Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/0vTvnJzTsU-XEOLAr-blWgPSpqU.roa
File: 0vTvnJzTsU-XEOLAr-blWgPSpqU.roa (raw, json)
Hash identifier: 3CU30ooXsHG5OFw0fWxoKpWx5Ek2XI4Iq+dvL4H6LIc=
Subject key identifier: D2:F4:EF:9C:9C:D3:B1:4F:97:10:E2:C0:AF:E6:E5:5A:03:D2:A6:A5
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018B812F8214365D5B84928BB250AAAB5CF4
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/0vTvnJzTsU-XEOLAr-blWgPSpqU.roa
Signing time: Mon 30 Oct 2023 15:24:16 +0000
ROA not before: Mon 30 Oct 2023 15:24:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 194.15.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:2f:82:14:36:5d:5b:84:92:8b:b2:50:aa:ab:5c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Oct 30 15:24:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2f4ef9c9cd3b14f9710e2c0afe6e55a03d2a6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:25:57:ea:c9:f5:82:f3:37:00:e2:97:00:10:
44:22:1b:f4:1d:97:b2:69:dd:77:8c:82:6c:77:21:
e3:c1:80:e2:ea:18:7d:d3:0d:c9:0d:ec:b0:93:6b:
e9:70:a6:99:d5:21:bb:bd:ad:84:c1:8c:f3:69:41:
92:02:4f:3a:95:62:a0:df:bd:bb:4e:cf:9a:5d:d2:
11:2e:1a:df:1d:b1:5c:61:e9:e7:b0:3a:28:0e:2a:
e8:46:bb:a9:76:f4:06:06:e7:09:2e:5b:a4:82:eb:
b6:db:d2:0e:01:98:20:8c:da:bd:f8:b4:19:06:b6:
11:2a:07:3a:5b:42:84:6f:c4:1b:18:81:a8:fb:21:
dd:56:25:b0:d4:de:24:d7:bc:4c:64:eb:40:55:2a:
d1:11:27:82:3b:d9:56:c5:9d:69:a9:aa:2b:7e:ee:
05:4f:04:2d:28:c9:10:1f:21:0d:35:79:28:47:6a:
bf:0c:3c:79:6d:21:e6:f7:f3:d4:8f:43:69:47:38:
6d:7e:2e:b5:7e:f6:00:86:00:ce:21:34:fb:d0:ce:
d3:2b:c0:5d:da:04:76:fb:1f:b2:36:fe:28:f9:a9:
04:8f:a9:db:72:10:b0:10:c1:b1:b4:b6:9b:be:2a:
7d:db:c9:e0:43:b7:c2:0d:59:1a:f6:c2:d4:5e:8b:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F4:EF:9C:9C:D3:B1:4F:97:10:E2:C0:AF:E6:E5:5A:03:D2:A6:A5
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/0vTvnJzTsU-XEOLAr-blWgPSpqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.98.0/24
Signature Algorithm: sha256WithRSAEncryption
14:67:13:22:65:1f:38:4f:29:9e:bc:0a:53:5b:52:58:81:9a:
e8:97:0a:2d:91:02:32:b7:0e:47:e4:89:05:33:70:8c:46:22:
71:9e:41:f5:86:4b:d2:30:bb:7b:93:55:17:e7:48:11:03:b1:
f8:70:5d:ec:13:22:01:12:78:70:2f:48:9a:b9:90:e0:8a:02:
7f:59:e1:bb:69:02:a9:03:c3:4a:0c:02:c1:3a:4b:72:ac:56:
31:f7:cb:ec:8e:28:21:bc:dc:50:ee:12:7c:8b:84:0c:93:03:
bb:75:08:25:11:52:5b:b5:7f:19:6d:14:ce:f0:92:d6:db:46:
83:5a:20:ec:80:b7:29:10:2b:0c:d3:d2:c9:e6:f3:0d:20:42:
83:62:ac:45:38:e7:b7:23:ba:33:0d:07:b8:7f:6c:b3:27:a9:
2b:5b:cd:9d:d3:2c:b5:97:9b:43:c9:25:e5:fc:14:8c:fe:aa:
dd:d9:72:a1:98:e1:39:64:3e:1e:8a:11:ac:71:fa:77:b2:ad:
8f:78:5c:26:f2:0d:c9:9f:28:98:4b:66:35:9f:69:9b:75:5e:
8a:96:95:86:eb:8e:d2:5e:04:cf:b1:20:43:5e:d3:ab:16:6d:
8e:6e:94:c5:35:84:53:fa:21:a2:50:b5:2e:1a:ef:4b:6d:78:
4d:96:38:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuBL4IUNl1bhJKLslCqq1z0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjMxMDMwMTUyNDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmY0ZWY5YzljZDNiMTRmOTcxMGUyYzBhZmU2ZTU1YTAzZDJhNmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziVX6sn1gvM3AOKXABBEIhv0HZey
ad13jIJsdyHjwYDi6hh90w3JDeywk2vpcKaZ1SG7va2EwYzzaUGSAk86lWKg3727
Ts+aXdIRLhrfHbFcYennsDooDiroRrupdvQGBucJLlukguu229IOAZggjNq9+LQZ
BrYRKgc6W0KEb8QbGIGo+yHdViWw1N4k17xMZOtAVSrRESeCO9lWxZ1pqaorfu4F
TwQtKMkQHyENNXkoR2q/DDx5bSHm9/PUj0NpRzhtfi61fvYAhgDOITT70M7TK8Bd
2gR2+x+yNv4o+akEj6nbchCwEMGxtLabvip928ngQ7fCDVka9sLUXouTUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNL075yc07FPlxDiwK/m5VoD0qalMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvMHZUdm5KelRzVS1YRU9MQXItYmxXZ1BTcHFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg9iMA0G
CSqGSIb3DQEBCwUAA4IBAQAUZxMiZR84TymevApTW1JYgZrolwotkQIytw5H5IkF
M3CMRiJxnkH1hkvSMLt7k1UX50gRA7H4cF3sEyIBEnhwL0iauZDgigJ/WeG7aQKp
A8NKDALBOktyrFYx98vsjighvNxQ7hJ8i4QMkwO7dQglEVJbtX8ZbRTO8JLW20aD
WiDsgLcpECsM09LJ5vMNIEKDYqxFOOe3I7ozDQe4f2yzJ6krW82d0yy1l5tDySXl
/BSM/qrd2XKhmOE5ZD4eihGscfp3sq2PeFwm8g3JnyiYS2Y1n2mbdV6KlpWG647S
XgTPsSBDXtOrFm2ObpTFNYRT+iGiULUuGu9LbXhNljgU
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:07 2024 by rpki-client on console-ams.rpki-client.org