Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/k3oUy85An848whsH3NhPC17rqw4.roa
File: k3oUy85An848whsH3NhPC17rqw4.roa (raw, json)
Hash identifier: YKDCnQk5NZgfepI6yrgJ/g4ACoaKjxmAmVQ+GrMVU2Q=
Subject key identifier: 93:7A:14:CB:CE:40:9F:CE:3C:C2:1B:07:DC:D8:4F:0B:5E:EB:AB:0E
Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial: 018AACC90673F0AAF8A272E64FDA72B2D134
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/k3oUy85An848whsH3NhPC17rqw4.roa
Signing time: Tue 19 Sep 2023 09:32:50 +0000
ROA not before: Tue 19 Sep 2023 09:32:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6658
IP address blocks: 194.1.128.0/24 maxlen: 24
194.1.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:c9:06:73:f0:aa:f8:a2:72:e6:4f:da:72:b2:d1:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Validity
Not Before: Sep 19 09:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=937a14cbce409fce3cc21b07dcd84f0b5eebab0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:87:53:a6:cf:13:12:0f:ef:fd:16:80:1e:
f7:3e:ae:50:f8:08:ca:9b:02:f3:65:07:f2:04:dc:
aa:ab:dd:59:e8:c2:b6:5e:c6:79:e5:8a:26:00:91:
87:63:c1:9d:9f:90:84:fa:02:0b:9d:3c:e7:57:56:
e2:e9:ab:90:47:b2:c3:da:43:e6:eb:2c:99:dc:6f:
d7:5b:75:c6:80:f0:b9:b0:3e:3d:7e:eb:6f:b3:ba:
d2:1d:f4:62:1e:59:44:b0:96:7c:3d:4b:87:b7:ec:
be:ca:07:1f:22:ed:ca:83:4e:a3:f3:e5:45:ad:f9:
5b:b2:0e:66:5d:56:ce:6d:eb:ba:70:45:79:01:a2:
13:8f:fd:7e:93:17:2d:12:b7:42:4f:0c:b5:89:bf:
6d:4e:43:8e:77:91:39:dc:2d:db:c7:63:0b:f8:e6:
e3:4f:3f:4a:62:a8:93:87:3a:b1:e8:c8:9e:82:0f:
93:86:95:df:53:67:41:8b:66:26:84:ae:e4:62:b3:
92:db:0a:20:d9:c1:3c:dc:5e:a0:4c:c1:45:2e:a5:
81:63:f7:ff:09:b0:c3:5c:cc:d6:11:83:db:87:69:
c0:57:a7:59:7f:eb:90:e7:6b:51:ad:e6:9d:a3:98:
e0:93:30:f0:b8:0c:4a:ab:e0:63:fc:ef:a2:10:21:
4d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7A:14:CB:CE:40:9F:CE:3C:C2:1B:07:DC:D8:4F:0B:5E:EB:AB:0E
X509v3 Authority Key Identifier:
keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/k3oUy85An848whsH3NhPC17rqw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.128.0/23
Signature Algorithm: sha256WithRSAEncryption
58:fe:f9:dd:e1:10:52:c3:c5:4a:18:0c:df:3d:ee:ce:f5:04:
6d:e5:01:78:80:52:08:45:58:91:8e:43:06:3d:70:1c:0b:0c:
70:c3:cc:01:a3:65:52:a3:b8:30:a8:b3:4d:ba:10:06:28:5c:
91:1a:9e:f3:20:ab:d2:a1:1f:ed:ae:d6:01:cc:2f:9d:27:8b:
3d:5d:80:bf:68:1f:e8:16:15:ae:91:3d:29:86:8d:c8:ef:86:
2a:e1:db:92:b6:03:97:a5:85:4e:f6:a2:48:ab:1b:d8:aa:6d:
d1:95:61:da:74:fc:27:35:3e:df:3a:59:07:b4:94:72:d2:0a:
f5:e4:85:67:9f:0a:84:47:00:45:79:0f:cf:d3:98:05:77:14:
af:4a:85:e7:dd:e6:8e:11:79:34:3f:c2:e2:72:8c:7a:69:f5:
81:2c:bb:b6:30:0d:71:c3:85:61:57:72:26:e9:19:9e:1d:e1:
f9:c1:71:e2:f5:8b:44:a6:ef:13:db:bd:32:bf:22:cb:9c:1d:
89:4e:6c:31:05:40:87:19:63:f9:a4:91:7a:41:71:6d:bf:99:
16:d9:79:69:2b:8d:3b:90:ab:f6:15:d1:b0:60:0e:a8:1d:fe:
c8:87:a1:96:fa:b5:a0:e1:42:fd:6f:36:52:3d:a5:92:24:02:
3e:54:34:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqsyQZz8Kr4onLmT9pystE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjJkNWE2N2I3YTIwZjg2NWU3NTMxNjNhNmVkMGU1ZjM0
N2U4MzkwHhcNMjMwOTE5MDkzMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzdhMTRjYmNlNDA5ZmNlM2NjMjFiMDdkY2Q4NGYwYjVlZWJhYjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBGHU6bPExIP7/0WgB73Pq5Q+AjK
mwLzZQfyBNyqq91Z6MK2XsZ55YomAJGHY8Gdn5CE+gILnTznV1bi6auQR7LD2kPm
6yyZ3G/XW3XGgPC5sD49futvs7rSHfRiHllEsJZ8PUuHt+y+ygcfIu3Kg06j8+VF
rflbsg5mXVbObeu6cEV5AaITj/1+kxctErdCTwy1ib9tTkOOd5E53C3bx2ML+Obj
Tz9KYqiThzqx6Miegg+ThpXfU2dBi2YmhK7kYrOS2wog2cE83F6gTMFFLqWBY/f/
CbDDXMzWEYPbh2nAV6dZf+uQ52tRreado5jgkzDwuAxKq+Bj/O+iECFNoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJN6FMvOQJ/OPMIbB9zYTwte66sOMB8GA1UdIwQY
MBaAFAVi1aZ7eiD4ZedTFjpu0OXzR+g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzct
NTA0YzhmYzIyMGVhLzEvazNvVXk4NUFuODQ4d2hzSDNOaFBDMTdycXc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzctNTA0YzhmYzIyMGVh
LzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwgGAMA0G
CSqGSIb3DQEBCwUAA4IBAQBY/vnd4RBSw8VKGAzfPe7O9QRt5QF4gFIIRViRjkMG
PXAcCwxww8wBo2VSo7gwqLNNuhAGKFyRGp7zIKvSoR/trtYBzC+dJ4s9XYC/aB/o
FhWukT0pho3I74Yq4duStgOXpYVO9qJIqxvYqm3RlWHadPwnNT7fOlkHtJRy0gr1
5IVnnwqERwBFeQ/P05gFdxSvSoXn3eaOEXk0P8Licox6afWBLLu2MA1xw4VhV3Im
6RmeHeH5wXHi9YtEpu8T270yvyLLnB2JTmwxBUCHGWP5pJF6QXFtv5kW2XlpK407
kKv2FdGwYA6oHf7Ih6GW+rWg4UL9bzZSPaWSJAI+VDTF
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:54 2024 by rpki-client on console-ams.rpki-client.org