Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/4iQ2AjLDYQWN55t2ImhVhQ-JCEs.roa
File: 4iQ2AjLDYQWN55t2ImhVhQ-JCEs.roa (raw, json)
Hash identifier: lab1ehDh3WYvfgyytDkI/l5qGy2vwQu9Fwgg4tIrBVg=
Subject key identifier: E2:24:36:02:32:C3:61:05:8D:E7:9B:76:22:68:55:85:0F:89:08:4B
Certificate issuer: /CN=c80041619021e36328ad5898e899787046b8f0f9
Certificate serial: 018BA4155A97F01B54441D5B8CDD88257650
Authority key identifier: C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/4iQ2AjLDYQWN55t2ImhVhQ-JCEs.roa
Signing time: Mon 06 Nov 2023 10:02:24 +0000
ROA not before: Mon 06 Nov 2023 10:02:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47411
IP address blocks: 195.43.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:15:5a:97:f0:1b:54:44:1d:5b:8c:dd:88:25:76:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c80041619021e36328ad5898e899787046b8f0f9
Validity
Not Before: Nov 6 10:02:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e224360232c361058de79b76226855850f89084b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:22:40:9f:d6:9a:93:91:05:73:49:42:99:
02:e8:29:cf:33:e1:88:e0:ed:af:84:10:0c:d1:a8:
ac:75:46:9b:43:8b:2c:d9:9e:14:eb:d0:a6:7c:7b:
14:71:50:ac:87:00:68:94:f3:7f:a0:4d:e5:b7:8d:
4c:8e:4a:40:3d:80:04:43:50:97:ae:67:ef:a3:0a:
67:87:38:2f:c8:52:0d:4d:11:e3:8f:65:64:df:45:
3c:54:d9:e6:8d:b8:a2:7e:df:13:30:ae:33:1b:fd:
84:9e:85:47:bb:ff:97:c0:64:47:42:26:6a:f7:8c:
ae:a1:df:17:56:21:4e:f8:4c:32:c3:68:29:b2:a9:
85:89:a9:d3:d6:8b:a2:63:1b:e9:bb:50:87:a9:95:
22:5e:66:7c:81:ab:91:02:72:e5:d9:42:ec:9b:aa:
b0:d0:10:50:b1:3b:e8:6a:72:f4:fa:9b:7f:f7:a6:
e6:9c:0e:c1:2e:27:d4:85:99:07:44:cf:67:fc:b0:
69:88:e8:8c:dd:37:9e:87:f8:8c:39:b9:ae:a6:1c:
32:2d:9e:29:6d:5a:08:b1:49:43:e7:74:30:61:4e:
55:6d:db:e6:a4:5a:de:cd:6a:5c:15:74:62:b0:0d:
b1:16:4e:40:4e:33:20:b4:12:3e:b7:f8:71:76:c2:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:24:36:02:32:C3:61:05:8D:E7:9B:76:22:68:55:85:0F:89:08:4B
X509v3 Authority Key Identifier:
keyid:C8:00:41:61:90:21:E3:63:28:AD:58:98:E8:99:78:70:46:B8:F0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yABBYZAh42MorViY6Jl4cEa48Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/4iQ2AjLDYQWN55t2ImhVhQ-JCEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/685c99-cfdf-42a0-8436-d297db230a14/1/yABBYZAh42MorViY6Jl4cEa48Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.152.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:95:6b:48:05:a6:ff:b9:f3:b6:c3:7c:03:1e:fa:5d:35:c0:
a6:a5:64:49:c8:a0:66:7d:d2:6a:98:a0:9a:31:19:d5:08:90:
86:8f:05:37:83:bb:7f:f0:c7:b6:78:e6:8d:06:89:f6:ed:12:
cc:70:a3:07:7f:34:af:44:f9:35:c1:fe:47:ff:b2:4f:35:ac:
fd:aa:f7:1f:96:b0:6d:b1:1f:a6:eb:88:5e:59:03:4e:8e:d9:
7b:cb:62:54:2d:40:0f:1e:27:e5:11:58:65:fe:1d:ce:85:bd:
a5:c2:eb:32:20:df:fa:80:ef:c0:9c:da:a0:d9:3b:9e:63:e8:
64:aa:64:91:3c:d2:4e:71:ed:f5:bb:11:f0:19:14:5f:58:0f:
8a:ab:7b:a2:99:34:98:42:70:58:d7:4c:f2:af:bb:0d:e9:c9:
88:15:f9:9f:9e:8b:0e:dd:d6:bd:41:2b:23:5c:87:72:c1:3b:
3e:08:08:6e:e3:fa:22:6e:ab:c1:21:c4:54:ee:31:5c:c5:93:
79:ab:97:11:9b:d7:9c:3b:65:27:1e:72:0e:f1:ca:67:89:18:
d0:f0:6a:d7:7a:17:5a:13:91:a0:28:02:44:c4:d9:63:b6:45:
a4:68:2e:ee:97:db:01:e4:82:40:1a:1f:18:cd:1f:d3:5d:eb:
0d:72:c3:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYukFVqX8BtURB1bjN2IJXZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MDA0MTYxOTAyMWUzNjMyOGFkNTg5OGU4OTk3ODcwNDZi
OGYwZjkwHhcNMjMxMTA2MTAwMjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjI0MzYwMjMyYzM2MTA1OGRlNzliNzYyMjY4NTU4NTBmODkwODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiMiQJ/WmpORBXNJQpkC6CnPM+GI
4O2vhBAM0aisdUabQ4ss2Z4U69CmfHsUcVCshwBolPN/oE3lt41MjkpAPYAEQ1CX
rmfvowpnhzgvyFINTRHjj2Vk30U8VNnmjbiift8TMK4zG/2EnoVHu/+XwGRHQiZq
94yuod8XViFO+Ewyw2gpsqmFianT1ouiYxvpu1CHqZUiXmZ8gauRAnLl2ULsm6qw
0BBQsTvoanL0+pt/96bmnA7BLifUhZkHRM9n/LBpiOiM3Teeh/iMObmuphwyLZ4p
bVoIsUlD53QwYU5VbdvmpFrezWpcFXRisA2xFk5ATjMgtBI+t/hxdsKzXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOIkNgIyw2EFjeebdiJoVYUPiQhLMB8GA1UdIwQY
MBaAFMgAQWGQIeNjKK1YmOiZeHBGuPD5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUFCQllaQWg0Mk1vclZpWTZKbDRjRWE0OFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ODVjOTktY2ZkZi00MmEwLTg0MzYt
ZDI5N2RiMjMwYTE0LzEvNGlRMkFqTERZUVdONTV0MkltaFZoUS1KQ0VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82ODVjOTktY2ZkZi00MmEwLTg0MzYtZDI5N2RiMjMwYTE0
LzEveUFCQllaQWg0Mk1vclZpWTZKbDRjRWE0OFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyuYMA0G
CSqGSIb3DQEBCwUAA4IBAQAMlWtIBab/ufO2w3wDHvpdNcCmpWRJyKBmfdJqmKCa
MRnVCJCGjwU3g7t/8Me2eOaNBon27RLMcKMHfzSvRPk1wf5H/7JPNaz9qvcflrBt
sR+m64heWQNOjtl7y2JULUAPHiflEVhl/h3Ohb2lwusyIN/6gO/AnNqg2TueY+hk
qmSRPNJOce31uxHwGRRfWA+Kq3uimTSYQnBY10zyr7sN6cmIFfmfnosO3da9QSsj
XIdywTs+CAhu4/oibqvBIcRU7jFcxZN5q5cRm9ecO2UnHnIO8cpniRjQ8GrXehda
E5GgKAJExNljtkWkaC7ul9sB5IJAGh8YzR/TXesNcsO5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:16 2024 by rpki-client on console-fra.rpki-client.org