Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/VlJ1cbgxP9bF0_6ncAMrhQpJ_08.roa
File: VlJ1cbgxP9bF0_6ncAMrhQpJ_08.roa (raw, json)
Hash identifier: QG4hxWjY7xV3CHzFqv6NPKUfILLscl7v25TcsZYCE/M=
Subject key identifier: 56:52:75:71:B8:31:3F:D6:C5:D3:FE:A7:70:03:2B:85:0A:49:FF:4F
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018BB9B9DD6C124C4E878D81E13EB657FBF1
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/VlJ1cbgxP9bF0_6ncAMrhQpJ_08.roa
Signing time: Fri 10 Nov 2023 14:54:07 +0000
ROA not before: Fri 10 Nov 2023 14:54:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208677
IP address blocks: 194.190.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:b9:dd:6c:12:4c:4e:87:8d:81:e1:3e:b6:57:fb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Nov 10 14:54:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56527571b8313fd6c5d3fea770032b850a49ff4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:df:0b:9e:ba:5b:cc:b8:df:76:21:ad:4b:
cd:cd:97:ce:db:d3:31:36:0f:c5:80:af:ce:97:b7:
7f:07:dc:38:a9:53:60:e9:a7:1e:55:14:28:b6:78:
d4:c0:a8:1c:b1:58:cb:3f:8e:d4:19:fa:85:83:db:
27:fe:23:32:1a:df:5c:c6:92:8c:ff:a4:1b:1a:e8:
7b:51:27:23:be:54:a1:b5:55:85:2f:98:40:76:53:
96:a0:73:f8:03:89:91:5c:df:3a:95:36:63:a9:d9:
35:45:c4:02:c6:ba:d6:44:a2:39:b1:f4:5c:bc:d8:
ed:4a:9b:b3:4a:87:9e:ad:56:64:f7:81:60:14:33:
2b:7b:d3:51:25:1c:87:d4:9e:68:2b:06:5b:34:d1:
a5:83:58:a4:af:af:6c:27:15:15:78:87:00:31:36:
37:2b:3c:f9:30:e3:5f:3d:16:64:59:0a:c4:24:12:
ef:ea:c1:ba:f4:b6:b0:7e:51:ff:b3:eb:e6:d7:05:
82:7f:46:f7:8f:42:30:83:38:ef:22:0c:54:c6:54:
ce:7a:a1:73:e4:38:e7:cd:c2:f8:5d:ec:cd:6d:e4:
c4:2c:be:ec:fb:1a:b3:4d:a9:8c:30:44:58:7a:a5:
40:bd:3a:25:2f:56:d8:57:d8:98:66:55:fa:75:00:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:52:75:71:B8:31:3F:D6:C5:D3:FE:A7:70:03:2B:85:0A:49:FF:4F
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/VlJ1cbgxP9bF0_6ncAMrhQpJ_08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.190.108.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:4b:fb:d7:f9:32:05:16:68:60:29:4a:1f:a3:01:7f:47:d0:
3a:f0:c2:d6:92:06:1c:2a:cd:e6:34:91:5d:0d:2e:03:7f:ff:
1f:7c:71:ca:2d:e0:d6:e0:e4:db:1e:33:c1:73:82:f1:81:dc:
20:5c:fb:42:05:47:b8:45:9f:f2:56:76:9b:34:79:20:5a:19:
54:96:d1:c8:52:4d:ad:2c:3b:40:d2:bb:35:46:6b:8e:7c:c0:
64:0b:f2:e4:ad:9f:68:98:d4:98:cd:32:a3:4b:ab:c9:b0:9e:
a0:1f:01:e1:78:7a:b9:19:b3:ba:73:d5:e7:d9:9b:a2:93:f7:
26:cb:91:5c:9c:12:66:9e:32:bb:b4:0a:4e:25:8f:57:77:98:
9e:46:6d:aa:d8:2a:7e:0a:78:ab:f8:f1:2b:0b:0e:6c:b9:0c:
4f:37:ee:b9:33:cd:d3:ef:49:95:39:bd:9b:d9:0c:3f:ab:07:
df:ac:e1:17:4a:16:77:cb:9a:e2:ee:6d:40:d2:d7:c1:a2:d3:
4c:32:e7:e1:9c:77:cf:38:0c:c1:d3:6b:25:fe:65:3b:73:fa:
3c:7b:ab:85:2a:e7:d3:65:dc:70:1f:0e:32:89:bf:3d:c1:1c:
ac:ee:69:a7:cd:be:90:f3:47:a8:32:5c:16:af:2e:7d:c5:85:
3a:30:0f:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYu5ud1sEkxOh42B4T62V/vxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjMxMTEwMTQ1NDA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjUyNzU3MWI4MzEzZmQ2YzVkM2ZlYTc3MDAzMmI4NTBhNDlmZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMffC566W8y433YhrUvNzZfO29Mx
Ng/FgK/Ol7d/B9w4qVNg6aceVRQotnjUwKgcsVjLP47UGfqFg9sn/iMyGt9cxpKM
/6QbGuh7UScjvlShtVWFL5hAdlOWoHP4A4mRXN86lTZjqdk1RcQCxrrWRKI5sfRc
vNjtSpuzSoeerVZk94FgFDMre9NRJRyH1J5oKwZbNNGlg1ikr69sJxUVeIcAMTY3
Kzz5MONfPRZkWQrEJBLv6sG69LawflH/s+vm1wWCf0b3j0IwgzjvIgxUxlTOeqFz
5DjnzcL4XezNbeTELL7s+xqzTamMMERYeqVAvTolL1bYV9iYZlX6dQA4SQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFZSdXG4MT/WxdP+p3ADK4UKSf9PMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvVmxKMWNiZ3hQOWJGMF82bmNBTXJoUXBKXzA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwr5sMA0G
CSqGSIb3DQEBCwUAA4IBAQC3S/vX+TIFFmhgKUofowF/R9A68MLWkgYcKs3mNJFd
DS4Df/8ffHHKLeDW4OTbHjPBc4LxgdwgXPtCBUe4RZ/yVnabNHkgWhlUltHIUk2t
LDtA0rs1RmuOfMBkC/LkrZ9omNSYzTKjS6vJsJ6gHwHheHq5GbO6c9Xn2Zuik/cm
y5FcnBJmnjK7tApOJY9Xd5ieRm2q2Cp+Cnir+PErCw5suQxPN+65M83T70mVOb2b
2Qw/qwffrOEXShZ3y5ri7m1A0tfBotNMMufhnHfPOAzB02sl/mU7c/o8e6uFKufT
ZdxwHw4yib89wRys7mmnzb6Q80eoMlwWry59xYU6MA9O
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org