Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/UI_DCpqxv0JfSgJy1D1dAn9ZqU4.roa
File: UI_DCpqxv0JfSgJy1D1dAn9ZqU4.roa (raw, json)
Hash identifier: oj3CPqka+8lD2Nu2a8exuNLcZ4vMCaM8HEuDMFfJJbc=
Subject key identifier: 50:8F:C3:0A:9A:B1:BF:42:5F:4A:02:72:D4:3D:5D:02:7F:59:A9:4E
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B60DBE26D91FBF8E8664753CE80C1
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/UI_DCpqxv0JfSgJy1D1dAn9ZqU4.roa
Signing time: Tue 02 Jan 2024 12:34:49 +0000
ROA not before: Tue 02 Jan 2024 12:34:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202301
IP address blocks: 194.156.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:60:db:e2:6d:91:fb:f8:e8:66:47:53:ce:80:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=508fc30a9ab1bf425f4a0272d43d5d027f59a94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:f7:0b:ee:4c:19:9e:f9:5d:8d:9e:59:d6:
87:74:52:03:b4:43:3e:46:20:eb:f9:b7:be:6d:1e:
0a:96:0c:15:34:e5:f9:fd:0e:85:c4:25:5d:83:e8:
00:28:be:03:74:e5:d3:05:e7:5e:f4:76:29:12:c5:
9a:3e:c4:81:95:6c:29:eb:45:4e:bf:01:e9:50:e5:
ad:d6:6f:08:78:cd:48:ea:78:ed:b6:c8:8d:08:bf:
8c:b3:b9:94:51:2d:aa:f0:5e:6c:e6:fd:dc:2f:b0:
a0:ed:52:ff:7f:fd:eb:2f:b0:0e:f5:b9:ca:cf:e7:
20:29:43:e7:a3:4b:ab:d7:a1:43:30:fe:c8:71:10:
88:1f:6f:64:24:d4:06:64:b1:27:10:b7:ea:88:92:
c1:9f:bd:ac:15:c0:c6:5a:79:45:0b:7a:36:93:1c:
f2:ca:f1:81:0c:da:f5:a7:2a:ce:5d:ad:36:ae:fe:
95:e0:84:84:be:98:88:17:ea:7f:c5:45:a6:e0:23:
ec:5d:80:d2:9c:85:39:c7:b8:cb:b9:b3:d2:a2:7d:
15:9b:46:ea:59:cf:7c:05:8c:bb:b3:46:0f:b1:d0:
f2:4b:56:5d:52:43:7d:65:88:5c:9b:1a:27:95:24:
4d:65:54:bd:7a:63:4c:72:a4:7d:1c:c3:36:d6:f5:
cf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8F:C3:0A:9A:B1:BF:42:5F:4A:02:72:D4:3D:5D:02:7F:59:A9:4E
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/UI_DCpqxv0JfSgJy1D1dAn9ZqU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.158.0/24
Signature Algorithm: sha256WithRSAEncryption
75:65:25:19:00:df:3f:26:b3:3f:30:9a:42:67:8d:a8:cc:f5:
83:2e:4a:04:78:68:6a:21:f8:28:05:7c:c1:17:22:63:a3:d5:
1e:f3:ab:91:87:b1:49:c0:b6:b0:8d:31:f9:34:bf:9f:82:88:
59:53:67:dc:65:5c:6e:cb:7a:8c:f8:fd:37:41:3d:cc:54:ee:
9d:24:85:2c:1a:b9:df:f9:63:59:df:a0:27:66:7d:6a:69:3e:
34:74:ba:78:ce:15:ae:f5:95:78:36:37:42:f5:ff:21:66:f9:
5e:c5:ea:84:86:07:77:8a:e3:fe:a9:81:05:42:db:d8:a9:94:
df:88:2d:2f:57:d9:28:68:b4:70:21:97:96:ef:7b:1e:c9:ce:
06:3c:44:44:84:68:2a:03:d7:4c:79:f9:52:ec:38:4c:65:05:
6c:3e:a1:7d:1c:de:6f:c5:27:83:f6:b3:58:76:e4:9b:d2:ac:
04:ba:36:0d:43:ec:c4:5a:d1:1b:f5:45:c5:1b:88:3e:7b:3e:
1e:9c:6c:14:eb:be:5a:4d:19:5a:bd:a5:c1:13:f0:6d:14:9c:
c0:58:59:fe:38:3c:3b:ce:d1:aa:e9:a0:b0:a7:f0:0e:7d:a8:
15:33:b7:94:78:62:86:2b:91:ac:ff:f1:5d:86:5a:50:3b:51:
20:ac:5f:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKK2Db4m2R+/joZkdTzoDBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjQwMTAyMTIzNDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDhmYzMwYTlhYjFiZjQyNWY0YTAyNzJkNDNkNWQwMjdmNTlhOTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+X3C+5MGZ75XY2eWdaHdFIDtEM+
RiDr+be+bR4KlgwVNOX5/Q6FxCVdg+gAKL4DdOXTBede9HYpEsWaPsSBlWwp60VO
vwHpUOWt1m8IeM1I6njttsiNCL+Ms7mUUS2q8F5s5v3cL7Cg7VL/f/3rL7AO9bnK
z+cgKUPno0ur16FDMP7IcRCIH29kJNQGZLEnELfqiJLBn72sFcDGWnlFC3o2kxzy
yvGBDNr1pyrOXa02rv6V4ISEvpiIF+p/xUWm4CPsXYDSnIU5x7jLubPSon0Vm0bq
Wc98BYy7s0YPsdDyS1ZdUkN9ZYhcmxonlSRNZVS9emNMcqR9HMM21vXPYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFCPwwqasb9CX0oCctQ9XQJ/WalOMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvVUlfRENwcXh2MEpmU2dKeTFEMWRBbjlacVU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpyeMA0G
CSqGSIb3DQEBCwUAA4IBAQB1ZSUZAN8/JrM/MJpCZ42ozPWDLkoEeGhqIfgoBXzB
FyJjo9Ue86uRh7FJwLawjTH5NL+fgohZU2fcZVxuy3qM+P03QT3MVO6dJIUsGrnf
+WNZ36AnZn1qaT40dLp4zhWu9ZV4NjdC9f8hZvlexeqEhgd3iuP+qYEFQtvYqZTf
iC0vV9koaLRwIZeW73seyc4GPEREhGgqA9dMeflS7DhMZQVsPqF9HN5vxSeD9rNY
duSb0qwEujYNQ+zEWtEb9UXFG4g+ez4enGwU675aTRlavaXBE/BtFJzAWFn+ODw7
ztGq6aCwp/AOfagVM7eUeGKGK5Gs//FdhlpQO1EgrF+E
-----END CERTIFICATE-----
Generated at Fri Jan 5 14:17:38 2024 by rpki-client on console-ams.rpki-client.org