Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d74114-be8c-40b2-8a7c-bb691b6ffd26/1/R1f-Y1OOVnbg2ZKRe8AVzQAqt94.roa
File: R1f-Y1OOVnbg2ZKRe8AVzQAqt94.roa (raw, json)
Hash identifier: r/MYZ9GxJe4KIue2ynofhedip6P2bHHU+314XQDCsII=
Subject key identifier: 47:57:FE:63:53:8E:56:76:E0:D9:92:91:7B:C0:15:CD:00:2A:B7:DE
Certificate issuer: /CN=060905e0c7fe4ff2c2283dfef61ba2d2b8cd04a9
Certificate serial: 0186360D525A602A32EEE911D346B6010DBE
Authority key identifier: 06:09:05:E0:C7:FE:4F:F2:C2:28:3D:FE:F6:1B:A2:D2:B8:CD:04:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgkF4Mf-T_LCKD3-9hui0rjNBKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d74114-be8c-40b2-8a7c-bb691b6ffd26/1/R1f-Y1OOVnbg2ZKRe8AVzQAqt94.roa
Signing time: Thu 09 Feb 2023 12:01:28 +0000
ROA not before: Thu 09 Feb 2023 12:01:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48551
IP address blocks: 194.147.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:36:0d:52:5a:60:2a:32:ee:e9:11:d3:46:b6:01:0d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060905e0c7fe4ff2c2283dfef61ba2d2b8cd04a9
Validity
Not Before: Feb 9 12:01:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4757fe63538e5676e0d992917bc015cd002ab7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:2e:05:dc:7b:c9:be:7c:11:f2:b8:d7:23:
71:d4:33:33:26:7d:58:e8:06:2a:68:20:bc:b3:de:
b8:ab:83:18:49:e7:40:c0:89:99:26:a8:9a:30:ad:
04:b4:49:c3:4f:31:38:4e:60:92:d7:96:01:ff:91:
3d:23:d2:b5:ac:2f:6c:0a:40:ed:b1:51:5e:e1:b8:
35:6e:15:24:d3:f5:43:16:93:e2:39:2e:24:48:a4:
8d:8e:83:dd:f6:00:f9:a1:ef:30:b1:0e:0e:95:23:
bc:55:35:d7:d5:03:19:e9:bc:37:56:ab:79:ae:67:
df:72:a9:5d:08:da:32:68:da:a9:ef:7f:45:d9:f0:
2d:8b:35:d3:e5:85:7a:2a:ec:cc:f3:8f:4c:24:e8:
60:c7:e5:b1:f0:e2:6b:9c:39:c3:58:a3:de:81:79:
f7:e0:c5:b5:19:9f:80:23:0e:93:86:8b:89:30:7e:
85:c5:d1:dc:0c:57:ab:c3:21:b4:f4:f9:2f:08:ad:
48:2f:5c:89:4d:88:28:bf:8c:0f:ba:19:ae:04:5d:
71:30:70:dc:d6:b7:c2:b6:91:2c:46:26:f2:5a:a8:
27:bc:7b:ed:3a:5c:e5:68:35:1e:09:b6:5b:0d:b2:
26:e0:b9:59:e9:46:fa:18:39:b6:0f:44:fc:ab:e7:
1b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:57:FE:63:53:8E:56:76:E0:D9:92:91:7B:C0:15:CD:00:2A:B7:DE
X509v3 Authority Key Identifier:
keyid:06:09:05:E0:C7:FE:4F:F2:C2:28:3D:FE:F6:1B:A2:D2:B8:CD:04:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgkF4Mf-T_LCKD3-9hui0rjNBKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d74114-be8c-40b2-8a7c-bb691b6ffd26/1/R1f-Y1OOVnbg2ZKRe8AVzQAqt94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d74114-be8c-40b2-8a7c-bb691b6ffd26/1/BgkF4Mf-T_LCKD3-9hui0rjNBKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.222.0/24
Signature Algorithm: sha256WithRSAEncryption
99:54:45:2c:e4:e4:32:03:55:ee:df:d3:19:63:4a:11:17:3f:
9c:68:5d:4c:9b:fc:51:03:e0:c6:ac:83:be:f5:c2:f6:ce:50:
9b:79:23:0b:94:5f:5a:df:aa:1d:a4:7e:33:e2:c1:df:4d:2f:
56:5e:a6:b4:57:76:1e:b2:fd:a1:64:11:9e:b2:dc:f5:1d:bf:
b6:45:dd:f9:4a:77:bd:93:dc:31:ab:bb:db:fe:8d:7c:66:c2:
1a:71:be:dd:0a:1a:6c:b9:0b:77:e7:1e:56:49:38:b6:3e:58:
9f:29:ea:ea:ae:86:5d:ee:f9:0f:8a:4f:96:7a:48:07:7a:fa:
29:17:d8:66:62:e4:fa:ea:ac:d1:cb:e8:e7:ea:1b:b7:dd:5a:
49:08:d1:d8:43:cb:6f:ff:7a:07:d0:f3:c2:5f:03:2e:3a:e9:
5c:7c:78:bf:f6:f4:7d:a2:3d:c0:e6:df:95:46:4e:8e:18:ec:
fe:41:71:a1:94:99:7d:7a:3c:37:94:25:c4:a0:ff:4a:5a:bf:
21:4b:03:29:c0:43:b3:3e:09:e8:a6:b4:3e:4c:33:2c:fb:f6:
bf:9f:f8:c3:3f:1d:57:a0:fa:37:c5:ff:5d:ce:33:47:eb:87:
16:f6:4c:ba:d1:77:ed:4c:8b:ed:ce:f1:0f:ff:38:a1:38:5d:
80:bb:54:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYY2DVJaYCoy7ukR00a2AQ2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MDkwNWUwYzdmZTRmZjJjMjI4M2RmZWY2MWJhMmQyYjhj
ZDA0YTkwHhcNMjMwMjA5MTIwMTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzU3ZmU2MzUzOGU1Njc2ZTBkOTkyOTE3YmMwMTVjZDAwMmFiN2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU0uBdx7yb58EfK41yNx1DMzJn1Y
6AYqaCC8s964q4MYSedAwImZJqiaMK0EtEnDTzE4TmCS15YB/5E9I9K1rC9sCkDt
sVFe4bg1bhUk0/VDFpPiOS4kSKSNjoPd9gD5oe8wsQ4OlSO8VTXX1QMZ6bw3Vqt5
rmffcqldCNoyaNqp739F2fAtizXT5YV6KuzM849MJOhgx+Wx8OJrnDnDWKPegXn3
4MW1GZ+AIw6ThouJMH6FxdHcDFerwyG09PkvCK1IL1yJTYgov4wPuhmuBF1xMHDc
1rfCtpEsRibyWqgnvHvtOlzlaDUeCbZbDbIm4LlZ6Ub6GDm2D0T8q+cbhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEdX/mNTjlZ24NmSkXvAFc0AKrfeMB8GA1UdIwQY
MBaAFAYJBeDH/k/ywig9/vYbotK4zQSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmdrRjRNZi1UX0xDS0QzLTlodWkwcmpOQktrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kNzQxMTQtYmU4Yy00MGIyLThhN2Mt
YmI2OTFiNmZmZDI2LzEvUjFmLVkxT09WbmJnMlpLUmU4QVZ6UUFxdDk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9kNzQxMTQtYmU4Yy00MGIyLThhN2MtYmI2OTFiNmZmZDI2
LzEvQmdrRjRNZi1UX0xDS0QzLTlodWkwcmpOQktrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpPeMA0G
CSqGSIb3DQEBCwUAA4IBAQCZVEUs5OQyA1Xu39MZY0oRFz+caF1Mm/xRA+DGrIO+
9cL2zlCbeSMLlF9a36odpH4z4sHfTS9WXqa0V3Yesv2hZBGestz1Hb+2Rd35Sne9
k9wxq7vb/o18ZsIacb7dChpsuQt35x5WSTi2PlifKerqroZd7vkPik+WekgHevop
F9hmYuT66qzRy+jn6hu33VpJCNHYQ8tv/3oH0PPCXwMuOulcfHi/9vR9oj3A5t+V
Rk6OGOz+QXGhlJl9ejw3lCXEoP9KWr8hSwMpwEOzPgnoprQ+TDMs+/a/n/jDPx1X
oPo3xf9dzjNH64cW9ky60XftTIvtzvEP/zihOF2Au1QB
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:19 2024 by rpki-client on console-fra.rpki-client.org