Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/1-Nk_kQv-2qiTk0AIMyIyAPWtMyM.roa
File: 1-Nk_kQv-2qiTk0AIMyIyAPWtMyM.roa (raw, json)
Hash identifier: FERHq1fbd6NoG4T3/3oYUBBhfdDosw6cvIszoFTSfP8=
Subject key identifier: F8:D9:3F:91:0B:FE:DA:A8:93:93:40:08:33:22:32:00:F5:AD:33:23
Certificate issuer: /CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Certificate serial: 0185D4E1BBD6613F66C265D2CF8F9C946C8B
Authority key identifier: 2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/1-Nk_kQv-2qiTk0AIMyIyAPWtMyM.roa
Signing time: Sat 21 Jan 2023 15:10:41 +0000
ROA not before: Sat 21 Jan 2023 15:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.104.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 12:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d4:e1:bb:d6:61:3f:66:c2:65:d2:cf:8f:9c:94:6c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dd596c1ea7ecbb1be1777fc0d38ed06ca40eabe
Validity
Not Before: Jan 21 15:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8d93f910bfedaa89393400833223200f5ad3323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ab:b2:9d:e2:88:a4:84:fd:24:38:c1:1e:06:
99:1c:88:58:e9:1b:c1:42:92:70:cd:c8:39:4f:4d:
33:d7:49:34:08:7f:53:f0:83:76:c8:65:2a:38:a3:
76:6c:80:74:83:6d:f5:49:43:c2:ca:f0:4e:05:c8:
8f:37:f8:4a:a9:79:7e:f3:9f:74:44:73:32:06:05:
20:08:fb:2e:b6:b3:20:5f:28:a6:fa:5f:f7:3c:9c:
97:d5:43:fd:5b:cf:e3:2b:8e:a7:a5:e5:13:37:47:
ae:9e:d4:39:b1:c0:ad:9d:f5:b2:ce:f2:d9:7e:c6:
b1:d4:3e:93:73:c2:37:af:3d:51:d2:f2:1c:4a:a6:
3f:09:47:6b:e0:ed:a8:4c:7f:a0:67:f3:70:ca:19:
5f:1b:30:78:e5:5e:2f:fd:e7:55:df:e0:f1:e5:fd:
51:c9:2e:45:96:6d:47:a5:7c:69:16:b3:1b:17:62:
45:b3:4c:92:8b:ce:81:ab:b6:49:39:a9:c5:44:e8:
89:6b:2b:f4:6d:33:bc:a2:00:da:71:ed:e6:53:40:
27:31:45:14:40:b0:7d:44:37:12:bb:f0:6c:36:a3:
97:19:98:cb:02:6b:70:e9:88:7e:56:b0:91:0b:6f:
a3:ab:21:fa:2b:a7:1e:57:4a:43:cc:eb:8d:2f:04:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D9:3F:91:0B:FE:DA:A8:93:93:40:08:33:22:32:00:F5:AD:33:23
X509v3 Authority Key Identifier:
keyid:2D:D5:96:C1:EA:7E:CB:B1:BE:17:77:FC:0D:38:ED:06:CA:40:EA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LdWWwep-y7G-F3f8DTjtBspA6r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/1-Nk_kQv-2qiTk0AIMyIyAPWtMyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/363ecc-2aa1-4281-95b1-8b0fc07858d6/1/LdWWwep-y7G-F3f8DTjtBspA6r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.149.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:b5:71:0a:36:f8:f2:45:e6:9e:af:a9:39:b5:29:a0:70:c1:
05:43:1a:f6:26:69:60:a5:d1:e7:0d:c8:7d:14:12:95:2e:0c:
7a:e1:ee:f8:6a:98:4d:6a:3a:99:5e:ea:04:f5:04:3f:88:cc:
f5:72:a9:da:5f:bf:bd:60:92:50:0c:26:cc:a4:a0:26:cf:a1:
9c:a6:00:b6:f0:f7:16:d7:3a:ff:88:6c:2a:4e:10:e5:c6:00:
d1:61:cb:7b:e4:1b:46:1b:f0:12:a0:ed:1c:cb:27:cd:a1:76:
15:0f:a2:19:6b:2c:5f:05:c4:38:4c:aa:31:c6:a5:bb:33:b3:
4b:0e:a7:19:de:3f:c8:9b:df:ef:f3:bf:a1:b2:a8:57:c3:6d:
18:3e:b4:40:0c:ba:5b:36:03:e8:ba:da:e8:cf:dc:8d:ac:3c:
69:06:77:6e:f1:17:cb:ff:b0:8f:fa:ef:3a:1b:41:7e:d3:d4:
ca:2c:15:4d:a4:95:51:ac:cb:7f:13:d1:c5:40:d8:f5:e1:b0:
1d:86:bc:5f:18:29:05:fe:14:99:e7:c3:54:b6:8c:23:b5:85:
2a:a4:b6:ec:b3:c7:f4:38:ba:6c:c6:c5:73:b1:c2:4a:34:ae:
7a:c0:b9:ad:fc:66:83:89:c8:52:31:bf:e8:80:ff:c5:e8:48:
3d:11:29:15
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYXU4bvWYT9mwmXSz4+clGyLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZDU5NmMxZWE3ZWNiYjFiZTE3NzdmYzBkMzhlZDA2Y2E0
MGVhYmUwHhcNMjMwMTIxMTUxMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGQ5M2Y5MTBiZmVkYWE4OTM5MzQwMDgzMzIyMzIwMGY1YWQzMzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkauyneKIpIT9JDjBHgaZHIhY6RvB
QpJwzcg5T00z10k0CH9T8IN2yGUqOKN2bIB0g231SUPCyvBOBciPN/hKqXl+8590
RHMyBgUgCPsutrMgXyim+l/3PJyX1UP9W8/jK46npeUTN0euntQ5scCtnfWyzvLZ
fsax1D6Tc8I3rz1R0vIcSqY/CUdr4O2oTH+gZ/NwyhlfGzB45V4v/edV3+Dx5f1R
yS5Flm1HpXxpFrMbF2JFs0ySi86Bq7ZJOanFROiJayv0bTO8ogDace3mU0AnMUUU
QLB9RDcSu/BsNqOXGZjLAmtw6Yh+VrCRC2+jqyH6K6ceV0pDzOuNLwT7GQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPjZP5EL/tqok5NACDMiMgD1rTMjMB8GA1UdIwQY
MBaAFC3VlsHqfsuxvhd3/A047QbKQOq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGRXV3dlcC15N0ctRjNmOERUanRCc3BBNnI0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zNjNlY2MtMmFhMS00MjgxLTk1YjEt
OGIwZmMwNzg1OGQ2LzEvMS1Oa19rUXYtMnFpVGswQUlNeUl5QVBXdE15TS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOWIvMzYzZWNjLTJhYTEtNDI4MS05NWIxLThiMGZjMDc4NThk
Ni8xL0xkV1d3ZXAteTdHLUYzZjhEVGp0QnNwQTZyNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMJolTAN
BgkqhkiG9w0BAQsFAAOCAQEAn7VxCjb48kXmnq+pObUpoHDBBUMa9iZpYKXR5w3I
fRQSlS4MeuHu+GqYTWo6mV7qBPUEP4jM9XKp2l+/vWCSUAwmzKSgJs+hnKYAtvD3
Ftc6/4hsKk4Q5cYA0WHLe+QbRhvwEqDtHMsnzaF2FQ+iGWssXwXEOEyqMcaluzOz
Sw6nGd4/yJvf7/O/obKoV8NtGD60QAy6WzYD6Lra6M/cjaw8aQZ3bvEXy/+wj/rv
OhtBftPUyiwVTaSVUazLfxPRxUDY9eGwHYa8XxgpBf4UmefDVLaMI7WFKqS27LPH
9Di6bMbFc7HCSjSuesC5rfxmg4nIUjG/6ID/xehIPREpFQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:39 2024 by rpki-client on console-fra.rpki-client.org