Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/p2k2hiDnsCcTz2a3D5WifZ2GToo.roa
File: p2k2hiDnsCcTz2a3D5WifZ2GToo.roa (raw, json)
Hash identifier: hoc0aW3hGEzBWGURmcGdJtWLx9KZ61tXnlLhdvKgfsI=
Subject key identifier: A7:69:36:86:20:E7:B0:27:13:CF:66:B7:0F:95:A2:7D:9D:86:4E:8A
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 0189D5745776F3C946140D8CA8037E5536E3
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/p2k2hiDnsCcTz2a3D5WifZ2GToo.roa
Signing time: Tue 08 Aug 2023 14:01:58 +0000
ROA not before: Tue 08 Aug 2023 14:01:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.62.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:74:57:76:f3:c9:46:14:0d:8c:a8:03:7e:55:36:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Aug 8 14:01:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a769368620e7b02713cf66b70f95a27d9d864e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:1b:55:1c:29:3d:dd:c2:6c:26:0a:40:fc:
de:09:40:76:38:dc:10:fe:84:9e:cc:3a:47:66:cf:
28:c1:6d:ab:1c:eb:95:1e:e7:48:f1:60:76:36:c7:
a8:ce:04:94:e5:bc:b7:7d:e7:95:9e:66:f1:a5:22:
ed:d6:7d:09:20:ca:88:c1:27:de:b6:80:f5:d2:43:
bc:18:7a:e1:1d:33:b2:e4:0f:63:35:8b:47:67:43:
4b:86:fd:ed:71:02:98:7a:1a:68:7d:fc:d4:00:2c:
33:cc:7e:d5:5f:90:68:d3:d8:cd:a1:e6:03:54:d4:
99:70:63:f7:2f:a0:6b:81:16:f0:8e:cf:64:34:3d:
a0:d2:89:d9:31:52:14:31:6c:c1:6c:95:46:d8:e7:
05:fd:17:25:2d:80:de:9d:9b:2d:80:97:3a:1c:cc:
c3:81:5d:88:7c:d4:3e:7f:87:46:8e:91:20:17:1c:
ff:fe:61:27:55:fd:88:2a:54:20:d1:02:81:a9:7c:
7d:b4:5b:dc:e3:43:38:b3:25:9d:33:36:30:2a:8c:
24:ee:62:22:32:b8:06:21:3a:3f:20:f0:c5:df:00:
ec:b2:fc:d9:66:2c:f1:17:c9:29:b3:df:72:5f:c4:
64:f0:cc:fb:6a:50:6c:4e:3c:c4:2e:e5:5d:60:63:
92:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:69:36:86:20:E7:B0:27:13:CF:66:B7:0F:95:A2:7D:9D:86:4E:8A
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/p2k2hiDnsCcTz2a3D5WifZ2GToo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.107.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:3a:8d:f5:f6:0b:5d:a0:1d:2c:e1:91:6d:80:65:a4:5b:40:
7a:9a:24:a6:01:42:c6:68:0a:e5:db:65:14:b3:d0:eb:9b:f3:
60:f0:18:88:49:22:04:e8:6c:5d:8e:f9:24:4d:c5:d7:24:c0:
ea:39:74:37:61:7d:2c:15:d7:a5:02:7e:c2:61:fa:b8:9d:bf:
b4:43:e5:b9:f1:ba:8e:d8:49:72:aa:ad:c4:51:6c:3b:57:1c:
39:3d:f3:b1:54:8d:7a:6d:86:3e:8b:de:ec:62:42:ad:4e:bf:
91:57:a7:75:e9:1f:e8:37:36:84:22:db:06:56:81:91:71:60:
c3:ec:8f:41:d1:60:f0:7c:75:e9:a5:f8:ea:63:f2:ac:87:2d:
89:e1:8f:7a:b7:f9:5e:85:cf:e0:3e:84:33:9b:78:3a:9c:a1:
f6:6d:26:84:cd:0f:49:35:ef:12:52:ff:88:9c:97:34:1e:0f:
60:0e:da:51:d3:32:ac:8e:75:ff:d1:8d:71:fa:76:b0:1e:c7:
d4:02:7f:2e:b0:49:df:81:23:62:27:74:2c:dc:01:14:8d:15:
f8:e5:77:dc:80:72:fd:ae:49:e7:53:15:fc:63:12:34:d6:6b:
11:df:f6:64:66:e6:e6:31:3b:07:64:d2:5d:95:32:bb:d4:50:
a3:d3:ef:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnVdFd288lGFA2MqAN+VTbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2
OTQ1NDEwHhcNMjMwODA4MTQwMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzY5MzY4NjIwZTdiMDI3MTNjZjY2YjcwZjk1YTI3ZDlkODY0ZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW4bVRwpPd3CbCYKQPzeCUB2ONwQ
/oSezDpHZs8owW2rHOuVHudI8WB2NseozgSU5by3feeVnmbxpSLt1n0JIMqIwSfe
toD10kO8GHrhHTOy5A9jNYtHZ0NLhv3tcQKYehpoffzUACwzzH7VX5Bo09jNoeYD
VNSZcGP3L6BrgRbwjs9kND2g0onZMVIUMWzBbJVG2OcF/RclLYDenZstgJc6HMzD
gV2IfNQ+f4dGjpEgFxz//mEnVf2IKlQg0QKBqXx9tFvc40M4syWdMzYwKowk7mIi
MrgGITo/IPDF3wDssvzZZizxF8kps99yX8Rk8Mz7alBsTjzELuVdYGOS4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKdpNoYg57AnE89mtw+Von2dhk6KMB8GA1UdIwQY
MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt
MTkyY2JkMDhkYjUxLzEvcDJrMmhpRG5zQ2NUejJhM0Q1V2lmWjJHVG9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx
LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj5rMA0G
CSqGSIb3DQEBCwUAA4IBAQCpOo319gtdoB0s4ZFtgGWkW0B6miSmAULGaArl22UU
s9Drm/Ng8BiISSIE6GxdjvkkTcXXJMDqOXQ3YX0sFdelAn7CYfq4nb+0Q+W58bqO
2Elyqq3EUWw7Vxw5PfOxVI16bYY+i97sYkKtTr+RV6d16R/oNzaEItsGVoGRcWDD
7I9B0WDwfHXppfjqY/Kshy2J4Y96t/lehc/gPoQzm3g6nKH2bSaEzQ9JNe8SUv+I
nJc0Hg9gDtpR0zKsjnX/0Y1x+nawHsfUAn8usEnfgSNiJ3Qs3AEUjRX45XfcgHL9
rknnUxX8YxI01msR3/ZkZubmMTsHZNJdlTK71FCj0+/a
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org