Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/oA1zazuOBeh03whkOUp8zSeO_1A.roa
File: oA1zazuOBeh03whkOUp8zSeO_1A.roa (raw, json)
Hash identifier: PGifPh2PwmhZbbjMX5EAY5YFd4K8rvkQMZ2fZUsfaw8=
Subject key identifier: A0:0D:73:6B:3B:8E:05:E8:74:DF:08:64:39:4A:7C:CD:27:8E:FF:50
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 018CC4244D8E65A38ABF18A2D947975C06D1
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/oA1zazuOBeh03whkOUp8zSeO_1A.roa
Signing time: Mon 01 Jan 2024 08:29:22 +0000
ROA not before: Mon 01 Jan 2024 08:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50464
IP address blocks: 195.191.76.196/32 maxlen: 32
195.191.76.210/32 maxlen: 32
195.191.76.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 07:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:4d:8e:65:a3:8a:bf:18:a2:d9:47:97:5c:06:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Jan 1 08:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a00d736b3b8e05e874df0864394a7ccd278eff50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:bc:05:0f:60:77:d6:4d:16:29:5e:4c:10:
c1:d0:af:ed:94:ac:c9:0e:ce:0c:20:c9:0c:c1:87:
0b:7c:ea:10:a9:a8:62:f6:a8:ee:40:9e:2f:1e:74:
7b:e6:6d:14:94:00:2d:77:42:1d:b0:f3:90:ce:5e:
2f:bd:a6:95:3a:15:f5:bb:35:d5:c3:e4:ef:e9:07:
ab:65:24:42:c0:bd:e0:a7:fc:95:32:8f:e5:b2:d2:
5e:25:7d:b0:4e:53:23:58:ac:10:f4:fa:d4:94:1f:
25:05:81:80:6b:df:52:6d:bc:25:23:1b:e6:79:68:
ee:b1:c7:21:4f:76:09:50:60:db:c7:21:59:fa:06:
25:1c:45:c0:23:ab:e1:f0:56:f7:b5:12:5a:fb:24:
ea:57:90:dc:50:e6:85:ac:0b:89:14:71:5b:57:fe:
54:7b:6f:d2:44:88:1e:f7:2d:bc:ea:2d:91:de:cf:
fa:fe:aa:cb:71:c2:7f:43:d2:cb:c5:64:a9:3c:14:
22:a9:de:61:4d:be:f8:87:e7:65:7a:bc:9b:49:86:
0e:64:20:35:40:14:6a:c5:68:a1:9a:0e:32:3a:5c:
c2:04:14:64:74:45:5e:18:06:3f:e4:c5:8d:ea:c2:
fe:b9:ad:0b:f1:4a:57:59:48:57:e6:96:b9:2d:3b:
af:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0D:73:6B:3B:8E:05:E8:74:DF:08:64:39:4A:7C:CD:27:8E:FF:50
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/oA1zazuOBeh03whkOUp8zSeO_1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.76.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:a0:63:61:88:e6:89:db:5f:bb:2f:4b:84:27:5f:61:d2:65:
a0:ff:1e:f8:b2:ed:28:2a:be:26:29:fe:6c:de:6f:f2:8b:82:
21:c0:9e:e1:e1:21:91:6d:6d:5d:32:cc:10:d8:04:63:8b:4f:
a7:c7:77:7d:0f:7b:39:44:bf:19:38:69:01:17:2c:5c:4d:4d:
65:24:5f:5d:7b:c1:b0:b5:fa:45:4b:c1:08:7a:2c:fe:94:ec:
5c:d4:a0:86:fa:75:c0:e2:05:c2:94:cf:01:c2:c4:bb:75:05:
34:92:90:9e:c0:c1:2d:9c:39:2b:95:c4:e0:f7:ea:94:1d:f1:
16:55:ff:d0:61:02:7e:36:10:55:90:8b:2f:cb:d9:8f:3c:91:
ed:2e:82:bc:5a:22:86:11:8a:d7:78:db:57:c3:ea:f4:69:b6:
db:d3:1c:84:aa:05:cb:31:19:c9:c6:87:f9:e3:c7:92:8d:5a:
d6:35:35:84:60:94:53:35:f3:df:bd:c2:89:ce:46:cd:63:00:
93:df:a1:bd:fb:df:bd:c9:7c:a9:61:5a:31:08:5f:18:84:cc:
37:83:ce:4d:fb:f2:e5:f9:71:1a:e4:d7:9a:54:dc:33:10:4b:
1b:53:62:90:65:14:73:ca:b1:0c:ef:dd:51:94:97:6a:36:02:
8a:dc:88:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJE2OZaOKvxii2UeXXAbRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMGVjZGJmNTEzNjBjZWNhZTYxN2FiZTFhM2FjNmE2ZmYw
YTViNmMwHhcNMjQwMTAxMDgyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDBkNzM2YjNiOGUwNWU4NzRkZjA4NjQzOTRhN2NjZDI3OGVmZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBe8BQ9gd9ZNFileTBDB0K/tlKzJ
Ds4MIMkMwYcLfOoQqahi9qjuQJ4vHnR75m0UlAAtd0IdsPOQzl4vvaaVOhX1uzXV
w+Tv6QerZSRCwL3gp/yVMo/lstJeJX2wTlMjWKwQ9PrUlB8lBYGAa99SbbwlIxvm
eWjuscchT3YJUGDbxyFZ+gYlHEXAI6vh8Fb3tRJa+yTqV5DcUOaFrAuJFHFbV/5U
e2/SRIge9y286i2R3s/6/qrLccJ/Q9LLxWSpPBQiqd5hTb74h+dlerybSYYOZCA1
QBRqxWihmg4yOlzCBBRkdEVeGAY/5MWN6sL+ua0L8UpXWUhX5pa5LTuvqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKANc2s7jgXodN8IZDlKfM0njv9QMB8GA1UdIwQY
MBaAFGsOzb9RNgzsrmF6vho6xqb/CltsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2Qt
MTFkZmZlMTA4MTQ3LzEvb0ExemF6dU9CZWgwM3doa09VcDh6U2VPXzFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2QtMTFkZmZlMTA4MTQ3
LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw79MMA0G
CSqGSIb3DQEBCwUAA4IBAQDOoGNhiOaJ21+7L0uEJ19h0mWg/x74su0oKr4mKf5s
3m/yi4IhwJ7h4SGRbW1dMswQ2ARji0+nx3d9D3s5RL8ZOGkBFyxcTU1lJF9de8Gw
tfpFS8EIeiz+lOxc1KCG+nXA4gXClM8BwsS7dQU0kpCewMEtnDkrlcTg9+qUHfEW
Vf/QYQJ+NhBVkIsvy9mPPJHtLoK8WiKGEYrXeNtXw+r0abbb0xyEqgXLMRnJxof5
48eSjVrWNTWEYJRTNfPfvcKJzkbNYwCT36G9+9+9yXypYVoxCF8YhMw3g85N+/Ll
+XEa5NeaVNwzEEsbU2KQZRRzyrEM791RlJdqNgKK3Igy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:37 2024 by rpki-client on console-fra.rpki-client.org