Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/o7DVvzNwsnWKdFC_C6wCDzpIicM.roa
File: o7DVvzNwsnWKdFC_C6wCDzpIicM.roa (raw, json)
Hash identifier: 6IjrNvGmcoXB8VPLM/OfNBaXC0QyKDt+pt3ZyFnmTiE=
Subject key identifier: A3:B0:D5:BF:33:70:B2:75:8A:74:50:BF:0B:AC:02:0F:3A:48:89:C3
Certificate issuer: /CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Certificate serial: 0186C576A78D6F95B358A1C4835E74D9A792
Authority key identifier: 1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/o7DVvzNwsnWKdFC_C6wCDzpIicM.roa
Signing time: Thu 09 Mar 2023 08:22:13 +0000
ROA not before: Thu 09 Mar 2023 08:22:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207024
IP address blocks: 195.14.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Mar 2023 10:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:76:a7:8d:6f:95:b3:58:a1:c4:83:5e:74:d9:a7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c242f2e945c6a72ee28f8c80e80d488433e37a3
Validity
Not Before: Mar 9 08:22:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3b0d5bf3370b2758a7450bf0bac020f3a4889c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:17:b9:93:62:1c:d1:5f:7d:39:d6:0c:48:f5:
67:3f:eb:ab:21:22:76:fb:5c:44:ec:66:c3:ed:85:
f0:93:83:af:97:6c:27:35:63:17:c7:bb:8a:0f:79:
f7:89:6d:20:cb:14:9b:28:14:9d:f0:91:ff:28:52:
3b:46:99:83:d6:e6:30:f9:ae:0d:0f:d1:fc:84:92:
3d:87:b2:24:21:be:63:a1:0e:70:3c:c2:10:e9:77:
f2:f4:36:5c:80:10:88:0d:1b:58:1f:69:63:a3:58:
24:f5:25:e2:d0:1e:82:2d:72:cf:cc:ca:7a:c3:72:
14:ad:58:7f:fe:7b:65:16:34:02:10:92:01:7a:f5:
0d:8c:e5:7b:10:69:93:07:38:66:05:d4:e1:3a:f2:
db:e2:37:68:ce:b7:8c:66:a5:8e:86:6a:e2:ea:4e:
e6:93:52:2a:aa:94:2d:b9:9d:ed:e8:a4:df:bc:20:
21:6f:9d:e6:72:a0:6d:7d:61:b5:c8:c7:57:6c:cd:
60:a1:fd:61:66:14:85:46:6b:78:a7:35:48:94:26:
49:34:1e:ef:93:7c:32:5c:1d:1a:f7:76:cc:65:26:
a8:86:0f:9f:72:c3:fe:78:82:b8:31:70:5e:c4:5d:
06:c5:fb:d9:24:44:2f:f9:76:06:b5:e9:03:06:08:
a9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B0:D5:BF:33:70:B2:75:8A:74:50:BF:0B:AC:02:0F:3A:48:89:C3
X509v3 Authority Key Identifier:
keyid:1C:24:2F:2E:94:5C:6A:72:EE:28:F8:C8:0E:80:D4:88:43:3E:37:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCQvLpRcanLuKPjIDoDUiEM-N6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/o7DVvzNwsnWKdFC_C6wCDzpIicM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b3449b-27cb-40d1-b7aa-ca78ef5826ca/1/HCQvLpRcanLuKPjIDoDUiEM-N6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.104.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e0:26:c5:d0:3c:6b:7a:8b:cb:8b:c6:3d:31:f7:28:8b:55:
71:8d:c4:f7:d0:75:5a:97:26:60:4b:18:7b:3a:9b:d7:11:ea:
e2:2d:b4:38:ee:57:9c:00:2e:66:26:e2:78:e9:7c:db:14:dd:
32:44:56:13:d1:c8:51:69:2a:11:0a:9c:d1:d8:e0:46:64:ba:
79:88:94:4e:91:3f:ee:3d:be:2e:b0:6b:25:c2:e7:20:18:cc:
8b:45:f9:d6:f0:ab:1f:94:ea:5b:83:71:e6:67:54:0d:a5:49:
1d:e5:47:b0:02:32:f6:6f:bb:a3:15:9b:d4:e3:1e:d1:0f:7c:
dd:c7:52:9d:23:9e:d0:53:02:ee:39:2f:38:93:32:64:32:6d:
b1:15:34:47:ba:6c:55:b1:ae:64:2c:3e:2e:7a:b2:8e:49:cd:
0a:76:1d:bb:11:f7:6e:4d:ac:7f:67:72:bb:f3:a2:b6:12:2b:
dc:c9:1c:d4:36:0e:d7:2f:2f:87:30:b4:ce:18:28:6f:24:46:
57:84:b2:40:8c:1f:0a:d0:8f:1a:e4:b7:ac:00:2c:56:8c:35:
24:80:c8:76:23:99:09:bc:71:08:1b:f5:06:52:b8:4d:e9:83:
e8:91:4c:ae:c8:e2:92:98:e8:84:f1:e5:c5:b3:dd:18:ac:76:
19:e9:f9:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbFdqeNb5WzWKHEg1502aeSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMjQyZjJlOTQ1YzZhNzJlZTI4ZjhjODBlODBkNDg4NDMz
ZTM3YTMwHhcNMjMwMzA5MDgyMjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2IwZDViZjMzNzBiMjc1OGE3NDUwYmYwYmFjMDIwZjNhNDg4OWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhe5k2Ic0V99OdYMSPVnP+urISJ2
+1xE7GbD7YXwk4Ovl2wnNWMXx7uKD3n3iW0gyxSbKBSd8JH/KFI7RpmD1uYw+a4N
D9H8hJI9h7IkIb5joQ5wPMIQ6Xfy9DZcgBCIDRtYH2ljo1gk9SXi0B6CLXLPzMp6
w3IUrVh//ntlFjQCEJIBevUNjOV7EGmTBzhmBdThOvLb4jdozreMZqWOhmri6k7m
k1IqqpQtuZ3t6KTfvCAhb53mcqBtfWG1yMdXbM1gof1hZhSFRmt4pzVIlCZJNB7v
k3wyXB0a93bMZSaohg+fcsP+eIK4MXBexF0GxfvZJEQv+XYGtekDBgip4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKOw1b8zcLJ1inRQvwusAg86SInDMB8GA1UdIwQY
MBaAFBwkLy6UXGpy7ij4yA6A1IhDPjejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEt
Y2E3OGVmNTgyNmNhLzEvbzdEVnZ6TndzbldLZEZDX0M2d0NEenBJaWNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMzQ0OWItMjdjYi00MGQxLWI3YWEtY2E3OGVmNTgyNmNh
LzEvSENRdkxwUmNhbkx1S1BqSURvRFVpRU0tTjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAww5oMA0G
CSqGSIb3DQEBCwUAA4IBAQAN4CbF0DxreovLi8Y9Mfcoi1VxjcT30HValyZgSxh7
OpvXEeriLbQ47lecAC5mJuJ46XzbFN0yRFYT0chRaSoRCpzR2OBGZLp5iJROkT/u
Pb4usGslwucgGMyLRfnW8KsflOpbg3HmZ1QNpUkd5UewAjL2b7ujFZvU4x7RD3zd
x1KdI57QUwLuOS84kzJkMm2xFTRHumxVsa5kLD4uerKOSc0Kdh27EfduTax/Z3K7
86K2EivcyRzUNg7XLy+HMLTOGChvJEZXhLJAjB8K0I8a5LesACxWjDUkgMh2I5kJ
vHEIG/UGUrhN6YPokUyuyOKSmOiE8eXFs90YrHYZ6fnR
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:05 2024 by rpki-client on console-ams.rpki-client.org