Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/1-R_d0mAM4db8TESYu2pTTw4x9Ss.roa
File: 1-R_d0mAM4db8TESYu2pTTw4x9Ss.roa (raw, json)
Hash identifier: 6Wkx+IF0Kgo3NHomj2W6yKb36zdDI7QnRlq5qMChLFk=
Subject key identifier: F9:1F:DD:D2:60:0C:E1:D6:FC:4C:44:98:BB:6A:53:4F:0E:31:F5:2B
Certificate issuer: /CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Certificate serial: 0185714C2D8D9A23935612EDDC12445E1923
Authority key identifier: 1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/1-R_d0mAM4db8TESYu2pTTw4x9Ss.roa
Signing time: Mon 02 Jan 2023 07:04:55 +0000
ROA not before: Mon 02 Jan 2023 07:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39771
IP address blocks: 195.42.0.0/19 maxlen: 19
195.42.32.0/20 maxlen: 20
194.4.72.0/21 maxlen: 21
195.42.48.0/21 maxlen: 21
195.42.56.0/22 maxlen: 22
194.4.80.0/20 maxlen: 20
195.42.60.0/23 maxlen: 23
195.42.62.0/23 maxlen: 23
194.4.96.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:2d:8d:9a:23:93:56:12:ed:dc:12:44:5e:19:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a3e970ed62771343a096ffb2efc26abb7ed68af
Validity
Not Before: Jan 2 07:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f91fddd2600ce1d6fc4c4498bb6a534f0e31f52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6d:ca:c3:dd:84:19:6d:db:47:35:8a:ab:36:
48:5e:8e:a3:57:bf:1b:1d:7a:95:8c:02:80:d9:d1:
dc:25:2f:3c:6b:af:55:b4:18:69:a6:35:72:3b:87:
47:27:9f:38:a2:b1:51:0e:2c:9d:6e:51:07:19:76:
d1:0e:84:45:09:05:cb:6e:b6:95:80:c0:1e:10:61:
d6:ef:42:bc:bf:41:ef:10:16:da:42:a1:1e:e5:d2:
9d:35:a8:fc:52:67:3c:a0:43:73:97:d4:ef:d5:2d:
99:52:3a:fc:a4:e1:c1:6b:37:e5:88:8e:0a:14:ed:
87:29:0d:8a:ca:ff:41:df:64:ed:21:ed:8b:b8:54:
44:b8:b3:a7:f2:fd:b0:3c:ff:b6:9e:72:f7:7c:ec:
7d:2c:77:91:b7:94:b9:90:a5:ed:53:b6:a1:2c:35:
78:61:8f:87:7e:d7:2a:7f:01:28:45:98:3c:6e:f6:
ba:b9:4c:32:76:49:9f:81:4f:21:26:6d:ce:35:eb:
a6:ad:d5:7b:a2:5d:bb:14:48:62:27:90:dc:3d:87:
f6:7c:20:d0:15:d5:d8:0c:c1:97:25:7d:f7:f2:4b:
20:34:87:d8:ad:00:21:a4:9c:83:10:46:d5:6b:b5:
a2:0b:d1:ed:8a:ce:e4:97:a9:1f:e1:81:82:39:b1:
b4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1F:DD:D2:60:0C:E1:D6:FC:4C:44:98:BB:6A:53:4F:0E:31:F5:2B
X509v3 Authority Key Identifier:
keyid:1A:3E:97:0E:D6:27:71:34:3A:09:6F:FB:2E:FC:26:AB:B7:ED:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/1-R_d0mAM4db8TESYu2pTTw4x9Ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f7092-e3a4-470b-85a5-d489094c6604/1/Gj6XDtYncTQ6CW_7Lvwmq7ftaK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.72.0-194.4.99.255
195.42.0.0/18
Signature Algorithm: sha256WithRSAEncryption
0e:cc:64:d7:0a:35:3e:58:ce:fa:ab:77:0d:3b:33:44:b6:42:
58:3b:29:db:dd:ed:0e:ab:e4:8c:f1:c8:76:4a:f0:ea:e0:94:
da:0e:86:f8:74:66:ce:77:d8:e6:03:60:1d:0e:b5:5b:4c:63:
34:43:22:29:fc:5a:44:01:29:11:25:02:c4:34:8f:1c:cf:51:
74:95:fe:0c:10:a1:6c:22:8c:59:79:bf:d0:e8:95:66:d3:74:
81:61:79:79:a1:b7:2c:42:e8:4c:24:49:34:03:91:69:f3:96:
b7:cb:e1:7d:fe:e8:ed:91:3b:50:1a:80:a2:cb:46:8d:e0:b8:
f7:97:ae:fd:ee:d4:cd:2e:d5:69:37:0f:c6:e3:00:19:32:13:
de:42:49:c4:31:2f:4a:fe:b7:fc:04:02:f6:8f:c2:f9:e4:e2:
31:2e:8c:94:c7:c9:79:5a:78:58:05:2e:68:97:d7:93:33:a9:
1d:00:79:63:a4:24:2f:e1:e0:ca:67:40:24:d9:ce:25:75:9c:
bc:19:86:61:68:6d:df:7f:90:af:2b:58:5f:fe:62:22:26:61:
b1:74:fb:36:35:f6:b5:17:d9:38:25:fa:4c:de:b0:4a:c6:16:
16:3d:5c:9b:1c:97:d0:24:0b:cb:9f:ab:60:f8:64:86:05:e4:
9f:d8:cf:30
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxTC2NmiOTVhLt3BJEXhkjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhM2U5NzBlZDYyNzcxMzQzYTA5NmZmYjJlZmMyNmFiYjdl
ZDY4YWYwHhcNMjMwMTAyMDcwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTFmZGRkMjYwMGNlMWQ2ZmM0YzQ0OThiYjZhNTM0ZjBlMzFmNTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA723Kw92EGW3bRzWKqzZIXo6jV78b
HXqVjAKA2dHcJS88a69VtBhppjVyO4dHJ584orFRDiydblEHGXbRDoRFCQXLbraV
gMAeEGHW70K8v0HvEBbaQqEe5dKdNaj8Umc8oENzl9Tv1S2ZUjr8pOHBazfliI4K
FO2HKQ2Kyv9B32TtIe2LuFREuLOn8v2wPP+2nnL3fOx9LHeRt5S5kKXtU7ahLDV4
YY+HftcqfwEoRZg8bva6uUwydkmfgU8hJm3ONeumrdV7ol27FEhiJ5DcPYf2fCDQ
FdXYDMGXJX338ksgNIfYrQAhpJyDEEbVa7WiC9Htis7kl6kf4YGCObG0fwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPkf3dJgDOHW/ExEmLtqU08OMfUrMB8GA1UdIwQY
MBaAFBo+lw7WJ3E0Oglv+y78Jqu37WivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2o2WER0WW5jVFE2Q1dfN0x2d21xN2Z0YUs4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZjcwOTItZTNhNC00NzBiLTg1YTUt
ZDQ4OTA5NGM2NjA0LzEvMS1SX2QwbUFNNGRiOFRFU1l1MnBUVHc0eDlTcy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMWIvMGY3MDkyLWUzYTQtNDcwYi04NWE1LWQ0ODkwOTRjNjYw
NC8xL0dqNlhEdFluY1RRNkNXXzdMdndtcTdmdGFLOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQDwgRI
AwQCwgRgAwQGwyoAMA0GCSqGSIb3DQEBCwUAA4IBAQAOzGTXCjU+WM76q3cNOzNE
tkJYOynb3e0Oq+SM8ch2SvDq4JTaDob4dGbOd9jmA2AdDrVbTGM0QyIp/FpEASkR
JQLENI8cz1F0lf4MEKFsIoxZeb/Q6JVm03SBYXl5obcsQuhMJEk0A5Fp85a3y+F9
/ujtkTtQGoCiy0aN4Lj3l6797tTNLtVpNw/G4wAZMhPeQknEMS9K/rf8BAL2j8L5
5OIxLoyUx8l5WnhYBS5ol9eTM6kdAHljpCQv4eDKZ0Ak2c4ldZy8GYZhaG3ff5Cv
K1hf/mIiJmGxdPs2Nfa1F9k4JfpM3rBKxhYWPVybHJfQJAvLn6tg+GSGBeSf2M8w
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:15:57 2024 by rpki-client on console-ams.rpki-client.org