Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/8RkuUSPwym1IE4wzf8Kv8f00GU0.roa
File: 8RkuUSPwym1IE4wzf8Kv8f00GU0.roa (raw, json)
Hash identifier: c97VVhklSKRD6LIlEg5RxqSStQYj9vYHsZPYZwvPJpE=
Subject key identifier: F1:19:2E:51:23:F0:CA:6D:48:13:8C:33:7F:C2:AF:F1:FD:34:19:4D
Certificate issuer: /CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Certificate serial: 01857115502E3B013DDF154C6560DF0742A9
Authority key identifier: 1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/8RkuUSPwym1IE4wzf8Kv8f00GU0.roa
Signing time: Mon 02 Jan 2023 06:05:00 +0000
ROA not before: Mon 02 Jan 2023 06:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50570
IP address blocks: 195.191.152.0/24 maxlen: 24
195.191.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:50:2e:3b:01:3d:df:15:4c:65:60:df:07:42:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9289a015af4441f8f9df4c8c55e98b292881cf
Validity
Not Before: Jan 2 06:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1192e5123f0ca6d48138c337fc2aff1fd34194d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:95:f9:06:7a:84:38:38:52:c2:cc:2b:3e:46:
35:4b:b3:56:80:f2:49:27:8e:2a:f5:d1:b2:e4:df:
f1:b2:05:67:9b:37:d9:c9:3d:21:90:fe:df:af:e9:
a6:7f:46:4d:e9:29:4c:6d:66:e7:2d:66:b7:20:33:
74:96:11:b8:1f:14:69:b9:3d:30:fe:31:27:f8:b9:
c9:cb:3d:47:52:5b:fd:51:4d:82:ef:0c:00:89:df:
7f:fc:9f:8e:49:a9:2e:91:bc:0d:ea:6e:e4:85:39:
32:6c:5d:c6:06:7d:34:8f:0a:33:6b:0a:10:c9:a2:
61:d8:12:57:49:57:f2:2c:08:bd:2f:2e:5d:03:ea:
92:75:87:d9:f3:03:6d:30:75:ac:eb:20:90:f4:41:
97:4a:46:5f:5e:b7:1a:dd:96:15:bd:c4:b2:0d:7b:
85:5d:cb:43:07:54:be:76:7d:62:e7:fc:a0:b2:02:
16:63:83:06:92:71:c8:55:a4:75:0c:2b:ca:5d:34:
36:23:77:31:14:69:a2:f7:54:b8:07:53:90:46:b6:
1b:75:58:cc:a3:09:0c:49:15:3c:5e:3c:5f:72:0c:
eb:32:2f:3b:e9:f2:c1:04:c4:8e:b4:97:ac:95:45:
67:9d:06:1a:10:97:e3:f2:93:77:c2:3f:4f:5e:5d:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:19:2E:51:23:F0:CA:6D:48:13:8C:33:7F:C2:AF:F1:FD:34:19:4D
X509v3 Authority Key Identifier:
keyid:1E:92:89:A0:15:AF:44:41:F8:F9:DF:4C:8C:55:E9:8B:29:28:81:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpKJoBWvREH4-d9MjFXpiykogc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/8RkuUSPwym1IE4wzf8Kv8f00GU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/291463-91cc-4704-9528-69794f050276/1/HpKJoBWvREH4-d9MjFXpiykogc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.152.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:d2:e3:10:55:78:46:c4:1d:29:a2:be:08:c3:7d:ed:e2:8b:
5a:ae:73:e3:a6:c2:ff:c5:db:6f:1c:d8:24:58:04:72:36:cd:
b8:97:57:20:5b:05:e4:3a:b0:f8:d1:73:6a:61:f2:be:ff:79:
31:ae:8e:48:28:8d:b9:61:7b:d4:8e:22:86:ac:18:97:00:37:
f3:2b:96:27:98:c6:b5:34:34:eb:2a:a0:bd:ae:0c:66:e0:e0:
31:7f:1f:3f:81:96:53:bd:4d:67:67:a5:2e:e4:0c:7b:db:ff:
9e:36:70:59:57:68:8b:46:c3:40:89:e6:d3:9d:bf:90:a6:70:
db:23:5d:ec:c4:51:51:0a:23:c1:05:d3:f8:39:83:3b:b2:3a:
43:06:0b:9a:94:69:2e:09:5e:a9:e1:15:b8:43:aa:62:e2:c6:
cc:40:3c:d1:0f:e5:9b:8b:4b:8b:c0:e7:1d:14:a5:9c:e3:05:
33:33:2b:a0:72:00:12:84:01:8c:bd:aa:18:3b:68:a6:c5:29:
5e:e3:af:1e:d5:a8:1e:0b:ed:6e:8e:50:89:f0:ac:e7:91:46:
c1:3d:de:c3:f5:44:35:c3:d9:be:42:08:50:aa:6b:99:bb:7c:
59:37:42:97:0b:a5:c4:09:11:e1:86:5b:9e:d6:d1:16:49:4d:
43:58:5b:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxFVAuOwE93xVMZWDfB0KpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOTI4OWEwMTVhZjQ0NDFmOGY5ZGY0YzhjNTVlOThiMjky
ODgxY2YwHhcNMjMwMTAyMDYwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTE5MmU1MTIzZjBjYTZkNDgxMzhjMzM3ZmMyYWZmMWZkMzQxOTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZX5BnqEODhSwswrPkY1S7NWgPJJ
J44q9dGy5N/xsgVnmzfZyT0hkP7fr+mmf0ZN6SlMbWbnLWa3IDN0lhG4HxRpuT0w
/jEn+LnJyz1HUlv9UU2C7wwAid9//J+OSakukbwN6m7khTkybF3GBn00jwozawoQ
yaJh2BJXSVfyLAi9Ly5dA+qSdYfZ8wNtMHWs6yCQ9EGXSkZfXrca3ZYVvcSyDXuF
XctDB1S+dn1i5/ygsgIWY4MGknHIVaR1DCvKXTQ2I3cxFGmi91S4B1OQRrYbdVjM
owkMSRU8XjxfcgzrMi876fLBBMSOtJeslUVnnQYaEJfj8pN3wj9PXl03NwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPEZLlEj8MptSBOMM3/Cr/H9NBlNMB8GA1UdIwQY
MBaAFB6SiaAVr0RB+PnfTIxV6YspKIHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBLSm9CV3ZSRUg0LWQ5TWpGWHBpeWtvZ2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yOTE0NjMtOTFjYy00NzA0LTk1Mjgt
Njk3OTRmMDUwMjc2LzEvOFJrdVVTUHd5bTFJRTR3emY4S3Y4ZjAwR1UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8yOTE0NjMtOTFjYy00NzA0LTk1MjgtNjk3OTRmMDUwMjc2
LzEvSHBLSm9CV3ZSRUg0LWQ5TWpGWHBpeWtvZ2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7+YMA0G
CSqGSIb3DQEBCwUAA4IBAQAd0uMQVXhGxB0por4Iw33t4otarnPjpsL/xdtvHNgk
WARyNs24l1cgWwXkOrD40XNqYfK+/3kxro5IKI25YXvUjiKGrBiXADfzK5YnmMa1
NDTrKqC9rgxm4OAxfx8/gZZTvU1nZ6Uu5Ax72/+eNnBZV2iLRsNAiebTnb+QpnDb
I13sxFFRCiPBBdP4OYM7sjpDBgualGkuCV6p4RW4Q6pi4sbMQDzRD+Wbi0uLwOcd
FKWc4wUzMyugcgAShAGMvaoYO2imxSle468e1ageC+1ujlCJ8KznkUbBPd7D9UQ1
w9m+QghQqmuZu3xZN0KXC6XECRHhhlue1tEWSU1DWFto
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:19 2024 by rpki-client on console-ams.rpki-client.org