Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/fHsUVBkWXCb3JdV0CYDr_-wJXxg.roa
File: fHsUVBkWXCb3JdV0CYDr_-wJXxg.roa (raw, json)
Hash identifier: v3Y7W1R6dR1O5utSwZdYI+J1nxg3eUx6FiKYq9m1lFk=
Subject key identifier: 7C:7B:14:54:19:16:5C:26:F7:25:D5:74:09:80:EB:FF:EC:09:5F:18
Certificate issuer: /CN=3ec2c20d6b3acf84802c2b7ca0722deb72c670bb
Certificate serial: 01887BBD2BABFFADB1F0F05616002D72A348
Authority key identifier: 3E:C2:C2:0D:6B:3A:CF:84:80:2C:2B:7C:A0:72:2D:EB:72:C6:70:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsLCDWs6z4SALCt8oHIt63LGcLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/fHsUVBkWXCb3JdV0CYDr_-wJXxg.roa
Signing time: Fri 02 Jun 2023 10:52:54 +0000
ROA not before: Fri 02 Jun 2023 10:52:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200113
IP address blocks: 195.211.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:bd:2b:ab:ff:ad:b1:f0:f0:56:16:00:2d:72:a3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec2c20d6b3acf84802c2b7ca0722deb72c670bb
Validity
Not Before: Jun 2 10:52:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c7b145419165c26f725d5740980ebffec095f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:19:27:ea:cf:46:34:9b:52:84:e3:72:b4:91:
4d:4d:2a:f8:bd:30:15:f0:20:b8:35:67:55:2e:ce:
63:1f:ab:e9:95:09:a7:f9:bf:e6:c6:7e:11:49:32:
d8:17:e6:82:c4:e7:bb:9d:7e:20:1b:28:65:35:42:
ce:0c:c3:a3:78:e9:66:e9:0b:94:31:7b:32:c2:73:
46:f5:7f:a2:15:25:dd:aa:07:d8:ec:fb:b5:3a:33:
73:dd:9b:92:c4:cd:34:9f:85:df:41:64:bd:83:cc:
29:a6:84:52:15:15:a8:c9:87:c5:dd:9d:1e:11:a8:
e6:fc:37:d1:03:45:3e:f3:59:f5:0e:0a:3c:8a:98:
a7:5a:db:5b:8c:2f:d6:ff:92:e3:d6:06:62:93:5c:
1e:0c:12:f5:0b:3c:79:43:94:a8:e9:9e:9e:32:bd:
82:f1:38:d8:95:b7:f5:11:99:57:80:e9:fd:b5:2a:
98:8c:92:da:af:59:e5:8a:1d:a0:01:5e:da:49:43:
e6:29:49:60:97:be:f3:89:ff:8e:1e:6e:81:61:18:
1f:2b:7f:e5:3b:45:ab:c0:ed:66:4f:74:ff:c3:16:
03:b8:7f:36:6d:ce:82:ab:64:38:cc:74:f5:00:34:
f5:41:1e:3e:2d:5b:0a:55:8e:f3:cf:bd:51:45:84:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7B:14:54:19:16:5C:26:F7:25:D5:74:09:80:EB:FF:EC:09:5F:18
X509v3 Authority Key Identifier:
keyid:3E:C2:C2:0D:6B:3A:CF:84:80:2C:2B:7C:A0:72:2D:EB:72:C6:70:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsLCDWs6z4SALCt8oHIt63LGcLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/fHsUVBkWXCb3JdV0CYDr_-wJXxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2710b0-6c4a-4a94-b92a-b1cefc995379/1/PsLCDWs6z4SALCt8oHIt63LGcLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.167.0/24
Signature Algorithm: sha256WithRSAEncryption
71:37:46:49:79:45:e8:c4:58:84:28:c5:f7:31:9c:15:2e:ce:
75:99:3d:11:5b:6b:87:5d:c8:f0:e6:e8:08:f5:01:68:27:2f:
72:24:70:07:af:61:36:67:bd:0b:49:bb:6f:29:3f:d2:37:55:
06:a6:98:e6:6f:c4:ae:19:54:f4:36:40:c0:06:e1:fe:de:ed:
6e:a3:a9:e6:5d:34:2e:09:49:bd:f3:60:c3:e6:7e:6f:d3:7f:
b5:66:9d:81:da:bf:45:5a:18:db:5c:38:8f:4b:bb:e4:5a:58:
64:2f:bf:dd:d1:29:b6:36:c2:2c:77:ac:57:3a:57:4c:4d:d4:
c0:87:b4:cf:09:50:04:c6:1c:c8:44:8e:c1:da:7d:67:66:ac:
4e:e8:fd:68:d9:3f:76:f9:64:a9:de:2e:66:fd:00:15:53:4f:
58:f6:c4:17:2b:b2:83:d8:57:4b:21:21:90:8d:74:c1:2d:82:
52:00:a6:35:5e:49:41:d7:89:3d:1d:ee:4c:d6:aa:d2:90:8f:
a7:fa:d5:70:65:41:30:1f:74:67:ba:6f:f9:eb:b1:ff:3b:8c:
13:ef:a3:ec:68:1e:6d:93:f8:35:b8:62:2c:ee:36:40:05:bb:
e5:bc:9d:99:5d:e2:e3:2e:91:5a:5a:8c:86:26:19:8e:d1:46:
ba:63:8a:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYh7vSur/62x8PBWFgAtcqNIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYzJjMjBkNmIzYWNmODQ4MDJjMmI3Y2EwNzIyZGViNzJj
NjcwYmIwHhcNMjMwNjAyMTA1MjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzdiMTQ1NDE5MTY1YzI2ZjcyNWQ1NzQwOTgwZWJmZmVjMDk1ZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hkn6s9GNJtShONytJFNTSr4vTAV
8CC4NWdVLs5jH6vplQmn+b/mxn4RSTLYF+aCxOe7nX4gGyhlNULODMOjeOlm6QuU
MXsywnNG9X+iFSXdqgfY7Pu1OjNz3ZuSxM00n4XfQWS9g8wppoRSFRWoyYfF3Z0e
Eajm/DfRA0U+81n1Dgo8ipinWttbjC/W/5Lj1gZik1weDBL1Czx5Q5So6Z6eMr2C
8TjYlbf1EZlXgOn9tSqYjJLar1nlih2gAV7aSUPmKUlgl77zif+OHm6BYRgfK3/l
O0WrwO1mT3T/wxYDuH82bc6Cq2Q4zHT1ADT1QR4+LVsKVY7zz71RRYShSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHx7FFQZFlwm9yXVdAmA6//sCV8YMB8GA1UdIwQY
MBaAFD7Cwg1rOs+EgCwrfKByLetyxnC7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHNMQ0RXczZ6NFNBTEN0OG9ISXQ2M0xHY0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yNzEwYjAtNmM0YS00YTk0LWI5MmEt
YjFjZWZjOTk1Mzc5LzEvZkhzVVZCa1dYQ2IzSmRWMENZRHJfLXdKWHhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yNzEwYjAtNmM0YS00YTk0LWI5MmEtYjFjZWZjOTk1Mzc5
LzEvUHNMQ0RXczZ6NFNBTEN0OG9ISXQ2M0xHY0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9OnMA0G
CSqGSIb3DQEBCwUAA4IBAQBxN0ZJeUXoxFiEKMX3MZwVLs51mT0RW2uHXcjw5ugI
9QFoJy9yJHAHr2E2Z70LSbtvKT/SN1UGppjmb8SuGVT0NkDABuH+3u1uo6nmXTQu
CUm982DD5n5v03+1Zp2B2r9FWhjbXDiPS7vkWlhkL7/d0Sm2NsIsd6xXOldMTdTA
h7TPCVAExhzIRI7B2n1nZqxO6P1o2T92+WSp3i5m/QAVU09Y9sQXK7KD2FdLISGQ
jXTBLYJSAKY1XklB14k9He5M1qrSkI+n+tVwZUEwH3Rnum/567H/O4wT76PsaB5t
k/g1uGIs7jZABbvlvJ2ZXeLjLpFaWoyGJhmO0Ua6Y4p4
-----END CERTIFICATE-----
Generated at Thu Nov 2 09:56:00 2023 by rpki-client on console-fra.rpki-client.org