Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vT1G6d2-Z3lUNkJUv5v-_xD9XJA.roa
File: vT1G6d2-Z3lUNkJUv5v-_xD9XJA.roa (raw, json)
Hash identifier: SkH0Jxi8lNMjDKAW6hq6F8Gg7LfcV2vPnwAWnrRHUZo=
Subject key identifier: BD:3D:46:E9:DD:BE:67:79:54:36:42:54:BF:9B:FE:FF:10:FD:5C:90
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01892A66DA2005C34BD742B84A1F4C7845AB
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vT1G6d2-Z3lUNkJUv5v-_xD9XJA.roa
Signing time: Thu 06 Jul 2023 08:52:10 +0000
ROA not before: Thu 06 Jul 2023 08:52:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 194.165.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Nov 2023 18:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:66:da:20:05:c3:4b:d7:42:b8:4a:1f:4c:78:45:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 6 08:52:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd3d46e9ddbe677954364254bf9bfeff10fd5c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:00:e6:04:6f:5b:f5:f4:6f:73:68:c1:69:01:
71:e1:5a:ca:13:12:2f:5e:aa:41:fd:b9:81:c3:db:
a7:92:1d:29:43:8f:55:e9:13:1a:0f:34:30:59:f3:
ab:eb:bf:a3:05:c3:ae:e9:e6:37:37:25:f1:43:fc:
9b:33:cb:a9:0f:27:65:45:23:cd:7d:b1:c9:9f:6d:
99:5a:f4:e7:25:a1:2c:36:2e:f9:26:94:b4:29:00:
4b:dc:72:13:89:81:fc:f2:8f:9c:f1:17:4c:92:ce:
ce:b6:77:25:25:70:23:9b:3d:1c:29:d5:53:99:0b:
db:b4:3a:30:40:cc:bb:d1:aa:62:41:d6:28:08:95:
d9:4f:d3:46:ab:c6:a6:8e:50:53:40:bf:f2:65:5f:
fd:7b:ac:15:9f:12:55:d9:6d:dc:cf:9e:32:3e:c5:
48:31:ee:55:89:7f:2c:28:16:27:79:ad:6f:24:e8:
e4:99:91:c1:f1:bc:46:69:1f:90:66:2a:7c:dc:cc:
03:ff:d6:54:8e:ff:bd:56:02:21:65:cc:4c:bd:fb:
25:6c:bf:34:14:86:02:4d:81:a3:60:9b:d5:00:bf:
7d:dd:ff:44:b5:16:1c:dd:f0:4c:fc:02:cc:32:83:
9f:57:20:07:32:f3:c1:d3:3f:d9:2a:37:e4:27:e5:
1f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3D:46:E9:DD:BE:67:79:54:36:42:54:BF:9B:FE:FF:10:FD:5C:90
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/vT1G6d2-Z3lUNkJUv5v-_xD9XJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.3.0/24
Signature Algorithm: sha256WithRSAEncryption
26:cf:2a:79:5b:d0:09:01:fe:fb:f3:e3:fd:a2:9d:ed:7c:d3:
06:97:e5:46:e9:95:a2:30:79:70:8f:02:d9:92:d9:e9:a1:5b:
cc:3c:77:cc:36:cf:6e:53:51:34:c9:3c:02:80:25:a0:39:1a:
d6:17:41:20:f4:95:7a:7f:e5:8c:41:0a:a6:cc:84:68:55:2a:
2c:01:ee:52:e3:ff:59:86:96:b7:ac:17:5f:8a:ae:64:4a:29:
f8:11:ec:81:bc:1e:e0:84:66:73:9d:97:8c:90:f6:f7:c7:59:
1a:4b:1e:17:da:4c:d8:94:29:cc:1e:34:d9:38:8b:95:b5:eb:
2e:83:ff:fb:8f:e7:7d:da:b9:95:82:92:f1:21:cc:87:37:25:
53:a1:93:0b:a7:e1:44:4d:30:92:cb:8d:76:98:8d:b3:a5:58:
90:a8:62:05:74:a0:ce:09:73:ee:9a:59:ee:60:0e:89:da:eb:
40:8b:2c:1a:09:f1:05:78:99:4b:1e:04:ee:e8:2f:1d:98:d2:
48:f6:1a:c0:43:fc:3c:5f:1e:92:6f:f4:e6:ff:79:81:3f:ad:
e1:a2:48:9a:22:0a:c7:b0:b9:a9:47:f8:e2:af:e3:9b:90:4e:
b6:89:85:fd:f5:f4:34:cc:3f:52:5f:5b:78:25:f0:77:d9:a5:
f1:a4:50:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkqZtogBcNL10K4Sh9MeEWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjMwNzA2MDg1MjEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDNkNDZlOWRkYmU2Nzc5NTQzNjQyNTRiZjliZmVmZjEwZmQ1YzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggDmBG9b9fRvc2jBaQFx4VrKExIv
XqpB/bmBw9unkh0pQ49V6RMaDzQwWfOr67+jBcOu6eY3NyXxQ/ybM8upDydlRSPN
fbHJn22ZWvTnJaEsNi75JpS0KQBL3HITiYH88o+c8RdMks7OtnclJXAjmz0cKdVT
mQvbtDowQMy70apiQdYoCJXZT9NGq8amjlBTQL/yZV/9e6wVnxJV2W3cz54yPsVI
Me5ViX8sKBYnea1vJOjkmZHB8bxGaR+QZip83MwD/9ZUjv+9VgIhZcxMvfslbL80
FIYCTYGjYJvVAL993f9EtRYc3fBM/ALMMoOfVyAHMvPB0z/ZKjfkJ+UfawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL09Rundvmd5VDZCVL+b/v8Q/VyQMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvdlQxRzZkMi1aM2xVTmtKVXY1di1feEQ5WEpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqUDMA0G
CSqGSIb3DQEBCwUAA4IBAQAmzyp5W9AJAf778+P9op3tfNMGl+VG6ZWiMHlwjwLZ
ktnpoVvMPHfMNs9uU1E0yTwCgCWgORrWF0Eg9JV6f+WMQQqmzIRoVSosAe5S4/9Z
hpa3rBdfiq5kSin4EeyBvB7ghGZznZeMkPb3x1kaSx4X2kzYlCnMHjTZOIuVtesu
g//7j+d92rmVgpLxIcyHNyVToZMLp+FETTCSy412mI2zpViQqGIFdKDOCXPumlnu
YA6J2utAiywaCfEFeJlLHgTu6C8dmNJI9hrAQ/w8Xx6Sb/Tm/3mBP63hokiaIgrH
sLmpR/jir+ObkE62iYX99fQ0zD9SX1t4JfB32aXxpFDn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org