Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/f5QcpR-QFvH_3J4OEBmiPOvhK_M.roa
File: f5QcpR-QFvH_3J4OEBmiPOvhK_M.roa (raw, json)
Hash identifier: CIKCT1/ygfkIsIDKe1pBicvFDxCYCeF1nA98m7eZAkA=
Subject key identifier: 7F:94:1C:A5:1F:90:16:F1:FF:DC:9E:0E:10:19:A2:3C:EB:E1:2B:F3
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 018CC801470606C167A0F9D041C125EBE426
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/f5QcpR-QFvH_3J4OEBmiPOvhK_M.roa
Signing time: Tue 02 Jan 2024 02:29:36 +0000
ROA not before: Tue 02 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399486
IP address blocks: 194.33.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 14:47:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:47:06:06:c1:67:a0:f9:d0:41:c1:25:eb:e4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Jan 2 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f941ca51f9016f1ffdc9e0e1019a23cebe12bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:aa:51:4a:8c:bb:39:59:e0:c8:9c:13:fb:88:
16:e0:a5:6c:ce:02:24:4b:ed:71:6a:17:78:f1:56:
eb:2f:d3:59:d5:5e:8b:8f:b7:8b:8d:3f:bb:0c:ca:
12:b1:3e:97:17:da:21:6d:00:3c:d0:5e:a9:f5:c3:
88:12:e0:54:eb:6a:a4:44:09:d4:2e:e3:6e:2f:a3:
13:15:14:fa:aa:2d:fe:04:d8:cd:ef:39:a8:27:2a:
7e:89:64:36:d4:bc:19:31:84:d9:75:4e:39:d3:3c:
42:88:9d:f2:88:a7:41:76:43:4a:54:4a:67:8a:ef:
47:f2:d5:93:4b:18:76:b6:de:bb:6a:8a:58:13:3f:
b4:ed:c9:81:08:f6:f3:d0:e7:bb:3a:52:8d:08:f2:
7b:17:ed:8c:24:fe:2e:35:0b:23:46:8b:0c:4a:c2:
c4:57:b0:36:7e:5f:69:91:5f:d2:61:14:79:6a:cb:
43:29:e4:62:d5:50:32:42:1d:d5:4e:6e:3f:d4:60:
2d:cb:94:ef:12:36:32:37:54:d6:8e:fb:29:85:e9:
b4:26:b8:d9:0d:92:b2:9d:88:41:77:58:8f:5a:47:
a2:c1:21:52:b3:4c:e6:00:01:da:87:a8:fe:2b:9e:
b9:d9:ac:4d:a6:3e:1f:2c:ab:5f:d4:84:0b:3f:86:
63:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:94:1C:A5:1F:90:16:F1:FF:DC:9E:0E:10:19:A2:3C:EB:E1:2B:F3
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/f5QcpR-QFvH_3J4OEBmiPOvhK_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.191.0/24
Signature Algorithm: sha256WithRSAEncryption
45:2f:ee:c0:b5:76:87:6e:16:dd:e3:4f:0e:e4:4c:bb:e1:e9:
ec:27:d1:b2:fc:b0:9b:57:4b:95:51:22:ea:c1:0c:47:74:a9:
01:53:e8:20:43:f6:03:db:7f:54:fd:2e:85:69:e8:a5:e0:a9:
ec:64:c0:ec:a6:f4:c1:f2:e7:89:6a:eb:d9:6b:33:fd:49:5d:
aa:8c:34:13:7b:19:02:1b:b5:09:27:20:f8:f3:af:f4:a9:64:
70:bf:29:66:9f:c1:45:44:92:e8:d1:34:fd:7b:14:fc:e3:0d:
0a:c5:81:83:da:ad:53:4a:66:02:bc:82:68:d9:51:10:17:a5:
6a:9d:7d:93:5e:2b:ae:b7:20:7f:8c:8d:39:59:d9:12:70:70:
c4:7e:08:39:b5:7a:e1:5f:d4:b0:c6:a3:19:af:a2:e7:6a:61:
e7:52:0e:f7:cb:23:c9:d2:f9:f4:67:e2:d3:8b:34:ae:c5:c2:
1b:14:7e:f0:7c:ff:d9:a4:9d:a9:63:b6:03:ce:0e:07:d1:76:
c8:86:57:48:fc:55:c5:20:ab:9e:43:91:be:58:35:74:4f:4a:
68:9c:96:e5:41:50:5d:c7:83:97:f6:91:a7:1f:cf:ac:8d:b4:
c2:f1:cc:1a:0c:5e:05:23:3b:22:27:2e:6d:44:46:00:2a:03:
df:33:e6:77
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzIAUcGBsFnoPnQQcEl6+QmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MGUwMTdjZjE3MTE1MTliMGZmOWY2NTg1OGM0OTFiMmZh
NWQ0MGIwHhcNMjQwMTAyMDIyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Zjk0MWNhNTFmOTAxNmYxZmZkYzllMGUxMDE5YTIzY2ViZTEyYmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6pRSoy7OVngyJwT+4gW4KVszgIk
S+1xahd48VbrL9NZ1V6Lj7eLjT+7DMoSsT6XF9ohbQA80F6p9cOIEuBU62qkRAnU
LuNuL6MTFRT6qi3+BNjN7zmoJyp+iWQ21LwZMYTZdU450zxCiJ3yiKdBdkNKVEpn
iu9H8tWTSxh2tt67aopYEz+07cmBCPbz0Oe7OlKNCPJ7F+2MJP4uNQsjRosMSsLE
V7A2fl9pkV/SYRR5astDKeRi1VAyQh3VTm4/1GAty5TvEjYyN1TWjvsphem0JrjZ
DZKynYhBd1iPWkeiwSFSs0zmAAHah6j+K5652axNpj4fLKtf1IQLP4ZjMQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFH+UHKUfkBbx/9yeDhAZojzr4SvzMB8GA1UdIwQY
MBaAFPgOAXzxcRUZsP+fZYWMSRsvpdQLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1BNEJmUEZ4RlJtd181OWxoWXhKR3ktbDFBcy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2
LThjZTYwYTVjOGIxZi8xL2Y1UWNwUi1RRnZIXzNKNE9FQm1pUE92aEtfTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODcvMmRjMTM2LTQwMGQtNDBlNy1hZDg2LThjZTYwYTVjOGIx
Zi8xLzEtQTRCZlBGeEZSbXdfNTlsaFl4Skd5LWwxQXMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCIb8w
DQYJKoZIhvcNAQELBQADggEBAEUv7sC1doduFt3jTw7kTLvh6ewn0bL8sJtXS5VR
IurBDEd0qQFT6CBD9gPbf1T9LoVp6KXgqexkwOym9MHy54lq69lrM/1JXaqMNBN7
GQIbtQknIPjzr/SpZHC/KWafwUVEkujRNP17FPzjDQrFgYParVNKZgK8gmjZURAX
pWqdfZNeK663IH+MjTlZ2RJwcMR+CDm1euFf1LDGoxmvoudqYedSDvfLI8nS+fRn
4tOLNK7FwhsUfvB8/9mknaljtgPODgfRdsiGV0j8VcUgq55Dkb5YNXRPSmicluVB
UF3Hg5f2kacfz6yNtMLxzBoMXgUjOyInLm1ERgAqA98z5nc=
-----END CERTIFICATE-----
Generated at Tue Apr 30 18:14:23 2024 by rpki-client on console-fra.rpki-client.org