Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/I6ZyJS-cnC2J5IpeYSF5aVP3LZ0.roa
File: I6ZyJS-cnC2J5IpeYSF5aVP3LZ0.roa (raw, json)
Hash identifier: Wgvj/nCtcy4IeUTvtBXgQir1yox+Z0hGWRwp+7Iibmc=
Subject key identifier: 23:A6:72:25:2F:9C:9C:2D:89:E4:8A:5E:61:21:79:69:53:F7:2D:9D
Certificate issuer: /CN=26f55db66c509a9c0a6dfeb023770d5b2ac860b9
Certificate serial: 018FEC89D7AEF1074A9266253321A85BFF03
Authority key identifier: 26:F5:5D:B6:6C:50:9A:9C:0A:6D:FE:B0:23:77:0D:5B:2A:C8:60:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvVdtmxQmpwKbf6wI3cNWyrIYLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/I6ZyJS-cnC2J5IpeYSF5aVP3LZ0.roa
Signing time: Thu 06 Jun 2024 07:53:27 +0000
ROA not before: Thu 06 Jun 2024 07:53:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 146.19.213.0/24 maxlen: 24
193.84.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jun 2024 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ec:89:d7:ae:f1:07:4a:92:66:25:33:21:a8:5b:ff:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f55db66c509a9c0a6dfeb023770d5b2ac860b9
Validity
Not Before: Jun 6 07:53:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23a672252f9c9c2d89e48a5e6121796953f72d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:34:32:2f:01:69:4c:27:a7:75:5c:37:73:
db:74:70:12:48:85:df:d2:8d:5b:99:3f:a5:3d:9d:
c8:d0:95:ec:a7:0a:23:13:97:ce:f1:77:17:e3:50:
95:76:b6:0e:34:c0:19:c7:c7:16:f9:a8:b8:07:c2:
cb:09:8e:3e:dd:80:e5:57:bf:de:03:26:d8:12:10:
78:e3:69:73:10:fa:a7:e1:6e:08:76:a9:9c:bf:e0:
59:5a:67:9c:f9:33:7c:d7:73:22:fd:34:dc:6a:b2:
e2:8d:d7:e8:95:98:4d:7a:39:cb:fc:94:8b:36:a5:
a6:1d:00:66:ae:b5:1b:02:e4:63:4c:5a:fe:89:f0:
10:42:59:1a:ff:59:60:44:33:ba:8a:22:2a:7a:83:
09:46:70:98:06:38:14:8f:54:2d:50:fa:dc:ad:2c:
dc:1d:32:50:89:d7:0e:42:9c:e3:fa:ff:9c:76:cb:
fa:ec:e8:5a:7b:35:91:1b:cc:5b:06:b8:5b:ef:ac:
f6:0f:af:25:a2:37:9a:1f:14:d8:2d:b4:a5:7d:44:
18:96:1c:14:d9:64:61:5c:08:90:4f:e4:80:1c:a8:
93:6d:1b:a4:d1:5d:de:d2:22:ce:56:4d:e8:6b:ca:
16:00:85:24:8a:dc:e8:59:82:f8:29:d9:6b:ad:dc:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A6:72:25:2F:9C:9C:2D:89:E4:8A:5E:61:21:79:69:53:F7:2D:9D
X509v3 Authority Key Identifier:
keyid:26:F5:5D:B6:6C:50:9A:9C:0A:6D:FE:B0:23:77:0D:5B:2A:C8:60:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvVdtmxQmpwKbf6wI3cNWyrIYLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/I6ZyJS-cnC2J5IpeYSF5aVP3LZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/JvVdtmxQmpwKbf6wI3cNWyrIYLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.213.0/24
193.84.71.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:86:d9:1e:4c:52:3a:c4:35:1c:10:0a:0e:da:a6:e6:c8:bd:
b3:2b:0c:47:e2:40:73:86:a3:57:3d:4d:84:40:38:79:57:25:
b4:91:23:0a:db:55:30:1a:52:47:8f:85:c0:af:42:da:08:54:
95:1b:51:50:7e:a8:04:bd:5d:1a:1f:9f:7b:9f:37:51:17:75:
fe:17:4e:2c:68:16:7f:2a:0f:f1:15:b6:60:43:4e:00:87:a1:
d1:d6:70:e8:cd:1e:3a:0c:e0:e3:ec:79:01:d7:02:23:8e:4e:
2e:21:da:be:15:e6:75:2f:e1:7d:6b:19:52:96:dd:cd:1c:4f:
51:4e:0d:88:a7:4f:09:92:d5:13:b4:4e:a4:13:45:b2:d7:a2:
1b:e9:02:f1:cf:7b:7f:ad:11:05:c2:45:02:24:cf:14:4a:a9:
94:12:9c:67:cf:06:00:33:71:14:0f:27:c3:fe:00:a3:ad:c4:
e6:1b:d2:7c:97:6b:15:f4:6f:d2:71:9b:97:1c:69:1f:88:01:
31:fe:88:4e:5a:71:7b:ff:eb:b9:7e:f3:f9:22:ca:5b:cc:1c:
5f:8f:3b:60:2a:41:77:55:05:47:c3:a7:5d:bd:ad:92:c6:25:
27:91:8b:ab:d1:f9:5c:d6:05:d0:a4:f8:5a:2b:e0:a8:73:dc:
56:cf:9a:cb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY/sideu8QdKkmYlMyGoW/8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZjU1ZGI2NmM1MDlhOWMwYTZkZmViMDIzNzcwZDViMmFj
ODYwYjkwHhcNMjQwNjA2MDc1MzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2E2NzIyNTJmOWM5YzJkODllNDhhNWU2MTIxNzk2OTUzZjcyZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37Y0Mi8BaUwnp3VcN3PbdHASSIXf
0o1bmT+lPZ3I0JXspwojE5fO8XcX41CVdrYONMAZx8cW+ai4B8LLCY4+3YDlV7/e
AybYEhB442lzEPqn4W4Idqmcv+BZWmec+TN813Mi/TTcarLijdfolZhNejnL/JSL
NqWmHQBmrrUbAuRjTFr+ifAQQlka/1lgRDO6iiIqeoMJRnCYBjgUj1QtUPrcrSzc
HTJQidcOQpzj+v+cdsv67OhaezWRG8xbBrhb76z2D68lojeaHxTYLbSlfUQYlhwU
2WRhXAiQT+SAHKiTbRuk0V3e0iLOVk3oa8oWAIUkitzoWYL4KdlrrdzrRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCOmciUvnJwtieSKXmEheWlT9y2dMB8GA1UdIwQY
MBaAFCb1XbZsUJqcCm3+sCN3DVsqyGC5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZWZHRteFFtcHdLYmY2d0kzY05XeXJJWUxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wZGYxYzItOWFkMy00MWNhLWExMmUt
OWY3OTE0M2U5YzYwLzEvSTZaeUpTLWNuQzJKNUlwZVlTRjVhVlAzTFowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wZGYxYzItOWFkMy00MWNhLWExMmUtOWY3OTE0M2U5YzYw
LzEvSnZWZHRteFFtcHdLYmY2d0kzY05XeXJJWUxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkhPVAwQA
wVRHMA0GCSqGSIb3DQEBCwUAA4IBAQCLhtkeTFI6xDUcEAoO2qbmyL2zKwxH4kBz
hqNXPU2EQDh5VyW0kSMK21UwGlJHj4XAr0LaCFSVG1FQfqgEvV0aH597nzdRF3X+
F04saBZ/Kg/xFbZgQ04Ah6HR1nDozR46DODj7HkB1wIjjk4uIdq+FeZ1L+F9axlS
lt3NHE9RTg2Ip08JktUTtE6kE0Wy16Ib6QLxz3t/rREFwkUCJM8USqmUEpxnzwYA
M3EUDyfD/gCjrcTmG9J8l2sV9G/ScZuXHGkfiAEx/ohOWnF7/+u5fvP5IspbzBxf
jztgKkF3VQVHw6ddva2SxiUnkYur0flc1gXQpPhaK+Coc9xWz5rL
Generated at Sun Jun 9 18:21:36 2024 by rpki-client on console-fra.rpki-client.org