Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/Ia9XYc4toTg-Oec_4lWjwgBPScc.roa
File: Ia9XYc4toTg-Oec_4lWjwgBPScc.roa (raw, json)
Hash identifier: 7J2XrU6n1TbeaizwrYoqdI2QeT+DJbzcGo0V76AekM4=
Subject key identifier: 21:AF:57:61:CE:2D:A1:38:3E:39:E7:3F:E2:55:A3:C2:00:4F:49:C7
Certificate issuer: /CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Certificate serial: 01856C138F2B357CC45101E1B807B9F5C9D2
Authority key identifier: 1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/Ia9XYc4toTg-Oec_4lWjwgBPScc.roa
Signing time: Sun 01 Jan 2023 06:44:59 +0000
ROA not before: Sun 01 Jan 2023 06:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43289
IP address blocks: 194.61.32.0/24 maxlen: 24
194.61.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:8f:2b:35:7c:c4:51:01:e1:b8:07:b9:f5:c9:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd2d463ae15346d5edd7937b8bfa8e09b14376d
Validity
Not Before: Jan 1 06:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21af5761ce2da1383e39e73fe255a3c2004f49c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c5:e5:73:5b:e2:c6:dd:26:3e:41:e9:ba:c0:
a7:20:5f:6d:5e:ac:d4:6e:da:f4:3d:a6:25:9b:03:
c3:e0:88:03:ab:9f:8f:eb:ee:d7:a3:bc:72:ea:14:
4b:de:f7:66:a9:c6:16:2b:6d:6b:9f:5e:38:c2:f1:
54:1b:16:20:38:6d:b9:fc:8f:ce:ad:9e:b2:35:ae:
c0:2a:3d:ce:97:08:29:73:9a:0d:10:82:3f:9b:f7:
39:c9:7b:fc:fc:94:cc:cf:c1:46:ff:e1:5e:6d:eb:
c7:57:7d:35:44:26:b7:91:87:20:75:ad:b4:55:b1:
7f:23:47:58:de:1b:b1:10:6f:a7:ca:e4:1e:e1:2c:
b1:f2:a9:aa:dc:a3:43:31:f9:2c:dd:2f:17:9e:83:
2c:38:04:e9:f2:f6:bd:84:89:97:b8:f7:6e:45:c6:
3e:db:4d:ce:cb:a7:b2:83:11:8a:ff:81:47:62:d7:
42:a1:e4:79:d8:d7:39:89:06:3c:c0:fe:51:90:00:
76:8a:4c:68:d5:6d:39:32:01:7f:af:e0:05:51:96:
33:97:e6:49:8c:81:f6:03:29:9d:2d:7a:67:90:ed:
56:1c:e7:6b:94:bd:6e:51:86:45:ff:11:c4:82:4d:
43:0f:7c:20:64:70:68:f0:70:9f:00:04:0d:5c:7c:
d8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AF:57:61:CE:2D:A1:38:3E:39:E7:3F:E2:55:A3:C2:00:4F:49:C7
X509v3 Authority Key Identifier:
keyid:1B:D2:D4:63:AE:15:34:6D:5E:DD:79:37:B8:BF:A8:E0:9B:14:37:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9LUY64VNG1e3Xk3uL-o4JsUN20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/Ia9XYc4toTg-Oec_4lWjwgBPScc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/70c477-a8cd-4a72-b669-1f93c239a012/1/G9LUY64VNG1e3Xk3uL-o4JsUN20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.32.0/23
Signature Algorithm: sha256WithRSAEncryption
14:3b:c3:fa:1b:31:8c:1f:75:0e:b1:8e:79:52:fd:c2:3e:5f:
5d:0b:b1:09:2a:15:ef:8c:b0:b8:92:e6:55:43:2f:cd:15:81:
c7:95:0e:02:c8:c1:65:55:b6:81:26:0e:9a:d3:a4:67:51:56:
ef:57:c1:ed:e6:e5:4a:5c:32:22:89:40:e6:2a:b9:60:05:3f:
b6:f4:c7:24:2c:af:8c:5a:ee:be:b7:4d:4f:29:ae:d6:5a:62:
41:9b:eb:15:2a:91:57:88:8c:82:8d:57:b1:a2:6d:26:a3:43:
db:e1:bd:77:c3:81:36:32:3d:30:d1:d5:6f:f6:f5:7d:81:95:
4f:33:d2:6a:6f:e3:5d:a2:f1:a9:58:63:29:c9:fc:e1:86:01:
37:f4:a2:4a:76:67:2e:2a:d4:e0:b2:f1:61:03:95:a9:de:23:
1e:15:47:90:f4:62:bf:d1:2e:74:61:3f:79:44:35:4d:01:21:
2d:b1:29:28:c3:8f:47:a0:e2:a8:0a:fc:ef:55:5a:94:79:18:
88:66:eb:5a:57:ad:e5:0a:ed:14:35:7b:34:b6:89:8e:bc:8c:
9d:d0:2e:b9:81:b7:27:f5:29:40:59:df:ef:42:5f:51:70:01:
21:f6:fc:e3:36:f6:8e:3f:0a:93:cc:2a:d2:70:b3:81:1e:f5:
77:f8:f9:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsE48rNXzEUQHhuAe59cnSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZDJkNDYzYWUxNTM0NmQ1ZWRkNzkzN2I4YmZhOGUwOWIx
NDM3NmQwHhcNMjMwMTAxMDY0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWFmNTc2MWNlMmRhMTM4M2UzOWU3M2ZlMjU1YTNjMjAwNGY0OWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8Xlc1vixt0mPkHpusCnIF9tXqzU
btr0PaYlmwPD4IgDq5+P6+7Xo7xy6hRL3vdmqcYWK21rn144wvFUGxYgOG25/I/O
rZ6yNa7AKj3Olwgpc5oNEII/m/c5yXv8/JTMz8FG/+FebevHV301RCa3kYcgda20
VbF/I0dY3huxEG+nyuQe4Syx8qmq3KNDMfks3S8XnoMsOATp8va9hImXuPduRcY+
203Oy6eygxGK/4FHYtdCoeR52Nc5iQY8wP5RkAB2ikxo1W05MgF/r+AFUZYzl+ZJ
jIH2AymdLXpnkO1WHOdrlL1uUYZF/xHEgk1DD3wgZHBo8HCfAAQNXHzYwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCGvV2HOLaE4PjnnP+JVo8IAT0nHMB8GA1UdIwQY
MBaAFBvS1GOuFTRtXt15N7i/qOCbFDdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzlMVVk2NFZORzFlM1hrM3VMLW80SnNVTjIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC83MGM0NzctYThjZC00YTcyLWI2Njkt
MWY5M2MyMzlhMDEyLzEvSWE5WFljNHRvVGctT2VjXzRsV2p3Z0JQU2NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC83MGM0NzctYThjZC00YTcyLWI2NjktMWY5M2MyMzlhMDEy
LzEvRzlMVVk2NFZORzFlM1hrM3VMLW80SnNVTjIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwj0gMA0G
CSqGSIb3DQEBCwUAA4IBAQAUO8P6GzGMH3UOsY55Uv3CPl9dC7EJKhXvjLC4kuZV
Qy/NFYHHlQ4CyMFlVbaBJg6a06RnUVbvV8Ht5uVKXDIiiUDmKrlgBT+29MckLK+M
Wu6+t01PKa7WWmJBm+sVKpFXiIyCjVexom0mo0Pb4b13w4E2Mj0w0dVv9vV9gZVP
M9Jqb+NdovGpWGMpyfzhhgE39KJKdmcuKtTgsvFhA5Wp3iMeFUeQ9GK/0S50YT95
RDVNASEtsSkow49HoOKoCvzvVVqUeRiIZutaV63lCu0UNXs0tomOvIyd0C65gbcn
9SlAWd/vQl9RcAEh9vzjNvaOPwqTzCrScLOBHvV3+Pnm
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:31 2024 by rpki-client on console-ams.rpki-client.org