Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/q8ggSIUgHFoi8NQPbk-31byysO0.roa
File: q8ggSIUgHFoi8NQPbk-31byysO0.roa (raw, json)
Hash identifier: sI9Smr4ngBwgwTspIa31JP7BpOT6vZ0sUPOckBmmjBI=
Subject key identifier: AB:C8:20:48:85:20:1C:5A:22:F0:D4:0F:6E:4F:B7:D5:BC:B2:B0:ED
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 018B2CA420D86116EA1277A608B9E3751ADD
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/q8ggSIUgHFoi8NQPbk-31byysO0.roa
Signing time: Sat 14 Oct 2023 05:23:55 +0000
ROA not before: Sat 14 Oct 2023 05:23:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35608
IP address blocks: 194.67.70.0/24 maxlen: 24
194.67.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2c:a4:20:d8:61:16:ea:12:77:a6:08:b9:e3:75:1a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Oct 14 05:23:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abc8204885201c5a22f0d40f6e4fb7d5bcb2b0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6c:a2:fa:aa:de:48:28:db:8f:a8:1a:9c:ac:
9e:c6:ed:f8:29:e8:70:ee:5a:70:1f:ac:51:1a:94:
da:ff:e8:d4:67:4f:eb:fc:64:66:72:ea:73:e4:9d:
19:d3:49:d5:a7:bc:ef:e9:bd:56:99:61:60:eb:8c:
25:80:8a:1d:e9:85:50:44:f3:63:ba:24:02:1e:79:
3c:3b:72:f5:19:d8:44:f6:92:58:58:51:14:86:4f:
31:63:2c:13:55:7c:b9:62:31:44:99:41:a8:3e:e5:
af:ee:64:3a:35:1b:61:7c:2a:15:a4:09:4d:af:00:
f4:7b:52:6a:90:9c:db:e7:4a:50:bc:7a:77:39:b4:
98:00:b6:ad:5e:ad:bf:e1:53:9c:3b:bd:20:c8:28:
2a:99:04:c1:21:c6:43:2f:0d:29:ff:a5:ff:01:b1:
95:5d:14:8b:30:0b:de:e5:94:c2:3d:ec:80:b5:1a:
db:3a:e6:1f:85:05:c6:27:8a:4a:1f:b7:6e:7a:7e:
fc:f4:46:af:cf:c7:38:db:13:08:42:e3:54:46:3f:
1e:91:15:63:99:fd:33:f9:8d:f9:5e:5a:78:25:f5:
05:92:4e:dd:3b:39:05:3f:cc:30:9d:25:25:d1:83:
22:b0:33:6c:48:db:cf:f2:fd:56:4c:c8:68:b1:5f:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C8:20:48:85:20:1C:5A:22:F0:D4:0F:6E:4F:B7:D5:BC:B2:B0:ED
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/q8ggSIUgHFoi8NQPbk-31byysO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.69.0-194.67.70.255
Signature Algorithm: sha256WithRSAEncryption
b3:e5:8a:9d:22:23:a5:dc:93:42:11:50:19:7a:0a:1e:30:2f:
79:a7:c2:14:d2:ce:12:6f:4f:c3:5b:3b:ec:53:d7:d2:79:8f:
b0:9e:da:08:d7:3f:f7:20:ab:13:0b:f6:10:bf:6f:3f:ef:d0:
6c:df:ce:e5:43:0b:35:eb:1c:c8:98:e7:bc:7f:01:ce:f7:f9:
b1:f6:2b:e5:a7:ee:57:5f:36:cb:22:5c:6c:42:6d:4a:98:e3:
00:4a:07:4c:bf:34:69:24:a9:8b:9c:96:d6:8f:33:27:f9:00:
e2:32:cc:26:b7:7f:80:48:26:a7:06:24:bd:6b:be:f1:68:13:
fb:e4:df:cb:da:f0:b5:3b:b0:9a:1e:be:ea:fd:0a:c6:21:b0:
7b:8d:36:e3:3c:cc:b7:99:aa:3e:e6:69:64:e0:5e:4c:f2:8f:
7b:1a:98:a8:b7:e1:4e:bd:4a:e0:3f:80:f7:31:90:b9:52:e8:
de:6a:e0:57:67:c4:41:05:99:14:3b:b6:f0:a1:11:38:b0:0f:
64:80:db:83:a9:f5:11:f2:28:9d:c2:ba:ad:1c:0a:8c:32:19:
45:99:76:11:91:f0:7b:e9:50:41:35:05:75:ec:f5:e8:03:63:
32:48:18:b5:e8:48:a3:5a:cb:c1:6a:02:1e:4c:5d:d0:d2:f4:
a9:56:a3:c4
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYsspCDYYRbqEnemCLnjdRrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODBlYmJiY2EwZjg5MGRlMzUzODkxNDIxYTgzZGQ1YjY1
M2Q5NDAwHhcNMjMxMDE0MDUyMzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmM4MjA0ODg1MjAxYzVhMjJmMGQ0MGY2ZTRmYjdkNWJjYjJiMGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2yi+qreSCjbj6ganKyexu34Kehw
7lpwH6xRGpTa/+jUZ0/r/GRmcupz5J0Z00nVp7zv6b1WmWFg64wlgIod6YVQRPNj
uiQCHnk8O3L1GdhE9pJYWFEUhk8xYywTVXy5YjFEmUGoPuWv7mQ6NRthfCoVpAlN
rwD0e1JqkJzb50pQvHp3ObSYALatXq2/4VOcO70gyCgqmQTBIcZDLw0p/6X/AbGV
XRSLMAve5ZTCPeyAtRrbOuYfhQXGJ4pKH7duen789Eavz8c42xMIQuNURj8ekRVj
mf0z+Y35Xlp4JfUFkk7dOzkFP8wwnSUl0YMisDNsSNvP8v1WTMhosV889wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKvIIEiFIBxaIvDUD25Pt9W8srDtMB8GA1UdIwQY
MBaAFOGA67vKD4kN41OJFCGoPdW2U9lAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEt
MDU1NTY5NTljNDU1LzEvcThnZ1NJVWdIRm9pOE5RUGJrLTMxYnl5c08wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9hMThjZjEtYTA4MC00OTQ1LThiMjEtMDU1NTY5NTljNDU1
LzEvNFlEcnU4b1BpUTNqVTRrVUlhZzkxYlpUMlVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCQ0UD
BADCQ0YwDQYJKoZIhvcNAQELBQADggEBALPlip0iI6Xck0IRUBl6Ch4wL3mnwhTS
zhJvT8NbO+xT19J5j7Ce2gjXP/cgqxML9hC/bz/v0GzfzuVDCzXrHMiY57x/Ac73
+bH2K+Wn7ldfNssiXGxCbUqY4wBKB0y/NGkkqYucltaPMyf5AOIyzCa3f4BIJqcG
JL1rvvFoE/vk38va8LU7sJoevur9CsYhsHuNNuM8zLeZqj7maWTgXkzyj3samKi3
4U69SuA/gPcxkLlS6N5q4FdnxEEFmRQ7tvChETiwD2SA24Op9RHyKJ3Cuq0cCowy
GUWZdhGR8HvpUEE1BXXs9egDYzJIGLXoSKNay8FqAh5MXdDS9KlWo8Q=
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:03:03 2024 by rpki-client on console-ams.rpki-client.org