Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/biFSVOoY3j91LlSeOIQ-G-kS4K4.roa
File: biFSVOoY3j91LlSeOIQ-G-kS4K4.roa (raw, json)
Hash identifier: 8LKqLFPdL3z4xLp5cSz+FAamIxB8ITpOv+l5F5+rago=
Subject key identifier: 6E:21:52:54:EA:18:DE:3F:75:2E:54:9E:38:84:3E:1B:E9:12:E0:AE
Certificate issuer: /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial: 018573BA8BB5110CD4FB058E318A4661298E
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/biFSVOoY3j91LlSeOIQ-G-kS4K4.roa
Signing time: Mon 02 Jan 2023 18:24:43 +0000
ROA not before: Mon 02 Jan 2023 18:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31742
IP address blocks: 195.153.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:ba:8b:b5:11:0c:d4:fb:05:8e:31:8a:46:61:29:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Validity
Not Before: Jan 2 18:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e215254ea18de3f752e549e38843e1be912e0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e1:49:e0:26:ad:3a:8e:d5:3b:90:7f:7f:0b:
34:b4:c4:ef:b2:70:ba:3d:91:a3:9f:a7:e2:a8:d5:
65:3c:cc:66:59:99:44:6e:42:1f:e5:bb:0e:99:73:
e8:0c:14:90:a3:f0:a6:e0:63:b2:03:48:d7:39:82:
59:0b:18:43:5b:42:c6:d6:cb:29:0d:a8:8d:6d:d2:
89:5d:bb:13:34:b7:7d:85:cf:35:24:5c:bb:02:f2:
a5:ce:9e:e3:1d:ce:08:2d:ee:28:61:3c:04:b3:69:
50:8c:3b:ba:ab:38:0e:af:d4:0f:f7:50:19:8e:5e:
44:aa:f0:03:fe:90:5a:9d:50:31:c4:91:ad:5d:59:
16:7f:47:2d:eb:ef:63:51:2c:c6:ab:46:d4:ad:54:
52:87:7c:42:fb:9a:7f:c6:75:7a:f8:a2:22:9f:62:
55:4b:d9:d7:a0:98:37:0b:23:a3:0d:2d:d6:75:fe:
0d:6d:67:ad:44:57:ce:21:78:3f:9a:ae:0b:af:b0:
8f:41:17:6d:5d:93:d4:cf:bd:b2:1d:56:4f:3b:10:
0d:1e:d7:f7:e4:10:fd:bf:39:4a:73:23:ca:61:63:
17:f8:47:74:3a:44:be:53:d4:74:06:cc:b6:b5:7f:
b8:17:b8:fe:b1:a8:81:38:45:3f:b9:75:78:31:03:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:21:52:54:EA:18:DE:3F:75:2E:54:9E:38:84:3E:1B:E9:12:E0:AE
X509v3 Authority Key Identifier:
keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/biFSVOoY3j91LlSeOIQ-G-kS4K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.153.124.0/24
Signature Algorithm: sha256WithRSAEncryption
71:09:39:12:5d:2f:15:3d:24:72:66:c6:82:ec:b7:1f:9d:57:
ee:2e:0d:1f:96:35:6f:c8:ec:77:4f:f4:90:22:98:78:aa:0c:
42:dc:8b:b5:bf:61:91:70:63:1e:f4:9b:ce:0d:d9:88:35:39:
01:49:c8:11:e1:62:6d:99:6b:ff:70:70:5f:de:91:c0:c0:3f:
78:bb:d3:b7:02:8b:fd:45:05:ac:3a:2d:cc:4b:6b:93:f3:f5:
0f:2b:ab:96:90:fb:6f:13:c0:30:d6:19:cf:af:17:23:9a:83:
99:24:c7:cc:61:a5:06:83:5f:04:b9:7f:f7:b8:db:68:f9:73:
f9:2c:17:b0:21:32:3a:50:69:b3:9d:d8:5e:33:db:19:28:a9:
5b:0a:7a:56:0f:c3:b9:28:ec:0d:55:aa:3c:bf:3b:22:93:46:
0c:e5:63:36:e7:78:90:5b:9e:9b:53:80:13:19:93:11:d5:20:
60:36:8a:e7:2b:71:4f:44:6d:1a:90:6b:10:07:87:fe:90:6c:
00:c6:ea:27:0d:1b:4f:fd:62:b7:46:73:36:fd:01:ec:10:e8:
6b:50:64:25:a2:da:b7:8c:66:45:d9:76:6a:90:62:46:80:f4:
a2:cb:ab:f0:46:cf:7d:ee:aa:9e:30:95:e8:cf:b6:db:79:87:
ae:ae:5f:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzuou1EQzU+wWOMYpGYSmOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1M2Y1NTYyOTEyMWI2MGZiMTljOTdmOTljNzVkZDZmMDE1
ZGQ2ZTgwHhcNMjMwMTAyMTgyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTIxNTI1NGVhMThkZTNmNzUyZTU0OWUzODg0M2UxYmU5MTJlMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneFJ4CatOo7VO5B/fws0tMTvsnC6
PZGjn6fiqNVlPMxmWZlEbkIf5bsOmXPoDBSQo/Cm4GOyA0jXOYJZCxhDW0LG1ssp
DaiNbdKJXbsTNLd9hc81JFy7AvKlzp7jHc4ILe4oYTwEs2lQjDu6qzgOr9QP91AZ
jl5EqvAD/pBanVAxxJGtXVkWf0ct6+9jUSzGq0bUrVRSh3xC+5p/xnV6+KIin2JV
S9nXoJg3CyOjDS3Wdf4NbWetRFfOIXg/mq4Lr7CPQRdtXZPUz72yHVZPOxANHtf3
5BD9vzlKcyPKYWMX+Ed0OkS+U9R0Bsy2tX+4F7j+saiBOEU/uXV4MQNseQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG4hUlTqGN4/dS5UnjiEPhvpEuCuMB8GA1UdIwQY
MBaAFGU/VWKRIbYPsZyX+Zx13W8BXdboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQt
MjkyNmQyODFiNTE0LzEvYmlGU1ZPb1kzajkxTGxTZU9JUS1HLWtTNEs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NGNmM2ItOWY1Yy00ZjVlLTk2YzQtMjkyNmQyODFiNTE0
LzEvWlQ5VllwRWh0Zy14bkpmNW5IWGRid0ZkMXVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5l8MA0G
CSqGSIb3DQEBCwUAA4IBAQBxCTkSXS8VPSRyZsaC7LcfnVfuLg0fljVvyOx3T/SQ
Iph4qgxC3Iu1v2GRcGMe9JvODdmINTkBScgR4WJtmWv/cHBf3pHAwD94u9O3Aov9
RQWsOi3MS2uT8/UPK6uWkPtvE8Aw1hnPrxcjmoOZJMfMYaUGg18EuX/3uNto+XP5
LBewITI6UGmzndheM9sZKKlbCnpWD8O5KOwNVao8vzsik0YM5WM253iQW56bU4AT
GZMR1SBgNornK3FPRG0akGsQB4f+kGwAxuonDRtP/WK3RnM2/QHsEOhrUGQlotq3
jGZF2XZqkGJGgPSiy6vwRs997qqeMJXoz7bbeYeurl8R
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:07 2024 by rpki-client on console-ams.rpki-client.org