Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/0ll1zGzWTlksjfzhiIIEtfryvmU.roa
File: 0ll1zGzWTlksjfzhiIIEtfryvmU.roa (raw, json)
Hash identifier: RROkmWhDZXps97JTyKVCEVsgnttwTTQEBXZFjyx6q+I=
Subject key identifier: D2:59:75:CC:6C:D6:4E:59:2C:8D:FC:E1:88:82:04:B5:FA:F2:BE:65
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 01856E8B2825CAA064F966F600EA4FCE8F02
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/0ll1zGzWTlksjfzhiIIEtfryvmU.roa
Signing time: Sun 01 Jan 2023 18:14:51 +0000
ROA not before: Sun 01 Jan 2023 18:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211227
IP address blocks: 193.38.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:28:25:ca:a0:64:f9:66:f6:00:ea:4f:ce:8f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 1 18:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d25975cc6cd64e592c8dfce1888204b5faf2be65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:d3:21:2c:a9:a9:06:5d:d5:78:fe:23:70:
42:19:bd:05:5a:0f:a1:3f:ce:3b:e0:50:c2:7a:34:
63:2a:e9:48:d1:ce:1d:58:95:4c:27:93:75:16:b9:
e0:87:4c:2a:94:0c:63:ea:dc:ac:af:de:c0:cb:55:
e6:9b:79:87:c5:78:e1:f9:88:d8:62:95:29:ce:04:
d7:df:6d:65:56:e2:0a:7a:35:e5:3d:dd:ce:ec:00:
c0:a5:60:84:4b:5a:b1:77:44:f7:55:36:53:89:e0:
14:84:5d:17:b2:92:a8:c4:3c:c8:ec:8f:3d:96:95:
07:8b:e0:b4:fb:27:0b:f9:93:a9:2a:5e:ca:b7:a0:
65:68:40:00:6b:d4:3b:dd:34:1c:08:f1:a9:5c:7b:
ab:76:2f:6e:f1:19:c2:82:c8:d0:a7:bf:f3:e9:15:
2b:bf:75:90:9e:05:ab:1a:84:25:14:5f:ad:9f:a0:
3c:ab:9d:2b:3d:03:ba:e3:b9:39:c1:88:6e:9b:d7:
d9:71:9a:48:2e:c7:fb:ee:c6:a5:e4:85:b7:79:1d:
62:1e:a4:31:61:bf:36:ca:db:fa:b2:40:92:ea:b2:
b6:44:96:5f:0b:a5:ef:ef:59:dc:19:88:5b:7f:29:
5c:05:9a:3a:8f:04:41:00:57:d9:ad:6a:0f:3e:3b:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:59:75:CC:6C:D6:4E:59:2C:8D:FC:E1:88:82:04:B5:FA:F2:BE:65
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/0ll1zGzWTlksjfzhiIIEtfryvmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.249.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:4f:1b:ab:ff:00:cb:b9:fc:d5:b4:85:cb:43:70:16:9c:5e:
ae:bb:b0:31:85:dc:74:c9:11:e6:b0:c3:c8:aa:2c:af:15:a8:
7b:17:9b:e5:32:de:02:41:b1:7e:77:d8:50:21:46:6a:67:26:
36:eb:2c:de:9b:94:bd:26:84:aa:d5:11:a6:9f:6e:f0:d2:7c:
99:45:cc:12:b1:44:d7:46:7c:90:e3:be:b3:f5:da:9a:37:c7:
af:e1:0f:bf:63:2d:5b:9f:a5:a9:64:e8:a3:04:9a:22:5d:eb:
ad:35:8c:2d:53:73:c5:17:e5:70:f4:07:43:ee:4f:cc:75:8f:
c4:15:2b:e2:ed:9e:6b:ba:ef:d6:97:e2:3a:c9:8e:44:61:97:
6f:32:c6:a9:ee:3e:17:7e:76:74:dc:c2:10:67:4c:97:f5:61:
e1:99:84:84:ac:64:2f:95:6e:21:67:0f:1e:90:83:99:83:37:
99:28:70:be:21:98:57:bb:91:69:1f:f5:68:b5:00:b3:aa:db:
69:fb:3a:97:16:8b:0d:d5:27:09:ed:99:ba:0f:85:50:8a:3f:
d4:73:02:1e:bc:66:e5:35:c5:f3:0d:dd:d0:5d:74:47:42:4a:
58:0b:c4:11:78:69:29:36:54:44:95:d2:64:2f:3d:fb:e2:c9:
fc:c4:71:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuiyglyqBk+Wb2AOpPzo8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk
YTEzNzAwHhcNMjMwMTAxMTgxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjU5NzVjYzZjZDY0ZTU5MmM4ZGZjZTE4ODgyMDRiNWZhZjJiZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4TTISypqQZd1Xj+I3BCGb0FWg+h
P8474FDCejRjKulI0c4dWJVMJ5N1Frngh0wqlAxj6tysr97Ay1Xmm3mHxXjh+YjY
YpUpzgTX321lVuIKejXlPd3O7ADApWCES1qxd0T3VTZTieAUhF0XspKoxDzI7I89
lpUHi+C0+ycL+ZOpKl7Kt6BlaEAAa9Q73TQcCPGpXHurdi9u8RnCgsjQp7/z6RUr
v3WQngWrGoQlFF+tn6A8q50rPQO647k5wYhum9fZcZpILsf77sal5IW3eR1iHqQx
Yb82ytv6skCS6rK2RJZfC6Xv71ncGYhbfylcBZo6jwRBAFfZrWoPPjuAMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNJZdcxs1k5ZLI384YiCBLX68r5lMB8GA1UdIwQY
MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt
NjA4MDk1MmYwZTA0LzEvMGxsMXpHeldUbGtzamZ6aGlJSUV0ZnJ5dm1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0
LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSb5MA0G
CSqGSIb3DQEBCwUAA4IBAQB7Txur/wDLufzVtIXLQ3AWnF6uu7Axhdx0yRHmsMPI
qiyvFah7F5vlMt4CQbF+d9hQIUZqZyY26yzem5S9JoSq1RGmn27w0nyZRcwSsUTX
RnyQ476z9dqaN8ev4Q+/Yy1bn6WpZOijBJoiXeutNYwtU3PFF+Vw9AdD7k/MdY/E
FSvi7Z5ruu/Wl+I6yY5EYZdvMsap7j4XfnZ03MIQZ0yX9WHhmYSErGQvlW4hZw8e
kIOZgzeZKHC+IZhXu5FpH/VotQCzqttp+zqXFosN1ScJ7Zm6D4VQij/UcwIevGbl
NcXzDd3QXXRHQkpYC8QReGkpNlREldJkLz374sn8xHFP
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:58 2024 by rpki-client on console-ams.rpki-client.org