Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/7lNXQL-kHqJnjyMmJOulBoEZvo0.roa
File: 7lNXQL-kHqJnjyMmJOulBoEZvo0.roa (raw, json)
Hash identifier: 71ONJ5T4/U0JQH0txTvj01GgpMLmpm1Oo/uqScZEZYU=
Subject key identifier: EE:53:57:40:BF:A4:1E:A2:67:8F:23:26:24:EB:A5:06:81:19:BE:8D
Certificate issuer: /CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b
Certificate serial: 01893FCFD3B32231FBDE88E6F0B2040ED41C
Authority key identifier: 1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/7lNXQL-kHqJnjyMmJOulBoEZvo0.roa
Signing time: Mon 10 Jul 2023 12:38:51 +0000
ROA not before: Mon 10 Jul 2023 12:38:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61401
IP address blocks: 194.54.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jul 2023 15:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3f:cf:d3:b3:22:31:fb:de:88:e6:f0:b2:04:0e:d4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b
Validity
Not Before: Jul 10 12:38:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee535740bfa41ea2678f232624eba5068119be8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3a:5d:18:d4:85:72:05:db:f6:d2:98:70:e9:
61:ff:27:0d:36:dc:4f:86:ce:25:b4:2b:0c:98:fe:
04:24:3b:13:6e:84:47:1f:8d:c7:56:85:32:de:6b:
e2:11:e2:7c:f9:22:45:53:f0:8e:41:c8:ae:bb:09:
a7:ae:ac:94:58:78:ea:28:d7:af:09:6f:bd:35:79:
34:3d:27:11:a0:e6:64:76:f4:65:be:49:b5:46:4e:
02:32:83:fa:17:7b:26:ea:dd:51:41:09:f1:f3:aa:
03:d1:19:2b:11:55:c1:b4:66:02:34:b3:30:c9:02:
f6:ff:8e:92:2b:c4:52:26:8a:ea:ed:e0:b4:5c:bb:
34:a6:d4:5a:48:d5:39:c6:6a:39:30:c5:4e:6e:0c:
9e:e8:17:38:0e:67:06:7f:71:56:41:2f:23:c6:76:
46:7d:f1:a3:a4:ef:6a:f1:b8:c6:3b:9a:04:73:d4:
ba:b0:e5:c0:ac:1b:b1:13:5c:ea:8e:0c:e2:55:e8:
d2:d7:12:99:96:72:6a:28:0a:a2:9f:01:97:eb:d9:
54:ea:ad:8d:1c:e7:92:bd:e2:35:44:f0:0d:d1:b5:
02:7a:fd:f0:b7:c8:84:56:88:05:ec:62:9b:f5:ce:
1f:8f:0e:14:28:66:f9:dc:be:be:09:31:64:b3:f6:
3e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:53:57:40:BF:A4:1E:A2:67:8F:23:26:24:EB:A5:06:81:19:BE:8D
X509v3 Authority Key Identifier:
keyid:1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/7lNXQL-kHqJnjyMmJOulBoEZvo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.147.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c4:ec:97:78:b3:5a:1b:4c:fe:71:f6:8f:33:35:13:4a:8f:
d9:b2:5b:48:f7:81:37:1c:a0:68:21:ea:6e:ea:42:05:f7:1e:
ea:b3:d9:c1:e3:e9:7e:b6:b5:dc:ec:2c:75:f0:d5:81:cc:41:
28:79:0f:87:13:e7:1d:a3:49:5d:ca:9e:52:d8:eb:79:5f:73:
17:ef:05:01:c0:01:50:33:4d:a9:52:88:c1:de:32:59:4b:73:
d5:ef:5b:21:63:74:e2:e4:2e:d5:57:56:8f:22:06:b9:8c:94:
3d:66:ef:63:6f:30:3f:30:e7:7c:5d:47:6e:44:d8:c0:4c:3a:
7b:9c:29:e7:06:1c:d3:ed:ca:5a:f5:35:3f:04:d4:63:f5:49:
72:62:6e:ec:5c:88:c9:37:aa:56:81:73:be:9b:5b:4b:97:5a:
7a:e4:4d:be:e3:cc:fd:2a:b5:99:33:f6:21:b8:70:7f:78:2f:
05:cb:3c:47:2b:73:22:4c:09:b0:ac:55:95:bc:a8:83:24:40:
b5:59:5b:39:17:ee:dc:79:e4:6d:78:49:b8:3b:8a:7f:b7:4a:
75:3a:88:d4:a8:2f:a0:f2:3a:44:bb:b3:9e:12:01:2a:ec:6e:
9d:37:db:9e:90:63:b0:cb:bb:47:4b:86:ad:b8:a2:93:36:64:
f3:a2:69:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYk/z9OzIjH73ojm8LIEDtQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNjcxY2Y3OWZjZjY2ZDI5ZmVjMGQ3N2E2NmE3ZDBlYTFi
Yjc1OWIwHhcNMjMwNzEwMTIzODUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTUzNTc0MGJmYTQxZWEyNjc4ZjIzMjYyNGViYTUwNjgxMTliZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjpdGNSFcgXb9tKYcOlh/ycNNtxP
hs4ltCsMmP4EJDsTboRHH43HVoUy3mviEeJ8+SJFU/COQciuuwmnrqyUWHjqKNev
CW+9NXk0PScRoOZkdvRlvkm1Rk4CMoP6F3sm6t1RQQnx86oD0RkrEVXBtGYCNLMw
yQL2/46SK8RSJorq7eC0XLs0ptRaSNU5xmo5MMVObgye6Bc4DmcGf3FWQS8jxnZG
ffGjpO9q8bjGO5oEc9S6sOXArBuxE1zqjgziVejS1xKZlnJqKAqinwGX69lU6q2N
HOeSveI1RPAN0bUCev3wt8iEVogF7GKb9c4fjw4UKGb53L6+CTFks/Y+AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO5TV0C/pB6iZ48jJiTrpQaBGb6NMB8GA1UdIwQY
MBaAFB1nHPefz2bSn+wNd6ZqfQ6hu3WbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFdjYzk1X1BadEtmN0ExM3BtcDlEcUc3ZFpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNWFiMjgtMjY4ZC00OWI5LWJhNGYt
OTZmZTIyNjA1MzIzLzEvN2xOWFFMLWtIcUpuanlNbUpPdWxCb0Vadm8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xNWFiMjgtMjY4ZC00OWI5LWJhNGYtOTZmZTIyNjA1MzIz
LzEvSFdjYzk1X1BadEtmN0ExM3BtcDlEcUc3ZFpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjaTMA0G
CSqGSIb3DQEBCwUAA4IBAQARxOyXeLNaG0z+cfaPMzUTSo/ZsltI94E3HKBoIepu
6kIF9x7qs9nB4+l+trXc7Cx18NWBzEEoeQ+HE+cdo0ldyp5S2Ot5X3MX7wUBwAFQ
M02pUojB3jJZS3PV71shY3Ti5C7VV1aPIga5jJQ9Zu9jbzA/MOd8XUduRNjATDp7
nCnnBhzT7cpa9TU/BNRj9UlyYm7sXIjJN6pWgXO+m1tLl1p65E2+48z9KrWZM/Yh
uHB/eC8FyzxHK3MiTAmwrFWVvKiDJEC1WVs5F+7ceeRteEm4O4p/t0p1OojUqC+g
8jpEu7OeEgEq7G6dN9uekGOwy7tHS4atuKKTNmTzomnM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:12 2024 by rpki-client on console-fra.rpki-client.org