Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/E-02DnsPxL6ME9s3P2HQxi43fNw.roa
File: E-02DnsPxL6ME9s3P2HQxi43fNw.roa (raw, json)
Hash identifier: 31HS92qnhqKKe3BvtKPsd5bIDDojnS8EUAsh8Xa1eiM=
Subject key identifier: 13:ED:36:0E:7B:0F:C4:BE:8C:13:DB:37:3F:61:D0:C6:2E:37:7C:DC
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018570028DD11D4C974ACC993C8D8E7B7245
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/E-02DnsPxL6ME9s3P2HQxi43fNw.roa
Signing time: Mon 02 Jan 2023 01:04:53 +0000
ROA not before: Mon 02 Jan 2023 01:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35758
IP address blocks: 195.242.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8d:d1:1d:4c:97:4a:cc:99:3c:8d:8e:7b:72:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 2 01:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13ed360e7b0fc4be8c13db373f61d0c62e377cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:51:03:4e:06:4b:76:92:23:88:65:af:94:
26:26:31:d8:2f:99:a2:77:77:ab:74:24:9c:34:2b:
96:88:9b:72:f4:86:81:09:59:9e:a7:c8:e2:d1:3f:
bf:3c:80:a1:34:a7:c0:28:b3:6b:fe:ed:a5:37:e9:
24:93:44:b7:92:3a:6c:e9:4d:40:1d:fe:c4:6d:bc:
8a:9c:fa:a7:22:d4:47:e4:26:8c:35:07:94:1b:e6:
10:6b:48:e7:ac:fb:2b:c3:bf:2c:9d:75:e8:0c:a0:
38:d9:63:8b:af:fb:28:7c:ea:52:49:a2:67:e9:c2:
aa:65:26:4e:3b:71:33:75:df:41:56:f4:66:46:e3:
32:41:37:13:88:c9:ce:5a:e5:df:6c:d7:b7:92:cc:
65:4d:3f:34:33:4c:d8:69:47:3e:40:c6:d0:1d:9f:
9f:ef:19:18:5d:a3:2c:26:e5:33:40:7f:75:44:52:
60:d7:01:79:33:a9:87:d4:89:a0:21:3b:eb:0c:e3:
89:f6:25:2b:5d:4a:47:db:35:1e:88:b6:ec:8e:b8:
5e:4f:fd:27:17:89:de:d9:91:09:e4:69:2f:48:5a:
5c:9e:63:48:a6:36:96:c9:48:6e:7a:6f:a7:96:e3:
26:53:b5:f6:61:af:ae:5c:ab:1b:88:18:c8:29:ec:
40:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:ED:36:0E:7B:0F:C4:BE:8C:13:DB:37:3F:61:D0:C6:2E:37:7C:DC
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/E-02DnsPxL6ME9s3P2HQxi43fNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.240.0/24
Signature Algorithm: sha256WithRSAEncryption
54:dd:c3:72:4d:8e:a0:8f:c7:8d:ed:69:0a:9c:34:19:13:2b:
df:64:fc:03:10:cb:c4:71:94:1c:8a:58:6c:21:02:5e:fa:59:
69:66:e0:ef:19:f5:4c:52:26:b9:de:a2:9b:ee:73:77:20:18:
fa:74:84:38:79:cd:91:ee:5f:26:4c:a6:ce:e1:6b:57:68:52:
ca:db:a0:14:21:7a:af:e9:f4:43:3d:47:8a:58:51:ca:16:f6:
74:34:7a:f2:22:40:93:7d:ba:88:7c:3f:c4:0a:a9:3a:1f:15:
fd:28:e0:ff:70:72:72:a9:05:1d:24:d5:ad:e1:04:f9:2d:61:
4f:2f:00:f3:7b:61:92:e5:65:1b:2a:26:53:c4:f0:df:74:0e:
83:87:80:fb:14:ed:11:13:57:88:58:80:d8:d2:d9:63:2f:32:
b8:1a:5e:6a:a6:06:98:99:05:20:6f:23:9f:78:4e:85:66:86:
57:6e:f8:00:93:73:30:03:5e:ca:3f:c0:e5:5d:13:d4:cd:05:
9b:e8:fb:de:85:9b:b7:61:0d:e6:7e:6a:f7:09:71:9c:ec:be:
52:db:ad:fa:44:61:9d:43:f9:75:65:f0:14:4d:52:5a:17:66:
82:54:9c:7c:02:55:a5:68:b0:c2:12:e8:c9:1c:3a:d7:a3:40:
3e:f4:45:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwAo3RHUyXSsyZPI2Oe3JFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjMwMTAyMDEwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2VkMzYwZTdiMGZjNGJlOGMxM2RiMzczZjYxZDBjNjJlMzc3Y2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrNRA04GS3aSI4hlr5QmJjHYL5mi
d3erdCScNCuWiJty9IaBCVmep8ji0T+/PIChNKfAKLNr/u2lN+kkk0S3kjps6U1A
Hf7EbbyKnPqnItRH5CaMNQeUG+YQa0jnrPsrw78snXXoDKA42WOLr/sofOpSSaJn
6cKqZSZOO3Ezdd9BVvRmRuMyQTcTiMnOWuXfbNe3ksxlTT80M0zYaUc+QMbQHZ+f
7xkYXaMsJuUzQH91RFJg1wF5M6mH1ImgITvrDOOJ9iUrXUpH2zUeiLbsjrheT/0n
F4ne2ZEJ5GkvSFpcnmNIpjaWyUhuem+nluMmU7X2Ya+uXKsbiBjIKexAXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBPtNg57D8S+jBPbNz9h0MYuN3zcMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvRS0wMkRuc1B4TDZNRTlzM1AySFF4aTQzZk53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/LwMA0G
CSqGSIb3DQEBCwUAA4IBAQBU3cNyTY6gj8eN7WkKnDQZEyvfZPwDEMvEcZQcilhs
IQJe+llpZuDvGfVMUia53qKb7nN3IBj6dIQ4ec2R7l8mTKbO4WtXaFLK26AUIXqv
6fRDPUeKWFHKFvZ0NHryIkCTfbqIfD/ECqk6HxX9KOD/cHJyqQUdJNWt4QT5LWFP
LwDze2GS5WUbKiZTxPDfdA6Dh4D7FO0RE1eIWIDY0tljLzK4Gl5qpgaYmQUgbyOf
eE6FZoZXbvgAk3MwA17KP8DlXRPUzQWb6PvehZu3YQ3mfmr3CXGc7L5S2636RGGd
Q/l1ZfAUTVJaF2aCVJx8AlWlaLDCEujJHDrXo0A+9EX/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:04 2023 by rpki-client on console-ams.rpki-client.org