Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/mIc8Hic2sfUD4PfLHfQNtNhuoDo.roa
File: mIc8Hic2sfUD4PfLHfQNtNhuoDo.roa (raw, json)
Hash identifier: SlcxBfKoeOySOph/XNiR1hd9c01QSLQXmXvD+NLiJ80=
Subject key identifier: 98:87:3C:1E:27:36:B1:F5:03:E0:F7:CB:1D:F4:0D:B4:D8:6E:A0:3A
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 01856BD359D6456E34E0A30185F883B8B3C9
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/mIc8Hic2sfUD4PfLHfQNtNhuoDo.roa
Signing time: Sun 01 Jan 2023 05:34:51 +0000
ROA not before: Sun 01 Jan 2023 05:34:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 194.29.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:59:d6:45:6e:34:e0:a3:01:85:f8:83:b8:b3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Jan 1 05:34:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98873c1e2736b1f503e0f7cb1df40db4d86ea03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:25:17:51:9d:53:d0:d6:ba:00:67:2e:71:
09:0d:e4:03:65:88:96:8d:a1:cf:b9:13:2e:95:2c:
65:67:10:e5:94:74:51:0e:3d:a1:95:1f:1f:0b:e6:
1b:5d:73:e8:9a:17:2a:36:0f:44:50:83:e3:34:65:
50:e1:2e:8d:57:3f:58:03:92:e7:68:68:4e:14:97:
73:10:e7:5e:bf:1b:df:f9:a3:ce:c8:7a:64:8f:20:
d8:5d:cf:41:13:dd:2c:d8:e7:83:e4:9b:b0:f0:91:
ca:d1:cd:54:33:db:2a:8a:de:3c:a6:d6:eb:48:ea:
8c:b5:82:f2:f7:cf:e6:71:8b:1f:3a:74:21:2d:9c:
eb:32:e6:3b:71:ca:ce:0b:b6:e5:8e:1b:46:34:1c:
ea:87:0d:89:dd:7e:00:c5:9c:14:8a:12:44:60:3a:
24:55:8a:96:50:b1:fe:dd:39:be:f1:74:08:b3:47:
32:64:00:51:07:e6:97:ee:26:21:b8:0b:92:c8:3b:
c9:d8:33:ba:42:a5:6c:0e:2f:ab:6f:45:ee:3e:32:
fe:19:76:dd:3b:44:60:55:0c:8e:7e:2b:b1:82:b0:
64:25:4d:f3:9d:e1:43:91:36:8d:6c:fe:77:74:45:
69:dd:6c:77:e8:c0:09:af:6a:66:18:41:6d:c6:b4:
31:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:87:3C:1E:27:36:B1:F5:03:E0:F7:CB:1D:F4:0D:B4:D8:6E:A0:3A
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/mIc8Hic2sfUD4PfLHfQNtNhuoDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ec:73:7c:33:79:d5:56:1f:8a:c4:14:8c:6d:d7:c0:95:db:
00:da:d1:78:46:9e:58:f0:c7:1f:db:95:cb:68:61:84:cf:8b:
74:55:2f:58:60:5b:f1:bf:c6:c0:c7:a4:a2:ed:0c:a1:63:ff:
a1:27:30:25:f0:f8:3c:20:41:70:34:09:b6:a6:f6:e6:ca:f3:
9a:ee:4d:9f:5d:7e:43:c2:54:f5:11:20:e1:2f:e3:1f:44:bd:
c4:97:4c:19:f7:5a:63:13:f3:bd:87:8a:23:df:ad:78:0a:0c:
5b:89:19:07:21:c1:ba:4e:50:42:8c:51:8a:b9:22:0a:c1:b9:
7e:b3:80:49:d1:55:93:3a:7e:56:31:ba:c3:4b:87:8b:01:11:
9e:5a:06:9b:e1:89:0a:b8:b9:df:fa:3a:dc:80:54:be:aa:51:
26:a3:dd:ef:56:7e:ab:1f:60:11:bd:5c:e2:5a:14:0d:48:5f:
29:52:f7:62:7b:43:78:76:3f:5c:e9:5d:62:3b:30:ce:31:27:
a4:b3:b8:f1:74:5b:76:32:6e:51:7f:28:30:b7:f7:f4:b1:17:
7e:7e:31:29:a2:f0:d3:6a:ac:91:ed:71:d3:7e:12:fc:75:91:
79:ec:06:bf:a8:ae:1d:cd:ef:08:ee:10:a3:e4:3a:8a:66:ca:
6e:a0:4b:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr01nWRW404KMBhfiDuLPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZTVkOTAzMDFkM2NmNjdiODhmZWU0MmRkNTQ1YWZjZjE0
ZWE1NjEwHhcNMjMwMTAxMDUzNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODg3M2MxZTI3MzZiMWY1MDNlMGY3Y2IxZGY0MGRiNGQ4NmVhMDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiYlF1GdU9DWugBnLnEJDeQDZYiW
jaHPuRMulSxlZxDllHRRDj2hlR8fC+YbXXPomhcqNg9EUIPjNGVQ4S6NVz9YA5Ln
aGhOFJdzEOdevxvf+aPOyHpkjyDYXc9BE90s2OeD5Juw8JHK0c1UM9sqit48ptbr
SOqMtYLy98/mcYsfOnQhLZzrMuY7ccrOC7bljhtGNBzqhw2J3X4AxZwUihJEYDok
VYqWULH+3Tm+8XQIs0cyZABRB+aX7iYhuAuSyDvJ2DO6QqVsDi+rb0XuPjL+GXbd
O0RgVQyOfiuxgrBkJU3zneFDkTaNbP53dEVp3Wx36MAJr2pmGEFtxrQxQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJiHPB4nNrH1A+D3yx30DbTYbqA6MB8GA1UdIwQY
MBaAFIPl2QMB089nuI/uQt1UWvzxTqVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2It
NzgyYjgyZWJjYWFlLzEvbUljOEhpYzJzZlVENFBmTEhmUU50Tmh1b0RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2ItNzgyYjgyZWJjYWFl
LzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh02MA0G
CSqGSIb3DQEBCwUAA4IBAQCe7HN8M3nVVh+KxBSMbdfAldsA2tF4Rp5Y8Mcf25XL
aGGEz4t0VS9YYFvxv8bAx6Si7QyhY/+hJzAl8Pg8IEFwNAm2pvbmyvOa7k2fXX5D
wlT1ESDhL+MfRL3El0wZ91pjE/O9h4oj3614CgxbiRkHIcG6TlBCjFGKuSIKwbl+
s4BJ0VWTOn5WMbrDS4eLARGeWgab4YkKuLnf+jrcgFS+qlEmo93vVn6rH2ARvVzi
WhQNSF8pUvdie0N4dj9c6V1iOzDOMSeks7jxdFt2Mm5Rfygwt/f0sRd+fjEpovDT
aqyR7XHTfhL8dZF57Aa/qK4dze8I7hCj5DqKZspuoEva
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:20:16 2024 by rpki-client on console-ams.rpki-client.org