Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/pQvRCXN9GZyRKLzl6D4x97rEL_8.roa
File: pQvRCXN9GZyRKLzl6D4x97rEL_8.roa (raw, json)
Hash identifier: 0PFEKeyD5At1Lp5v4t0qGbaQdU+n1pVWzCjKshM6Zzc=
Subject key identifier: A5:0B:D1:09:73:7D:19:9C:91:28:BC:E5:E8:3E:31:F7:BA:C4:2F:FF
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF96E137FADBDF88C5600AAFD6AFFDF
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/pQvRCXN9GZyRKLzl6D4x97rEL_8.roa
Signing time: Mon 02 Jan 2023 00:54:55 +0000
ROA not before: Mon 02 Jan 2023 00:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41313
IP address blocks: 195.24.54.0/24 maxlen: 24
212.95.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:6e:13:7f:ad:bd:f8:8c:56:00:aa:fd:6a:ff:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a50bd109737d199c9128bce5e83e31f7bac42fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:28:2b:46:e4:72:b3:71:ab:d5:44:47:d0:
e0:10:60:4d:d1:f8:5b:fa:c6:41:96:36:c4:00:0c:
c7:48:de:35:73:9f:14:1d:bd:85:9b:a4:8e:65:26:
e5:63:00:ab:14:60:5f:d0:83:7f:0a:c9:ab:7a:1d:
8a:68:37:22:d5:57:0c:24:37:38:d7:d3:e0:48:48:
f0:cc:db:f0:27:c2:0f:ed:b1:6f:7f:b0:8b:2b:3b:
ec:54:f1:85:e4:a0:99:a1:10:69:d9:1f:e6:de:44:
15:ff:66:45:53:8a:f5:80:0f:56:23:19:94:4f:d1:
3d:c0:8e:1f:33:61:63:6f:99:c8:e6:fe:8d:89:9c:
c6:ed:7f:56:d7:75:7c:ec:0c:9f:c9:f6:a0:53:83:
29:a5:ca:db:60:a8:4b:90:ba:98:cf:bf:ae:1a:61:
a0:02:8f:fa:1b:07:cc:49:6f:8a:34:da:26:86:4e:
4e:b9:be:c5:d8:7f:53:a4:98:b8:32:56:61:7c:4a:
39:22:fd:08:b2:7d:b4:64:ee:6e:3b:eb:3f:e4:b9:
4f:e5:75:4b:4d:71:86:8b:b7:00:02:18:8e:6d:64:
6f:b7:27:e3:74:10:1c:9f:21:19:d6:fb:55:0c:81:
6e:5f:24:23:48:86:58:50:d0:46:ba:14:cb:c8:fd:
67:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0B:D1:09:73:7D:19:9C:91:28:BC:E5:E8:3E:31:F7:BA:C4:2F:FF
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/pQvRCXN9GZyRKLzl6D4x97rEL_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.54.0/24
212.95.162.0/24
Signature Algorithm: sha256WithRSAEncryption
29:cd:15:b2:aa:2a:cc:a7:92:92:4a:86:bc:d2:65:22:5d:bb:
6c:24:20:46:1f:fe:a9:b1:a4:8f:a2:bf:0e:54:14:a8:fa:f7:
bc:09:e0:ba:2b:32:6a:e1:dd:d8:f2:f7:bc:76:fe:6d:8b:a3:
d8:05:9f:5a:8f:69:11:5a:26:9f:dc:b7:bc:31:ef:04:d1:d6:
6a:51:01:e4:23:94:52:98:63:1e:57:44:a3:2a:03:93:2e:37:
3b:03:7a:39:2a:27:29:57:02:27:17:d1:22:73:30:df:b8:04:
44:69:2f:50:6f:bd:e6:c3:a5:71:eb:02:7b:c7:cc:6a:a5:f2:
fe:a9:a1:b1:8c:d8:8b:16:1c:90:78:52:c9:ea:ca:59:06:e7:
be:70:9c:51:21:67:71:f9:9d:dd:16:da:71:0b:80:db:18:e3:
86:e9:7c:f0:f9:5c:b7:da:70:98:c2:d8:cf:74:5d:fe:fd:c2:
01:c7:df:af:0b:4e:d7:be:49:5a:c2:09:bd:54:4a:b9:53:e8:
f2:52:82:f8:1d:7e:ee:7c:43:b2:21:03:3b:09:75:d0:20:8b:
03:d1:b3:17:db:c9:e9:d2:12:46:52:5e:a0:a9:73:59:40:25:
f6:a4:20:ab:22:49:85:92:bf:c8:1f:fb:af:bd:f3:53:84:18:
d2:e3:28:bc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVv+W4Tf629+IxWAKr9av/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjMwMTAyMDA1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTBiZDEwOTczN2QxOTljOTEyOGJjZTVlODNlMzFmN2JhYzQyZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2YoK0bkcrNxq9VER9DgEGBN0fhb
+sZBljbEAAzHSN41c58UHb2Fm6SOZSblYwCrFGBf0IN/Csmreh2KaDci1VcMJDc4
19PgSEjwzNvwJ8IP7bFvf7CLKzvsVPGF5KCZoRBp2R/m3kQV/2ZFU4r1gA9WIxmU
T9E9wI4fM2Fjb5nI5v6NiZzG7X9W13V87AyfyfagU4MppcrbYKhLkLqYz7+uGmGg
Ao/6GwfMSW+KNNomhk5Oub7F2H9TpJi4MlZhfEo5Iv0Isn20ZO5uO+s/5LlP5XVL
TXGGi7cAAhiObWRvtyfjdBAcnyEZ1vtVDIFuXyQjSIZYUNBGuhTLyP1n9wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKUL0QlzfRmckSi85eg+Mfe6xC//MB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvcFF2UkNYTjlHWnlSS0x6bDZENHg5N3JFTF84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwxg2AwQA
1F+iMA0GCSqGSIb3DQEBCwUAA4IBAQApzRWyqirMp5KSSoa80mUiXbtsJCBGH/6p
saSPor8OVBSo+ve8CeC6KzJq4d3Y8ve8dv5ti6PYBZ9aj2kRWiaf3Le8Me8E0dZq
UQHkI5RSmGMeV0SjKgOTLjc7A3o5KicpVwInF9EiczDfuAREaS9Qb73mw6Vx6wJ7
x8xqpfL+qaGxjNiLFhyQeFLJ6spZBue+cJxRIWdx+Z3dFtpxC4DbGOOG6Xzw+Vy3
2nCYwtjPdF3+/cIBx9+vC07Xvklawgm9VEq5U+jyUoL4HX7ufEOyIQM7CXXQIIsD
0bMX28np0hJGUl6gqXNZQCX2pCCrIkmFkr/IH/uvvfNThBjS4yi8
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org