Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/G6jipYT97-t1wJk5MeIE-Ztv9H0.roa
File: G6jipYT97-t1wJk5MeIE-Ztv9H0.roa (raw, json)
Hash identifier: N0LOWevz58GLB3lVFutcowLWBhggxzszj6063daf4W8=
Subject key identifier: 1B:A8:E2:A5:84:FD:EF:EB:75:C0:99:39:31:E2:04:F9:9B:6F:F4:7D
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 01928516BA457A874F0A413398BBF9F48327
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/G6jipYT97-t1wJk5MeIE-Ztv9H0.roa
Signing time: Sun 13 Oct 2024 08:55:11 +0000
ROA not before: Sun 13 Oct 2024 08:55:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212249
IP address blocks: 195.8.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 07:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:85:16:ba:45:7a:87:4f:0a:41:33:98:bb:f9:f4:83:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Oct 13 08:55:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ba8e2a584fdefeb75c0993931e204f99b6ff47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:a1:c1:81:ea:40:04:19:93:ad:07:d2:52:
ee:b3:33:ff:f3:d5:08:64:a6:a8:3a:e9:39:81:72:
43:83:7e:64:3b:b0:0f:15:22:c7:f9:a2:06:c7:50:
8f:95:04:51:8e:38:c7:a2:26:46:01:f5:83:a3:3e:
fe:49:a9:cb:99:13:39:15:3b:ec:ac:97:41:1c:58:
69:ac:c1:a7:aa:80:c0:30:c4:3f:8e:a7:1f:ea:ff:
c2:fd:bc:9e:05:3f:7f:4f:08:b0:ee:10:10:c1:bc:
2c:0d:25:32:87:18:c4:76:34:f4:b8:27:92:72:b2:
f6:11:1f:f9:f6:51:34:cf:39:f5:89:c0:20:3b:9b:
e6:ec:94:cd:b1:ae:f3:c7:4b:da:b7:1c:57:e5:c0:
b5:f3:aa:51:5f:91:dc:32:47:8f:58:06:9e:ea:aa:
40:9d:2b:7b:f0:d9:30:30:dd:46:a6:ad:b6:11:b9:
7f:02:ac:43:eb:11:24:44:f5:1c:e3:8c:8d:f7:9e:
6c:96:2b:03:b8:64:6e:ad:5a:6b:9d:fc:25:7f:5f:
85:81:78:0a:6a:83:88:cf:d6:e8:ad:cc:bf:20:29:
e0:11:67:e5:f8:7d:d9:bc:89:21:db:7e:4d:c1:b7:
02:30:71:1f:9e:25:c3:24:4b:12:1a:9c:69:72:ef:
78:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A8:E2:A5:84:FD:EF:EB:75:C0:99:39:31:E2:04:F9:9B:6F:F4:7D
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/G6jipYT97-t1wJk5MeIE-Ztv9H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:4e:df:98:f8:a5:8e:b6:d3:47:c5:d0:3f:91:38:58:3f:67:
55:24:34:4b:15:db:35:15:57:56:80:71:49:eb:d6:ad:e7:d5:
d0:37:78:52:5d:8b:5c:90:69:ba:ab:f6:a0:69:a0:60:3d:02:
b0:b6:4d:0b:76:e7:76:1c:d7:7e:d7:c3:db:17:34:a5:9e:cc:
af:df:45:ac:fe:30:26:16:00:18:de:7b:f0:f0:37:d1:46:7b:
45:ee:20:e2:6c:21:52:bc:dc:73:c0:72:dc:71:8c:28:69:29:
37:f2:8d:5e:46:e4:94:29:dc:e5:70:60:25:0c:60:0a:9b:da:
ec:f9:18:f8:51:f1:f4:a9:66:43:1e:a0:56:dd:bb:8f:2a:58:
cc:17:30:7f:d0:eb:0b:71:00:8e:c7:10:c9:7d:39:1c:07:3d:
ee:67:4a:e1:e9:f7:d7:1d:12:00:c5:c3:c5:ec:53:7f:e1:9b:
e0:2a:1e:86:0d:1a:62:e5:af:f2:b8:c5:37:ec:2b:17:2d:dc:
31:20:91:80:8d:03:f9:c0:fa:3c:a9:c3:7d:a3:a9:93:5c:2f:
ab:49:55:4c:88:46:8d:c8:17:08:27:40:76:ee:d9:58:1a:c7:
17:1f:e1:6c:d5:81:f4:f3:d0:94:bd:50:d0:e5:b7:0b:79:06:
7b:d6:7e:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKFFrpFeodPCkEzmLv59IMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjQxMDEzMDg1NTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmE4ZTJhNTg0ZmRlZmViNzVjMDk5MzkzMWUyMDRmOTliNmZmNDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvuhwYHqQAQZk60H0lLuszP/89UI
ZKaoOuk5gXJDg35kO7APFSLH+aIGx1CPlQRRjjjHoiZGAfWDoz7+SanLmRM5FTvs
rJdBHFhprMGnqoDAMMQ/jqcf6v/C/byeBT9/Twiw7hAQwbwsDSUyhxjEdjT0uCeS
crL2ER/59lE0zzn1icAgO5vm7JTNsa7zx0vatxxX5cC186pRX5HcMkePWAae6qpA
nSt78NkwMN1Gpq22Ebl/AqxD6xEkRPUc44yN955slisDuGRurVprnfwlf1+FgXgK
aoOIz9borcy/ICngEWfl+H3ZvIkh235NwbcCMHEfniXDJEsSGpxpcu94hQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBuo4qWE/e/rdcCZOTHiBPmbb/R9MB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvRzZqaXBZVDk3LXQxd0prNU1lSUUtWnR2OUgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwjIMA0G
CSqGSIb3DQEBCwUAA4IBAQC5Tt+Y+KWOttNHxdA/kThYP2dVJDRLFds1FVdWgHFJ
69at59XQN3hSXYtckGm6q/agaaBgPQKwtk0Ldud2HNd+18PbFzSlnsyv30Ws/jAm
FgAY3nvw8DfRRntF7iDibCFSvNxzwHLccYwoaSk38o1eRuSUKdzlcGAlDGAKm9rs
+Rj4UfH0qWZDHqBW3buPKljMFzB/0OsLcQCOxxDJfTkcBz3uZ0rh6ffXHRIAxcPF
7FN/4ZvgKh6GDRpi5a/yuMU37CsXLdwxIJGAjQP5wPo8qcN9o6mTXC+rSVVMiEaN
yBcIJ0B27tlYGscXH+Fs1YH089CUvVDQ5bcLeQZ71n5+
-----END CERTIFICATE-----
Generated at Mon Nov 18 08:29:21 2024 by rpki-client on console-fra.rpki-client.org