Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/1-VbAgVxAOROWGrrf4oqgzXX9GN8.roa
File: 1-VbAgVxAOROWGrrf4oqgzXX9GN8.roa (raw, json)
Hash identifier: EB9FwbEA2Hntx7sdyxuFLF8ekl/+iyJ5WzEf0bXTaN8=
Subject key identifier: F9:56:C0:81:5C:40:39:13:96:1A:BA:DF:E2:8A:A0:CD:75:FD:18:DF
Certificate issuer: /CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Certificate serial: 01857271285629AC8A2A52E00E6C68FC51C6
Authority key identifier: 63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/1-VbAgVxAOROWGrrf4oqgzXX9GN8.roa
Signing time: Mon 02 Jan 2023 12:24:56 +0000
ROA not before: Mon 02 Jan 2023 12:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 195.176.160.0/19 maxlen: 19
86.119.0.0/16 maxlen: 16
192.86.166.0/24 maxlen: 24
195.176.0.0/17 maxlen: 17
195.176.224.0/19 maxlen: 19
130.59.0.0/16 maxlen: 16
192.65.94.0/24 maxlen: 24
192.65.92.0/23 maxlen: 23
2001:620::/29 maxlen: 29
2001:620::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:28:56:29:ac:8a:2a:52:e0:0e:6c:68:fc:51:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6311a9d4c10252fbf73b7165f35acc1dce9f0a93
Validity
Not Before: Jan 2 12:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f956c0815c403913961abadfe28aa0cd75fd18df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ec:01:dd:00:b2:43:f4:9f:55:18:2e:09:1d:
d8:4a:81:18:92:95:e8:d3:23:59:31:b1:b8:15:88:
d4:6f:ab:8a:7c:14:64:a5:23:27:d6:be:eb:58:17:
00:9f:28:30:9e:a8:80:fb:b2:70:24:5f:32:1f:26:
07:30:47:10:47:00:95:ba:01:d5:b1:a7:87:dc:9c:
e7:7d:bc:d7:1b:bd:14:75:d4:9f:22:71:3c:5e:22:
d2:ba:b3:10:7f:ee:57:b5:63:ef:27:f4:7d:0a:07:
f8:61:f8:63:1f:09:30:7b:7f:64:32:92:23:ca:76:
4d:54:58:11:7f:7e:ea:6d:ed:4b:b1:e1:45:7b:c8:
c7:ef:fb:b7:67:86:06:f0:83:66:f0:91:32:09:07:
54:84:47:5a:d8:94:c4:18:46:92:fa:34:49:bd:22:
a8:31:61:b2:e0:0e:1b:45:95:36:9b:45:76:2d:be:
84:b0:67:ee:7d:5b:fd:73:2c:61:af:91:cb:34:1e:
87:8a:d4:c5:8a:a2:e8:73:07:23:53:91:1f:a9:d9:
45:85:69:bd:51:08:c4:13:5c:fd:d9:6f:a7:80:92:
99:68:ad:41:bc:03:69:f7:57:4d:37:34:52:c8:ba:
4c:e5:d0:73:7c:28:a3:6c:96:86:bd:26:de:38:74:
da:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:56:C0:81:5C:40:39:13:96:1A:BA:DF:E2:8A:A0:CD:75:FD:18:DF
X509v3 Authority Key Identifier:
keyid:63:11:A9:D4:C1:02:52:FB:F7:3B:71:65:F3:5A:CC:1D:CE:9F:0A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YxGp1MECUvv3O3Fl81rMHc6fCpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/1-VbAgVxAOROWGrrf4oqgzXX9GN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/5ed5d3-b99c-486b-af9c-7cfd957f08ff/1/YxGp1MECUvv3O3Fl81rMHc6fCpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.119.0.0/16
130.59.0.0/16
192.65.92.0-192.65.94.255
192.86.166.0/24
195.176.0.0/17
195.176.160.0/19
195.176.224.0/19
IPv6:
2001:620::/29
Signature Algorithm: sha256WithRSAEncryption
9e:cd:f7:74:70:98:30:89:ce:b9:88:d4:a0:af:9f:29:53:7c:
1e:5f:20:9a:35:0c:52:e9:59:19:15:7a:8e:52:01:9d:a1:51:
59:ad:0d:04:8a:e9:05:69:1d:29:1e:e7:56:2a:17:06:2f:9e:
f2:ea:89:b6:e4:8d:98:21:4f:81:9e:c8:80:19:de:6b:d5:cf:
ce:54:0d:af:09:9d:58:97:eb:b0:bb:2b:56:d5:a9:0f:71:f6:
6e:f0:aa:eb:54:85:c5:82:a6:0e:5a:58:f3:fa:eb:4b:57:04:
b6:f0:a5:5b:ff:ba:85:40:3e:cf:6f:46:4b:47:87:fe:d0:10:
74:7d:ed:8e:05:a3:e2:fb:76:99:b8:43:9c:91:65:b8:6c:b1:
04:4e:34:f8:90:91:ec:0e:b6:db:fe:c7:6c:6b:9c:2e:9c:97:
2a:c5:99:d6:15:69:6c:43:75:1b:13:9c:0e:08:51:22:a9:2b:
48:d7:6d:21:83:33:39:91:63:31:db:21:45:0b:6e:71:8b:e1:
19:0d:62:ed:33:82:8c:27:01:86:4d:11:7f:59:f2:e3:b0:3c:
04:95:66:06:0a:0e:28:9f:df:e9:c7:6f:e9:ac:8d:c7:d6:4b:
b9:50:13:61:51:9a:fe:25:58:34:6d:1d:fe:9d:9d:62:01:87:
3e:cf:8c:12
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAYVycShWKayKKlLgDmxo/FHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMTFhOWQ0YzEwMjUyZmJmNzNiNzE2NWYzNWFjYzFkY2U5
ZjBhOTMwHhcNMjMwMTAyMTIyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTU2YzA4MTVjNDAzOTEzOTYxYWJhZGZlMjhhYTBjZDc1ZmQxOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOwB3QCyQ/SfVRguCR3YSoEYkpXo
0yNZMbG4FYjUb6uKfBRkpSMn1r7rWBcAnygwnqiA+7JwJF8yHyYHMEcQRwCVugHV
saeH3JznfbzXG70UddSfInE8XiLSurMQf+5XtWPvJ/R9Cgf4YfhjHwkwe39kMpIj
ynZNVFgRf37qbe1LseFFe8jH7/u3Z4YG8INm8JEyCQdUhEda2JTEGEaS+jRJvSKo
MWGy4A4bRZU2m0V2Lb6EsGfufVv9cyxhr5HLNB6HitTFiqLocwcjU5EfqdlFhWm9
UQjEE1z92W+ngJKZaK1BvANp91dNNzRSyLpM5dBzfCijbJaGvSbeOHTaOwIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFPlWwIFcQDkTlhq63+KKoM11/RjfMB8GA1UdIwQY
MBaAFGMRqdTBAlL79ztxZfNazB3OnwqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXhHcDFNRUNVdnYzTzNGbDgxck1IYzZmQ3BNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81ZWQ1ZDMtYjk5Yy00ODZiLWFmOWMt
N2NmZDk1N2YwOGZmLzEvMS1WYkFnVnhBT1JPV0dycmY0b3FnelhYOUdOOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTkvNWVkNWQzLWI5OWMtNDg2Yi1hZjljLTdjZmQ5NTdmMDhm
Zi8xL1l4R3AxTUVDVXZ2M08zRmw4MXJNSGM2ZkNwTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBYBggrBgEFBQcBBwEB/wRJMEcwNgQCAAEwMAMDAFZ3AwMA
gjswDAMEAsBBXAMEAMBBXgMEAMBWpgMEB8OwAAMEBcOwoAMEBcOw4DANBAIAAjAH
AwUDIAEGIDANBgkqhkiG9w0BAQsFAAOCAQEAns33dHCYMInOuYjUoK+fKVN8Hl8g
mjUMUulZGRV6jlIBnaFRWa0NBIrpBWkdKR7nVioXBi+e8uqJtuSNmCFPgZ7IgBne
a9XPzlQNrwmdWJfrsLsrVtWpD3H2bvCq61SFxYKmDlpY8/rrS1cEtvClW/+6hUA+
z29GS0eH/tAQdH3tjgWj4vt2mbhDnJFluGyxBE40+JCR7A622/7HbGucLpyXKsWZ
1hVpbEN1GxOcDghRIqkrSNdtIYMzOZFjMdshRQtucYvhGQ1i7TOCjCcBhk0Rf1ny
47A8BJVmBgoOKJ/f6cdv6ayNx9ZLuVATYVGa/iVYNG0d/p2dYgGHPs+MEg==
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:10:48 2024 by rpki-client on console-ams.rpki-client.org