Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/XvhTaf_TN1DthjFTKu2g_KkEsUQ.roa
File: XvhTaf_TN1DthjFTKu2g_KkEsUQ.roa (raw, json)
Hash identifier: Pt9xBc2P+5Hy5JhEqHoFtlHawSAjfVnIQWPgBFqELWU=
Subject key identifier: 5E:F8:53:69:FF:D3:37:50:ED:86:31:53:2A:ED:A0:FC:A9:04:B1:44
Certificate issuer: /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial: 01856B933709F599C175B03C7612CA238E69
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/XvhTaf_TN1DthjFTKu2g_KkEsUQ.roa
Signing time: Sun 01 Jan 2023 04:24:47 +0000
ROA not before: Sun 01 Jan 2023 04:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50419
IP address blocks: 109.95.184.0/24 maxlen: 24
109.95.185.0/24 maxlen: 24
2001:67c:118::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:37:09:f5:99:c1:75:b0:3c:76:12:ca:23:8e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
Validity
Not Before: Jan 1 04:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ef85369ffd33750ed8631532aeda0fca904b144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4e:ed:88:0c:12:a4:e7:11:94:92:00:4e:1a:
b2:e1:4b:ec:55:0d:1a:a2:fe:51:4a:e2:fc:68:0f:
35:8b:98:83:93:97:ab:3e:e7:7b:33:62:2b:5a:04:
b2:81:e1:de:b3:b6:22:59:e5:48:16:86:0e:ed:dd:
e9:8e:d2:a0:c9:60:9d:4d:4a:3f:f4:be:35:4f:9f:
69:3c:bb:a6:57:ae:0d:46:84:9d:cd:69:4b:22:e8:
e4:3f:94:d3:f9:48:ef:e8:d5:2c:5e:42:93:89:a7:
b2:3e:d8:cf:9e:2c:24:7c:e9:6e:f8:e4:64:4d:40:
53:67:d9:e1:c3:91:57:57:10:6c:b5:e1:c3:16:2d:
21:a7:97:a0:ae:a0:d5:19:da:54:a8:11:6f:c6:d5:
39:5a:93:03:e9:26:44:51:7b:8f:b6:b4:e0:bf:b9:
06:c4:a5:42:78:d9:9a:01:c2:75:26:d0:78:f4:b1:
9f:b7:c5:cc:42:9b:ec:da:46:07:ae:70:9a:d3:6f:
08:9a:7e:05:98:50:52:99:f7:c4:58:d0:04:31:fe:
5d:70:d8:16:42:66:62:9e:63:b8:d7:17:6d:b3:11:
82:0c:2b:10:cd:e7:b5:a1:15:80:e5:e3:32:99:72:
e1:35:42:01:c4:86:36:6b:87:c5:53:84:a2:00:94:
ce:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F8:53:69:FF:D3:37:50:ED:86:31:53:2A:ED:A0:FC:A9:04:B1:44
X509v3 Authority Key Identifier:
keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/XvhTaf_TN1DthjFTKu2g_KkEsUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.184.0/23
IPv6:
2001:67c:118::/48
Signature Algorithm: sha256WithRSAEncryption
2e:80:ca:ee:2f:44:a6:48:16:e1:9b:3c:c1:7f:7c:7f:74:2b:
d0:23:cd:ea:db:e2:1a:7f:64:a1:22:c0:5d:06:bb:e6:a4:4f:
44:ef:44:00:28:78:a1:b9:d7:dc:0a:3f:41:b5:8b:aa:d8:18:
cc:fc:ba:f7:15:c5:cd:2b:0a:24:2b:53:7f:95:f8:52:4b:2f:
6f:a4:7b:ad:c5:42:f6:3e:63:30:9a:a5:8a:0a:15:54:8e:00:
3f:fa:1e:0b:31:da:43:52:07:b7:e2:2e:45:d6:c9:4b:58:cc:
1f:36:9e:dd:9f:c0:21:cc:5f:cb:c0:98:11:d5:68:fb:ef:50:
90:e8:15:ca:b6:83:3d:de:1a:d4:fa:ab:02:f4:4f:ae:8c:77:
db:da:c5:e0:96:6d:ce:7d:18:2c:8f:f7:25:cb:93:25:28:69:
5f:32:9e:ac:ce:85:ae:94:81:64:61:f4:90:5d:3b:cc:36:56:
48:0d:eb:58:d6:64:09:0d:fe:55:e9:96:6f:b9:07:ac:5a:93:
be:33:01:ab:59:58:ee:c8:51:00:3d:61:cf:b2:c4:7f:a0:9e:
7c:ea:64:1c:d0:b6:22:9a:42:61:7c:c5:b5:88:64:b5:69:c0:
14:2b:a6:ff:dc:2b:72:30:4b:ff:86:34:1a:60:72:72:9b:1c:
8f:88:0c:bd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVrkzcJ9ZnBdbA8dhLKI45pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ODNiNjJhYjhhZWE1MjA3NzBjNTc0MDRiZTc3NzFmNjc5
ZWMwYjUwHhcNMjMwMTAxMDQyNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWY4NTM2OWZmZDMzNzUwZWQ4NjMxNTMyYWVkYTBmY2E5MDRiMTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU7tiAwSpOcRlJIAThqy4UvsVQ0a
ov5RSuL8aA81i5iDk5erPud7M2IrWgSygeHes7YiWeVIFoYO7d3pjtKgyWCdTUo/
9L41T59pPLumV64NRoSdzWlLIujkP5TT+Ujv6NUsXkKTiaeyPtjPniwkfOlu+ORk
TUBTZ9nhw5FXVxBsteHDFi0hp5egrqDVGdpUqBFvxtU5WpMD6SZEUXuPtrTgv7kG
xKVCeNmaAcJ1JtB49LGft8XMQpvs2kYHrnCa028Imn4FmFBSmffEWNAEMf5dcNgW
QmZinmO41xdtsxGCDCsQzee1oRWA5eMymXLhNUIBxIY2a4fFU4SiAJTOqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFF74U2n/0zdQ7YYxUyrtoPypBLFEMB8GA1UdIwQY
MBaAFOeDtiq4rqUgdwxXQEvndx9nnsC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWIt
MTlkZjViNGQxMDE0LzEvWHZoVGFmX1ROMUR0aGpGVEt1MmdfS2tFc1VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWItMTlkZjViNGQxMDE0
LzEvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBbV+4MA8E
AgACMAkDBwAgAQZ8ARgwDQYJKoZIhvcNAQELBQADggEBAC6Ayu4vRKZIFuGbPMF/
fH90K9Ajzerb4hp/ZKEiwF0Gu+akT0TvRAAoeKG519wKP0G1i6rYGMz8uvcVxc0r
CiQrU3+V+FJLL2+ke63FQvY+YzCapYoKFVSOAD/6Hgsx2kNSB7fiLkXWyUtYzB82
nt2fwCHMX8vAmBHVaPvvUJDoFcq2gz3eGtT6qwL0T66Md9vaxeCWbc59GCyP9yXL
kyUoaV8ynqzOha6UgWRh9JBdO8w2VkgN61jWZAkN/lXplm+5B6xak74zAatZWO7I
UQA9Yc+yxH+gnnzqZBzQtiKaQmF8xbWIZLVpwBQrpv/cK3IwS/+GNBpgcnKbHI+I
DL0=
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:15:52 2024 by rpki-client on console-ams.rpki-client.org