Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/B2cncomVJFsWxHh14TfYBibfUk8.roa
File: B2cncomVJFsWxHh14TfYBibfUk8.roa (raw, json)
Hash identifier: emJ68Y8EXzdlYjSQX6mwgwdfVi23/rSI1M01U7/b8Z8=
Subject key identifier: 07:67:27:72:89:95:24:5B:16:C4:78:75:E1:37:D8:06:26:DF:52:4F
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 018C7743E0EA712999D0607A3D021A01F806
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/B2cncomVJFsWxHh14TfYBibfUk8.roa
Signing time: Sun 17 Dec 2023 10:13:06 +0000
ROA not before: Sun 17 Dec 2023 10:13:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 194.127.111.0/24 maxlen: 24
194.127.108.0/24 maxlen: 24
194.127.109.0/24 maxlen: 24
194.127.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Dec 2023 17:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:77:43:e0:ea:71:29:99:d0:60:7a:3d:02:1a:01:f8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Dec 17 10:13:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=076727728995245b16c47875e137d80626df524f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:49:fd:b0:bb:fc:85:c9:2c:78:02:b0:bd:
97:d1:73:9e:f1:71:1e:78:e0:32:54:6f:e9:d2:1e:
f1:dd:32:49:be:2a:7e:5b:b2:74:05:e7:33:f5:a2:
33:ea:2f:c6:27:6d:b5:b1:70:a0:42:4b:9c:65:0b:
21:e3:b2:f7:d2:08:a0:f4:5a:49:45:c0:15:a1:12:
5e:57:7a:8c:e3:0b:a0:4b:68:be:c2:6a:72:dc:da:
65:16:dd:ad:8f:44:c8:54:d1:48:3c:43:98:b0:db:
d4:f4:86:95:f2:ec:e7:24:28:2a:77:59:97:f0:d2:
4d:3f:fa:33:b7:35:d1:b3:8e:99:66:0d:90:3d:fe:
7f:a1:1a:67:43:6b:ca:d2:31:18:3d:7b:31:f2:0a:
df:5c:73:97:28:4f:2c:71:2b:cf:60:7f:69:8a:99:
90:af:dc:2e:5c:6f:49:c9:7f:9a:5e:cd:3d:e7:b8:
1a:28:aa:9c:16:49:28:8d:e0:b5:bb:88:2c:17:69:
43:65:7c:00:b7:70:32:b1:b0:21:50:cf:3a:27:49:
98:08:ba:b6:12:82:c2:42:1a:f6:69:31:32:77:6c:
7d:a9:cd:22:14:01:89:b5:4a:f2:37:a2:9b:4c:73:
0e:48:fc:07:51:2b:46:b1:09:ae:86:7c:00:47:b9:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:67:27:72:89:95:24:5B:16:C4:78:75:E1:37:D8:06:26:DF:52:4F
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/B2cncomVJFsWxHh14TfYBibfUk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.108.0/22
Signature Algorithm: sha256WithRSAEncryption
19:90:c1:7f:82:c5:3b:ae:f2:d2:58:c9:2d:f3:ab:6f:2b:da:
d7:02:bb:0c:4c:d6:ca:29:e7:3e:8a:3f:51:82:e3:52:11:d4:
ff:65:d2:17:64:15:0a:d1:d0:b2:48:87:20:6b:b6:5c:6c:8c:
9d:50:f6:ed:3b:81:82:81:49:3e:5e:73:4a:7a:b4:d9:5d:db:
b6:f1:d3:96:ff:c0:9d:99:7f:1d:e3:ce:d5:6d:97:4e:0f:ec:
a6:ac:9f:87:4f:a8:31:5d:0e:e8:c8:ae:b2:a4:d0:6b:eb:4a:
f8:95:7c:d7:d5:e6:54:d0:f2:80:6c:ff:7f:e6:c4:d5:7b:fa:
17:37:e3:e3:08:d4:9a:93:85:3f:43:44:e7:48:f5:2b:a8:70:
ea:75:5f:04:89:9f:c6:7c:a1:6f:03:48:45:e8:39:7b:c8:19:
03:2d:4d:90:e6:71:3f:8e:84:00:af:c1:32:63:31:12:62:99:
bc:11:53:14:45:1d:3b:60:e3:5e:8e:55:6a:11:5c:98:93:1f:
15:2c:3e:fe:95:35:87:e0:e6:17:1a:5d:a6:78:fb:88:b0:4b:
60:d2:dc:31:d3:67:74:33:e5:fd:98:c7:70:ca:a9:9c:f0:ab:
31:b4:04:0f:6e:ed:81:9b:84:55:d6:25:1c:a0:d4:90:a6:66:
68:0a:67:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYx3Q+DqcSmZ0GB6PQIaAfgGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0
ZDkwNTYwHhcNMjMxMjE3MTAxMzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzY3Mjc3Mjg5OTUyNDViMTZjNDc4NzVlMTM3ZDgwNjI2ZGY1MjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IlJ/bC7/IXJLHgCsL2X0XOe8XEe
eOAyVG/p0h7x3TJJvip+W7J0Becz9aIz6i/GJ221sXCgQkucZQsh47L30gig9FpJ
RcAVoRJeV3qM4wugS2i+wmpy3NplFt2tj0TIVNFIPEOYsNvU9IaV8uznJCgqd1mX
8NJNP/oztzXRs46ZZg2QPf5/oRpnQ2vK0jEYPXsx8grfXHOXKE8scSvPYH9pipmQ
r9wuXG9JyX+aXs0957gaKKqcFkkojeC1u4gsF2lDZXwAt3AysbAhUM86J0mYCLq2
EoLCQhr2aTEyd2x9qc0iFAGJtUryN6KbTHMOSPwHUStGsQmuhnwAR7nmTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAdnJ3KJlSRbFsR4deE32AYm31JPMB8GA1UdIwQY
MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt
NmNjMWQzZWE4MzJlLzEvQjJjbmNvbVZKRnNXeEhoMTRUZllCaWJmVWs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl
LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwn9sMA0G
CSqGSIb3DQEBCwUAA4IBAQAZkMF/gsU7rvLSWMkt86tvK9rXArsMTNbKKec+ij9R
guNSEdT/ZdIXZBUK0dCySIcga7ZcbIydUPbtO4GCgUk+XnNKerTZXdu28dOW/8Cd
mX8d487VbZdOD+ymrJ+HT6gxXQ7oyK6ypNBr60r4lXzX1eZU0PKAbP9/5sTVe/oX
N+PjCNSak4U/Q0TnSPUrqHDqdV8EiZ/GfKFvA0hF6Dl7yBkDLU2Q5nE/joQAr8Ey
YzESYpm8EVMURR07YONejlVqEVyYkx8VLD7+lTWH4OYXGl2mePuIsEtg0twx02d0
M+X9mMdwyqmc8KsxtAQPbu2Bm4RV1iUcoNSQpmZoCmeS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:30 2024 by rpki-client on console-fra.rpki-client.org