Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/9qnbxR0v8CCZHFDZrSY8pU3_DDg.roa
File: 9qnbxR0v8CCZHFDZrSY8pU3_DDg.roa (raw, json)
Hash identifier: xNTCEc76rK0Iow/dwR0qxXIuu0qfrXEzklDiuPtnj6I=
Subject key identifier: F6:A9:DB:C5:1D:2F:F0:20:99:1C:50:D9:AD:26:3C:A5:4D:FF:0C:38
Certificate issuer: /CN=a794cd2f9174e4216931a105db261acaa3938a7c
Certificate serial: 01856B8A03C9DA6485A898B8AFE602505DBC
Authority key identifier: A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/9qnbxR0v8CCZHFDZrSY8pU3_DDg.roa
Signing time: Sun 01 Jan 2023 04:14:45 +0000
ROA not before: Sun 01 Jan 2023 04:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8601
IP address blocks: 195.138.166.0/24 maxlen: 24
195.138.160.0/19 maxlen: 19
195.138.164.0/24 maxlen: 24
195.138.160.0/22 maxlen: 22
195.138.165.0/24 maxlen: 24
195.138.170.0/24 maxlen: 24
195.138.167.0/24 maxlen: 24
195.138.171.0/24 maxlen: 24
195.138.168.0/24 maxlen: 24
195.138.172.0/24 maxlen: 24
195.138.169.0/24 maxlen: 24
195.138.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:03:c9:da:64:85:a8:98:b8:af:e6:02:50:5d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a794cd2f9174e4216931a105db261acaa3938a7c
Validity
Not Before: Jan 1 04:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6a9dbc51d2ff020991c50d9ad263ca54dff0c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:af:53:8a:bf:2e:d2:06:73:59:fc:32:3a:30:
3d:97:f0:10:98:16:5c:3e:64:11:22:91:a3:b5:57:
08:a4:57:fc:9c:4a:82:44:62:ed:71:54:2c:4c:fb:
30:08:68:82:b7:2e:d3:33:a7:a0:56:74:63:48:cc:
b8:a8:27:82:4d:db:ed:0a:7b:bd:d8:ad:e6:4a:68:
f7:fa:24:97:54:30:14:c2:36:6a:ca:16:fb:1d:fd:
ae:80:03:75:86:be:42:23:25:3a:3c:b1:46:3e:9d:
97:63:64:44:99:d9:b8:0c:e3:af:22:91:bc:e2:cf:
90:bf:7e:99:73:1e:4f:1f:49:ba:cb:15:ec:a6:60:
2a:e7:b9:8a:f6:97:2b:c3:d5:6b:08:98:96:c4:ae:
2b:1c:44:cd:28:e6:7a:d0:ab:a7:84:a3:1e:68:d9:
b2:d0:3b:9c:fd:ed:8b:39:88:80:9b:7f:6e:c3:c4:
78:5f:00:a5:d2:6e:7f:d1:ad:39:cf:92:c7:4f:b8:
d8:0d:7d:6e:0d:6d:c7:d4:c5:46:f0:4f:f2:93:74:
30:54:8c:4b:df:1d:04:0e:95:ce:55:97:a9:6a:55:
e9:09:26:17:7d:7f:7d:d9:bf:15:b6:48:1c:43:01:
c0:de:8c:48:3d:92:fb:0e:64:8e:ac:d8:2a:1a:27:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A9:DB:C5:1D:2F:F0:20:99:1C:50:D9:AD:26:3C:A5:4D:FF:0C:38
X509v3 Authority Key Identifier:
keyid:A7:94:CD:2F:91:74:E4:21:69:31:A1:05:DB:26:1A:CA:A3:93:8A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5TNL5F05CFpMaEF2yYayqOTinw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/9qnbxR0v8CCZHFDZrSY8pU3_DDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/dbd127-4b12-4f18-8dde-a3585a05ea2b/1/p5TNL5F05CFpMaEF2yYayqOTinw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.160.0/19
Signature Algorithm: sha256WithRSAEncryption
09:c5:24:62:07:ce:61:22:43:d3:9f:bc:e6:be:6a:0d:66:2f:
b2:a8:91:7b:63:e7:b1:52:0e:9d:8f:42:4f:2e:b4:74:75:f1:
53:f2:b3:2f:01:49:9e:f1:14:0a:ae:17:f4:30:3c:2c:f0:f7:
d0:75:a5:e4:dc:11:64:22:76:f1:0b:69:ea:c9:2b:92:1e:af:
2e:90:16:4e:ce:9f:cb:19:3e:52:cf:5f:a5:4f:e2:31:db:8b:
38:60:76:43:59:2a:83:b7:9d:76:22:04:32:e6:13:7c:29:27:
aa:73:26:fb:7c:7a:1b:d0:83:21:3a:8c:e1:a8:94:bc:b2:98:
e1:cf:75:cd:c4:55:3c:a8:6d:e3:18:89:15:26:fb:e1:57:4a:
bd:6c:f0:7c:93:4e:b5:de:25:e5:f9:b1:43:4b:b3:08:f8:7e:
47:e1:02:8e:f3:cf:b4:a0:e3:ee:60:58:1d:90:6a:09:ba:b4:
a5:e2:bf:73:1c:89:4d:66:3b:2e:55:f1:5c:fc:18:1b:71:55:
2e:1b:21:31:38:43:c1:71:70:fe:8b:76:6a:60:e5:5f:dc:75:
1b:02:68:b1:45:41:b0:f1:d0:9c:01:1e:8e:a0:44:ac:78:b8:
40:be:17:25:96:74:bd:88:e9:2c:1a:aa:b0:b1:2d:7b:53:a3:
3f:15:73:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrigPJ2mSFqJi4r+YCUF28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OTRjZDJmOTE3NGU0MjE2OTMxYTEwNWRiMjYxYWNhYTM5
MzhhN2MwHhcNMjMwMTAxMDQxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmE5ZGJjNTFkMmZmMDIwOTkxYzUwZDlhZDI2M2NhNTRkZmYwYzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a9Tir8u0gZzWfwyOjA9l/AQmBZc
PmQRIpGjtVcIpFf8nEqCRGLtcVQsTPswCGiCty7TM6egVnRjSMy4qCeCTdvtCnu9
2K3mSmj3+iSXVDAUwjZqyhb7Hf2ugAN1hr5CIyU6PLFGPp2XY2REmdm4DOOvIpG8
4s+Qv36Zcx5PH0m6yxXspmAq57mK9pcrw9VrCJiWxK4rHETNKOZ60KunhKMeaNmy
0Duc/e2LOYiAm39uw8R4XwCl0m5/0a05z5LHT7jYDX1uDW3H1MVG8E/yk3QwVIxL
3x0EDpXOVZepalXpCSYXfX992b8VtkgcQwHA3oxIPZL7DmSOrNgqGiehzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPap28UdL/AgmRxQ2a0mPKVN/ww4MB8GA1UdIwQY
MBaAFKeUzS+RdOQhaTGhBdsmGsqjk4p8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDVUTkw1RjA1Q0ZwTWFFRjJ5WWF5cU9UaW53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kYmQxMjctNGIxMi00ZjE4LThkZGUt
YTM1ODVhMDVlYTJiLzEvOXFuYnhSMHY4Q0NaSEZEWnJTWThwVTNfRERnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kYmQxMjctNGIxMi00ZjE4LThkZGUtYTM1ODVhMDVlYTJi
LzEvcDVUTkw1RjA1Q0ZwTWFFRjJ5WWF5cU9UaW53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFw4qgMA0G
CSqGSIb3DQEBCwUAA4IBAQAJxSRiB85hIkPTn7zmvmoNZi+yqJF7Y+exUg6dj0JP
LrR0dfFT8rMvAUme8RQKrhf0MDws8PfQdaXk3BFkInbxC2nqySuSHq8ukBZOzp/L
GT5Sz1+lT+Ix24s4YHZDWSqDt512IgQy5hN8KSeqcyb7fHob0IMhOozhqJS8spjh
z3XNxFU8qG3jGIkVJvvhV0q9bPB8k0613iXl+bFDS7MI+H5H4QKO88+0oOPuYFgd
kGoJurSl4r9zHIlNZjsuVfFc/BgbcVUuGyExOEPBcXD+i3ZqYOVf3HUbAmixRUGw
8dCcAR6OoESseLhAvhcllnS9iOksGqqwsS17U6M/FXOO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-fra.rpki-client.org