Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/0VPpD2znj6pomVohf9rTkPySc3s.roa
File: 0VPpD2znj6pomVohf9rTkPySc3s.roa (raw, json)
Hash identifier: tZe85YHSS+d3lzA4x0rYl2jjQ81k8N6FqlGQ8B7lRTI=
Subject key identifier: D1:53:E9:0F:6C:E7:8F:AA:68:99:5A:21:7F:DA:D3:90:FC:92:73:7B
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 0185711E3E3B8CBE82F23BCA7735C114D191
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/0VPpD2znj6pomVohf9rTkPySc3s.roa
Signing time: Mon 02 Jan 2023 06:14:45 +0000
ROA not before: Mon 02 Jan 2023 06:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 193.28.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:3e:3b:8c:be:82:f2:3b:ca:77:35:c1:14:d1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Jan 2 06:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d153e90f6ce78faa68995a217fdad390fc92737b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:d6:80:eb:b4:dc:b3:3d:f2:5d:39:c8:37:
ab:44:25:9d:bc:bf:b3:d3:5c:88:6a:fa:84:dc:39:
82:f5:66:81:94:0d:b3:fc:71:81:e3:f0:c9:8d:bb:
b1:46:1c:fa:a2:18:17:9c:50:8e:7f:aa:2c:b6:35:
9c:be:19:d9:d5:a8:1d:be:69:bb:64:c8:ef:09:97:
d5:99:70:2a:63:47:62:23:17:3b:63:81:16:3a:32:
54:c9:c1:0f:15:5a:2a:e2:8a:60:9e:c4:ad:35:5c:
02:d4:6c:6d:93:9b:ab:d0:d2:ad:20:95:c2:34:5c:
59:98:61:87:f1:9b:7f:1d:b5:15:40:22:2e:9c:e8:
2a:7a:af:70:df:29:20:7a:2b:49:12:b9:65:f3:6d:
7a:55:51:c1:68:c2:cc:57:d6:ee:02:ef:b6:09:b1:
3e:9d:e1:b3:3e:71:30:51:87:20:f5:d0:ed:13:35:
a3:67:69:25:ee:ad:29:ae:06:c5:f2:b1:02:dd:33:
70:46:e4:39:08:dd:74:b8:9e:45:0c:b9:c3:a0:d6:
12:11:78:34:d2:77:ad:53:71:7c:9a:10:6a:f5:ec:
a5:89:01:1b:c5:5d:96:f5:5d:c2:69:13:89:24:06:
b2:28:e4:95:92:ce:23:17:8f:40:dd:b6:4c:2a:a2:
33:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:53:E9:0F:6C:E7:8F:AA:68:99:5A:21:7F:DA:D3:90:FC:92:73:7B
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/0VPpD2znj6pomVohf9rTkPySc3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f2:c8:da:7a:98:1d:b7:eb:a4:af:ac:06:75:4b:5f:ba:38:
f2:28:9f:56:10:70:92:c3:f4:5b:2b:01:7d:01:6d:1a:54:52:
73:7d:a7:4a:95:81:97:c4:8e:13:a4:74:8e:a9:af:f5:a1:5c:
f6:4e:72:68:f3:24:99:2c:8d:d2:03:0d:d4:fb:21:48:f0:f8:
80:f9:3c:e1:fd:fc:76:8a:3c:82:ec:94:03:88:c3:54:00:a0:
55:21:d4:e3:a9:cf:70:c9:cc:03:11:aa:cd:22:77:5d:5e:ec:
f1:8e:17:c0:01:08:bf:71:b8:de:8e:f8:c7:a1:ca:82:41:8b:
c0:2d:ba:3f:22:61:c7:cb:e8:67:30:53:34:00:6d:a9:93:74:
c9:53:f7:28:3a:a0:72:66:8b:4b:2e:98:9d:bc:41:81:87:4d:
91:0e:1c:2e:0c:e5:93:73:7f:09:18:f1:63:07:e6:4d:ee:19:
0d:71:65:3d:df:e0:7d:92:ae:7d:b9:35:cf:a1:fd:d9:6b:ca:
3e:df:d7:3c:0b:3b:6d:5d:fa:77:7c:f3:d9:e9:66:f4:80:ab:
a9:79:c9:7e:76:78:f3:ac:66:b0:7a:57:23:88:79:e9:1d:21:
7f:0e:dd:18:40:95:db:40:c3:24:1e:ec:19:87:89:34:cd:24:
90:81:e7:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxHj47jL6C8jvKdzXBFNGRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDBkODU2NzY0YTNmZWU2NGJlMTRmMGE0OWY1OWE2ODY1
Mjg1ZDEwHhcNMjMwMTAyMDYxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTUzZTkwZjZjZTc4ZmFhNjg5OTVhMjE3ZmRhZDM5MGZjOTI3MzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwufWgOu03LM98l05yDerRCWdvL+z
01yIavqE3DmC9WaBlA2z/HGB4/DJjbuxRhz6ohgXnFCOf6ostjWcvhnZ1agdvmm7
ZMjvCZfVmXAqY0diIxc7Y4EWOjJUycEPFVoq4opgnsStNVwC1Gxtk5ur0NKtIJXC
NFxZmGGH8Zt/HbUVQCIunOgqeq9w3ykgeitJErll8216VVHBaMLMV9buAu+2CbE+
neGzPnEwUYcg9dDtEzWjZ2kl7q0prgbF8rEC3TNwRuQ5CN10uJ5FDLnDoNYSEXg0
0netU3F8mhBq9eyliQEbxV2W9V3CaROJJAayKOSVks4jF49A3bZMKqIzTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNFT6Q9s54+qaJlaIX/a05D8knN7MB8GA1UdIwQY
MBaAFHnQ2FZ2Sj/uZL4U8KSfWaaGUoXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMt
ZjJiYjY5ZTc1ZTc0LzEvMFZQcEQyem5qNnBvbVZvaGY5clRrUHlTYzNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMtZjJiYjY5ZTc1ZTc0
LzEvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRz5MA0G
CSqGSIb3DQEBCwUAA4IBAQBP8sjaepgdt+ukr6wGdUtfujjyKJ9WEHCSw/RbKwF9
AW0aVFJzfadKlYGXxI4TpHSOqa/1oVz2TnJo8ySZLI3SAw3U+yFI8PiA+Tzh/fx2
ijyC7JQDiMNUAKBVIdTjqc9wycwDEarNInddXuzxjhfAAQi/cbjejvjHocqCQYvA
Lbo/ImHHy+hnMFM0AG2pk3TJU/coOqByZotLLpidvEGBh02RDhwuDOWTc38JGPFj
B+ZN7hkNcWU93+B9kq59uTXPof3Za8o+39c8CzttXfp3fPPZ6Wb0gKupecl+dnjz
rGawelcjiHnpHSF/Dt0YQJXbQMMkHuwZh4k0zSSQgeeZ
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:23 2024 by rpki-client on console-ams.rpki-client.org