Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/ku4jzvJUruI3OY6PxStvEUo6KJQ.roa
File: ku4jzvJUruI3OY6PxStvEUo6KJQ.roa (raw, json)
Hash identifier: hFNoceVkYRv0f0a1K4JRsnqv+Gq0ZaNmlBqmvUseiDY=
Subject key identifier: 92:EE:23:CE:F2:54:AE:E2:37:39:8E:8F:C5:2B:6F:11:4A:3A:28:94
Certificate issuer: /CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Certificate serial: 018D45C78343B0326E17AC0029098430290C
Authority key identifier: 20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/ku4jzvJUruI3OY6PxStvEUo6KJQ.roa
Signing time: Fri 26 Jan 2024 12:38:39 +0000
ROA not before: Fri 26 Jan 2024 12:38:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202446
IP address blocks: 194.33.20.0/24 maxlen: 24
194.33.21.0/24 maxlen: 24
194.33.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jan 2024 04:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:c7:83:43:b0:32:6e:17:ac:00:29:09:84:30:29:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f5307242fe3c95327b3220a1da5bffd12524fe
Validity
Not Before: Jan 26 12:38:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92ee23cef254aee237398e8fc52b6f114a3a2894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:f1:7c:d1:f5:02:ac:85:d6:75:6f:8f:58:
cb:d9:c3:5f:83:6b:15:13:09:67:d2:dd:0e:be:bc:
a5:be:40:35:87:ed:77:7e:ce:db:e6:94:9f:3c:47:
2d:d6:d3:24:98:66:6e:28:17:93:d8:30:bc:e8:52:
09:5c:2e:89:23:57:fa:68:81:3d:24:6a:6e:30:be:
a5:99:c7:bf:46:21:19:7d:4e:21:33:3c:99:e4:69:
98:0a:86:d1:1f:8e:88:5a:c9:db:f2:8e:cc:a5:58:
b7:2b:35:04:27:0a:07:d6:57:0d:eb:72:a2:1b:86:
58:1a:d6:0c:71:57:d6:95:b6:23:ba:db:e2:ed:93:
fd:59:55:da:ac:cf:79:d3:45:8f:dc:7f:83:40:f0:
f0:e2:0b:18:cf:78:bf:42:fe:16:17:b5:81:8c:a2:
bd:a7:a6:f5:4c:fa:74:48:f1:63:f4:50:3e:89:1f:
0e:d5:1e:f3:22:a4:e9:43:b1:b3:25:32:64:72:8d:
37:d9:bd:96:ff:fb:bd:df:85:a3:8d:9d:7c:79:5d:
fb:ca:b3:58:73:93:be:0d:20:96:dd:83:fd:76:c2:
ea:9f:74:dc:c3:58:32:33:61:f6:a1:a2:c6:32:65:
36:27:ed:93:fa:7d:94:68:08:5c:90:b5:42:62:c8:
f3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EE:23:CE:F2:54:AE:E2:37:39:8E:8F:C5:2B:6F:11:4A:3A:28:94
X509v3 Authority Key Identifier:
keyid:20:F5:30:72:42:FE:3C:95:32:7B:32:20:A1:DA:5B:FF:D1:25:24:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPUwckL-PJUyezIgodpb_9ElJP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/ku4jzvJUruI3OY6PxStvEUo6KJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e13a01-c00b-4956-ab3a-309a4970bbfd/1/IPUwckL-PJUyezIgodpb_9ElJP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.20.0-194.33.22.255
Signature Algorithm: sha256WithRSAEncryption
0d:cd:65:a6:23:28:d6:52:a0:0f:f6:c4:91:96:55:ef:0d:d9:
9e:a5:41:b8:fd:25:91:ac:80:43:6b:de:cc:cf:11:12:30:36:
46:c4:7c:2a:6f:f1:11:4a:e1:e4:6a:ec:4c:7d:ac:ad:76:26:
0f:6c:95:eb:f0:d6:d1:d4:cc:f8:70:b2:f1:51:89:99:ec:db:
38:dc:b6:a4:99:54:d8:69:3c:54:f0:dc:29:77:84:08:c6:d2:
4a:b3:9a:46:13:55:17:73:8e:97:e1:90:6a:67:98:b7:a9:0e:
79:1c:52:a1:b3:2f:d1:77:2e:f0:42:8a:97:e1:0e:b2:0e:14:
0f:99:1a:ec:f4:14:2b:7f:f3:26:4b:2c:c2:73:4b:5a:42:29:
06:52:3b:55:9d:97:6e:d9:81:bb:5a:90:67:c2:61:ce:c1:cb:
c7:b4:3c:83:2b:8c:92:df:5d:ad:f8:b4:d1:bd:05:ce:e7:38:
27:48:2b:33:09:8d:83:d4:67:90:6d:bb:66:1c:97:e6:20:ac:
f9:6f:42:14:31:4a:58:f8:14:63:50:b7:ba:b2:b1:6e:4d:76:
af:52:73:94:91:ee:bf:6d:9a:d0:f0:cc:ae:9b:33:52:11:28:
72:70:a4:39:c6:15:01:b9:fc:4e:ed:07:ce:8e:82:6c:5f:2e:
15:78:1a:91
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY1Fx4NDsDJuF6wAKQmEMCkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZjUzMDcyNDJmZTNjOTUzMjdiMzIyMGExZGE1YmZmZDEy
NTI0ZmUwHhcNMjQwMTI2MTIzODM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmVlMjNjZWYyNTRhZWUyMzczOThlOGZjNTJiNmYxMTRhM2EyODk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjLxfNH1AqyF1nVvj1jL2cNfg2sV
Ewln0t0OvrylvkA1h+13fs7b5pSfPEct1tMkmGZuKBeT2DC86FIJXC6JI1f6aIE9
JGpuML6lmce/RiEZfU4hMzyZ5GmYCobRH46IWsnb8o7MpVi3KzUEJwoH1lcN63Ki
G4ZYGtYMcVfWlbYjutvi7ZP9WVXarM9500WP3H+DQPDw4gsYz3i/Qv4WF7WBjKK9
p6b1TPp0SPFj9FA+iR8O1R7zIqTpQ7GzJTJkco032b2W//u934WjjZ18eV37yrNY
c5O+DSCW3YP9dsLqn3Tcw1gyM2H2oaLGMmU2J+2T+n2UaAhckLVCYsjz/QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJLuI87yVK7iNzmOj8UrbxFKOiiUMB8GA1UdIwQY
MBaAFCD1MHJC/jyVMnsyIKHaW//RJST+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBVd2NrTC1QSlV5ZXpJZ29kcGJfOUVsSlA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lMTNhMDEtYzAwYi00OTU2LWFiM2Et
MzA5YTQ5NzBiYmZkLzEva3U0anp2SlVydUkzT1k2UHhTdHZFVW82S0pRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9lMTNhMDEtYzAwYi00OTU2LWFiM2EtMzA5YTQ5NzBiYmZk
LzEvSVBVd2NrTC1QSlV5ZXpJZ29kcGJfOUVsSlA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALCIRQD
BADCIRYwDQYJKoZIhvcNAQELBQADggEBAA3NZaYjKNZSoA/2xJGWVe8N2Z6lQbj9
JZGsgENr3szPERIwNkbEfCpv8RFK4eRq7Ex9rK12Jg9slevw1tHUzPhwsvFRiZns
2zjctqSZVNhpPFTw3Cl3hAjG0kqzmkYTVRdzjpfhkGpnmLepDnkcUqGzL9F3LvBC
ipfhDrIOFA+ZGuz0FCt/8yZLLMJzS1pCKQZSO1Wdl27ZgbtakGfCYc7By8e0PIMr
jJLfXa34tNG9Bc7nOCdIKzMJjYPUZ5Btu2Ycl+YgrPlvQhQxSlj4FGNQt7qysW5N
dq9Sc5SR7r9tmtDwzK6bM1IRKHJwpDnGFQG5/E7tB86OgmxfLhV4GpE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:22 2024 by rpki-client on console-ams.rpki-client.org