Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/Vswtx4FpV3OJRorbAxvIAEmw6X8.roa
File: Vswtx4FpV3OJRorbAxvIAEmw6X8.roa (raw, json)
Hash identifier: 0Lq0Yuem4DcWfT/DxbfUPWZIrygPmugfu2HubNY8qzI=
Subject key identifier: 56:CC:2D:C7:81:69:57:73:89:46:8A:DB:03:1B:C8:00:49:B0:E9:7F
Certificate issuer: /CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Certificate serial: 0189F4443175DDB9A27BC8B338E35E7DF84B
Authority key identifier: CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/Vswtx4FpV3OJRorbAxvIAEmw6X8.roa
Signing time: Mon 14 Aug 2023 13:37:37 +0000
ROA not before: Mon 14 Aug 2023 13:37:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12843
IP address blocks: 194.0.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:44:31:75:dd:b9:a2:7b:c8:b3:38:e3:5e:7d:f8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1e73133375d9572b8cfca5c8b5f1fbbbdc9bb6
Validity
Not Before: Aug 14 13:37:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56cc2dc78169577389468adb031bc80049b0e97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a8:e8:75:97:17:7f:34:bb:f1:00:b6:98:60:
66:db:a6:d9:95:3e:e3:4e:cd:8b:6d:0d:0d:a2:30:
9a:38:96:bc:e6:bc:86:c8:58:bf:43:48:0e:f9:25:
7a:d2:a5:cb:d0:bc:8e:67:c0:25:9a:b8:28:7a:0b:
d0:af:29:09:50:46:73:1b:31:34:72:fb:18:53:02:
be:97:03:69:36:41:e4:fc:7e:fa:40:fa:c9:d2:32:
4e:5b:e1:5a:70:ec:54:81:68:5b:b6:5a:9d:8d:8e:
a5:f6:57:d4:64:68:bd:2d:65:2d:1c:12:e4:9e:31:
1d:09:d1:72:c9:1d:4d:64:a5:3a:b7:11:a4:9a:22:
04:01:6b:01:a2:b1:ca:36:72:5e:ba:63:01:7a:06:
86:f3:2b:35:d9:d5:c1:cd:97:9a:bf:39:55:5c:19:
20:37:3c:b3:dc:11:f4:b5:1b:b1:98:d8:64:05:5e:
c5:44:96:0d:da:30:9e:6c:0c:95:cc:ec:0e:d9:9b:
0f:eb:79:05:bb:30:d7:ba:e8:e9:4e:21:9a:55:c9:
a1:a7:9d:8c:a0:8a:ba:66:ac:ad:0d:40:bd:77:95:
94:33:fb:1e:c7:f6:be:b4:e0:b7:49:06:6e:d3:6e:
82:d7:c7:de:63:fd:e0:53:db:30:39:c0:18:3b:df:
93:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CC:2D:C7:81:69:57:73:89:46:8A:DB:03:1B:C8:00:49:B0:E9:7F
X509v3 Authority Key Identifier:
keyid:CC:1E:73:13:33:75:D9:57:2B:8C:FC:A5:C8:B5:F1:FB:BB:DC:9B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB5zEzN12VcrjPylyLXx-7vcm7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/Vswtx4FpV3OJRorbAxvIAEmw6X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7ddfa-fbf6-4803-88c4-29838f4ac60e/1/zB5zEzN12VcrjPylyLXx-7vcm7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.163.0/24
Signature Algorithm: sha256WithRSAEncryption
20:54:32:49:76:e9:72:2a:58:65:55:20:77:f3:df:a4:20:89:
2b:fe:1b:e4:2b:e0:2d:c3:8b:4f:3d:8a:7c:96:60:ec:61:15:
58:11:d5:f0:20:30:72:88:73:19:e1:d5:06:4a:8e:a9:d0:70:
a2:47:79:d0:68:25:8b:9d:f5:ef:3f:e2:f6:52:15:4f:c6:3f:
8f:be:04:12:99:b8:22:c7:0b:2c:bc:1f:37:d6:79:bc:fc:ea:
77:8a:ba:48:dc:c1:7c:4b:14:ec:d6:3e:fc:c7:ac:f1:df:59:
d1:a3:1f:1d:d4:a6:77:a3:d9:4c:5b:39:e5:9a:15:c3:70:47:
84:c8:2d:32:33:85:a1:23:1a:b1:bd:04:f7:71:60:36:ee:86:
f4:c8:13:6b:03:cf:2f:bb:75:60:13:68:49:1a:7a:18:9f:5b:
11:a8:0e:5a:8c:e5:36:c6:04:02:37:ea:73:29:cd:af:9d:ee:
cd:20:72:8c:05:c3:87:c8:fa:00:86:60:75:a7:66:be:c3:8d:
b4:f3:e3:df:b8:93:7a:ce:b8:78:46:53:42:c6:67:ad:d0:c1:
b0:d5:44:30:0f:72:d3:79:ac:b1:9f:d0:69:bb:86:fe:7b:54:
ad:19:e4:5e:72:0d:cb:02:a0:47:98:db:4e:19:49:b2:3d:ad:
51:b2:09:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYn0RDF13bmie8izOONeffhLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjMWU3MzEzMzM3NWQ5NTcyYjhjZmNhNWM4YjVmMWZiYmJk
YzliYjYwHhcNMjMwODE0MTMzNzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmNjMmRjNzgxNjk1NzczODk0NjhhZGIwMzFiYzgwMDQ5YjBlOTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgajodZcXfzS78QC2mGBm26bZlT7j
Ts2LbQ0NojCaOJa85ryGyFi/Q0gO+SV60qXL0LyOZ8AlmrgoegvQrykJUEZzGzE0
cvsYUwK+lwNpNkHk/H76QPrJ0jJOW+FacOxUgWhbtlqdjY6l9lfUZGi9LWUtHBLk
njEdCdFyyR1NZKU6txGkmiIEAWsBorHKNnJeumMBegaG8ys12dXBzZeavzlVXBkg
Nzyz3BH0tRuxmNhkBV7FRJYN2jCebAyVzOwO2ZsP63kFuzDXuujpTiGaVcmhp52M
oIq6ZqytDUC9d5WUM/sex/a+tOC3SQZu026C18feY/3gU9swOcAYO9+TvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFbMLceBaVdziUaK2wMbyABJsOl/MB8GA1UdIwQY
MBaAFMwecxMzddlXK4z8pci18fu73Ju2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekI1ekV6TjEyVmNyalB5bHlMWHgtN3ZjbTdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2RkZmEtZmJmNi00ODAzLTg4YzQt
Mjk4MzhmNGFjNjBlLzEvVnN3dHg0RnBWM09KUm9yYkF4dklBRW13Nlg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9lN2RkZmEtZmJmNi00ODAzLTg4YzQtMjk4MzhmNGFjNjBl
LzEvekI1ekV6TjEyVmNyalB5bHlMWHgtN3ZjbTdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgCjMA0G
CSqGSIb3DQEBCwUAA4IBAQAgVDJJdulyKlhlVSB389+kIIkr/hvkK+Atw4tPPYp8
lmDsYRVYEdXwIDByiHMZ4dUGSo6p0HCiR3nQaCWLnfXvP+L2UhVPxj+PvgQSmbgi
xwssvB831nm8/Op3irpI3MF8SxTs1j78x6zx31nRox8d1KZ3o9lMWznlmhXDcEeE
yC0yM4WhIxqxvQT3cWA27ob0yBNrA88vu3VgE2hJGnoYn1sRqA5ajOU2xgQCN+pz
Kc2vne7NIHKMBcOHyPoAhmB1p2a+w4208+PfuJN6zrh4RlNCxmet0MGw1UQwD3LT
eayxn9Bpu4b+e1StGeRecg3LAqBHmNtOGUmyPa1Rsglm
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:35 2024 by rpki-client on console-fra.rpki-client.org