Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/VXKUwHYit8rd_SLXw7HBTD_cWCE.roa
File: VXKUwHYit8rd_SLXw7HBTD_cWCE.roa (raw, json)
Hash identifier: bkPqgzOwQ7TC8qN+cgWzHtok6yWwSRncaNmwFm2sT8Q=
Subject key identifier: 55:72:94:C0:76:22:B7:CA:DD:FD:22:D7:C3:B1:C1:4C:3F:DC:58:21
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018570027A3D5037BBD7428DA4500F81F56C
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/VXKUwHYit8rd_SLXw7HBTD_cWCE.roa
Signing time: Mon 02 Jan 2023 01:04:48 +0000
ROA not before: Mon 02 Jan 2023 01:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16069
IP address blocks: 195.46.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:7a:3d:50:37:bb:d7:42:8d:a4:50:0f:81:f5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=557294c07622b7caddfd22d7c3b1c14c3fdc5821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:b9:d2:b9:c2:47:94:25:26:de:06:a5:85:
5b:9e:6b:b1:6f:bf:72:af:c7:71:46:18:a9:8d:ef:
19:fd:18:64:e5:c2:88:0c:18:1d:7b:f1:27:db:76:
6e:f7:63:88:34:9c:f5:91:52:d3:d3:b6:8c:c8:5f:
35:52:a4:68:74:83:24:f2:ef:4c:ec:75:15:fd:64:
37:fb:0e:72:ff:cb:7b:5d:ec:6f:67:f6:81:33:52:
71:05:75:17:b6:a9:15:0e:7d:10:a1:ba:7b:2b:f9:
4f:a3:67:9b:b9:65:ea:4b:db:5c:39:74:71:81:8f:
46:6d:dc:09:d9:5c:d3:7d:44:c8:86:d2:f0:2d:fe:
07:a6:41:dd:58:2b:9e:a6:3e:42:a6:1f:fe:44:5c:
e3:57:c6:ea:0b:f0:23:7e:d5:59:b9:bd:73:a3:12:
9a:51:c9:f6:80:cb:ad:b8:93:75:26:b5:92:6c:d4:
0b:a5:01:db:8e:06:6e:7d:2b:5d:5c:19:a0:3d:84:
cf:91:db:01:e8:52:3c:56:a2:8b:a4:cf:69:ad:4d:
fe:7c:46:b8:6c:58:2d:f6:13:4f:90:23:fb:26:70:
2a:ed:b7:1b:d8:a8:46:01:e6:10:72:fb:c4:d5:60:
c3:b8:89:5d:75:ca:29:c0:cd:46:6e:6e:23:0c:80:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:94:C0:76:22:B7:CA:DD:FD:22:D7:C3:B1:C1:4C:3F:DC:58:21
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/VXKUwHYit8rd_SLXw7HBTD_cWCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.46.141.0/24
Signature Algorithm: sha256WithRSAEncryption
30:75:4b:a1:e7:5a:93:33:7a:c9:5a:a4:66:8a:aa:10:8a:a5:
a5:a4:96:e6:7f:f3:3c:1d:93:21:81:3c:43:35:ef:d6:b9:e3:
9a:c5:27:a2:82:d3:21:14:26:8e:4d:f7:3d:75:80:ef:9c:34:
c6:b4:35:ca:00:58:d6:e7:1a:b0:d5:db:d0:3b:3a:f6:cb:33:
29:05:a3:fa:13:ff:4b:db:dc:d1:3f:14:c1:8f:1e:e0:8e:fd:
4f:10:a4:9c:de:31:27:77:5c:33:91:53:ed:49:27:02:ae:9b:
de:40:81:ee:a1:bb:02:ab:e1:49:51:95:60:27:82:c3:45:1f:
d8:45:c5:ea:e8:5c:a9:7f:87:d9:8a:ac:39:4b:bd:e6:90:39:
8e:f1:7b:ba:a2:7c:8b:d7:c2:4f:17:16:a6:90:37:b3:05:70:
90:2c:07:2e:3b:04:65:18:78:11:e5:4d:a1:fd:d3:49:f8:db:
ff:bd:12:10:37:6c:48:8b:63:68:ba:3f:01:41:b4:26:e4:f3:
2b:ff:2a:ba:6e:c4:99:33:b3:01:76:bb:ea:3d:9d:49:66:fa:
a6:c3:02:e9:71:c7:05:8b:bc:15:cb:51:81:c4:96:42:6f:bd:
33:2e:d5:2e:9c:74:75:bb:48:66:f3:df:63:2f:fd:21:0e:98:
52:e3:85:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwAno9UDe710KNpFAPgfVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw
MWY0YzkwHhcNMjMwMTAyMDEwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTcyOTRjMDc2MjJiN2NhZGRmZDIyZDdjM2IxYzE0YzNmZGM1ODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV+50rnCR5QlJt4GpYVbnmuxb79y
r8dxRhipje8Z/Rhk5cKIDBgde/En23Zu92OINJz1kVLT07aMyF81UqRodIMk8u9M
7HUV/WQ3+w5y/8t7XexvZ/aBM1JxBXUXtqkVDn0Qobp7K/lPo2ebuWXqS9tcOXRx
gY9GbdwJ2VzTfUTIhtLwLf4HpkHdWCuepj5Cph/+RFzjV8bqC/AjftVZub1zoxKa
Ucn2gMutuJN1JrWSbNQLpQHbjgZufStdXBmgPYTPkdsB6FI8VqKLpM9prU3+fEa4
bFgt9hNPkCP7JnAq7bcb2KhGAeYQcvvE1WDDuIlddcopwM1Gbm4jDIDmhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFVylMB2IrfK3f0i18OxwUw/3FghMB8GA1UdIwQY
MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt
ODNkNjQ4Zjc5NzQ2LzEvVlhLVXdIWWl0OHJkX1NMWHc3SEJURF9jV0NFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2
LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwy6NMA0G
CSqGSIb3DQEBCwUAA4IBAQAwdUuh51qTM3rJWqRmiqoQiqWlpJbmf/M8HZMhgTxD
Ne/WueOaxSeigtMhFCaOTfc9dYDvnDTGtDXKAFjW5xqw1dvQOzr2yzMpBaP6E/9L
29zRPxTBjx7gjv1PEKSc3jEnd1wzkVPtSScCrpveQIHuobsCq+FJUZVgJ4LDRR/Y
RcXq6Fypf4fZiqw5S73mkDmO8Xu6onyL18JPFxamkDezBXCQLAcuOwRlGHgR5U2h
/dNJ+Nv/vRIQN2xIi2Nouj8BQbQm5PMr/yq6bsSZM7MBdrvqPZ1JZvqmwwLpcccF
i7wVy1GBxJZCb70zLtUunHR1u0hm899jL/0hDphS44Wh
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:21 2024 by rpki-client on console-ams.rpki-client.org