Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/AFYCtEYNrM1abw033LfzwzhaAas.roa
File: AFYCtEYNrM1abw033LfzwzhaAas.roa (raw, json)
Hash identifier: ZVP/iQYIyfZxRZ5AC+HTUmgSqIMMv4vwSc720tfxfOA=
Subject key identifier: 00:56:02:B4:46:0D:AC:CD:5A:6F:0D:37:DC:B7:F3:C3:38:5A:01:AB
Certificate issuer: /CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Certificate serial: 018A2A847A14706B9B7207D29301690F7D77
Authority key identifier: 09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/AFYCtEYNrM1abw033LfzwzhaAas.roa
Signing time: Fri 25 Aug 2023 02:27:19 +0000
ROA not before: Fri 25 Aug 2023 02:27:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 195.85.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2a:84:7a:14:70:6b:9b:72:07:d2:93:01:69:0f:7d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0969a2a39635b797476f1f1633ae8f27bf33b533
Validity
Not Before: Aug 25 02:27:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=005602b4460daccd5a6f0d37dcb7f3c3385a01ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fc:8a:fc:b6:48:9f:d2:b0:81:69:ea:51:31:
2b:39:82:8c:2f:08:24:ba:f8:31:de:6c:cd:b7:17:
b8:8d:b4:ca:f6:54:9b:bb:c9:de:2f:ca:86:b0:0a:
7d:69:ed:51:84:5c:1e:f7:bc:80:3f:5b:5e:17:b9:
bc:e2:2b:84:3a:22:bc:35:83:02:3c:81:00:05:bc:
44:5e:0e:50:b2:f3:7b:ca:8c:ef:c2:88:c7:55:43:
c4:1a:41:57:1c:ce:15:1b:7e:0c:00:a0:f4:60:b2:
3b:84:2e:6c:ec:2b:dd:c5:75:c3:6f:5e:47:39:4e:
e3:7c:38:45:c9:f3:58:c6:44:db:50:7b:ca:97:ba:
d4:c4:a7:64:07:f7:d6:dd:7a:a3:0c:f2:b2:b1:3b:
0c:83:25:a9:d7:33:37:a1:23:8c:d6:df:73:3f:da:
fc:c6:4e:d8:64:9a:db:81:53:8d:8d:e6:4a:ae:10:
e2:2d:fe:95:86:bb:f7:74:a0:01:00:0c:a6:9e:b6:
f1:79:2f:40:e7:ce:7b:7a:3f:21:9b:0d:c6:6d:5f:
a0:41:3e:fe:81:3d:3c:69:9a:3c:8f:16:3f:88:00:
95:45:e6:81:ff:82:fd:fd:6b:89:98:16:06:32:92:
74:32:c4:0e:71:d4:9b:65:32:b0:19:a3:8d:55:b0:
a5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:56:02:B4:46:0D:AC:CD:5A:6F:0D:37:DC:B7:F3:C3:38:5A:01:AB
X509v3 Authority Key Identifier:
keyid:09:69:A2:A3:96:35:B7:97:47:6F:1F:16:33:AE:8F:27:BF:33:B5:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWmio5Y1t5dHbx8WM66PJ78ztTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/AFYCtEYNrM1abw033LfzwzhaAas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6db427-f7dc-4ea9-ae95-41490872fc4e/1/CWmio5Y1t5dHbx8WM66PJ78ztTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.207.0/24
Signature Algorithm: sha256WithRSAEncryption
48:2d:bf:f9:3e:04:6d:e1:5c:18:cd:5e:e0:72:b0:d8:10:df:
7d:e9:9e:51:63:61:19:7c:cf:32:3e:02:1f:1e:19:b4:d2:c3:
b6:24:0f:1c:f9:fc:ae:94:3e:c7:b6:02:b6:23:14:40:3c:71:
a6:0e:7f:84:b2:8d:11:54:a1:69:8d:f2:20:55:f6:48:5d:a9:
da:61:1a:10:df:ba:8d:9e:b8:69:d0:f6:e3:12:09:d8:f7:41:
99:c3:40:77:e8:0e:9e:c7:8e:d2:f6:d3:c2:4e:19:3a:9a:15:
f4:ff:fa:a7:75:da:d0:e6:12:4d:4f:06:39:66:e2:63:54:a1:
e7:08:a6:55:53:ef:51:52:ff:d9:a4:21:f1:22:ed:87:23:8b:
c3:41:f1:51:c6:65:97:c8:d7:8d:1c:1f:a6:8a:ed:af:ca:31:
f5:73:84:a3:78:e9:88:1b:8e:40:70:24:5b:c9:53:4f:d8:0a:
0a:ba:e2:31:6a:6b:1f:fc:0b:c0:e3:7d:2f:84:bc:13:6b:50:
5a:99:96:88:3b:5e:c0:f7:7e:5f:94:75:d6:84:65:8e:3c:c6:
61:8f:f9:50:87:be:57:9f:4a:7d:9a:15:c3:4f:e5:f8:68:4c:
3a:51:a1:68:c0:2c:22:b3:76:a4:66:aa:7b:28:d2:e9:8d:13:
96:51:48:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYoqhHoUcGubcgfSkwFpD313MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjlhMmEzOTYzNWI3OTc0NzZmMWYxNjMzYWU4ZjI3YmYz
M2I1MzMwHhcNMjMwODI1MDIyNzE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDU2MDJiNDQ2MGRhY2NkNWE2ZjBkMzdkY2I3ZjNjMzM4NWEwMWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPyK/LZIn9KwgWnqUTErOYKMLwgk
uvgx3mzNtxe4jbTK9lSbu8neL8qGsAp9ae1RhFwe97yAP1teF7m84iuEOiK8NYMC
PIEABbxEXg5QsvN7yozvwojHVUPEGkFXHM4VG34MAKD0YLI7hC5s7CvdxXXDb15H
OU7jfDhFyfNYxkTbUHvKl7rUxKdkB/fW3XqjDPKysTsMgyWp1zM3oSOM1t9zP9r8
xk7YZJrbgVONjeZKrhDiLf6Vhrv3dKABAAymnrbxeS9A5857ej8hmw3GbV+gQT7+
gT08aZo8jxY/iACVReaB/4L9/WuJmBYGMpJ0MsQOcdSbZTKwGaONVbClIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFABWArRGDazNWm8NN9y388M4WgGrMB8GA1UdIwQY
MBaAFAlpoqOWNbeXR28fFjOujye/M7UzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUt
NDE0OTA4NzJmYzRlLzEvQUZZQ3RFWU5yTTFhYncwMzNMZnp3emhhQWFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC82ZGI0MjctZjdkYy00ZWE5LWFlOTUtNDE0OTA4NzJmYzRl
LzEvQ1dtaW81WTF0NWRIYng4V002NlBKNzh6dFRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1XPMA0G
CSqGSIb3DQEBCwUAA4IBAQBILb/5PgRt4VwYzV7gcrDYEN996Z5RY2EZfM8yPgIf
Hhm00sO2JA8c+fyulD7HtgK2IxRAPHGmDn+Eso0RVKFpjfIgVfZIXanaYRoQ37qN
nrhp0PbjEgnY90GZw0B36A6ex47S9tPCThk6mhX0//qnddrQ5hJNTwY5ZuJjVKHn
CKZVU+9RUv/ZpCHxIu2HI4vDQfFRxmWXyNeNHB+miu2vyjH1c4SjeOmIG45AcCRb
yVNP2AoKuuIxamsf/AvA430vhLwTa1BamZaIO17A935flHXWhGWOPMZhj/lQh75X
n0p9mhXDT+X4aEw6UaFowCwis3akZqp7KNLpjROWUUi1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:04 2024 by rpki-client on console-fra.rpki-client.org