Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/rVTOk-evea64tQDIwY3Ww6q7nsU.roa
File: rVTOk-evea64tQDIwY3Ww6q7nsU.roa (raw, json)
Hash identifier: QzVFZOMicBrYiAC/NOijJyGOn3OahBn4rm1gaITV62E=
Subject key identifier: AD:54:CE:93:E7:AF:79:AE:B8:B5:00:C8:C1:8D:D6:C3:AA:BB:9E:C5
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 018BF06793ED8EBDA53885BA3546B29ACD83
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/rVTOk-evea64tQDIwY3Ww6q7nsU.roa
Signing time: Tue 21 Nov 2023 05:43:21 +0000
ROA not before: Tue 21 Nov 2023 05:43:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 152.89.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:67:93:ed:8e:bd:a5:38:85:ba:35:46:b2:9a:cd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Nov 21 05:43:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad54ce93e7af79aeb8b500c8c18dd6c3aabb9ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:de:8f:18:e4:f3:de:1c:0f:42:e7:36:98:8c:
cd:ae:0f:40:94:51:0a:a8:89:a5:4f:a5:df:10:49:
93:56:dc:61:41:dc:dd:28:5b:3e:6e:75:54:1e:f9:
41:9d:1f:e5:84:78:2a:25:da:c0:ae:3d:16:d4:b8:
89:12:ac:e8:06:71:cc:bf:56:cc:83:03:01:0e:d3:
a9:4c:11:d7:49:1c:87:f4:47:2c:19:0d:8f:28:ab:
8a:5e:a3:b5:47:cc:19:4a:86:7e:a0:f5:63:58:15:
c8:b6:cc:7d:37:24:8d:b0:6c:3c:c9:27:ba:14:5b:
43:45:b1:8b:02:25:69:be:d1:a7:d7:59:ab:f3:0b:
f9:32:34:e5:16:d9:37:ed:ca:be:75:53:3c:0c:b4:
d6:41:72:bf:83:e7:cc:7a:5e:9c:df:34:91:07:0e:
7e:be:96:f5:97:87:4d:98:de:6c:20:9b:41:c7:aa:
3f:7a:81:ba:d0:17:cf:93:f4:89:c8:e9:a2:7c:cc:
f1:fe:c9:43:c4:d4:a2:93:db:a9:39:fb:cd:ab:e3:
5e:b0:fa:63:1f:87:24:2c:f5:74:4b:5e:62:f1:b2:
36:d5:86:d2:34:75:ef:1a:b4:92:f7:e0:6d:f5:ea:
25:55:eb:ba:97:bb:e4:12:3f:1a:ef:f5:94:6e:e4:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:54:CE:93:E7:AF:79:AE:B8:B5:00:C8:C1:8D:D6:C3:AA:BB:9E:C5
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/rVTOk-evea64tQDIwY3Ww6q7nsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.194.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:de:06:6f:0e:6a:01:83:d5:6c:8e:7b:61:91:ea:15:a5:28:
5b:a2:7d:17:15:32:f4:f5:b4:cf:a1:53:79:34:5a:36:d9:65:
2d:a4:fc:63:0c:ed:c6:4a:a0:1c:45:6c:9c:8d:d3:94:f3:e8:
73:b0:e7:1a:5d:19:5d:c6:06:da:5a:d1:a5:bf:33:20:86:2f:
b3:8d:fc:7c:5a:98:a5:a0:7a:07:06:aa:d1:51:f3:c2:48:21:
67:d9:ca:0a:a9:48:f7:94:ff:a8:9e:9d:9e:67:4e:b1:dd:a8:
c1:53:fe:94:1b:b3:a3:d5:36:18:30:2e:7f:9f:da:e5:a3:3a:
50:dc:34:af:44:4f:1e:dd:50:9b:a3:ba:cc:1a:7f:01:6f:42:
41:d5:c9:98:74:5b:27:19:ac:43:48:12:86:6f:37:f6:3c:9d:
a0:2c:fc:fa:70:9b:fe:e2:57:43:c5:12:5e:a7:84:fc:36:9c:
85:f4:61:c1:31:31:7d:41:c7:b5:a8:5e:5f:af:a4:7e:9c:7f:
34:68:94:a7:95:0a:3e:c5:69:f5:6f:b7:71:c4:4a:aa:12:6e:
30:e7:c1:51:14:4e:79:94:a1:33:cf:d0:48:94:e4:6d:2a:3d:
df:31:ee:f5:a1:22:46:6e:49:8c:c1:e2:77:e2:b9:92:87:e7:
9d:cb:a9:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvwZ5Ptjr2lOIW6NUayms2DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy
NTdkYzQwHhcNMjMxMTIxMDU0MzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDU0Y2U5M2U3YWY3OWFlYjhiNTAwYzhjMThkZDZjM2FhYmI5ZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN6PGOTz3hwPQuc2mIzNrg9AlFEK
qImlT6XfEEmTVtxhQdzdKFs+bnVUHvlBnR/lhHgqJdrArj0W1LiJEqzoBnHMv1bM
gwMBDtOpTBHXSRyH9EcsGQ2PKKuKXqO1R8wZSoZ+oPVjWBXItsx9NySNsGw8ySe6
FFtDRbGLAiVpvtGn11mr8wv5MjTlFtk37cq+dVM8DLTWQXK/g+fMel6c3zSRBw5+
vpb1l4dNmN5sIJtBx6o/eoG60BfPk/SJyOmifMzx/slDxNSik9upOfvNq+NesPpj
H4ckLPV0S15i8bI21YbSNHXvGrSS9+Bt9eolVeu6l7vkEj8a7/WUbuTClQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK1UzpPnr3muuLUAyMGN1sOqu57FMB8GA1UdIwQY
MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt
OTk5MGUyZDllYWZlLzEvclZUT2stZXZlYTY0dFFESXdZM1d3NnE3bnNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl
LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFnCMA0G
CSqGSIb3DQEBCwUAA4IBAQBb3gZvDmoBg9VsjnthkeoVpShbon0XFTL09bTPoVN5
NFo22WUtpPxjDO3GSqAcRWycjdOU8+hzsOcaXRldxgbaWtGlvzMghi+zjfx8Wpil
oHoHBqrRUfPCSCFn2coKqUj3lP+onp2eZ06x3ajBU/6UG7Oj1TYYMC5/n9rlozpQ
3DSvRE8e3VCbo7rMGn8Bb0JB1cmYdFsnGaxDSBKGbzf2PJ2gLPz6cJv+4ldDxRJe
p4T8NpyF9GHBMTF9Qce1qF5fr6R+nH80aJSnlQo+xWn1b7dxxEqqEm4w58FRFE55
lKEzz9BIlORtKj3fMe71oSJGbkmMweJ34rmSh+edy6lg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:30 2024 by rpki-client on console-fra.rpki-client.org