Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/NrZHi1zuJGFFUEo3h-SU85fd5VM.roa
File: NrZHi1zuJGFFUEo3h-SU85fd5VM.roa (raw, json)
Hash identifier: +EIHdV27m0GCoLJwBH/O0aECSbtnODOrlej7E0RpHq8=
Subject key identifier: 36:B6:47:8B:5C:EE:24:61:45:50:4A:37:87:E4:94:F3:97:DD:E5:53
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 018875A908A8F86ED66B6DA81BEC84BA75D9
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/NrZHi1zuJGFFUEo3h-SU85fd5VM.roa
Signing time: Thu 01 Jun 2023 06:33:11 +0000
ROA not before: Thu 01 Jun 2023 06:33:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 194.143.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Jun 2023 20:37:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:75:a9:08:a8:f8:6e:d6:6b:6d:a8:1b:ec:84:ba:75:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 1 06:33:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36b6478b5cee246145504a3787e494f397dde553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:c9:6d:e3:d4:b1:ac:b3:69:0c:2a:b2:48:
69:bf:6e:66:67:a6:7a:c5:b7:1b:fb:36:1f:23:1a:
8e:e7:e3:6c:be:0e:0e:e6:bc:e3:bb:d5:8d:bd:a7:
94:29:df:ac:7a:0b:1d:53:33:74:8f:d0:e2:df:2b:
16:81:1b:f5:a0:5e:f2:9b:ab:30:01:89:d5:c5:74:
bd:96:1c:e0:94:ca:8d:8f:2f:fb:23:fe:41:56:98:
8a:c6:79:b6:c4:fb:2c:6f:37:c6:cd:54:f4:6c:66:
33:e9:38:3e:3d:d0:79:55:3a:fa:78:f3:b0:66:3d:
ed:ff:55:00:26:1c:56:ef:e2:46:c8:fa:43:ea:6b:
31:9c:7e:9f:32:13:67:95:d8:ee:18:63:3b:e0:ec:
6c:2c:7b:0a:41:46:de:b0:2d:a6:9a:cf:38:cc:5a:
00:a8:38:4a:7f:9f:8c:e0:6c:56:7b:1d:5c:88:8f:
10:1b:fa:ec:78:45:79:eb:5a:81:69:c4:60:ce:68:
55:4d:5b:ca:1a:9b:4f:d9:0e:0d:94:78:c7:db:84:
6a:50:02:0f:53:cc:63:10:42:0f:b6:14:9b:e5:80:
71:73:38:4c:0b:f9:6c:ce:83:50:a7:79:a2:20:b5:
73:8d:87:99:1f:f0:f8:50:cd:af:bd:18:28:1a:f4:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B6:47:8B:5C:EE:24:61:45:50:4A:37:87:E4:94:F3:97:DD:E5:53
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/NrZHi1zuJGFFUEo3h-SU85fd5VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.217.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d7:71:53:35:f2:78:6a:2a:ea:5e:14:98:7a:bc:de:29:cb:
55:22:cd:f0:3b:dd:b2:5b:ae:e8:12:86:07:ae:ac:e8:96:ac:
d2:30:dd:8f:b2:92:87:8c:4a:49:2f:63:75:a0:6e:57:fe:be:
00:35:bb:24:32:27:2f:32:fe:59:03:8a:9f:94:33:d7:5a:52:
c1:b2:f9:11:b6:d1:9d:56:60:87:17:ba:24:7d:9c:35:6c:2d:
f9:e8:1a:0f:b2:28:02:8b:84:a4:23:32:bd:ff:ce:ef:4b:a3:
ed:f4:e9:c2:b5:e9:e5:f0:74:63:54:7c:8f:ae:a3:a8:cb:37:
bf:7d:8f:1b:db:75:87:fe:8c:58:5f:8f:f2:13:10:a2:de:a0:
bd:22:79:27:f1:14:08:c7:ea:c9:1e:48:bf:c6:59:4c:40:bc:
11:81:1e:b2:31:1f:d2:d6:38:81:82:5a:18:b6:e8:99:7a:6e:
c4:5e:51:86:1e:6a:fb:45:4b:ab:fa:3e:bb:c4:32:8b:ab:02:
be:11:93:10:d5:92:37:a5:42:51:3e:3a:f5:af:ab:b6:f1:ac:
26:c0:af:e7:66:08:a9:b7:30:92:74:f4:f4:21:e3:02:6e:54:
09:59:a5:bd:45:25:67:b0:eb:c0:6b:ad:d0:e2:e0:ef:8b:3d:
db:23:52:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYh1qQio+G7Wa22oG+yEunXZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjMwNjAxMDYzMzExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmI2NDc4YjVjZWUyNDYxNDU1MDRhMzc4N2U0OTRmMzk3ZGRlNTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGTJbePUsayzaQwqskhpv25mZ6Z6
xbcb+zYfIxqO5+Nsvg4O5rzju9WNvaeUKd+segsdUzN0j9Di3ysWgRv1oF7ym6sw
AYnVxXS9lhzglMqNjy/7I/5BVpiKxnm2xPssbzfGzVT0bGYz6Tg+PdB5VTr6ePOw
Zj3t/1UAJhxW7+JGyPpD6msxnH6fMhNnldjuGGM74OxsLHsKQUbesC2mms84zFoA
qDhKf5+M4GxWex1ciI8QG/rseEV561qBacRgzmhVTVvKGptP2Q4NlHjH24RqUAIP
U8xjEEIPthSb5YBxczhMC/lszoNQp3miILVzjYeZH/D4UM2vvRgoGvQu3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDa2R4tc7iRhRVBKN4fklPOX3eVTMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvTnJaSGkxenVKR0ZGVUVvM2gtU1U4NWZkNVZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwo/ZMA0G
CSqGSIb3DQEBCwUAA4IBAQBP13FTNfJ4airqXhSYerzeKctVIs3wO92yW67oEoYH
rqzolqzSMN2PspKHjEpJL2N1oG5X/r4ANbskMicvMv5ZA4qflDPXWlLBsvkRttGd
VmCHF7okfZw1bC356BoPsigCi4SkIzK9/87vS6Pt9OnCtenl8HRjVHyPrqOoyze/
fY8b23WH/oxYX4/yExCi3qC9Inkn8RQIx+rJHki/xllMQLwRgR6yMR/S1jiBgloY
tuiZem7EXlGGHmr7RUur+j67xDKLqwK+EZMQ1ZI3pUJRPjr1r6u28awmwK/nZgip
tzCSdPT0IeMCblQJWaW9RSVnsOvAa63Q4uDviz3bI1J/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:18 2024 by rpki-client on console-fra.rpki-client.org