Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/2C4OKPy79WszKma0g40Iiu0vGtM.roa
File: 2C4OKPy79WszKma0g40Iiu0vGtM.roa (raw, json)
Hash identifier: BPssj7Cm8C/UKA3ACoFbsBHoa2xpRM11bLFH5+HEK/Q=
Subject key identifier: D8:2E:0E:28:FC:BB:F5:6B:33:2A:66:B4:83:8D:08:8A:ED:2F:1A:D3
Certificate issuer: /CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Certificate serial: 01856E1426ACFEFDC45ABE6FE40325B71C96
Authority key identifier: 93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/2C4OKPy79WszKma0g40Iiu0vGtM.roa
Signing time: Sun 01 Jan 2023 16:04:52 +0000
ROA not before: Sun 01 Jan 2023 16:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208678
IP address blocks: 194.110.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:26:ac:fe:fd:c4:5a:be:6f:e4:03:25:b7:1c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93af348ec5a4e65e0cb137821ae6a139ed7fac00
Validity
Not Before: Jan 1 16:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d82e0e28fcbbf56b332a66b4838d088aed2f1ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1f:52:23:89:93:d1:f1:57:6c:ef:61:13:8e:
ca:3f:fe:65:f5:47:3f:8b:ce:37:c9:09:5f:05:20:
98:9b:ec:c8:6d:4d:0f:6c:94:86:da:ad:a0:8d:41:
c5:22:8d:03:a8:e5:04:c1:8b:37:e1:5e:e2:20:a0:
f4:ba:52:7a:28:5e:0c:af:fd:ae:86:a3:76:e4:d2:
46:b0:4c:f4:98:b0:a7:1a:95:04:f5:1d:95:9f:30:
67:73:ee:7b:49:e6:3f:e3:e1:d3:34:29:f6:47:c2:
15:01:e8:a5:9c:75:ea:90:d7:43:79:98:d7:42:35:
b3:10:44:6d:11:22:56:b4:5e:dc:9d:63:9f:93:a6:
a3:b6:f1:24:6a:52:bf:14:42:c6:32:4f:66:cb:d7:
fd:70:fa:34:15:70:36:bf:fb:f1:71:36:51:ed:37:
1c:dd:d9:47:99:a7:ce:80:2b:12:34:61:ed:9c:5e:
64:b4:26:b9:58:56:70:e6:b7:47:56:49:a0:46:f3:
a0:31:96:2e:50:06:52:46:87:78:64:6a:fd:ee:f5:
9e:be:f7:01:1d:bf:59:7d:75:36:5f:0f:bb:12:0f:
94:1e:7e:ad:b5:60:56:d4:d9:2c:b7:44:6d:37:9f:
e3:67:da:09:23:39:45:34:84:56:4d:c2:9e:a0:d6:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2E:0E:28:FC:BB:F5:6B:33:2A:66:B4:83:8D:08:8A:ED:2F:1A:D3
X509v3 Authority Key Identifier:
keyid:93:AF:34:8E:C5:A4:E6:5E:0C:B1:37:82:1A:E6:A1:39:ED:7F:AC:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k680jsWk5l4MsTeCGuahOe1_rAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/2C4OKPy79WszKma0g40Iiu0vGtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7820-5c1c-4884-9ab8-c5ab97dba898/1/k680jsWk5l4MsTeCGuahOe1_rAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.154.0/24
Signature Algorithm: sha256WithRSAEncryption
27:be:5d:25:bd:4d:47:06:e1:af:e3:d8:bc:08:69:da:85:84:
4b:e7:e5:b9:be:4c:35:52:3d:2d:a1:9a:e1:43:ad:12:21:14:
58:d1:31:35:b9:af:20:85:07:59:27:f3:01:22:07:2e:b2:4e:
db:a7:9a:ca:cc:0c:ff:62:f4:a9:40:d9:22:ef:64:94:a6:fd:
84:7c:37:2b:48:14:76:fa:7d:c8:42:f4:56:92:98:73:da:60:
46:f4:3d:0d:4e:58:e0:42:ee:65:0b:bc:0a:09:3d:cb:ff:f4:
c4:1b:21:9a:bc:73:b2:d3:c1:f0:77:6c:ef:71:a0:aa:02:d0:
a0:4b:df:c7:ac:59:87:a3:bc:1a:f7:1f:13:c6:04:67:ee:f4:
42:a6:a5:46:97:d9:80:ac:dc:0a:c0:28:61:9e:0b:f0:3a:9a:
95:37:dc:fb:0c:21:aa:df:6e:ee:00:af:29:57:cb:91:83:a9:
ed:43:42:ee:00:46:bf:3e:b1:e7:2e:79:0e:67:11:1d:8e:76:
38:41:03:d9:34:3d:30:f7:d1:ff:f7:cf:fc:c4:96:76:3f:84:
c5:30:e0:5c:44:c5:d9:9d:28:c0:e4:0e:7b:ce:ac:72:82:a1:
50:f3:b2:55:f7:82:5c:79:42:0f:64:e6:0a:d1:47:c6:9e:18:
c9:0e:bf:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuFCas/v3EWr5v5AMltxyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYWYzNDhlYzVhNGU2NWUwY2IxMzc4MjFhZTZhMTM5ZWQ3
ZmFjMDAwHhcNMjMwMTAxMTYwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODJlMGUyOGZjYmJmNTZiMzMyYTY2YjQ4MzhkMDg4YWVkMmYxYWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR9SI4mT0fFXbO9hE47KP/5l9Uc/
i843yQlfBSCYm+zIbU0PbJSG2q2gjUHFIo0DqOUEwYs34V7iIKD0ulJ6KF4Mr/2u
hqN25NJGsEz0mLCnGpUE9R2VnzBnc+57SeY/4+HTNCn2R8IVAeilnHXqkNdDeZjX
QjWzEERtESJWtF7cnWOfk6ajtvEkalK/FELGMk9my9f9cPo0FXA2v/vxcTZR7Tcc
3dlHmafOgCsSNGHtnF5ktCa5WFZw5rdHVkmgRvOgMZYuUAZSRod4ZGr97vWevvcB
Hb9ZfXU2Xw+7Eg+UHn6ttWBW1Nkst0RtN5/jZ9oJIzlFNIRWTcKeoNYJpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNguDij8u/VrMypmtIONCIrtLxrTMB8GA1UdIwQY
MBaAFJOvNI7FpOZeDLE3ghrmoTntf6wAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazY4MGpzV2s1bDRNc1RlQ0d1YWhPZTFfckFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iZDc4MjAtNWMxYy00ODg0LTlhYjgt
YzVhYjk3ZGJhODk4LzEvMkM0T0tQeTc5V3N6S21hMGc0MElpdTB2R3RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iZDc4MjAtNWMxYy00ODg0LTlhYjgtYzVhYjk3ZGJhODk4
LzEvazY4MGpzV2s1bDRNc1RlQ0d1YWhPZTFfckFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm6aMA0G
CSqGSIb3DQEBCwUAA4IBAQAnvl0lvU1HBuGv49i8CGnahYRL5+W5vkw1Uj0toZrh
Q60SIRRY0TE1ua8ghQdZJ/MBIgcusk7bp5rKzAz/YvSpQNki72SUpv2EfDcrSBR2
+n3IQvRWkphz2mBG9D0NTljgQu5lC7wKCT3L//TEGyGavHOy08Hwd2zvcaCqAtCg
S9/HrFmHo7wa9x8TxgRn7vRCpqVGl9mArNwKwChhngvwOpqVN9z7DCGq327uAK8p
V8uRg6ntQ0LuAEa/PrHnLnkOZxEdjnY4QQPZND0w99H/98/8xJZ2P4TFMOBcRMXZ
nSjA5A57zqxygqFQ87JV94JceUIPZOYK0UfGnhjJDr9G
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:03 2024 by rpki-client on console-fra.rpki-client.org