Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/alDyPTLIW84bRR1TSAVN2_Wdb8I.roa
File: alDyPTLIW84bRR1TSAVN2_Wdb8I.roa (raw, json)
Hash identifier: gojhnvPj9DX0kt4gskqDTEclkPMvtoBFz3TZOaGmNwc=
Subject key identifier: 6A:50:F2:3D:32:C8:5B:CE:1B:45:1D:53:48:05:4D:DB:F5:9D:6F:C2
Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial: 018A74415225EA87775207D5F7C5682A70A6
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/alDyPTLIW84bRR1TSAVN2_Wdb8I.roa
Signing time: Fri 08 Sep 2023 10:05:52 +0000
ROA not before: Fri 08 Sep 2023 10:05:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6168
IP address blocks: 151.253.180.0/24 maxlen: 24
151.253.181.0/24 maxlen: 24
213.42.110.0/24 maxlen: 24
194.170.246.0/24 maxlen: 24
195.229.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:74:41:52:25:ea:87:77:52:07:d5:f7:c5:68:2a:70:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Validity
Not Before: Sep 8 10:05:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a50f23d32c85bce1b451d5348054ddbf59d6fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:3f:ea:9c:18:f2:23:82:ed:dd:51:7f:31:
97:62:13:84:61:7e:25:62:e2:19:37:b1:92:11:8a:
6a:56:0a:cb:1f:c8:2a:f3:0f:12:05:a2:f7:8b:df:
b1:3b:9f:29:50:fb:f1:b9:46:34:e8:54:3c:5f:7b:
f8:01:12:8c:6d:a6:4a:99:54:39:d9:15:5c:78:7a:
95:4b:90:6a:90:bb:33:96:2a:b5:47:86:85:5a:30:
ca:e6:20:25:8a:23:f3:5d:5c:9f:c4:15:bf:d1:93:
45:27:5b:6f:1e:cb:17:d2:07:15:e7:b6:31:a3:6b:
ee:12:90:79:d0:88:e3:55:ec:3d:32:8e:a6:fe:63:
44:4c:92:7a:e0:d9:de:62:fb:96:b7:17:db:b0:79:
7f:c4:06:13:c9:83:89:5a:7d:c9:0c:16:5d:4f:27:
6c:cd:03:d5:c5:ac:20:30:6e:90:34:d6:ee:87:54:
01:f0:46:e9:04:e5:16:91:b4:d5:0d:9c:3e:66:be:
fd:47:31:b7:b9:83:35:c8:c4:bf:f6:f8:28:c2:b6:
83:39:0d:72:e0:74:30:c7:9f:1c:31:06:f3:9d:54:
d5:36:1f:e9:6a:9a:25:fc:dd:9d:a5:b4:4a:1c:eb:
be:9d:65:18:fd:af:65:3c:47:58:eb:7f:16:b2:95:
f3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:50:F2:3D:32:C8:5B:CE:1B:45:1D:53:48:05:4D:DB:F5:9D:6F:C2
X509v3 Authority Key Identifier:
keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/alDyPTLIW84bRR1TSAVN2_Wdb8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.253.180.0/23
194.170.246.0/24
195.229.47.0/24
213.42.110.0/24
Signature Algorithm: sha256WithRSAEncryption
94:60:46:03:2b:88:33:ad:45:53:84:92:fc:aa:45:4b:5d:10:
f7:52:b7:17:1e:0d:36:e8:1a:41:c6:49:57:e5:19:c0:84:a0:
2a:6e:59:ac:13:54:1c:eb:fa:c5:38:2f:de:ea:13:a2:ac:d2:
fa:8d:1e:2a:93:a5:77:1e:25:60:35:36:f6:d2:ca:8c:d5:f8:
06:99:75:4f:51:c5:2e:4a:6e:d2:0d:e4:bb:3d:7e:df:dc:56:
e9:3d:f5:96:d0:52:d8:02:45:8e:9c:c2:66:d0:47:52:9b:b3:
79:68:18:06:78:46:d1:54:e6:17:a8:ad:f1:da:f3:4b:aa:30:
7e:24:26:df:2f:8f:fb:4b:79:79:0b:bc:15:4e:b9:d0:23:75:
53:a8:d8:0a:03:58:60:c5:49:93:3c:cc:cc:72:38:e1:d4:12:
f5:e0:ac:90:8e:fa:49:a5:d8:20:fd:28:ac:aa:e8:fd:4b:b2:
d1:e2:18:14:90:0f:3e:f8:76:bc:43:b4:0b:54:f5:18:e9:65:
d1:86:9b:04:82:90:f0:6d:9f:17:b0:a8:e0:dc:bb:15:15:7c:
92:07:aa:e5:73:2f:07:cb:ab:c0:42:3c:cf:89:c0:f5:a4:9c:
b1:99:0a:2e:e2:a6:47:7a:08:b5:6a:ea:79:31:9c:87:d6:15:
e1:c1:77:87
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYp0QVIl6od3UgfV98VoKnCmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx
YmRjYzkwHhcNMjMwOTA4MTAwNTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTUwZjIzZDMyYzg1YmNlMWI0NTFkNTM0ODA1NGRkYmY1OWQ2ZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8k/6pwY8iOC7d1RfzGXYhOEYX4l
YuIZN7GSEYpqVgrLH8gq8w8SBaL3i9+xO58pUPvxuUY06FQ8X3v4ARKMbaZKmVQ5
2RVceHqVS5BqkLszliq1R4aFWjDK5iAliiPzXVyfxBW/0ZNFJ1tvHssX0gcV57Yx
o2vuEpB50IjjVew9Mo6m/mNETJJ64NneYvuWtxfbsHl/xAYTyYOJWn3JDBZdTyds
zQPVxawgMG6QNNbuh1QB8EbpBOUWkbTVDZw+Zr79RzG3uYM1yMS/9vgowraDOQ1y
4HQwx58cMQbznVTVNh/papol/N2dpbRKHOu+nWUY/a9lPEdY638WspXzhQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGpQ8j0yyFvOG0UdU0gFTdv1nW/CMB8GA1UdIwQY
MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt
NjFhZmI2NmQxZThjLzEvYWxEeVBUTElXODRiUlIxVFNBVk4yX1dkYjhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj
LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBl/20AwQA
wqr2AwQAw+UvAwQA1SpuMA0GCSqGSIb3DQEBCwUAA4IBAQCUYEYDK4gzrUVThJL8
qkVLXRD3UrcXHg026BpBxklX5RnAhKAqblmsE1Qc6/rFOC/e6hOirNL6jR4qk6V3
HiVgNTb20sqM1fgGmXVPUcUuSm7SDeS7PX7f3FbpPfWW0FLYAkWOnMJm0EdSm7N5
aBgGeEbRVOYXqK3x2vNLqjB+JCbfL4/7S3l5C7wVTrnQI3VTqNgKA1hgxUmTPMzM
cjjh1BL14KyQjvpJpdgg/Sisquj9S7LR4hgUkA8++Ha8Q7QLVPUY6WXRhpsEgpDw
bZ8XsKjg3LsVFXySB6rlcy8Hy6vAQjzPicD1pJyxmQou4qZHegi1aup5MZyH1hXh
wXeH
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:45 2024 by rpki-client on console-ams.rpki-client.org