Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TzHWdeWb1UU5ppjC0_qiZywMEFI.roa
File: TzHWdeWb1UU5ppjC0_qiZywMEFI.roa (raw, json)
Hash identifier: x6zbI77JUCzvffSUnlDsYhXpEm4IzQnrNwZi71YHV1g=
Subject key identifier: 4F:31:D6:75:E5:9B:D5:45:39:A6:98:C2:D3:FA:A2:67:2C:0C:10:52
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01899773604D3A468601E656BF4125680369
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TzHWdeWb1UU5ppjC0_qiZywMEFI.roa
Signing time: Thu 27 Jul 2023 13:04:28 +0000
ROA not before: Thu 27 Jul 2023 13:04:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49716
IP address blocks: 194.55.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:73:60:4d:3a:46:86:01:e6:56:bf:41:25:68:03:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 27 13:04:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f31d675e59bd54539a698c2d3faa2672c0c1052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:c7:0d:01:03:fc:9c:96:c2:e3:f4:fc:f7:
4f:c3:49:fa:34:50:71:11:af:1c:68:30:4b:9a:e0:
34:6f:c3:34:4e:86:8f:d8:90:6e:97:c7:11:fd:74:
3b:51:9d:19:f5:3a:60:61:1f:4a:a0:2e:d5:f5:25:
62:87:ad:47:69:f1:0f:7e:f7:74:30:92:0b:a7:4d:
58:85:ea:62:15:8b:03:4c:84:c5:3b:75:ba:b8:13:
44:35:06:af:ab:ae:fe:45:3c:94:89:8d:99:bc:6b:
70:c5:04:5d:83:29:85:fd:67:ca:d9:db:53:53:22:
62:7a:53:09:32:1d:dd:24:b2:ad:2a:7b:3e:11:33:
a5:5d:a8:b3:93:0a:c5:11:fd:8a:92:cb:9a:16:23:
a9:27:3c:a1:dd:11:32:ea:9a:a1:7b:8e:c1:53:39:
81:4a:39:8e:a4:8a:ff:4a:e3:f0:3f:0d:bd:c1:09:
4c:de:9e:9f:61:4b:3e:13:4c:e4:ae:af:07:9b:05:
69:1d:57:d0:43:a6:11:a8:0b:ac:7d:c9:ec:2c:0f:
39:89:76:cd:43:e1:2c:56:02:e2:7d:38:cb:66:4a:
8d:57:37:26:bd:9f:a6:ca:09:6e:c4:68:68:56:bc:
76:41:4b:a6:05:b2:4c:62:12:cd:3e:8a:58:6e:de:
72:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:31:D6:75:E5:9B:D5:45:39:A6:98:C2:D3:FA:A2:67:2C:0C:10:52
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TzHWdeWb1UU5ppjC0_qiZywMEFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.227.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ef:3c:b5:79:98:0e:48:97:b2:81:29:ca:06:52:08:cc:70:
97:60:1f:b6:a5:64:3a:34:46:ff:3c:ca:b3:a6:a4:cc:88:0f:
68:03:29:df:62:24:ff:43:fb:34:d2:6f:e6:d2:8c:9c:54:a3:
d7:e8:7f:20:8e:45:a0:c8:05:51:34:76:75:87:9e:7f:59:22:
d9:26:6b:57:e8:94:8d:c6:df:00:d2:c7:d5:a7:aa:92:09:54:
12:00:51:55:7a:ec:a3:87:b3:1a:17:65:03:d8:84:02:ad:45:
bd:3f:c8:c3:5f:51:0a:7a:09:d9:64:2a:ee:01:36:73:80:cf:
ce:e7:86:68:27:49:13:c6:15:48:2e:72:f7:ab:a1:1e:b1:c7:
cd:87:13:dd:87:61:c9:0f:58:25:a7:ea:fc:0b:1b:1b:cc:5e:
d4:e5:e9:2f:24:8d:d0:c1:f3:4d:0a:de:c3:23:40:01:85:6b:
f1:25:b5:a5:0b:29:e3:b5:b9:68:4c:50:ae:1e:3f:44:81:87:
e7:18:77:9c:3e:e5:ae:78:f2:3a:37:83:27:b5:60:b0:d8:d3:
6d:47:af:ba:3b:2b:82:a1:7d:62:02:d7:09:4e:05:bb:2e:13:
25:02:57:d3:ff:35:ef:84:1a:5a:72:fe:50:0e:26:d5:03:28:
7b:bb:1a:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmXc2BNOkaGAeZWv0ElaANpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNzI3MTMwNDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjMxZDY3NWU1OWJkNTQ1MzlhNjk4YzJkM2ZhYTI2NzJjMGMxMDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRzHDQED/JyWwuP0/PdPw0n6NFBx
Ea8caDBLmuA0b8M0ToaP2JBul8cR/XQ7UZ0Z9TpgYR9KoC7V9SVih61HafEPfvd0
MJILp01YhepiFYsDTITFO3W6uBNENQavq67+RTyUiY2ZvGtwxQRdgymF/WfK2dtT
UyJielMJMh3dJLKtKns+ETOlXaizkwrFEf2KksuaFiOpJzyh3REy6pqhe47BUzmB
SjmOpIr/SuPwPw29wQlM3p6fYUs+E0zkrq8HmwVpHVfQQ6YRqAusfcnsLA85iXbN
Q+EsVgLifTjLZkqNVzcmvZ+mygluxGhoVrx2QUumBbJMYhLNPopYbt5ypwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE8x1nXlm9VFOaaYwtP6omcsDBBSMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvVHpIV2RlV2IxVVU1cHBqQzBfcWlaeXdNRUZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjfjMA0G
CSqGSIb3DQEBCwUAA4IBAQAJ7zy1eZgOSJeygSnKBlIIzHCXYB+2pWQ6NEb/PMqz
pqTMiA9oAynfYiT/Q/s00m/m0oycVKPX6H8gjkWgyAVRNHZ1h55/WSLZJmtX6JSN
xt8A0sfVp6qSCVQSAFFVeuyjh7MaF2UD2IQCrUW9P8jDX1EKegnZZCruATZzgM/O
54ZoJ0kTxhVILnL3q6EescfNhxPdh2HJD1glp+r8CxsbzF7U5ekvJI3QwfNNCt7D
I0ABhWvxJbWlCynjtbloTFCuHj9EgYfnGHecPuWuePI6N4MntWCw2NNtR6+6OyuC
oX1iAtcJTgW7LhMlAlfT/zXvhBpacv5QDibVAyh7uxoY
-----END CERTIFICATE-----
Generated at Tue Oct 24 10:13:11 2023 by rpki-client on console-ams.rpki-client.org