Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/9PU0gJQ7JzHuY6MXRG1GGNLY8nQ.roa
File: 9PU0gJQ7JzHuY6MXRG1GGNLY8nQ.roa (raw, json)
Hash identifier: qqT8Vd+gMc8JSVqgXa8l1L7dXRA+hqq9WNFMGcgB1qA=
Subject key identifier: F4:F5:34:80:94:3B:27:31:EE:63:A3:17:44:6D:46:18:D2:D8:F2:74
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 0186EFED3EB604E4F8F6FFE7F5FFEF859001
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/9PU0gJQ7JzHuY6MXRG1GGNLY8nQ.roa
Signing time: Fri 17 Mar 2023 14:15:48 +0000
ROA not before: Fri 17 Mar 2023 14:15:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30781
IP address blocks: 194.242.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ef:ed:3e:b6:04:e4:f8:f6:ff:e7:f5:ff:ef:85:90:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Mar 17 14:15:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4f53480943b2731ee63a317446d4618d2d8f274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c5:46:39:9a:31:3e:a5:bd:ab:70:8b:c0:6c:
95:93:60:81:0d:94:61:ca:bc:22:99:67:7f:7d:1a:
f6:d2:65:bf:ab:8b:8e:86:7c:fa:28:d9:f6:06:6d:
73:4f:74:10:35:db:25:29:67:68:89:9b:cc:d3:f3:
5a:d4:ac:1d:bc:e5:f5:f6:9a:50:24:2f:31:96:31:
7a:70:dd:e4:de:38:75:ed:d9:b6:c3:b3:29:b4:28:
84:79:7c:c1:2d:1a:b6:6d:d7:57:7f:3c:eb:96:4b:
17:da:e0:28:c0:c2:2d:7f:10:02:79:6a:97:16:83:
3d:4a:34:ec:20:93:c9:13:a0:1d:c6:11:70:1f:76:
30:75:0b:04:98:8f:87:20:64:26:a6:0d:d6:56:8d:
c1:85:e2:84:c8:23:3c:e1:9e:bd:9e:aa:a2:a1:66:
90:2b:42:ee:51:09:c0:26:d7:19:5a:80:1d:0f:a9:
47:5a:45:1e:6e:3d:d5:fb:2a:ff:fa:04:69:a9:81:
33:c9:23:a7:4b:5c:13:17:b9:af:cd:c2:76:20:61:
8e:dd:5e:c8:ca:72:e5:8c:9d:8c:af:06:fb:28:9d:
50:cd:73:d3:c0:1e:06:ae:a9:42:bd:9c:e6:e0:5c:
58:32:1a:4b:38:e7:25:b5:ed:d1:ce:db:a5:6e:4f:
70:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F5:34:80:94:3B:27:31:EE:63:A3:17:44:6D:46:18:D2:D8:F2:74
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/9PU0gJQ7JzHuY6MXRG1GGNLY8nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.44.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:21:16:71:45:88:bd:b9:73:03:04:d6:ce:6c:9a:a6:93:f9:
1e:94:73:13:40:af:0c:3c:71:5f:51:79:9a:9e:c7:92:c6:b9:
46:05:37:f7:b1:d7:75:7a:4e:39:09:4e:64:ef:21:5b:ce:6b:
e0:06:1e:13:cc:04:55:f8:bb:7a:7c:30:89:9f:09:e9:64:b1:
c8:bf:76:b4:ec:5e:24:4b:93:08:ef:19:bb:f8:55:56:04:f1:
11:74:b6:41:18:de:e8:09:f8:aa:f8:4b:6d:8b:cd:99:a3:4e:
39:0c:76:83:f6:a1:20:c3:b2:73:8d:7b:7a:76:22:5c:ff:f0:
bd:88:a2:20:05:be:f4:cd:bd:ef:e7:19:25:12:64:94:e9:d8:
2b:8c:b8:17:31:32:ff:28:6c:90:ab:2c:f6:5a:53:01:d2:bb:
5e:9e:d1:b0:b8:41:88:53:ff:df:2a:0c:b8:49:77:4a:5a:69:
76:13:68:52:37:2c:78:b2:82:ff:d3:4e:ae:99:c3:7f:1a:1b:
bd:4e:30:7b:31:fc:ab:58:b4:3a:4a:0b:21:a0:fb:74:3f:34:
5e:ec:67:8d:f8:70:04:15:1a:0f:fd:cf:a0:f7:08:a2:5f:ed:
50:eb:ef:ae:f9:70:bb:23:24:ef:b3:77:17:91:7d:b8:d8:ef:
c2:85:e0:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbv7T62BOT49v/n9f/vhZABMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYzQ3MzFhM2VlMzk0MmQyNThkMDY2MzU3MGI4OTRlOGUx
YTkyMzMwHhcNMjMwMzE3MTQxNTQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGY1MzQ4MDk0M2IyNzMxZWU2M2EzMTc0NDZkNDYxOGQyZDhmMjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMVGOZoxPqW9q3CLwGyVk2CBDZRh
yrwimWd/fRr20mW/q4uOhnz6KNn2Bm1zT3QQNdslKWdoiZvM0/Na1KwdvOX19ppQ
JC8xljF6cN3k3jh17dm2w7MptCiEeXzBLRq2bddXfzzrlksX2uAowMItfxACeWqX
FoM9SjTsIJPJE6AdxhFwH3YwdQsEmI+HIGQmpg3WVo3BheKEyCM84Z69nqqioWaQ
K0LuUQnAJtcZWoAdD6lHWkUebj3V+yr/+gRpqYEzySOnS1wTF7mvzcJ2IGGO3V7I
ynLljJ2Mrwb7KJ1QzXPTwB4GrqlCvZzm4FxYMhpLOOclte3Rztulbk9wdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPT1NICUOycx7mOjF0RtRhjS2PJ0MB8GA1UdIwQY
MBaAFIrEcxo+45QtJY0GY1cLiU6OGpIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgt
NWFkZmUzMGZmZGE1LzEvOVBVMGdKUTdKekh1WTZNWFJHMUdHTkxZOG5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mMDgwNWYtMzM0ZS00NzA0LThiMjgtNWFkZmUzMGZmZGE1
LzEvaXNSekdqN2psQzBsalFaalZ3dUpUbzRha2pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvIsMA0G
CSqGSIb3DQEBCwUAA4IBAQCjIRZxRYi9uXMDBNbObJqmk/kelHMTQK8MPHFfUXma
nseSxrlGBTf3sdd1ek45CU5k7yFbzmvgBh4TzARV+Lt6fDCJnwnpZLHIv3a07F4k
S5MI7xm7+FVWBPERdLZBGN7oCfiq+Etti82Zo045DHaD9qEgw7JzjXt6diJc//C9
iKIgBb70zb3v5xklEmSU6dgrjLgXMTL/KGyQqyz2WlMB0rtentGwuEGIU//fKgy4
SXdKWml2E2hSNyx4soL/006umcN/Ghu9TjB7MfyrWLQ6SgshoPt0PzRe7GeN+HAE
FRoP/c+g9wiiX+1Q6++u+XC7IyTvs3cXkX242O/CheAV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:04 2024 by rpki-client on console-ams.rpki-client.org