Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/5QkWBwSwC0CJqLz2RzaUfJcjPMw.roa
File: 5QkWBwSwC0CJqLz2RzaUfJcjPMw.roa (raw, json)
Hash identifier: M+v/7o5lzlS6thKElGW5XaPyTXqkQ8BN56VracC2m90=
Subject key identifier: E5:09:16:07:04:B0:0B:40:89:A8:BC:F6:47:36:94:7C:97:23:3C:CC
Certificate issuer: /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Certificate serial: 018B9052EE5402CA25982FF939351E1B19CA
Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/5QkWBwSwC0CJqLz2RzaUfJcjPMw.roa
Signing time: Thu 02 Nov 2023 13:57:15 +0000
ROA not before: Thu 02 Nov 2023 13:57:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210108
IP address blocks: 194.49.103.0/24 maxlen: 24
194.49.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Nov 2023 22:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:52:ee:54:02:ca:25:98:2f:f9:39:35:1e:1b:19:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6
Validity
Not Before: Nov 2 13:57:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e509160704b00b4089a8bcf64736947c97233ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:92:a2:70:e6:c9:e7:b0:f5:3b:37:9e:17:
d3:1a:e3:39:76:7a:47:d5:0f:c8:b4:c0:b2:38:e3:
cf:bd:db:4e:c9:25:ce:07:78:31:90:bb:57:f2:9c:
4d:98:41:63:f9:d7:12:79:f3:2a:6d:fc:16:52:b9:
e6:a1:5f:3d:66:66:63:03:23:71:f3:10:fe:d9:8d:
97:e0:61:74:0d:ad:c0:91:b3:56:9c:24:cb:22:f7:
7f:5f:0b:fe:6b:5c:ec:61:79:18:34:a7:34:e5:f7:
4e:8a:24:6b:97:4a:91:f1:c0:41:d1:f4:4c:b0:17:
85:27:2c:50:79:de:40:2f:02:f9:a7:32:40:94:29:
e3:8b:c9:51:0d:26:76:d1:06:ab:89:f4:04:13:dc:
0d:72:7f:3d:8c:49:d1:d6:f5:a0:53:a3:6f:1f:a4:
4e:59:53:c0:43:49:e8:6e:fc:61:8c:8f:9c:dd:dd:
52:c6:d1:55:dd:96:33:b7:70:a8:3d:88:b5:00:81:
46:70:1e:ee:df:12:1c:82:29:a1:e8:68:34:27:bb:
1a:13:e3:77:1d:b2:81:26:fb:2d:8c:ce:3f:66:d2:
5b:11:60:c3:0c:7f:29:a7:6f:f4:f8:d4:95:71:8e:
86:ca:0f:79:09:ac:40:69:c4:f9:cf:1c:84:c5:ba:
56:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:09:16:07:04:B0:0B:40:89:A8:BC:F6:47:36:94:7C:97:23:3C:CC
X509v3 Authority Key Identifier:
keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/5QkWBwSwC0CJqLz2RzaUfJcjPMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.102.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:18:dc:74:92:5f:bc:4c:60:f1:c9:a4:b8:b1:7e:53:d6:51:
88:ce:9b:04:54:17:9f:40:8c:ce:ac:db:ab:d7:27:8d:3f:50:
90:6f:87:2d:b7:07:14:c6:75:0f:1d:47:b8:e6:f4:ba:11:66:
a4:62:ba:64:09:38:0f:3d:bd:da:8c:9c:31:4e:73:44:11:11:
5b:f7:b7:5b:b6:3d:fb:ec:75:07:57:47:d6:cc:0e:77:84:54:
f3:7a:12:58:6a:90:be:47:02:61:b8:6d:09:fe:11:d0:ff:4d:
ba:af:03:6e:bb:81:06:cd:42:98:41:4a:cf:b8:4b:7f:c0:e0:
fd:7c:cf:ea:17:50:24:ab:5a:65:0c:ee:d7:10:45:69:9d:38:
a1:d6:f7:b9:06:8f:b7:ed:67:a6:d6:5f:b4:a4:39:53:e5:df:
5b:fc:b9:00:d3:7b:c5:90:dd:ab:e2:61:bf:54:f8:45:48:15:
fe:79:5f:73:27:df:ce:45:8d:64:bf:75:02:66:0c:7c:36:d0:
1e:a1:57:24:7a:75:d4:e9:a5:0c:77:12:5c:37:5d:06:76:58:
c8:3b:8b:15:44:52:01:42:16:ce:48:d8:32:94:ad:ac:a5:37:
7a:cb:c6:fa:3d:2f:f7:81:e0:29:7d:e7:bd:76:97:bd:1e:ac:
1a:d4:66:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuQUu5UAsolmC/5OTUeGxnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MDc4NGZkODFkNDllYzQ0NWEwOWIyZDA2ZjhlNTYwY2Rh
YTA2YTYwHhcNMjMxMTAyMTM1NzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTA5MTYwNzA0YjAwYjQwODlhOGJjZjY0NzM2OTQ3Yzk3MjMzY2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8ySonDmyeew9Ts3nhfTGuM5dnpH
1Q/ItMCyOOPPvdtOySXOB3gxkLtX8pxNmEFj+dcSefMqbfwWUrnmoV89ZmZjAyNx
8xD+2Y2X4GF0Da3AkbNWnCTLIvd/Xwv+a1zsYXkYNKc05fdOiiRrl0qR8cBB0fRM
sBeFJyxQed5ALwL5pzJAlCnji8lRDSZ20QarifQEE9wNcn89jEnR1vWgU6NvH6RO
WVPAQ0nobvxhjI+c3d1SxtFV3ZYzt3CoPYi1AIFGcB7u3xIcgimh6Gg0J7saE+N3
HbKBJvstjM4/ZtJbEWDDDH8pp2/0+NSVcY6Gyg95CaxAacT5zxyExbpW0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOUJFgcEsAtAiai89kc2lHyXIzzMMB8GA1UdIwQY
MBaAFNkHhP2B1J7ERaCbLQb45WDNqgamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mOTA5N2MtMTBjMi00YWU2LTk0ZGQt
MTYxMGEwYzk5M2I0LzEvNVFrV0J3U3dDMENKcUx6MlJ6YVVmSmNqUE13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9mOTA5N2MtMTBjMi00YWU2LTk0ZGQtMTYxMGEwYzk5M2I0
LzEvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwjFmMA0G
CSqGSIb3DQEBCwUAA4IBAQA6GNx0kl+8TGDxyaS4sX5T1lGIzpsEVBefQIzOrNur
1yeNP1CQb4cttwcUxnUPHUe45vS6EWakYrpkCTgPPb3ajJwxTnNEERFb97dbtj37
7HUHV0fWzA53hFTzehJYapC+RwJhuG0J/hHQ/026rwNuu4EGzUKYQUrPuEt/wOD9
fM/qF1Akq1plDO7XEEVpnTih1ve5Bo+37Wem1l+0pDlT5d9b/LkA03vFkN2r4mG/
VPhFSBX+eV9zJ9/ORY1kv3UCZgx8NtAeoVckenXU6aUMdxJcN10GdljIO4sVRFIB
QhbOSNgylK2spTd6y8b6PS/3geApfee9dpe9Hqwa1GZL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:55 2024 by rpki-client on console-fra.rpki-client.org