Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/1-xn6Z4z86mqe6AAJr75ymT4rK20.roa
File: 1-xn6Z4z86mqe6AAJr75ymT4rK20.roa (raw, json)
Hash identifier: 0o9eG7Nuid+XfhEvkEEZhe85QYyMLABMOqWsXBlbwMg=
Subject key identifier: FB:19:FA:67:8C:FC:EA:6A:9E:E8:00:09:AF:BE:72:99:3E:2B:2B:6D
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 018AB8082978BB54C23F82552909F5582A4D
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/1-xn6Z4z86mqe6AAJr75ymT4rK20.roa
Signing time: Thu 21 Sep 2023 13:57:37 +0000
ROA not before: Thu 21 Sep 2023 13:57:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50464
IP address blocks: 195.191.76.196/32 maxlen: 32
195.191.76.210/32 maxlen: 32
195.191.76.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b8:08:29:78:bb:54:c2:3f:82:55:29:09:f5:58:2a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Sep 21 13:57:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb19fa678cfcea6a9ee80009afbe72993e2b2b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:0e:1a:68:a2:69:3f:7a:0c:a7:49:f5:86:
f7:1e:ef:48:f9:f7:06:cb:84:ea:bf:c8:65:d1:0d:
20:3f:4e:6e:1e:e0:cc:87:43:28:5f:fd:f7:a8:81:
79:79:52:ad:50:14:a4:90:b7:72:ad:94:a4:b2:91:
34:bb:8f:7e:e1:1b:54:e2:b1:0d:d0:42:9a:84:94:
3a:7b:a1:e9:1b:ee:ee:8b:1a:22:df:76:40:1f:70:
ab:de:51:91:4f:c6:4b:36:02:41:f5:6f:d7:65:69:
99:8f:47:eb:f1:81:de:42:64:e8:89:48:c3:fe:ff:
fc:c4:60:e5:2d:b4:55:13:47:3b:b9:7e:11:c4:6a:
42:e1:dd:3f:c0:63:fa:a1:bd:f7:99:7a:b7:0e:78:
79:f7:2f:a9:ea:26:e6:39:ad:59:5b:e9:e4:eb:83:
50:d4:8a:56:93:d4:86:16:75:88:85:8a:3c:74:0c:
58:56:08:bd:34:f5:1e:eb:7d:c5:83:3c:16:3f:cf:
13:4a:af:95:86:ad:31:ff:64:26:d7:0f:57:46:06:
64:39:fc:f1:37:89:98:b6:46:1b:04:16:e6:da:23:
4b:5f:c1:c6:ea:3a:c8:6a:2b:5d:7a:2b:df:a9:e8:
1b:e3:a6:e8:05:98:b6:0b:94:2e:9a:b4:b9:8c:c6:
84:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:19:FA:67:8C:FC:EA:6A:9E:E8:00:09:AF:BE:72:99:3E:2B:2B:6D
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/1-xn6Z4z86mqe6AAJr75ymT4rK20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.76.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:67:de:80:2c:6f:6a:0d:c1:49:39:1e:e8:ce:81:d7:81:b4:
03:67:ec:c0:a5:fb:0a:37:70:c2:2d:ea:36:2b:d7:2f:4c:a7:
8a:90:46:5c:f7:04:e8:99:1c:7b:fc:e6:fd:2b:d0:44:37:32:
c5:88:6a:fc:01:4f:9b:4e:56:68:11:ec:1c:cb:ca:04:40:79:
f0:e8:ca:8d:19:c0:92:dc:dd:f6:91:a7:24:66:f9:b0:78:2f:
01:90:4d:9d:40:71:76:31:2b:2e:e0:d9:db:08:d9:01:a8:b9:
01:f5:01:52:4e:13:76:cd:e7:2b:37:97:6a:0a:c0:b1:01:ef:
a4:bc:03:5e:f4:b3:f1:26:7b:b2:bf:f0:c9:7f:cb:21:50:a3:
d8:4b:a6:0c:2f:4b:62:d5:72:c4:c7:b1:2f:28:08:e3:e3:1a:
c8:9b:e1:77:fd:a2:81:8e:07:05:9e:3b:20:29:31:89:79:73:
5e:54:53:f1:44:34:f4:7e:6d:f5:03:5b:f0:f5:2f:80:af:be:
d4:b4:d9:fe:d3:c0:ae:ef:58:80:47:15:ee:1b:6e:4c:fd:fb:
12:ca:73:99:b6:77:2c:cf:3f:0a:69:2f:10:d5:91:10:68:ba:
7f:c4:34:cd:8e:53:7c:48:8a:65:19:72:eb:9b:3a:03:a2:a8:
1f:53:23:74
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYq4CCl4u1TCP4JVKQn1WCpNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMGVjZGJmNTEzNjBjZWNhZTYxN2FiZTFhM2FjNmE2ZmYw
YTViNmMwHhcNMjMwOTIxMTM1NzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjE5ZmE2NzhjZmNlYTZhOWVlODAwMDlhZmJlNzI5OTNlMmIyYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqykOGmiiaT96DKdJ9Yb3Hu9I+fcG
y4Tqv8hl0Q0gP05uHuDMh0MoX/33qIF5eVKtUBSkkLdyrZSkspE0u49+4RtU4rEN
0EKahJQ6e6HpG+7uixoi33ZAH3Cr3lGRT8ZLNgJB9W/XZWmZj0fr8YHeQmToiUjD
/v/8xGDlLbRVE0c7uX4RxGpC4d0/wGP6ob33mXq3Dnh59y+p6ibmOa1ZW+nk64NQ
1IpWk9SGFnWIhYo8dAxYVgi9NPUe633FgzwWP88TSq+Vhq0x/2Qm1w9XRgZkOfzx
N4mYtkYbBBbm2iNLX8HG6jrIaitdeivfqegb46boBZi2C5QumrS5jMaEPQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPsZ+meM/OpqnugACa++cpk+KyttMB8GA1UdIwQY
MBaAFGsOzb9RNgzsrmF6vho6xqb/CltsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2Qt
MTFkZmZlMTA4MTQ3LzEvMS14bjZaNHo4Nm1xZTZBQUpyNzV5bVQ0cksyMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDcvMWFjYjBjLTMxYTMtNDcxOC05OTNkLTExZGZmZTEwODE0
Ny8xL2F3N052MUUyRE95dVlYcS1HanJHcHY4S1cydy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcO/TDAN
BgkqhkiG9w0BAQsFAAOCAQEAGmfegCxvag3BSTke6M6B14G0A2fswKX7Cjdwwi3q
NivXL0ynipBGXPcE6Jkce/zm/SvQRDcyxYhq/AFPm05WaBHsHMvKBEB58OjKjRnA
ktzd9pGnJGb5sHgvAZBNnUBxdjErLuDZ2wjZAai5AfUBUk4Tds3nKzeXagrAsQHv
pLwDXvSz8SZ7sr/wyX/LIVCj2EumDC9LYtVyxMexLygI4+MayJvhd/2igY4HBZ47
ICkxiXlzXlRT8UQ09H5t9QNb8PUvgK++1LTZ/tPAru9YgEcV7htuTP37EspzmbZ3
LM8/CmkvENWREGi6f8Q0zY5TfEiKZRly65s6A6KoH1MjdA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:47 2024 by rpki-client on console-ams.rpki-client.org