Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/yXxjgzL4j7MU6PNfPsKB4h7ylkE.roa
File: yXxjgzL4j7MU6PNfPsKB4h7ylkE.roa (raw, json)
Hash identifier: Kf1qgtSo2TKZTLP/uCJAkAdminqtZRb6FMX/k3/Zza8=
Subject key identifier: C9:7C:63:83:32:F8:8F:B3:14:E8:F3:5F:3E:C2:81:E2:1E:F2:96:41
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA49CDC11C6C1C580A80995A676398
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/yXxjgzL4j7MU6PNfPsKB4h7ylkE.roa
Signing time: Mon 02 Jan 2023 13:44:49 +0000
ROA not before: Mon 02 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50148
IP address blocks: 195.130.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:49:cd:c1:1c:6c:1c:58:0a:80:99:5a:67:63:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c97c638332f88fb314e8f35f3ec281e21ef29641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:77:8e:b2:8c:97:45:63:18:52:2f:ad:27:
1e:dc:34:55:49:17:44:05:e2:dc:bd:b0:43:df:86:
87:66:29:0b:81:ec:89:08:5a:48:5a:00:fb:eb:d7:
eb:26:24:aa:35:ef:47:6a:50:51:b1:e0:fe:09:5a:
5c:f3:8c:4a:81:84:a8:d2:94:9b:1c:7a:11:d6:c3:
2a:6e:30:31:19:e6:ed:23:cd:8b:6f:43:7e:31:96:
58:55:5d:08:49:71:e8:d4:b2:da:b8:a5:8f:70:9c:
14:90:6f:88:f2:b3:e2:b4:85:d4:c5:ac:e0:98:ea:
76:93:3e:6b:cb:85:8f:ba:e3:67:4f:9d:a6:fc:e4:
c2:46:52:32:a7:76:1f:db:11:db:91:93:f2:b9:c1:
3e:53:ac:45:45:68:84:f7:32:df:2c:4a:9a:59:1f:
9a:5c:8b:f4:fb:ab:22:2c:8a:8d:ea:79:b9:20:0d:
97:41:ea:2f:fd:bf:c3:3c:39:59:61:86:4a:6b:60:
de:f4:9e:28:c4:aa:f7:17:33:df:eb:b5:52:c6:87:
69:66:13:5b:19:9a:28:b7:d1:19:ee:ba:ed:8e:15:
b3:e4:d6:dd:60:ea:7b:6c:b7:71:60:ad:36:b4:5d:
ec:43:be:4d:a1:6e:33:5b:ea:6c:65:ce:12:d0:fc:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7C:63:83:32:F8:8F:B3:14:E8:F3:5F:3E:C2:81:E2:1E:F2:96:41
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/yXxjgzL4j7MU6PNfPsKB4h7ylkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.130.122.0/24
Signature Algorithm: sha256WithRSAEncryption
31:12:4b:18:eb:af:df:88:8e:ef:21:69:b3:4b:a7:c4:a1:08:
e5:7a:83:c1:84:cf:06:0d:ec:b0:37:5e:a5:b3:60:04:6f:10:
b9:bb:61:ab:3e:07:69:63:80:8a:1e:5f:e1:93:32:e4:39:c7:
b9:48:d6:f3:40:87:59:43:66:d5:0a:01:b4:58:61:d3:3b:be:
79:af:d5:e2:04:4a:5e:3c:d6:dd:94:33:98:a4:34:4b:b4:8d:
f7:11:59:8c:55:eb:b0:73:c4:77:2a:5d:a8:47:13:74:1e:b5:
8e:23:2e:8b:4d:69:7c:be:ad:f9:15:d6:29:ce:1b:21:f4:8b:
33:11:36:af:5d:11:9e:8f:80:34:29:39:05:82:af:bd:f8:2d:
38:05:42:7d:ee:c5:0c:81:5e:01:8c:a7:28:93:a0:b4:26:a0:
0e:08:cf:23:bf:e8:cb:df:f3:85:8a:45:43:c0:bb:6d:ae:f1:
56:a9:73:2e:5d:78:b1:7b:b4:f8:2e:0b:b1:3f:38:a0:fe:c1:
3f:27:38:b0:c9:8c:f2:da:6c:89:e9:06:1b:28:d6:e4:a7:bf:
34:97:9e:f5:2d:cf:9e:3c:d4:33:23:df:2e:4a:9c:46:e4:7c:
50:98:90:dc:20:b0:a8:0c:fb:c9:3d:c9:bc:3c:a0:26:a8:af:
a7:e0:0e:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyuknNwRxsHFgKgJlaZ2OYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1
MjlkYzMwHhcNMjMwMTAyMTM0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTdjNjM4MzMyZjg4ZmIzMTRlOGYzNWYzZWMyODFlMjFlZjI5NjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu53jrKMl0VjGFIvrSce3DRVSRdE
BeLcvbBD34aHZikLgeyJCFpIWgD769frJiSqNe9HalBRseD+CVpc84xKgYSo0pSb
HHoR1sMqbjAxGebtI82Lb0N+MZZYVV0ISXHo1LLauKWPcJwUkG+I8rPitIXUxazg
mOp2kz5ry4WPuuNnT52m/OTCRlIyp3Yf2xHbkZPyucE+U6xFRWiE9zLfLEqaWR+a
XIv0+6siLIqN6nm5IA2XQeov/b/DPDlZYYZKa2De9J4oxKr3FzPf67VSxodpZhNb
GZoot9EZ7rrtjhWz5NbdYOp7bLdxYK02tF3sQ75NoW4zW+psZc4S0PyNBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMl8Y4My+I+zFOjzXz7CgeIe8pZBMB8GA1UdIwQY
MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut
YWFhNDU1M2QyYWJkLzEveVh4amd6TDRqN01VNlBOZlBzS0I0aDd5bGtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk
LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4J6MA0G
CSqGSIb3DQEBCwUAA4IBAQAxEksY66/fiI7vIWmzS6fEoQjleoPBhM8GDeywN16l
s2AEbxC5u2GrPgdpY4CKHl/hkzLkOce5SNbzQIdZQ2bVCgG0WGHTO755r9XiBEpe
PNbdlDOYpDRLtI33EVmMVeuwc8R3Kl2oRxN0HrWOIy6LTWl8vq35FdYpzhsh9Isz
ETavXRGej4A0KTkFgq+9+C04BUJ97sUMgV4BjKcok6C0JqAOCM8jv+jL3/OFikVD
wLttrvFWqXMuXXixe7T4LguxPzig/sE/JziwyYzy2myJ6QYbKNbkp780l571Lc+e
PNQzI98uSpxG5HxQmJDcILCoDPvJPcm8PKAmqK+n4A6b
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org