Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/4_5abc7pwRytXtrblftJfptNxxI.roa
File: 4_5abc7pwRytXtrblftJfptNxxI.roa (raw, json)
Hash identifier: 9SisDCyLR8ekzvpVmQJP6TC09EDHW+bPXr1MHPXdBx0=
Subject key identifier: E3:FE:5A:6D:CE:E9:C1:1C:AD:5E:DA:DB:95:FB:49:7E:9B:4D:C7:12
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 01856D0AA7BED8D168CD8FF733B7B43EF576
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/4_5abc7pwRytXtrblftJfptNxxI.roa
Signing time: Sun 01 Jan 2023 11:14:52 +0000
ROA not before: Sun 01 Jan 2023 11:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210594
IP address blocks: 95.183.206.0/24 maxlen: 24
95.183.206.0/23 maxlen: 23
95.183.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:a7:be:d8:d1:68:cd:8f:f7:33:b7:b4:3e:f5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 11:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3fe5a6dcee9c11cad5edadb95fb497e9b4dc712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e9:62:eb:28:43:a7:dc:61:63:47:5b:7d:15:
44:59:20:ea:4a:de:f8:07:9a:ea:9a:3e:11:cc:86:
f1:3f:2f:e3:d0:bd:f0:f9:70:d4:f5:f4:38:bd:84:
ca:41:ff:67:4d:5e:4b:17:53:3c:d3:9f:25:46:93:
70:91:cd:2f:78:db:b6:01:72:94:11:fa:b1:d5:4b:
42:a6:11:f3:a3:32:fc:9c:53:3d:43:b9:c0:4f:70:
30:09:e6:4d:75:64:f8:7d:c2:25:34:21:2e:2a:10:
a2:00:9a:4a:ea:4f:25:78:69:8d:e4:d2:9a:3e:99:
ca:58:85:c1:9f:f7:78:a8:45:f8:4d:b6:47:68:ca:
0a:d5:f0:b1:d4:84:05:8f:cf:6c:f2:d3:0f:a2:90:
31:34:57:7b:b0:93:d4:43:81:8b:8b:b5:3c:f1:ce:
76:79:ad:a1:53:75:75:cf:86:f1:fb:36:0e:92:1b:
ce:12:49:89:8d:eb:81:44:91:68:49:18:05:c9:88:
6e:3e:01:da:1a:05:00:9a:fc:a2:e3:ed:8c:58:45:
8b:5b:b3:0c:63:07:28:1b:ca:4e:6b:3b:3b:1f:8e:
7f:27:8c:ec:91:04:bd:08:39:22:df:97:39:06:05:
51:87:d9:c6:c0:76:1c:77:dd:c0:58:69:ce:80:13:
3f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FE:5A:6D:CE:E9:C1:1C:AD:5E:DA:DB:95:FB:49:7E:9B:4D:C7:12
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/4_5abc7pwRytXtrblftJfptNxxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.206.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:a7:bb:fe:60:6b:22:05:80:70:51:a0:d9:09:2f:0e:dc:ef:
b3:be:4e:1b:9a:e7:59:c9:93:b3:a3:ae:88:af:33:c9:1e:12:
58:4e:10:dc:6d:07:59:61:b3:3c:68:69:fb:cc:31:4c:b5:32:
aa:77:cf:c5:73:26:07:69:5a:f3:98:d8:16:c0:5e:64:15:5a:
15:fd:14:7b:bc:a1:41:9d:71:27:31:b1:b3:05:19:a1:85:4e:
83:ea:08:b5:67:2d:12:5c:ed:f8:bd:4e:64:1d:7f:97:f5:e7:
3f:32:ce:81:a8:68:9d:26:09:04:34:e0:56:ea:33:ad:d8:52:
ea:99:78:69:01:33:83:c3:a9:31:90:f7:5a:ed:10:1b:6c:3b:
36:1a:ea:cf:3c:4e:5a:93:05:19:13:eb:67:31:1e:2c:3d:d1:
88:c6:0c:af:12:c5:c1:85:84:97:93:1f:90:48:f3:52:d7:50:
0c:8a:e8:a9:96:89:9f:04:4e:89:47:0c:fe:36:bf:74:e7:53:
20:25:7d:bf:c1:97:46:5e:78:08:32:dc:80:95:3f:b6:81:9b:
f3:9e:b3:70:d7:1c:f7:84:a9:0d:76:e8:f3:1e:c1:49:1f:4e:
1e:12:ad:81:84:95:56:ac:64:cb:6b:1e:14:d7:4c:c5:dc:71:
cb:8c:2e:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtCqe+2NFozY/3M7e0PvV2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh
YWI5MDcwHhcNMjMwMTAxMTExNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2ZlNWE2ZGNlZTljMTFjYWQ1ZWRhZGI5NWZiNDk3ZTliNGRjNzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOli6yhDp9xhY0dbfRVEWSDqSt74
B5rqmj4RzIbxPy/j0L3w+XDU9fQ4vYTKQf9nTV5LF1M8058lRpNwkc0veNu2AXKU
Efqx1UtCphHzozL8nFM9Q7nAT3AwCeZNdWT4fcIlNCEuKhCiAJpK6k8leGmN5NKa
PpnKWIXBn/d4qEX4TbZHaMoK1fCx1IQFj89s8tMPopAxNFd7sJPUQ4GLi7U88c52
ea2hU3V1z4bx+zYOkhvOEkmJjeuBRJFoSRgFyYhuPgHaGgUAmvyi4+2MWEWLW7MM
YwcoG8pOazs7H45/J4zskQS9CDki35c5BgVRh9nGwHYcd93AWGnOgBM/iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOP+Wm3O6cEcrV7a25X7SX6bTccSMB8GA1UdIwQY
MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt
NTk2NzE5MjBmYjYwLzEvNF81YWJjN3B3Unl0WHRyYmxmdEpmcHROeHhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw
LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX7fOMA0G
CSqGSIb3DQEBCwUAA4IBAQA+p7v+YGsiBYBwUaDZCS8O3O+zvk4bmudZyZOzo66I
rzPJHhJYThDcbQdZYbM8aGn7zDFMtTKqd8/FcyYHaVrzmNgWwF5kFVoV/RR7vKFB
nXEnMbGzBRmhhU6D6gi1Zy0SXO34vU5kHX+X9ec/Ms6BqGidJgkENOBW6jOt2FLq
mXhpATODw6kxkPda7RAbbDs2GurPPE5akwUZE+tnMR4sPdGIxgyvEsXBhYSXkx+Q
SPNS11AMiuiplomfBE6JRwz+Nr9051MgJX2/wZdGXngIMtyAlT+2gZvznrNw1xz3
hKkNdujzHsFJH04eEq2BhJVWrGTLax4U10zF3HHLjC5b
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:01 2024 by rpki-client on console-ams.rpki-client.org