Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/RlWf-e_hxEKqF1M19_D1R8hQ4n4.roa
File: RlWf-e_hxEKqF1M19_D1R8hQ4n4.roa (raw, json)
Hash identifier: NSWuQjv0uFqqzMM3WsW9IBtrG+hQuEb3WEbqzfIk280=
Subject key identifier: 46:55:9F:F9:EF:E1:C4:42:AA:17:53:35:F7:F0:F5:47:C8:50:E2:7E
Certificate issuer: /CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Certificate serial: 0185C547DDAD4B790B4635600B288285B084
Authority key identifier: 63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/RlWf-e_hxEKqF1M19_D1R8hQ4n4.roa
Signing time: Wed 18 Jan 2023 14:28:19 +0000
ROA not before: Wed 18 Jan 2023 14:28:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 194.31.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:47:dd:ad:4b:79:0b:46:35:60:0b:28:82:85:b0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6359a649b036103e80a3ce8f3d1b0138a60581d7
Validity
Not Before: Jan 18 14:28:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46559ff9efe1c442aa175335f7f0f547c850e27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:9f:fe:23:10:2c:a3:a9:6b:c8:4b:41:50:
fc:4b:0e:8c:ec:75:57:f4:68:11:64:22:7f:9f:cb:
59:6a:22:8b:7f:1f:1a:58:de:e8:7c:2e:75:91:7d:
46:89:c6:e3:40:f2:23:d2:e9:db:71:aa:98:4b:04:
f1:a8:07:c8:01:ee:51:3d:23:e7:9b:05:92:30:31:
4c:2a:06:d0:51:2b:46:22:43:71:ab:7f:29:30:a0:
2c:30:81:dd:0e:23:89:85:d9:52:bb:74:4c:7f:a5:
29:91:77:44:88:7d:1a:46:a1:e4:8a:02:84:6e:40:
aa:d9:b7:6f:e2:c3:4a:7d:b2:57:29:86:c5:14:8a:
76:85:e0:d0:62:62:d5:d8:f9:7e:21:4a:47:80:ff:
ba:ca:2f:6f:db:48:2a:97:61:6e:88:ab:e3:13:53:
9b:6d:43:af:bd:38:35:25:c3:ac:13:e6:2e:a0:c1:
f8:af:71:b2:b5:97:e6:43:f9:02:6a:86:3f:54:a9:
37:96:cc:f6:6a:b3:c7:ae:2d:54:91:3b:00:4b:35:
7c:ae:3d:b2:26:3c:24:87:b8:7e:ba:ef:21:be:56:
6d:3d:30:0a:0d:6d:84:71:54:4c:35:9a:2e:ce:e2:
d6:fa:29:ad:99:8a:34:70:38:bd:3e:30:ed:fe:f1:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:55:9F:F9:EF:E1:C4:42:AA:17:53:35:F7:F0:F5:47:C8:50:E2:7E
X509v3 Authority Key Identifier:
keyid:63:59:A6:49:B0:36:10:3E:80:A3:CE:8F:3D:1B:01:38:A6:05:81:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/RlWf-e_hxEKqF1M19_D1R8hQ4n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4574bc-296d-4a58-aef7-d2bbd949c452/1/Y1mmSbA2ED6Ao86PPRsBOKYFgdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.99.0/24
Signature Algorithm: sha256WithRSAEncryption
15:2d:f5:26:33:94:0a:26:17:88:d6:13:9a:68:94:2c:45:c6:
c9:f8:31:9b:17:ec:bd:ea:24:39:81:8b:cc:c9:b3:ad:ca:7a:
af:cb:0f:69:83:a1:61:1e:4c:24:e7:2c:7a:51:30:e3:6a:d9:
4a:93:0f:6d:04:b2:df:7b:30:7f:d9:b0:86:3d:93:8e:b5:8c:
cb:b5:9c:6d:06:c2:39:e6:87:10:f3:38:9e:99:ac:1c:14:11:
b2:f6:23:cf:6f:a9:32:fe:e8:c1:85:2a:9d:80:56:17:f3:0d:
18:6f:c8:66:92:62:7c:e5:2c:61:68:55:4a:ad:41:34:2c:ee:
f2:ef:ad:96:d0:93:d6:d6:e8:13:5d:55:ff:c7:0c:52:bb:03:
a4:d4:0f:56:b6:2d:3c:2d:99:1e:9a:69:ca:dc:e2:30:51:b3:
47:86:ed:a0:df:49:a5:aa:76:2c:d9:3d:99:19:e0:36:23:3c:
54:84:ee:61:4d:e9:96:77:ef:bd:dc:11:48:6b:23:07:1a:03:
e9:6f:24:40:10:34:79:d4:ba:61:a6:e8:29:d5:1f:e9:31:a0:
85:d7:cc:04:b8:ba:53:a1:b2:f5:49:86:5b:39:5d:c6:a2:15:
b8:a9:41:80:6e:3d:29:3b:ce:6e:58:a9:06:a5:bb:dd:d5:c4:
b4:65:76:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXFR92tS3kLRjVgCyiChbCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNTlhNjQ5YjAzNjEwM2U4MGEzY2U4ZjNkMWIwMTM4YTYw
NTgxZDcwHhcNMjMwMTE4MTQyODE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjU1OWZmOWVmZTFjNDQyYWExNzUzMzVmN2YwZjU0N2M4NTBlMjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCyf/iMQLKOpa8hLQVD8Sw6M7HVX
9GgRZCJ/n8tZaiKLfx8aWN7ofC51kX1GicbjQPIj0unbcaqYSwTxqAfIAe5RPSPn
mwWSMDFMKgbQUStGIkNxq38pMKAsMIHdDiOJhdlSu3RMf6UpkXdEiH0aRqHkigKE
bkCq2bdv4sNKfbJXKYbFFIp2heDQYmLV2Pl+IUpHgP+6yi9v20gql2FuiKvjE1Ob
bUOvvTg1JcOsE+YuoMH4r3GytZfmQ/kCaoY/VKk3lsz2arPHri1UkTsASzV8rj2y
Jjwkh7h+uu8hvlZtPTAKDW2EcVRMNZouzuLW+imtmYo0cDi9PjDt/vFR7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEZVn/nv4cRCqhdTNffw9UfIUOJ+MB8GA1UdIwQY
MBaAFGNZpkmwNhA+gKPOjz0bATimBYHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTFtbVNiQTJFRDZBbzg2UFBSc0JPS1lGZ2RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi80NTc0YmMtMjk2ZC00YTU4LWFlZjct
ZDJiYmQ5NDljNDUyLzEvUmxXZi1lX2h4RUtxRjFNMTlfRDFSOGhRNG40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi80NTc0YmMtMjk2ZC00YTU4LWFlZjctZDJiYmQ5NDljNDUy
LzEvWTFtbVNiQTJFRDZBbzg2UFBSc0JPS1lGZ2RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh9jMA0G
CSqGSIb3DQEBCwUAA4IBAQAVLfUmM5QKJheI1hOaaJQsRcbJ+DGbF+y96iQ5gYvM
ybOtynqvyw9pg6FhHkwk5yx6UTDjatlKkw9tBLLfezB/2bCGPZOOtYzLtZxtBsI5
5ocQ8ziemawcFBGy9iPPb6ky/ujBhSqdgFYX8w0Yb8hmkmJ85SxhaFVKrUE0LO7y
762W0JPW1ugTXVX/xwxSuwOk1A9Wti08LZkemmnK3OIwUbNHhu2g30mlqnYs2T2Z
GeA2IzxUhO5hTemWd++93BFIayMHGgPpbyRAEDR51Lphpugp1R/pMaCF18wEuLpT
obL1SYZbOV3GohW4qUGAbj0pO85uWKkGpbvd1cS0ZXbq
Generated at Fri Aug 4 15:12:23 2023 by rpki-client on console-fra.rpki-client.org