Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/esVlc4wJ9rETyu4pDJfdToXXsNo.roa
File: esVlc4wJ9rETyu4pDJfdToXXsNo.roa (raw, json)
Hash identifier: Q072lkCPansm1ZF5IUGsGxMOTHWWyXwlcwpedQiYKB8=
Subject key identifier: 7A:C5:65:73:8C:09:F6:B1:13:CA:EE:29:0C:97:DD:4E:85:D7:B0:DA
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 0185710C2DA3E3F7CA79745C933EDDBBFE7F
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/esVlc4wJ9rETyu4pDJfdToXXsNo.roa
Signing time: Mon 02 Jan 2023 05:55:01 +0000
ROA not before: Mon 02 Jan 2023 05:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50935
IP address blocks: 194.15.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:2d:a3:e3:f7:ca:79:74:5c:93:3e:dd:bb:fe:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Jan 2 05:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ac565738c09f6b113caee290c97dd4e85d7b0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3d:1b:20:7c:97:03:1c:37:a6:55:ad:a1:c6:
d5:e4:0f:11:a7:56:e8:7d:fb:1a:38:66:5c:06:ac:
22:58:e5:69:0f:eb:ca:62:e1:12:84:90:9d:b4:d6:
1b:67:7f:48:53:3d:50:74:ec:4c:fd:c5:0d:c3:29:
c9:17:d2:f1:43:f2:bf:a7:50:91:17:8a:8b:7b:7e:
88:62:81:54:8c:a5:88:20:c3:02:7a:57:34:33:e2:
93:18:72:e6:de:71:d5:4b:f4:5a:8f:68:e2:fa:16:
1f:e2:2d:56:ca:ff:35:26:e1:47:b7:41:31:a7:43:
03:cb:98:29:e3:1f:e5:94:1a:5c:6f:a5:5c:4d:02:
5c:5b:2e:2f:54:54:06:bd:48:99:54:88:fb:3b:2a:
a6:92:70:82:aa:0e:ae:eb:f2:13:33:ce:9e:7f:10:
b0:45:32:2c:67:eb:b9:3b:c5:5b:c7:92:46:13:dc:
40:56:3c:27:09:83:3a:83:bc:2a:31:9f:87:e1:4f:
01:0a:ec:7f:82:40:52:36:5b:ef:2a:0f:b7:e3:ef:
d3:84:58:bf:05:06:f0:9d:36:45:e9:d5:4e:7c:92:
a2:76:3b:0d:38:4d:b6:fc:1b:9f:33:12:d9:7f:b1:
d5:f5:4c:15:03:b0:3b:8b:86:e3:b8:5b:87:60:fa:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C5:65:73:8C:09:F6:B1:13:CA:EE:29:0C:97:DD:4E:85:D7:B0:DA
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/esVlc4wJ9rETyu4pDJfdToXXsNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.115.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:6e:ea:84:a4:3b:ec:70:2d:05:c3:b4:4a:d8:0f:af:79:77:
c6:f6:a5:0c:4d:cf:42:42:7b:51:be:83:cb:86:25:08:3f:2a:
5d:86:f0:14:ee:7f:7a:e2:72:68:5e:03:b6:9a:6c:6c:c6:53:
12:e2:c4:f0:e7:86:b0:79:20:11:b0:52:7b:0d:ab:bc:c3:37:
40:f2:52:a8:55:a7:e8:b3:68:9a:ba:93:74:ab:26:a0:be:07:
9a:b0:f9:43:58:ff:92:16:56:f5:7e:b8:c0:7b:c6:a4:6e:e8:
77:6c:7f:5c:7b:cf:6e:3e:55:05:20:b4:c9:1d:43:b1:a6:d9:
5b:60:60:cc:ea:e0:e3:d5:23:d6:15:24:e2:e8:ff:ad:1a:a4:
d5:9f:b0:cc:95:e5:b5:ca:cd:67:38:64:2b:25:00:47:b6:03:
4e:84:79:c2:1e:3e:08:a3:ab:ea:58:2b:27:df:00:0c:e5:2e:
05:89:4a:6f:2e:6e:5a:4a:be:13:db:da:28:b7:49:a0:65:46:
cb:cd:c5:87:09:1e:61:de:85:6a:3a:08:8e:91:ac:a2:b9:9c:
e7:89:9b:66:a0:d1:f8:34:e4:fb:09:f3:ff:32:89:4e:9d:78:
1d:03:38:63:d4:ba:6f:78:6a:e7:9c:95:d1:0b:e3:71:2d:8b:
57:05:8e:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxDC2j4/fKeXRckz7du/5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZGM5YzU1ZTE1OTdlODg1NjRkYWY1NjdlNWE0NjY1OTc4
YzdiODUwHhcNMjMwMTAyMDU1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWM1NjU3MzhjMDlmNmIxMTNjYWVlMjkwYzk3ZGQ0ZTg1ZDdiMGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD0bIHyXAxw3plWtocbV5A8Rp1bo
ffsaOGZcBqwiWOVpD+vKYuEShJCdtNYbZ39IUz1QdOxM/cUNwynJF9LxQ/K/p1CR
F4qLe36IYoFUjKWIIMMCelc0M+KTGHLm3nHVS/Raj2ji+hYf4i1Wyv81JuFHt0Ex
p0MDy5gp4x/llBpcb6VcTQJcWy4vVFQGvUiZVIj7OyqmknCCqg6u6/ITM86efxCw
RTIsZ+u5O8Vbx5JGE9xAVjwnCYM6g7wqMZ+H4U8BCux/gkBSNlvvKg+34+/ThFi/
BQbwnTZF6dVOfJKidjsNOE22/BufMxLZf7HV9UwVA7A7i4bjuFuHYPpejwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHrFZXOMCfaxE8ruKQyX3U6F17DaMB8GA1UdIwQY
MBaAFIXcnFXhWX6IVk2vVn5aRmWXjHuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mMDdmYmMtNGMzMi00ZDg3LWE0Mjkt
ODZlYTE5ZDI5MTYzLzEvZXNWbGM0d0o5ckVUeXU0cERKZmRUb1hYc05vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mMDdmYmMtNGMzMi00ZDg3LWE0MjktODZlYTE5ZDI5MTYz
LzEvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg9zMA0G
CSqGSIb3DQEBCwUAA4IBAQDYbuqEpDvscC0Fw7RK2A+veXfG9qUMTc9CQntRvoPL
hiUIPypdhvAU7n964nJoXgO2mmxsxlMS4sTw54aweSARsFJ7Dau8wzdA8lKoVafo
s2iaupN0qyagvgeasPlDWP+SFlb1frjAe8akbuh3bH9ce89uPlUFILTJHUOxptlb
YGDM6uDj1SPWFSTi6P+tGqTVn7DMleW1ys1nOGQrJQBHtgNOhHnCHj4Io6vqWCsn
3wAM5S4FiUpvLm5aSr4T29oot0mgZUbLzcWHCR5h3oVqOgiOkayiuZzniZtmoNH4
NOT7CfP/MolOnXgdAzhj1LpveGrnnJXRC+NxLYtXBY7x
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:30 2024 by rpki-client on console-ams.rpki-client.org