Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1-oE5mwCFV4Yh4Az4xGW0aq3JOJc.roa
File: 1-oE5mwCFV4Yh4Az4xGW0aq3JOJc.roa (raw, json)
Hash identifier: Uwr2pUBJfEI7xMPJILSGUneUyHhS558/jXDKaFwNQe4=
Subject key identifier: FA:81:39:9B:00:85:57:86:21:E0:0C:F8:C4:65:B4:6A:AD:C9:38:97
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185739014515FDE4CB769F3FE3F3DA10020
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1-oE5mwCFV4Yh4Az4xGW0aq3JOJc.roa
Signing time: Mon 02 Jan 2023 17:38:20 +0000
ROA not before: Mon 02 Jan 2023 17:38:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212711
IP address blocks: 194.56.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:14:51:5f:de:4c:b7:69:f3:fe:3f:3d:a1:00:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa81399b0085578621e00cf8c465b46aadc93897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:29:7f:5b:95:92:7b:64:18:28:3b:4d:3b:f2:
0b:81:ab:ec:e9:62:10:b3:2b:a2:13:62:55:fe:74:
cb:9b:fa:c2:29:6d:04:56:c9:fc:48:9a:c4:d2:53:
18:86:ff:a8:42:f6:92:7d:b3:90:33:4c:7e:82:f1:
a2:9a:5e:a1:f1:cc:a4:bc:81:76:e3:01:8c:9c:1e:
75:77:3a:99:ae:e8:f2:b7:1a:dd:7a:15:b4:44:b0:
64:e6:20:23:e5:72:ff:e3:4a:b5:e0:62:28:d0:1d:
f3:2d:73:da:c7:fc:74:f2:2e:8a:35:81:f0:a3:18:
c0:e3:a7:3f:f6:bd:a7:b8:e0:fa:c8:7c:6e:c6:36:
62:0f:ab:33:47:05:d6:cf:70:f9:24:08:c4:95:e7:
f7:4f:89:11:f1:dd:d4:4f:ea:bc:68:f6:f0:41:47:
db:b3:ff:9c:09:ec:6f:18:9d:49:b9:3a:c8:c8:1c:
1e:0e:0a:10:0d:0b:6e:90:23:1a:62:3c:0a:b7:7b:
2b:db:ff:6d:e7:f0:6f:9e:e8:03:f3:19:5e:23:24:
6e:ac:02:54:dc:61:b5:72:26:c3:37:f3:b8:13:e6:
44:da:e7:45:91:ac:2e:68:07:56:00:6e:46:84:fc:
9f:f3:f5:bd:89:93:c5:b1:8d:2c:46:78:74:b1:6c:
4a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:81:39:9B:00:85:57:86:21:E0:0C:F8:C4:65:B4:6A:AD:C9:38:97
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1-oE5mwCFV4Yh4Az4xGW0aq3JOJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.224.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:aa:38:21:22:8d:92:a5:e6:09:2b:11:a8:37:bf:1e:62:b7:
5a:da:56:27:5b:5c:81:88:26:1b:db:40:ae:59:12:43:57:b0:
57:78:ff:f4:38:8c:3e:3b:53:21:ac:66:ba:43:c6:6f:7e:08:
c4:27:30:66:e5:b5:d0:45:e5:0f:9a:d7:55:6e:98:7b:4e:82:
8d:cc:5a:5d:95:05:29:52:55:06:bb:53:99:9f:e8:c7:fd:91:
c3:d3:9e:0c:53:9b:87:e5:ac:c9:9d:5f:c4:fe:60:6c:43:5f:
e1:9b:1e:ca:f2:88:f8:36:13:bb:90:41:11:1d:b6:ed:1d:c8:
ca:2c:53:e4:f9:13:d5:df:09:b0:96:e9:0c:7a:d7:bf:5f:26:
44:fb:60:9b:70:63:62:45:39:a6:5e:17:62:d9:7f:da:b6:73:
21:47:de:5f:ff:fc:1c:15:60:4e:2e:85:22:b7:52:6f:1a:89:
84:54:ba:a1:74:95:08:af:ca:7e:2c:32:54:53:69:c2:21:5c:
5e:3c:73:de:fd:b0:26:75:93:a3:38:a2:e0:6a:ac:5c:ba:c7:
d3:93:9e:88:6d:20:1a:4b:a3:06:6b:9d:fb:ff:9c:94:a8:bf:
93:09:1a:b4:13:a0:35:b4:56:c9:86:f6:cc:f6:9f:1b:47:81:
6d:10:5e:88
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVzkBRRX95Mt2nz/j89oQAgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjMwMTAyMTczODIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTgxMzk5YjAwODU1Nzg2MjFlMDBjZjhjNDY1YjQ2YWFkYzkzODk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyl/W5WSe2QYKDtNO/ILgavs6WIQ
syuiE2JV/nTLm/rCKW0EVsn8SJrE0lMYhv+oQvaSfbOQM0x+gvGiml6h8cykvIF2
4wGMnB51dzqZrujytxrdehW0RLBk5iAj5XL/40q14GIo0B3zLXPax/x08i6KNYHw
oxjA46c/9r2nuOD6yHxuxjZiD6szRwXWz3D5JAjElef3T4kR8d3UT+q8aPbwQUfb
s/+cCexvGJ1JuTrIyBweDgoQDQtukCMaYjwKt3sr2/9t5/BvnugD8xleIyRurAJU
3GG1cibDN/O4E+ZE2udFkawuaAdWAG5GhPyf8/W9iZPFsY0sRnh0sWxKdwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPqBOZsAhVeGIeAM+MRltGqtyTiXMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvMS1vRTVtd0NGVjRZaDRBejR4R1cwYXEzSk9KYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTcvZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5
Yi8xL3NhZXcyTjZDVWROdGZJUDY5cngtX3NjN1VEUS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMI44DAN
BgkqhkiG9w0BAQsFAAOCAQEApqo4ISKNkqXmCSsRqDe/HmK3WtpWJ1tcgYgmG9tA
rlkSQ1ewV3j/9DiMPjtTIaxmukPGb34IxCcwZuW10EXlD5rXVW6Ye06CjcxaXZUF
KVJVBrtTmZ/ox/2Rw9OeDFObh+WsyZ1fxP5gbENf4ZseyvKI+DYTu5BBER227R3I
yixT5PkT1d8JsJbpDHrXv18mRPtgm3BjYkU5pl4XYtl/2rZzIUfeX//8HBVgTi6F
IrdSbxqJhFS6oXSVCK/KfiwyVFNpwiFcXjxz3v2wJnWTozii4GqsXLrH05OeiG0g
GkujBmud+/+clKi/kwkatBOgNbRWyYb2zPafG0eBbRBeiA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-ams.rpki-client.org