Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/7FxBAcRi5A2SV186DkkUrznzURs.roa
File: 7FxBAcRi5A2SV186DkkUrznzURs.roa (raw, json)
Hash identifier: ppWltVZhwBfLuryqdo8KN4vWFkuqA97j3+AIqtNJHRE=
Subject key identifier: EC:5C:41:01:C4:62:E4:0D:92:57:5F:3A:0E:49:14:AF:39:F3:51:1B
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 01856C53EFA87C813EEA52D1F655DA9FFCC7
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/7FxBAcRi5A2SV186DkkUrznzURs.roa
Signing time: Sun 01 Jan 2023 07:55:18 +0000
ROA not before: Sun 01 Jan 2023 07:55:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8207
IP address blocks: 195.114.129.0/24 maxlen: 24
195.114.128.0/24 maxlen: 24
195.114.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:ef:a8:7c:81:3e:ea:52:d1:f6:55:da:9f:fc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 07:55:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec5c4101c462e40d92575f3a0e4914af39f3511b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:eb:f7:ed:7b:3e:14:0d:17:08:d8:da:cf:
22:3b:4f:56:17:3e:e1:67:2e:ec:44:58:96:22:28:
98:fb:af:83:de:c1:04:02:65:e0:5e:b0:4a:ad:7e:
12:cf:64:b4:bd:c9:c7:fe:76:16:f4:91:3a:fe:69:
34:62:25:3b:aa:5f:03:f8:62:76:d1:b7:04:ad:41:
05:99:71:45:13:25:24:d0:b8:4f:51:da:c9:04:2e:
07:0b:5b:57:22:b9:0d:de:c6:4b:61:c7:80:7d:bb:
ae:4a:3e:13:ba:ca:f6:d7:87:b3:17:4d:9c:86:44:
96:ef:e1:4a:05:fd:ea:b7:3c:7f:30:1d:a2:5d:ea:
af:a3:14:4e:45:e5:87:39:14:5f:56:7f:88:d5:37:
b3:7b:8a:4d:22:b4:ec:44:c4:bd:98:18:82:9e:70:
70:a7:57:0f:76:bd:54:ad:21:12:9c:6d:82:8e:a3:
5a:00:de:97:32:0c:e2:21:28:38:b7:2e:cc:49:27:
64:48:d3:35:8c:58:53:71:c5:ed:e1:c0:cc:86:f5:
e9:e7:1b:20:d9:d1:21:42:34:b2:14:f7:dc:fc:8f:
4d:78:10:f4:ba:89:95:d4:14:55:7c:f5:c0:20:01:
49:f7:b7:a5:cd:c4:d6:22:b0:1c:28:8f:f1:e8:9e:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5C:41:01:C4:62:E4:0D:92:57:5F:3A:0E:49:14:AF:39:F3:51:1B
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/7FxBAcRi5A2SV186DkkUrznzURs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.128.0/23
195.114.135.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c7:9e:81:b5:0f:c8:7d:10:be:69:ea:62:38:d0:76:41:d1:
46:86:65:bf:2d:89:e5:64:04:c1:bd:02:68:ca:f9:41:ff:1d:
f2:03:c8:66:1d:a7:d1:df:94:86:c8:e0:a3:10:82:58:2f:06:
ac:df:46:5e:0d:6c:bd:9b:dc:75:7d:cc:e3:75:57:ac:47:49:
a2:cf:15:34:af:fd:ad:5b:1c:ea:f2:73:71:d5:2a:4e:e5:81:
16:26:15:f9:7b:5c:7d:6f:84:8d:d9:4b:0f:37:ff:df:35:77:
be:f7:60:23:6d:d6:bd:4c:5b:e4:a7:ef:02:26:27:2b:93:20:
ee:be:23:77:90:dc:2a:8f:78:54:da:f9:5b:71:98:f9:fe:36:
0c:37:a4:0f:51:0a:ef:68:b0:cd:bf:00:08:51:be:f7:e0:bf:
2a:61:53:c1:5c:bd:e5:1d:53:a9:e0:18:65:f0:87:3b:41:7e:
70:33:ea:41:d5:b9:5e:ad:d4:a4:a8:44:7e:72:c0:3a:bc:c8:
f5:53:1d:11:c5:25:26:d1:91:7f:2a:64:30:f4:8e:3b:bf:ba:
b8:ed:f2:75:74:2a:f9:ae:1f:a1:8c:7e:3d:08:31:ae:5d:62:
f1:84:a5:dc:c8:d0:dd:4a:06:78:50:50:e9:65:cd:61:c6:ef:
83:1c:6e:d9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsU++ofIE+6lLR9lXan/zHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky
OTMxNDAwHhcNMjMwMTAxMDc1NTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzVjNDEwMWM0NjJlNDBkOTI1NzVmM2EwZTQ5MTRhZjM5ZjM1MTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg3r9+17PhQNFwjY2s8iO09WFz7h
Zy7sRFiWIiiY+6+D3sEEAmXgXrBKrX4Sz2S0vcnH/nYW9JE6/mk0YiU7ql8D+GJ2
0bcErUEFmXFFEyUk0LhPUdrJBC4HC1tXIrkN3sZLYceAfbuuSj4Tusr214ezF02c
hkSW7+FKBf3qtzx/MB2iXeqvoxROReWHORRfVn+I1Teze4pNIrTsRMS9mBiCnnBw
p1cPdr1UrSESnG2CjqNaAN6XMgziISg4ty7MSSdkSNM1jFhTccXt4cDMhvXp5xsg
2dEhQjSyFPfc/I9NeBD0uomV1BRVfPXAIAFJ97elzcTWIrAcKI/x6J7LGQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOxcQQHEYuQNkldfOg5JFK8581EbMB8GA1UdIwQY
MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt
MzA1NmFmOWEzMzVlLzEvN0Z4QkFjUmk1QTJTVjE4NkRra1Vyem56VVJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl
LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw3KAAwQA
w3KHMA0GCSqGSIb3DQEBCwUAA4IBAQCVx56BtQ/IfRC+aepiONB2QdFGhmW/LYnl
ZATBvQJoyvlB/x3yA8hmHafR35SGyOCjEIJYLwas30ZeDWy9m9x1fczjdVesR0mi
zxU0r/2tWxzq8nNx1SpO5YEWJhX5e1x9b4SN2UsPN//fNXe+92Ajbda9TFvkp+8C
JicrkyDuviN3kNwqj3hU2vlbcZj5/jYMN6QPUQrvaLDNvwAIUb734L8qYVPBXL3l
HVOp4Bhl8Ic7QX5wM+pB1blerdSkqER+csA6vMj1Ux0RxSUm0ZF/KmQw9I47v7q4
7fJ1dCr5rh+hjH49CDGuXWLxhKXcyNDdSgZ4UFDpZc1hxu+DHG7Z
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:32 2024 by rpki-client on console-fra.rpki-client.org