Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/A8Er1D1nDb-h9TlF6Y35wVmgUSc.roa
File: A8Er1D1nDb-h9TlF6Y35wVmgUSc.roa (raw, json)
Hash identifier: xDFzNa/FyfLPbB8sVAsS59O1ua8KT8yAhbZEvsxZW20=
Subject key identifier: 03:C1:2B:D4:3D:67:0D:BF:A1:F5:39:45:E9:8D:F9:C1:59:A0:51:27
Certificate issuer: /CN=3ec2c20d6b3acf84802c2b7ca0722deb72c670bb
Certificate serial: 0187B258E00CFE36AB52F36B1B3F29150D84
Authority key identifier: 3E:C2:C2:0D:6B:3A:CF:84:80:2C:2B:7C:A0:72:2D:EB:72:C6:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsLCDWs6z4SALCt8oHIt63LGcLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/A8Er1D1nDb-h9TlF6Y35wVmgUSc.roa
Signing time: Mon 24 Apr 2023 08:19:41 +0000
ROA not before: Mon 24 Apr 2023 08:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 195.211.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:58:e0:0c:fe:36:ab:52:f3:6b:1b:3f:29:15:0d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec2c20d6b3acf84802c2b7ca0722deb72c670bb
Validity
Not Before: Apr 24 08:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03c12bd43d670dbfa1f53945e98df9c159a05127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:d2:9b:a9:1d:98:c6:1d:72:bc:11:c1:e7:
66:dd:c1:28:9e:eb:bf:e7:cc:36:d1:84:94:32:b0:
59:fc:26:16:1a:2f:a8:1e:28:bf:09:5f:ae:c5:70:
1f:c1:a1:64:3c:b1:71:72:0d:41:e4:03:d7:68:e1:
0d:93:f0:b2:00:e2:87:9c:92:47:99:d2:70:70:fa:
35:b6:de:23:3a:b6:fb:99:1f:75:fa:22:e0:3e:81:
a4:82:3a:e3:d1:0c:02:d1:95:6b:e1:75:89:96:5a:
4b:99:b0:71:f3:4d:a8:bc:58:6f:b3:a5:e5:a5:a7:
8b:5b:9b:dd:59:47:8d:00:55:64:17:4d:f9:5a:94:
ff:6f:24:e0:94:f6:2b:2f:04:51:8c:36:14:ef:5d:
19:26:8a:ba:78:79:9a:09:08:33:9b:2e:af:fa:9c:
4b:59:8e:81:b8:67:3e:4f:8c:a0:78:97:9e:c2:33:
36:00:86:63:39:73:b9:48:9f:19:b0:4c:42:b4:c6:
8e:98:0c:15:42:99:dc:a3:be:7e:e3:06:96:44:8f:
c2:02:78:d6:f1:06:dd:84:4d:4a:46:13:f7:f4:d2:
fd:14:7b:cd:93:33:4f:1a:a3:60:0a:e0:e1:a6:8f:
97:a2:ae:79:e7:d2:37:77:ba:13:27:ad:14:de:dc:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C1:2B:D4:3D:67:0D:BF:A1:F5:39:45:E9:8D:F9:C1:59:A0:51:27
X509v3 Authority Key Identifier:
keyid:3E:C2:C2:0D:6B:3A:CF:84:80:2C:2B:7C:A0:72:2D:EB:72:C6:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsLCDWs6z4SALCt8oHIt63LGcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/A8Er1D1nDb-h9TlF6Y35wVmgUSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/PsLCDWs6z4SALCt8oHIt63LGcLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.167.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:95:ce:94:63:05:d6:a0:8a:d0:53:a0:8f:70:3e:1e:64:fc:
f6:49:7f:f9:9b:e3:8b:57:90:e9:46:ad:a5:6e:bf:70:aa:16:
f9:a1:19:33:4d:1c:fa:5f:5b:46:95:fe:5a:a7:6b:58:f4:4d:
b0:25:3a:45:24:83:93:1a:38:3c:b1:0d:89:79:64:73:75:28:
b0:72:af:8f:bc:5a:21:99:77:df:bd:e1:f9:e7:0d:d9:de:91:
77:e1:ec:03:a2:1b:6b:32:4b:b5:f2:a5:5f:57:4e:39:0e:08:
1e:2e:b2:e6:da:91:33:f4:fc:39:07:92:24:f4:6a:59:e2:17:
20:8e:5d:d9:61:86:3f:95:27:31:8f:49:a2:aa:b8:f1:29:59:
de:7e:8a:8b:5d:06:b9:e4:96:94:58:3f:16:95:7b:99:08:2b:
06:48:32:6a:c2:0f:65:a2:6f:26:a1:70:ab:2a:18:c2:2a:86:
e3:ab:88:67:18:49:2a:26:da:a2:6b:c5:b8:70:1d:d9:e7:13:
13:17:3b:e1:8d:d0:f0:71:0d:95:8c:1a:06:1a:80:e9:9b:43:
4d:87:e7:e9:ee:e1:c6:af:0b:d8:97:2d:43:15:5b:d2:5c:f6:
e1:68:2d:73:fc:fc:0c:38:c1:03:45:db:8c:a6:eb:ef:74:ee:
cc:78:9f:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeyWOAM/jarUvNrGz8pFQ2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzJjMjBkNmIzYWNmODQ4MDJjMmI3Y2EwNzIyZGViNzJj
NjcwYmIwHhcNMjMwNDI0MDgxOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2MxMmJkNDNkNjcwZGJmYTFmNTM5NDVlOThkZjljMTU5YTA1MTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfbSm6kdmMYdcrwRwedm3cEonuu/
58w20YSUMrBZ/CYWGi+oHii/CV+uxXAfwaFkPLFxcg1B5APXaOENk/CyAOKHnJJH
mdJwcPo1tt4jOrb7mR91+iLgPoGkgjrj0QwC0ZVr4XWJllpLmbBx802ovFhvs6Xl
paeLW5vdWUeNAFVkF035WpT/byTglPYrLwRRjDYU710ZJoq6eHmaCQgzmy6v+pxL
WY6BuGc+T4ygeJeewjM2AIZjOXO5SJ8ZsExCtMaOmAwVQpnco75+4waWRI/CAnjW
8QbdhE1KRhP39NL9FHvNkzNPGqNgCuDhpo+Xoq5559I3d7oTJ60U3ty9OQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAPBK9Q9Zw2/ofU5RemN+cFZoFEnMB8GA1UdIwQY
MBaAFD7Cwg1rOs+EgCwrfKByLetyxnC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNMQ0RXczZ6NFNBTEN0OG9ISXQ2M0xHY0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yNzEwYjAtNmM0YS00YTk0LWI5MmEt
YjFjZWZjOTk1Mzc5LzEvQThFcjFEMW5EYi1oOVRsRjZZMzV3Vm1nVVNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yNzEwYjAtNmM0YS00YTk0LWI5MmEtYjFjZWZjOTk1Mzc5
LzEvUHNMQ0RXczZ6NFNBTEN0OG9ISXQ2M0xHY0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9OnMA0G
CSqGSIb3DQEBCwUAA4IBAQCslc6UYwXWoIrQU6CPcD4eZPz2SX/5m+OLV5DpRq2l
br9wqhb5oRkzTRz6X1tGlf5ap2tY9E2wJTpFJIOTGjg8sQ2JeWRzdSiwcq+PvFoh
mXffveH55w3Z3pF34ewDohtrMku18qVfV045DggeLrLm2pEz9Pw5B5Ik9GpZ4hcg
jl3ZYYY/lScxj0miqrjxKVnefoqLXQa55JaUWD8WlXuZCCsGSDJqwg9lom8moXCr
KhjCKobjq4hnGEkqJtqia8W4cB3Z5xMTFzvhjdDwcQ2VjBoGGoDpm0NNh+fp7uHG
rwvYly1DFVvSXPbhaC1z/PwMOMEDRduMpuvvdO7MeJ+m
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:57 2023 by rpki-client on console-ams.rpki-client.org