Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/4taolnx0md_sFJeUeoErBB6aIf8.roa
File: 4taolnx0md_sFJeUeoErBB6aIf8.roa (raw, json)
Hash identifier: RJHri5HAGFOlDjHnxg0AMEtt83uTiEWpbT3Ftgk8xTA=
Subject key identifier: E2:D6:A8:96:7C:74:99:DF:EC:14:97:94:7A:81:2B:04:1E:9A:21:FF
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018D63D2821CD909006B597086B4B3BAD6FC
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/4taolnx0md_sFJeUeoErBB6aIf8.roa
Signing time: Thu 01 Feb 2024 08:39:16 +0000
ROA not before: Thu 01 Feb 2024 08:39:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39503
IP address blocks: 194.190.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 14:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:63:d2:82:1c:d9:09:00:6b:59:70:86:b4:b3:ba:d6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Feb 1 08:39:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2d6a8967c7499dfec1497947a812b041e9a21ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:da:4c:fc:3f:f9:43:7c:54:00:54:75:d6:
5b:bf:de:fc:0d:d5:b6:cb:6d:6e:c4:49:f8:e8:1b:
a1:85:c3:7f:5e:35:87:8a:5d:59:39:1d:99:6d:3e:
0b:2b:7a:06:f1:cc:a7:02:5e:10:d3:f2:56:21:3e:
84:76:12:a4:90:b1:58:aa:bf:24:72:46:54:c5:0d:
80:c6:2d:e0:7d:49:a1:37:26:7e:0e:e6:ef:a7:83:
b6:42:21:69:93:5b:c0:b0:ef:83:db:a0:6b:2f:10:
cb:05:48:91:7d:f9:43:e5:88:8e:53:90:7e:34:22:
fd:54:40:a1:7a:0d:ab:b4:1d:32:13:c2:66:b1:99:
bc:31:0e:35:56:30:81:1f:8c:ba:8a:ef:cc:2f:2d:
39:c4:ec:16:7f:73:f4:ca:20:aa:39:01:30:39:fc:
2d:03:11:5d:f4:a4:72:03:a7:12:d5:0c:b8:06:74:
a4:5d:5a:27:08:b0:39:9f:9a:40:35:9e:88:57:d1:
19:a2:dd:7e:8f:e1:d5:32:2e:d6:ec:62:c5:b0:03:
73:cd:2e:00:0d:f7:2a:fe:dc:cd:fa:d8:c7:8e:3d:
fa:3e:2a:2c:58:f4:e8:cb:bf:d0:10:ff:71:dc:15:
e6:4b:f7:2a:b9:e8:a4:c9:17:d2:b6:9c:ec:98:b1:
4f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D6:A8:96:7C:74:99:DF:EC:14:97:94:7A:81:2B:04:1E:9A:21:FF
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/4taolnx0md_sFJeUeoErBB6aIf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.190.225.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7e:c0:9b:1b:8e:57:71:74:8c:e8:ad:6b:94:f2:80:0d:93:
78:67:fb:f8:d8:88:1f:03:ad:8d:ba:1c:bc:46:f8:0e:3e:60:
43:97:d0:5f:f6:a3:b2:15:ce:49:d3:48:58:b0:29:4f:75:7b:
3f:c1:d6:5c:61:05:f2:b9:0d:8b:66:6c:9f:bd:c6:c9:8c:04:
47:c3:1b:47:1d:02:e0:88:22:30:a9:51:74:af:6a:b0:15:2e:
2f:cb:ab:45:09:f4:65:9c:23:68:4f:5d:07:17:eb:93:71:04:
99:c0:fe:b2:64:80:c9:e1:dd:b9:42:a8:71:b9:3b:1d:3d:6d:
84:d6:d6:29:06:e6:ec:93:ba:fe:02:2a:37:82:bf:54:2a:1a:
d9:cc:e8:ac:97:f3:76:b9:ec:a7:dd:74:65:3b:97:69:b7:8c:
b6:c7:61:ff:2a:7a:58:90:fa:2f:84:7c:5b:f2:a2:ed:13:aa:
ff:18:72:51:28:6f:0d:94:a4:a1:81:19:af:27:e8:4a:6d:8e:
d2:52:f1:be:de:8a:a1:90:65:27:0c:dc:32:28:c7:01:54:dd:
06:6e:7d:c1:55:aa:ca:04:75:41:40:18:7e:36:be:25:3b:27:
ee:20:6d:c5:47:fd:dc:4f:2c:54:d3:08:1c:d3:65:08:67:dd:
26:53:72:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1j0oIc2QkAa1lwhrSzutb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl
MmM2ODUwHhcNMjQwMjAxMDgzOTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmQ2YTg5NjdjNzQ5OWRmZWMxNDk3OTQ3YTgxMmIwNDFlOWEyMWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0faTPw/+UN8VABUddZbv978DdW2
y21uxEn46BuhhcN/XjWHil1ZOR2ZbT4LK3oG8cynAl4Q0/JWIT6EdhKkkLFYqr8k
ckZUxQ2Axi3gfUmhNyZ+Dubvp4O2QiFpk1vAsO+D26BrLxDLBUiRfflD5YiOU5B+
NCL9VECheg2rtB0yE8JmsZm8MQ41VjCBH4y6iu/MLy05xOwWf3P0yiCqOQEwOfwt
AxFd9KRyA6cS1Qy4BnSkXVonCLA5n5pANZ6IV9EZot1+j+HVMi7W7GLFsANzzS4A
Dfcq/tzN+tjHjj36PiosWPToy7/QEP9x3BXmS/cqueikyRfStpzsmLFPYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOLWqJZ8dJnf7BSXlHqBKwQemiH/MB8GA1UdIwQY
MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt
NDBkOTViZDMzZmNiLzEvNHRhb2xueDBtZF9zRkplVWVvRXJCQjZhSWY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi
LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwr7hMA0G
CSqGSIb3DQEBCwUAA4IBAQBefsCbG45XcXSM6K1rlPKADZN4Z/v42IgfA62Nuhy8
RvgOPmBDl9Bf9qOyFc5J00hYsClPdXs/wdZcYQXyuQ2LZmyfvcbJjARHwxtHHQLg
iCIwqVF0r2qwFS4vy6tFCfRlnCNoT10HF+uTcQSZwP6yZIDJ4d25QqhxuTsdPW2E
1tYpBubsk7r+Aio3gr9UKhrZzOisl/N2ueyn3XRlO5dpt4y2x2H/KnpYkPovhHxb
8qLtE6r/GHJRKG8NlKShgRmvJ+hKbY7SUvG+3oqhkGUnDNwyKMcBVN0Gbn3BVarK
BHVBQBh+Nr4lOyfuIG3FR/3cTyxU0wgc02UIZ90mU3IM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org