHkG75h80REYnwJSMD6fo2hf/oNpK/V65NDos2FPlaEVPFp2Fi75WV
MkqnP7B7kxrdb3+Ko47SbmAWBvUJPnV9yad+BKWiMOV/Fq38gTW7RwqrQ5q37Vzs
AUWRw7loVPWBpppOxllppgHFXGcHSv7gavKreZUPHf3ieoC02Vd4ku94vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLEJy4L3it9OABLVRwYa5H5C/j2vMB8GA1UdIwQY
MBaAFBugbDIjadRJ4XT6cxBHszlyP7AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzZCc01pTnAxRW5oZFBwekVFZXpPWElfc0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kY2VhMmEtNzM2MC00NzA3LWE1MTgt
Mjk2YzQyMjI5Zjg2LzEvc1FuTGd2ZUszMDRBRXRWSEJocmtma0wtUGE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9kY2VhMmEtNzM2MC00NzA3LWE1MTgtMjk2YzQyMjI5Zjg2
LzEvRzZCc01pTnAxRW5oZFBwekVFZXpPWElfc0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgHbMA0G
CSqGSIb3DQEBCwUAA4IBAQCBmk7yEsqnEYKE/R5525szv8FLFMntLeu+cf0rKoF/
jr1cM5Nr1+zzZUkbAS+jOagbzMHZvvx3UFUU7EDhikd5zxi9OA3UrLao6e3ER9Qu
wQW0kPHis9cR9u3wGXUOwQ7MZfwFu/e6FwucMjGqVD+nPUDEcNyXgM5joec8pu5K
PWzlhq3ZpsVLBp6UNHXDY5xShb9Eo3EtV14DQhDOeMZY9OXPuB4qPwrmmuEuaKKZ
B5IjM2ZB0ED04hLct45Q5YNyeji2DVKnG9i+WMB2TKt/7uUTXn7OLqqVBnzgvETa
xfjj5bKMENn034YgM1iuksV0jkyUaeFvzilhQTY9CQZF
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:33 2024 by rpki-client on console-ams.rpki-client.org