Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/vZ__hOANzxVMXOalL6p31MngIrk.roa
File: vZ__hOANzxVMXOalL6p31MngIrk.roa (raw, json)
Hash identifier: eYHbKwahsD+jWXl/HS+O94yBm5AySyWpx1KLaykvEeA=
Subject key identifier: BD:9F:FF:84:E0:0D:CF:15:4C:5C:E6:A5:2F:AA:77:D4:C9:E0:22:B9
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 01887C088106B1F88E16BC0B7E5C8022167A
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/vZ__hOANzxVMXOalL6p31MngIrk.roa
Signing time: Fri 02 Jun 2023 12:15:12 +0000
ROA not before: Fri 02 Jun 2023 12:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 194.33.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7c:08:81:06:b1:f8:8e:16:bc:0b:7e:5c:80:22:16:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jun 2 12:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd9fff84e00dcf154c5ce6a52faa77d4c9e022b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:4c:86:ad:ba:4d:4b:33:74:7c:b3:62:f9:
20:2a:c9:f4:75:41:31:fb:bd:49:83:5b:39:58:90:
fa:b2:72:99:54:47:55:56:c3:d6:eb:55:63:b6:18:
74:49:22:25:9e:f6:83:86:ff:9d:71:36:0f:24:ad:
41:b9:d7:55:9c:d1:24:65:97:e0:ed:fa:ca:5c:0d:
f6:0b:6d:f3:19:6d:14:62:47:b7:4a:95:65:29:9c:
af:43:3d:6a:92:01:f5:a3:77:12:67:09:33:57:98:
86:f5:ab:5a:53:21:6b:87:60:ef:7d:10:78:76:51:
21:bc:33:d9:e0:e8:be:3e:88:c9:01:7b:5b:69:94:
15:a5:c8:b5:d9:27:61:ac:75:2c:ec:da:81:0c:51:
18:78:e4:a5:87:2c:e3:fc:67:02:77:41:22:a5:90:
25:86:a9:d5:9d:8e:f5:6b:cd:eb:bc:85:ad:30:91:
0a:a1:e5:36:3d:17:01:8a:07:17:75:d4:44:a5:3b:
05:f5:1e:92:9f:5c:dd:89:c6:2d:94:86:f8:38:b0:
ca:2e:7c:54:06:59:a8:35:43:9b:b5:4b:72:ef:80:
ea:88:27:57:6e:89:69:70:4b:42:c6:74:02:a8:ca:
44:e1:b1:ce:49:3e:26:10:de:47:02:81:31:7e:ae:
4e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9F:FF:84:E0:0D:CF:15:4C:5C:E6:A5:2F:AA:77:D4:C9:E0:22:B9
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/vZ__hOANzxVMXOalL6p31MngIrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.59.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f9:25:87:55:30:50:01:ae:c6:38:45:58:d8:0d:0e:f2:63:
4d:74:b5:b6:b5:09:f0:b1:75:5d:62:4c:88:6c:1a:98:53:ce:
29:25:cc:2a:57:18:16:c0:01:db:21:4a:6c:12:29:bc:69:26:
5d:98:d5:27:15:a2:e9:59:f8:bd:69:70:a8:33:6d:a8:69:3d:
66:ce:2c:9b:9c:d7:6b:89:67:6a:26:bd:c5:0e:e9:c6:01:ed:
f2:be:67:8f:d9:e1:c2:d7:db:dd:71:bd:bc:30:5c:34:f1:73:
ec:38:bf:32:71:5b:8d:f9:65:50:0c:59:4b:03:a7:5a:f4:ae:
60:bd:38:87:4d:ef:49:00:d3:bf:80:ab:60:4c:23:98:26:0a:
6a:00:f2:f3:0b:3d:e0:d6:2f:38:41:51:0d:52:90:32:55:20:
28:0a:93:e5:05:32:90:bf:40:dd:5a:55:3c:a6:b5:e3:c6:b6:
a7:af:e2:c2:8c:84:3b:97:d8:5f:d6:e6:5d:c0:54:ef:80:56:
5e:41:15:31:d4:ac:5b:04:15:1e:ce:a4:a4:c7:86:2f:b4:0e:
01:e2:03:c8:0b:b0:dd:86:c6:94:38:f3:26:cd:a5:77:7d:52:
2c:7a:98:30:55:ee:fe:24:30:af:d0:84:48:ee:6b:73:45:d7:
89:29:2d:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYh8CIEGsfiOFrwLflyAIhZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0
ZWE1MDAwHhcNMjMwNjAyMTIxNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDlmZmY4NGUwMGRjZjE1NGM1Y2U2YTUyZmFhNzdkNGM5ZTAyMmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZlMhq26TUszdHyzYvkgKsn0dUEx
+71Jg1s5WJD6snKZVEdVVsPW61Vjthh0SSIlnvaDhv+dcTYPJK1BuddVnNEkZZfg
7frKXA32C23zGW0UYke3SpVlKZyvQz1qkgH1o3cSZwkzV5iG9ataUyFrh2DvfRB4
dlEhvDPZ4Oi+PojJAXtbaZQVpci12SdhrHUs7NqBDFEYeOSlhyzj/GcCd0EipZAl
hqnVnY71a83rvIWtMJEKoeU2PRcBigcXddREpTsF9R6Sn1zdicYtlIb4OLDKLnxU
BlmoNUObtUty74DqiCdXbolpcEtCxnQCqMpE4bHOST4mEN5HAoExfq5OPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL2f/4TgDc8VTFzmpS+qd9TJ4CK5MB8GA1UdIwQY
MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt
OGU5Yjk4YTk5Y2RiLzEvdlpfX2hPQU56eFZNWE9hbEw2cDMxTW5nSXJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri
LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiE7MA0G
CSqGSIb3DQEBCwUAA4IBAQAq+SWHVTBQAa7GOEVY2A0O8mNNdLW2tQnwsXVdYkyI
bBqYU84pJcwqVxgWwAHbIUpsEim8aSZdmNUnFaLpWfi9aXCoM22oaT1mziybnNdr
iWdqJr3FDunGAe3yvmeP2eHC19vdcb28MFw08XPsOL8ycVuN+WVQDFlLA6da9K5g
vTiHTe9JANO/gKtgTCOYJgpqAPLzCz3g1i84QVENUpAyVSAoCpPlBTKQv0DdWlU8
prXjxranr+LCjIQ7l9hf1uZdwFTvgFZeQRUx1KxbBBUezqSkx4YvtA4B4gPIC7Dd
hsaUOPMmzaV3fVIsepgwVe7+JDCv0IRI7mtzRdeJKS2t
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:28 2024 by rpki-client on console-ams.rpki-client.org