Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E8p-gUeW6ChYIQ5xx-dL6FCqlH8.roa
File: E8p-gUeW6ChYIQ5xx-dL6FCqlH8.roa (raw, json)
Hash identifier: Mx9bvUKyjI7PqpwOLtfNl1JPrZEnhFmvZWCDb5K0G1k=
Subject key identifier: 13:CA:7E:81:47:96:E8:28:58:21:0E:71:C7:E7:4B:E8:50:AA:94:7F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C5E5C2519DAF14EEE709AC9D577C1F06A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E8p-gUeW6ChYIQ5xx-dL6FCqlH8.roa
Signing time: Tue 12 Dec 2023 14:09:06 +0000
ROA not before: Tue 12 Dec 2023 14:09:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31404
IP address blocks: 194.11.196.0/22 maxlen: 24
193.148.48.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:5c:25:19:da:f1:4e:ee:70:9a:c9:d5:77:c1:f0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 12 14:09:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13ca7e814796e82858210e71c7e74be850aa947f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:27:ab:bf:06:31:58:1f:29:a4:3e:01:c3:
f7:b4:af:1b:24:43:58:ee:d1:e5:3e:cf:a0:55:43:
f9:d2:41:1a:d3:a0:81:cb:f0:cf:a6:c7:6d:3a:bc:
92:30:5a:51:cf:29:0b:b3:12:d8:64:27:b0:90:de:
0b:37:9f:21:4f:85:20:66:1f:20:a6:d1:7f:e4:16:
40:10:91:57:9d:f4:95:f5:dd:65:7b:86:66:7f:5e:
ec:ca:9c:77:b9:73:02:aa:3d:eb:e7:3c:ce:b7:38:
bf:64:dc:89:dc:96:40:08:48:db:78:a9:e3:be:49:
5b:cc:90:30:0b:b9:30:51:6b:d7:7f:53:40:f9:4c:
51:eb:ae:94:57:17:4e:92:87:df:52:da:73:38:6d:
bb:18:5b:88:13:ed:d7:10:ad:26:93:ad:d2:7f:a3:
84:d5:8b:53:3d:48:c1:65:ea:5f:88:ec:3b:d9:50:
46:88:40:b7:00:5d:74:0c:42:57:29:63:03:37:3c:
6f:e9:76:cd:f4:af:48:35:8d:6f:65:f6:5d:2d:a9:
a1:6e:2b:56:d9:c6:51:8c:f0:23:f1:4b:d9:7f:4d:
15:f9:54:b6:66:35:f8:83:75:75:71:ea:55:66:d4:
e3:e7:52:8d:3f:38:e8:26:ad:51:e2:3d:dd:3f:4d:
6b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CA:7E:81:47:96:E8:28:58:21:0E:71:C7:E7:4B:E8:50:AA:94:7F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E8p-gUeW6ChYIQ5xx-dL6FCqlH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.48.0/22
194.11.196.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:3e:b0:61:24:9d:e7:b3:96:33:cb:05:5f:3a:df:c7:47:5e:
14:3d:ae:c3:dc:2e:75:c9:7d:be:4d:37:e3:ff:bd:c2:a3:56:
e5:f8:6a:2b:b4:ce:27:a2:fa:bb:b8:c4:3b:5c:62:51:03:08:
ea:2c:5b:87:ca:23:1c:bc:83:cb:4c:0a:20:68:2d:ad:9c:2f:
92:0b:30:b7:bc:14:3c:74:ca:0a:3d:f6:7b:fc:6f:e5:2f:63:
fd:33:90:ca:41:7b:f7:2b:c5:75:d6:a0:e5:0a:ec:d9:69:ac:
de:cf:cb:ac:62:33:c8:45:fe:17:25:64:06:cf:f3:78:ee:f8:
70:84:bf:15:55:f2:8e:a3:08:14:19:1a:7b:91:77:f3:41:73:
c5:cd:9e:d9:55:e7:eb:8b:81:af:0d:ce:6d:07:ab:1a:ce:18:
5a:5b:ba:8b:d0:af:3f:4e:6c:b3:56:e6:e0:61:40:ab:68:bf:
59:d3:0e:a3:2c:61:7d:99:e4:7c:dd:8a:51:22:2b:53:43:fa:
01:a8:15:93:a0:2a:4c:d4:43:a3:34:4b:4c:14:5d:82:e7:2d:
53:9e:0d:5c:0f:b2:32:d0:fa:21:ff:a3:c4:d3:3e:ae:f5:91:
fc:60:51:ad:a6:74:ae:34:19:e6:25:09:a8:72:57:09:ac:96:
a6:9b:ec:10
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYxeXCUZ2vFO7nCaydV3wfBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMjEyMTQwOTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2NhN2U4MTQ3OTZlODI4NTgyMTBlNzFjN2U3NGJlODUwYWE5NDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbEnq78GMVgfKaQ+AcP3tK8bJENY
7tHlPs+gVUP50kEa06CBy/DPpsdtOrySMFpRzykLsxLYZCewkN4LN58hT4UgZh8g
ptF/5BZAEJFXnfSV9d1le4Zmf17sypx3uXMCqj3r5zzOtzi/ZNyJ3JZACEjbeKnj
vklbzJAwC7kwUWvXf1NA+UxR666UVxdOkoffUtpzOG27GFuIE+3XEK0mk63Sf6OE
1YtTPUjBZepfiOw72VBGiEC3AF10DEJXKWMDNzxv6XbN9K9INY1vZfZdLamhbitW
2cZRjPAj8UvZf00V+VS2ZjX4g3V1cepVZtTj51KNPzjoJq1R4j3dP01r1wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBPKfoFHlugoWCEOccfnS+hQqpR/MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRThwLWdVZVc2Q2hZSVE1eHgtZEw2RkNxbEg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwZQwAwQC
wgvEMA0GCSqGSIb3DQEBCwUAA4IBAQBaPrBhJJ3ns5YzywVfOt/HR14UPa7D3C51
yX2+TTfj/73Co1bl+GortM4novq7uMQ7XGJRAwjqLFuHyiMcvIPLTAogaC2tnC+S
CzC3vBQ8dMoKPfZ7/G/lL2P9M5DKQXv3K8V11qDlCuzZaazez8usYjPIRf4XJWQG
z/N47vhwhL8VVfKOowgUGRp7kXfzQXPFzZ7ZVefri4GvDc5tB6sazhhaW7qL0K8/
TmyzVubgYUCraL9Z0w6jLGF9meR83YpRIitTQ/oBqBWToCpM1EOjNEtMFF2C5y1T
ng1cD7Iy0Poh/6PE0z6u9ZH8YFGtpnSuNBnmJQmoclcJrJamm+wQ
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:10 2024 by rpki-client on console-ams.rpki-client.org