Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vC5EUhUZcNOte8LBOpD1rnFWuxY.roa
File: vC5EUhUZcNOte8LBOpD1rnFWuxY.roa (raw, json)
Hash identifier: 5tqBkeat98TZVpWkSGi1Ufsy0ggoTwrAKWgR/5uYkTQ=
Subject key identifier: BC:2E:44:52:15:19:70:D3:AD:7B:C2:C1:3A:90:F5:AE:71:56:BB:16
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CDCC5EE82BB308F7373E6CA4F4E1C
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vC5EUhUZcNOte8LBOpD1rnFWuxY.roa
Signing time: Mon 02 Jan 2023 03:35:57 +0000
ROA not before: Mon 02 Jan 2023 03:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34291
IP address blocks: 195.54.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:dc:c5:ee:82:bb:30:8f:73:73:e6:ca:4f:4e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc2e4452151970d3ad7bc2c13a90f5ae7156bb16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a7:2c:aa:d3:37:cd:4f:7a:ea:ba:49:23:ba:
59:44:cf:da:6d:4c:ff:9b:38:6b:10:ee:df:a0:3d:
0c:03:17:42:d2:7a:6b:f8:c8:51:cd:43:d2:ac:63:
aa:39:3d:a5:1b:40:c2:59:99:73:0a:39:41:1f:94:
ec:47:d5:c9:b8:fd:db:a8:c2:da:d7:be:d9:ac:c9:
f6:81:7c:ea:a0:0b:41:87:22:61:7f:36:70:69:a1:
ad:13:2f:dc:a9:0f:e7:0d:bd:54:f9:3d:ab:c2:82:
03:be:5a:59:ee:c5:66:68:13:96:7e:ab:67:15:b5:
15:86:71:3f:6c:61:21:fe:b6:f6:5b:c5:05:82:07:
da:bb:ad:bc:b1:d6:4d:58:77:6a:8d:cd:19:09:92:
ed:0e:d2:a2:42:81:80:70:4d:07:c6:3e:74:cc:6b:
59:cf:1f:7a:82:a0:00:31:6f:33:d9:ef:87:77:9c:
b7:5a:c0:8f:54:44:c0:54:22:50:20:3d:69:5a:53:
8a:17:69:83:ee:cf:c3:51:7e:ac:20:8b:f7:95:f4:
08:d5:02:4b:69:78:d7:71:62:3b:cd:ac:7a:8c:34:
44:fd:e0:10:80:f1:ed:f9:c7:d5:73:c3:b9:ec:85:
5f:ff:a5:8b:6d:f7:a6:c6:5e:4a:4b:8e:ed:13:61:
7e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2E:44:52:15:19:70:D3:AD:7B:C2:C1:3A:90:F5:AE:71:56:BB:16
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/vC5EUhUZcNOte8LBOpD1rnFWuxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.10.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:b0:89:fc:ee:b0:35:d3:52:64:84:f3:2a:6a:f3:17:1a:05:
cf:42:19:85:ff:56:21:21:b8:56:61:46:45:e2:11:be:90:91:
84:24:4b:cd:d1:be:6b:15:4d:51:7e:51:c3:29:fa:c7:9a:89:
48:59:50:1a:a3:95:95:ff:56:c2:89:ec:bd:0e:b3:b6:9f:28:
59:08:b0:77:04:7d:57:b2:f9:5e:bb:8f:93:c2:44:2b:12:d0:
88:b2:fb:d8:18:4c:00:ba:ed:8a:ea:cc:0a:27:c5:89:e4:87:
56:f7:af:0e:3b:a5:16:63:d4:cc:c9:92:91:83:db:3b:42:d1:
57:c9:7b:80:59:10:c7:c7:31:49:42:bf:fc:fb:69:78:5d:09:
27:43:9c:73:8e:92:be:9c:79:31:d1:8e:46:25:df:73:60:c1:
7b:2f:2e:9d:34:5f:03:17:c1:7a:48:9a:34:8f:28:c3:f8:ea:
a6:8f:af:f2:ed:3e:33:da:ea:4e:19:ef:dd:f3:02:25:7a:23:
d5:47:25:75:61:da:59:9e:cc:c7:7a:e7:ef:ea:7b:7a:da:9a:
84:f2:b4:d3:6f:cb:08:ad:56:7e:31:9b:4a:29:e3:fb:93:36:
e9:96:25:25:1f:8c:c8:4e:6d:45:5b:a1:67:82:29:84:e8:1d:
43:59:66:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjNzF7oK7MI9zc+bKT04cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjMwMTAyMDMzNTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzJlNDQ1MjE1MTk3MGQzYWQ3YmMyYzEzYTkwZjVhZTcxNTZiYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5acsqtM3zU966rpJI7pZRM/abUz/
mzhrEO7foD0MAxdC0npr+MhRzUPSrGOqOT2lG0DCWZlzCjlBH5TsR9XJuP3bqMLa
177ZrMn2gXzqoAtBhyJhfzZwaaGtEy/cqQ/nDb1U+T2rwoIDvlpZ7sVmaBOWfqtn
FbUVhnE/bGEh/rb2W8UFggfau628sdZNWHdqjc0ZCZLtDtKiQoGAcE0Hxj50zGtZ
zx96gqAAMW8z2e+Hd5y3WsCPVETAVCJQID1pWlOKF2mD7s/DUX6sIIv3lfQI1QJL
aXjXcWI7zax6jDRE/eAQgPHt+cfVc8O57IVf/6WLbfemxl5KS47tE2F+FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLwuRFIVGXDTrXvCwTqQ9a5xVrsWMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvdkM1RVVoVVpjTk90ZThMQk9wRDFybkZXdXhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwzYKMA0G
CSqGSIb3DQEBCwUAA4IBAQAvsIn87rA101JkhPMqavMXGgXPQhmF/1YhIbhWYUZF
4hG+kJGEJEvN0b5rFU1RflHDKfrHmolIWVAao5WV/1bCiey9DrO2nyhZCLB3BH1X
svleu4+TwkQrEtCIsvvYGEwAuu2K6swKJ8WJ5IdW968OO6UWY9TMyZKRg9s7QtFX
yXuAWRDHxzFJQr/8+2l4XQknQ5xzjpK+nHkx0Y5GJd9zYMF7Ly6dNF8DF8F6SJo0
jyjD+Oqmj6/y7T4z2upOGe/d8wIleiPVRyV1YdpZnszHeufv6nt62pqE8rTTb8sI
rVZ+MZtKKeP7kzbpliUlH4zITm1FW6FngimE6B1DWWYW
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:26 2024 by rpki-client on console-ams.rpki-client.org