Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/l3KaQmah_U8o8SznKfDvqQuyKM0.roa
File: l3KaQmah_U8o8SznKfDvqQuyKM0.roa (raw, json)
Hash identifier: 68SCT7+Fbx5FP1WXS+o/falIuGzK3cy8Ykm5sJzv5sY=
Subject key identifier: 97:72:9A:42:66:A1:FD:4F:28:F1:2C:E7:29:F0:EF:A9:0B:B2:28:CD
Certificate issuer: /CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Certificate serial: 018CC500168A0F9206007B67FFAC9462A5AB
Authority key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/l3KaQmah_U8o8SznKfDvqQuyKM0.roa
Signing time: Mon 01 Jan 2024 12:29:26 +0000
ROA not before: Mon 01 Jan 2024 12:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59729
IP address blocks: 194.55.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 12:05:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:16:8a:0f:92:06:00:7b:67:ff:ac:94:62:a5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Validity
Not Before: Jan 1 12:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97729a4266a1fd4f28f12ce729f0efa90bb228cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fe:f7:e0:13:c3:0f:cc:d4:0a:25:1b:6b:2e:
12:5a:d6:bb:bb:70:76:11:97:ad:ee:27:b8:ed:16:
f0:aa:21:31:6c:5c:80:82:d6:2b:6c:0a:ba:3e:42:
f3:8b:95:5a:63:8a:8c:d7:e6:3a:71:1b:d3:ca:2a:
78:98:cc:02:71:af:50:a5:52:f6:b3:00:cc:8e:98:
c8:12:24:62:91:aa:64:35:9d:b4:6e:29:00:e8:7b:
7f:ac:76:53:d8:1d:85:45:7d:61:34:00:b7:3c:4e:
ac:c7:c5:ee:d9:63:04:86:b6:5c:8e:a8:57:c1:95:
b0:6e:96:79:02:62:cc:8e:9d:63:ef:c2:7f:34:07:
22:b4:87:72:9d:03:87:30:99:f7:78:64:2d:cc:c8:
3c:cb:89:a2:49:82:91:46:37:49:bf:11:06:9e:ef:
1f:d5:c1:d2:3e:e1:5a:7f:ab:1b:ed:16:1d:45:a5:
08:2c:72:72:25:08:20:69:3a:ad:bc:34:97:0d:08:
84:c2:32:e5:fc:ba:b7:8e:3d:38:9b:a8:99:df:49:
b7:65:71:f4:f8:68:db:35:d6:1e:be:ae:3b:28:a9:
cd:ba:4e:98:3a:84:76:4f:c0:dd:e8:81:ce:e7:60:
ed:dd:20:f5:8f:fa:9b:9b:fb:31:bc:23:cb:5a:b5:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:72:9A:42:66:A1:FD:4F:28:F1:2C:E7:29:F0:EF:A9:0B:B2:28:CD
X509v3 Authority Key Identifier:
keyid:63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/l3KaQmah_U8o8SznKfDvqQuyKM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.170.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:2b:da:73:85:30:58:b5:f3:90:8a:f8:0c:89:3e:09:da:8f:
36:95:d2:a3:e9:cb:b9:73:41:b3:fe:bd:3c:bd:e6:97:7d:71:
39:3a:56:ce:d9:ff:43:11:87:2e:9c:ee:e8:fa:d0:5a:8e:2f:
cf:74:a5:fd:39:30:de:37:13:64:e4:20:b6:5a:cf:9b:f8:66:
30:d2:58:c8:d5:9e:0b:a7:c2:7b:76:fb:10:76:26:f9:61:65:
2b:dd:e7:6e:24:04:94:29:5b:a9:1a:d9:fb:6d:af:db:e8:87:
41:b8:b4:c7:ab:08:df:fe:db:ce:c5:84:8e:13:fa:84:2d:e4:
6a:9e:1c:51:65:2e:8f:40:10:01:28:52:d8:8c:6d:aa:1a:8e:
72:5b:3a:59:e9:95:e2:fc:12:62:37:de:25:35:b2:09:13:b8:
03:95:a6:a7:ad:60:d0:b8:66:4b:4a:80:e6:e9:9b:a5:3c:1a:
0b:f4:85:4f:e6:81:f1:f2:3c:73:d9:7a:b7:79:a4:55:3e:c2:
73:6b:58:f0:df:32:b5:38:3e:c5:2d:09:a0:4a:53:83:ad:56:
dd:e6:51:81:63:ba:90:23:f7:cb:96:4e:74:83:1c:c3:88:03:
ea:41:ab:bf:0f:c7:2a:e9:49:e3:69:fd:b6:28:89:e5:fc:a6:
a9:c4:a8:0f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFABaKD5IGAHtn/6yUYqWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMmNkODdmZWFiZTQwNzUyMmUwNjU1M2YyZWIwNWEwYzE2
MDJmYmYwHhcNMjQwMTAxMTIyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzcyOWE0MjY2YTFmZDRmMjhmMTJjZTcyOWYwZWZhOTBiYjIyOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/734BPDD8zUCiUbay4SWta7u3B2
EZet7ie47RbwqiExbFyAgtYrbAq6PkLzi5VaY4qM1+Y6cRvTyip4mMwCca9QpVL2
swDMjpjIEiRikapkNZ20bikA6Ht/rHZT2B2FRX1hNAC3PE6sx8Xu2WMEhrZcjqhX
wZWwbpZ5AmLMjp1j78J/NAcitIdynQOHMJn3eGQtzMg8y4miSYKRRjdJvxEGnu8f
1cHSPuFaf6sb7RYdRaUILHJyJQggaTqtvDSXDQiEwjLl/Lq3jj04m6iZ30m3ZXH0
+GjbNdYevq47KKnNuk6YOoR2T8Dd6IHO52Dt3SD1j/qbm/sxvCPLWrXujQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJdymkJmof1PKPEs5ynw76kLsijNMB8GA1UdIwQY
MBaAFGMs2H/qvkB1IuBlU/LrBaDBYC+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYt
NTUxMDQxNzNiMTgwLzEvbDNLYVFtYWhfVThvOFN6bktmRHZxUXV5S00wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mZGRmNDctZmY2NC00NDdhLWI5OGYtNTUxMDQxNzNiMTgw
LzEvWXl6WWYtcS1RSFVpNEdWVDh1c0ZvTUZnTDc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjeqMA0G
CSqGSIb3DQEBCwUAA4IBAQCOK9pzhTBYtfOQivgMiT4J2o82ldKj6cu5c0Gz/r08
veaXfXE5OlbO2f9DEYcunO7o+tBaji/PdKX9OTDeNxNk5CC2Ws+b+GYw0ljI1Z4L
p8J7dvsQdib5YWUr3eduJASUKVupGtn7ba/b6IdBuLTHqwjf/tvOxYSOE/qELeRq
nhxRZS6PQBABKFLYjG2qGo5yWzpZ6ZXi/BJiN94lNbIJE7gDlaanrWDQuGZLSoDm
6ZulPBoL9IVP5oHx8jxz2Xq3eaRVPsJza1jw3zK1OD7FLQmgSlODrVbd5lGBY7qQ
I/fLlk50gxzDiAPqQau/D8cq6Unjaf22KInl/KapxKgP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:45 2024 by rpki-client on console-fra.rpki-client.org