Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/IPoGRSZNIWEi8mZJYQkTqTMCLxU.roa
File: IPoGRSZNIWEi8mZJYQkTqTMCLxU.roa (raw, json)
Hash identifier: jXdJfgOwDy7xCo97EW3KNhWF5SNVZB3r+Mm+gDY5+Zk=
Subject key identifier: 20:FA:06:45:26:4D:21:61:22:F2:66:49:61:09:13:A9:33:02:2F:15
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01886C383D443E7F0311212F744EF118F906
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/IPoGRSZNIWEi8mZJYQkTqTMCLxU.roa
Signing time: Tue 30 May 2023 10:33:24 +0000
ROA not before: Tue 30 May 2023 10:33:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.143.211.0/24 maxlen: 24
194.143.210.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Jun 2023 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:38:3d:44:3e:7f:03:11:21:2f:74:4e:f1:18:f9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: May 30 10:33:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20fa0645264d216122f26649610913a933022f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ad:a7:ab:02:25:8e:a5:30:71:25:06:e3:ee:
ac:9f:08:5e:3a:ce:c3:d2:47:4d:52:62:0c:f1:ee:
1a:41:f3:9d:13:6d:88:8a:e0:72:af:26:ef:fe:b1:
bc:f6:36:15:be:cd:aa:14:5e:46:90:28:8b:c1:90:
61:92:16:12:9c:fa:72:ea:b7:06:d2:95:58:e6:a8:
61:98:6d:fd:e9:7b:6d:65:68:ac:30:e4:1e:ef:0b:
dd:20:e0:cf:1f:76:e9:08:35:a3:05:39:4e:59:75:
b1:27:b0:74:77:c0:67:3a:83:83:10:72:e2:b4:8b:
e4:60:52:8c:6b:13:74:26:96:6b:ab:a6:57:41:74:
9e:39:2d:1c:be:8a:48:87:e0:84:79:2e:a0:0d:ff:
4f:58:f3:2c:cc:40:a2:b0:89:91:e5:43:86:2e:2b:
1c:ec:a8:d5:82:0e:80:db:23:bd:29:77:82:62:62:
09:84:9b:1e:0b:56:69:df:90:f0:79:94:1c:c9:e2:
a0:67:39:dd:4b:f4:cf:8b:60:a4:99:c3:f3:97:e6:
fe:fd:85:29:d2:0c:46:a2:ae:41:87:7b:4b:ee:a4:
2e:61:1a:49:67:7d:13:46:c0:b8:8f:27:45:fa:db:
25:1b:62:44:13:40:94:fc:7a:d1:87:7b:4e:9b:30:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FA:06:45:26:4D:21:61:22:F2:66:49:61:09:13:A9:33:02:2F:15
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/IPoGRSZNIWEi8mZJYQkTqTMCLxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.210.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:47:2a:80:5a:2e:e5:a2:04:f4:b0:a6:02:4e:b7:e6:0c:90:
cc:c4:51:48:51:14:d3:d9:93:bf:e9:8a:20:50:1f:fa:8b:be:
06:69:55:80:fb:c0:b3:40:fe:3e:e9:6e:d7:b9:61:a3:ff:9b:
0d:bf:47:02:73:86:23:ca:19:90:65:b1:82:4e:b4:9a:df:09:
ad:d7:9d:a1:d9:ff:45:9f:f5:31:e4:09:72:20:5a:04:c3:c1:
18:bf:a4:73:2f:f2:e3:a1:d3:6e:0a:18:20:76:89:81:57:61:
6f:df:80:58:20:cc:99:f6:4c:f5:44:cb:cf:c0:22:2a:98:4b:
9a:93:59:36:8c:d3:60:0c:64:1b:64:c3:26:44:33:9e:d5:d6:
fd:cd:94:76:d1:f4:6a:bc:a9:b8:93:00:59:50:d4:e2:d1:96:
6b:1e:24:95:25:ce:16:5f:d2:e6:40:e1:9e:3a:11:ed:13:dd:
70:40:a2:ff:ba:ef:a4:ab:57:90:07:25:8f:da:8a:10:d7:36:
24:de:10:c9:1b:89:33:c6:f0:f1:99:e7:13:dc:93:96:0b:61:
d9:15:40:ec:aa:c5:ae:b5:dc:77:73:fb:dc:ad:42:40:d0:d3:
c7:3f:09:dc:6b:41:27:0f:13:08:81:c3:39:2f:46:a9:94:c1:
27:fa:63:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhsOD1EPn8DESEvdE7xGPkGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjMwNTMwMTAzMzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGZhMDY0NTI2NGQyMTYxMjJmMjY2NDk2MTA5MTNhOTMzMDIyZjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl62nqwIljqUwcSUG4+6snwheOs7D
0kdNUmIM8e4aQfOdE22IiuByrybv/rG89jYVvs2qFF5GkCiLwZBhkhYSnPpy6rcG
0pVY5qhhmG396XttZWisMOQe7wvdIODPH3bpCDWjBTlOWXWxJ7B0d8BnOoODEHLi
tIvkYFKMaxN0JpZrq6ZXQXSeOS0cvopIh+CEeS6gDf9PWPMszECisImR5UOGLisc
7KjVgg6A2yO9KXeCYmIJhJseC1Zp35DweZQcyeKgZzndS/TPi2CkmcPzl+b+/YUp
0gxGoq5Bh3tL7qQuYRpJZ30TRsC4jydF+tslG2JEE0CU/HrRh3tOmzCv0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCD6BkUmTSFhIvJmSWEJE6kzAi8VMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvSVBvR1JTWk5JV0VpOG1aSllRa1RxVE1DTHhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwo/SMA0G
CSqGSIb3DQEBCwUAA4IBAQCjRyqAWi7logT0sKYCTrfmDJDMxFFIURTT2ZO/6Yog
UB/6i74GaVWA+8CzQP4+6W7XuWGj/5sNv0cCc4YjyhmQZbGCTrSa3wmt152h2f9F
n/Ux5AlyIFoEw8EYv6RzL/LjodNuChggdomBV2Fv34BYIMyZ9kz1RMvPwCIqmEua
k1k2jNNgDGQbZMMmRDOe1db9zZR20fRqvKm4kwBZUNTi0ZZrHiSVJc4WX9LmQOGe
OhHtE91wQKL/uu+kq1eQByWP2ooQ1zYk3hDJG4kzxvDxmecT3JOWC2HZFUDsqsWu
tdx3c/vcrUJA0NPHPwnca0EnDxMIgcM5L0aplMEn+mOj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:40 2024 by rpki-client on console-ams.rpki-client.org