Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/bVSfmK-K_zLt5cAX5L1fuRxNsYk.roa
File: bVSfmK-K_zLt5cAX5L1fuRxNsYk.roa (raw, json)
Hash identifier: ED9JoSx9GqS9FBpYdrE9mePE3BA+0JeFrMpvCmHzgII=
Subject key identifier: 6D:54:9F:98:AF:8A:FF:32:ED:E5:C0:17:E4:BD:5F:B9:1C:4D:B1:89
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0189697D00EDC264FD4964D5CDEF87E441F3
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/bVSfmK-K_zLt5cAX5L1fuRxNsYk.roa
Signing time: Tue 18 Jul 2023 14:52:27 +0000
ROA not before: Tue 18 Jul 2023 14:52:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49527
IP address blocks: 194.15.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:69:7d:00:ed:c2:64:fd:49:64:d5:cd:ef:87:e4:41:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 18 14:52:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d549f98af8aff32ede5c017e4bd5fb91c4db189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6d:0c:3c:0d:53:0c:e3:75:40:bf:24:a5:47:
55:87:0d:a1:43:b5:76:66:3f:b3:22:f2:1a:f6:3b:
f5:65:9c:11:25:d8:fc:bc:f6:64:06:16:e8:eb:46:
4c:5c:e6:cf:56:7c:c9:93:01:1e:30:e8:f6:14:62:
53:2d:3a:85:f6:76:b4:ea:eb:56:3a:3e:c7:dc:26:
98:fe:fe:9a:45:3b:7a:fb:fb:ea:f3:cb:b2:68:cd:
94:62:1a:78:29:e7:70:84:f9:f0:11:6d:9a:7c:a3:
ff:c1:17:3a:b3:c8:df:9e:c0:ae:23:5e:f7:1b:a5:
8d:db:0b:8d:2f:c0:d3:44:6d:32:d2:46:5d:6f:12:
82:c2:8d:0b:f1:f8:da:4a:8f:83:5b:be:6c:d7:40:
9e:70:a0:2a:7a:05:e0:7b:3a:d0:fa:95:f0:9b:da:
95:8c:91:9e:09:68:7f:7f:57:e5:8c:6e:06:9a:47:
8c:ec:34:16:5b:e7:39:e0:9a:e5:59:09:78:93:55:
40:d4:1c:91:1c:50:15:f4:62:13:64:5d:b0:60:ff:
7e:6c:f2:44:36:71:57:c7:ca:e4:23:d3:21:bc:30:
10:81:7b:c0:f6:be:82:20:9e:6d:b3:8e:64:24:d5:
be:0e:10:42:86:19:4b:c7:62:5a:a5:9b:28:2f:9c:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:54:9F:98:AF:8A:FF:32:ED:E5:C0:17:E4:BD:5F:B9:1C:4D:B1:89
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/bVSfmK-K_zLt5cAX5L1fuRxNsYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.47.0/24
Signature Algorithm: sha256WithRSAEncryption
54:dd:8f:20:25:79:6b:35:33:18:2d:b7:34:df:52:07:7f:24:
c9:ce:6a:d3:b6:3d:c5:31:88:a8:bb:61:99:c8:ba:f2:a3:4e:
f1:e9:8e:b0:98:77:90:c1:9c:d4:07:2a:2e:03:79:7f:59:80:
68:f2:cd:60:e8:28:15:15:c3:c5:40:6a:5f:83:4f:f5:e8:bf:
d5:66:fa:a4:61:82:13:bc:49:e6:d4:cd:60:34:92:53:45:04:
7d:0d:7b:9e:ec:b9:3c:fd:ab:8c:59:95:1c:6f:94:88:18:09:
bb:9d:73:e5:9a:c3:fd:a7:9f:42:d8:d9:6e:0c:ff:65:5d:c6:
6f:d9:8d:15:9d:5a:4e:c2:46:87:e4:0c:bf:9c:38:4a:2b:02:
54:a5:af:06:ab:b4:0c:b2:53:d0:4d:84:dc:1b:cd:fc:f7:4c:
15:87:d5:64:09:8d:36:d3:0f:1a:2d:ba:3d:0b:ab:ad:c6:3a:
1e:61:52:9d:c6:77:8f:2f:9d:4d:d8:c5:bb:fd:27:c4:82:5d:
d2:a7:22:07:71:5a:23:45:09:5c:e8:b5:84:fd:a0:61:e4:54:
2d:a9:46:c9:e2:82:c1:b3:db:23:7f:ed:3f:2d:95:a2:74:11:
ba:d5:5b:bd:d7:0c:b1:6b:00:c9:b5:6e:15:56:3d:ae:dc:d9:
50:0f:8a:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlpfQDtwmT9SWTVze+H5EHzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMwNzE4MTQ1MjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDU0OWY5OGFmOGFmZjMyZWRlNWMwMTdlNGJkNWZiOTFjNGRiMTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG0MPA1TDON1QL8kpUdVhw2hQ7V2
Zj+zIvIa9jv1ZZwRJdj8vPZkBhbo60ZMXObPVnzJkwEeMOj2FGJTLTqF9na06utW
Oj7H3CaY/v6aRTt6+/vq88uyaM2UYhp4KedwhPnwEW2afKP/wRc6s8jfnsCuI173
G6WN2wuNL8DTRG0y0kZdbxKCwo0L8fjaSo+DW75s10CecKAqegXgezrQ+pXwm9qV
jJGeCWh/f1fljG4GmkeM7DQWW+c54JrlWQl4k1VA1ByRHFAV9GITZF2wYP9+bPJE
NnFXx8rkI9MhvDAQgXvA9r6CIJ5ts45kJNW+DhBChhlLx2JapZsoL5yKKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG1Un5iviv8y7eXAF+S9X7kcTbGJMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvYlZTZm1LLUtfekx0NWNBWDVMMWZ1UnhOc1lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg8vMA0G
CSqGSIb3DQEBCwUAA4IBAQBU3Y8gJXlrNTMYLbc031IHfyTJzmrTtj3FMYiou2GZ
yLryo07x6Y6wmHeQwZzUByouA3l/WYBo8s1g6CgVFcPFQGpfg0/16L/VZvqkYYIT
vEnm1M1gNJJTRQR9DXue7Lk8/auMWZUcb5SIGAm7nXPlmsP9p59C2NluDP9lXcZv
2Y0VnVpOwkaH5Ay/nDhKKwJUpa8Gq7QMslPQTYTcG83890wVh9VkCY020w8aLbo9
C6utxjoeYVKdxnePL51N2MW7/SfEgl3SpyIHcVojRQlc6LWE/aBh5FQtqUbJ4oLB
s9sjf+0/LZWidBG61Vu91wyxawDJtW4VVj2u3NlQD4pa
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org