Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/vd2AREGzPmBmJQeaRpRgzARA4hQ.roa
File: vd2AREGzPmBmJQeaRpRgzARA4hQ.roa (raw, json)
Hash identifier: u1wlZz/dVMq3WC9sjvDu677IauE0kR2VKojK4ltSRCc=
Subject key identifier: BD:DD:80:44:41:B3:3E:60:66:25:07:9A:46:94:60:CC:04:40:E2:14
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0185AA60BCFD1DDA2F7C11E47B514D77DFC8
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/vd2AREGzPmBmJQeaRpRgzARA4hQ.roa
Signing time: Fri 13 Jan 2023 09:05:44 +0000
ROA not before: Fri 13 Jan 2023 09:05:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 195.242.241.0/24 maxlen: 24
89.46.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:60:bc:fd:1d:da:2f:7c:11:e4:7b:51:4d:77:df:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 13 09:05:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bddd804441b33e606625079a469460cc0440e214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:97:18:09:6c:73:26:11:6c:37:53:2a:ac:b7:
4a:35:45:b2:37:eb:5c:72:32:ba:29:c4:d5:48:c0:
94:17:44:bc:f3:c7:42:5a:a2:e3:7c:32:97:86:95:
f9:b2:ed:a4:a8:ef:a4:78:45:d8:09:10:d4:51:2c:
f2:c6:0f:21:93:5a:d1:45:cd:ff:65:a8:29:41:7c:
c8:99:2e:93:3b:43:ce:2f:8d:37:7d:4a:6b:41:71:
1d:f8:fd:7c:0e:bd:00:ee:a4:58:d4:c5:09:6a:d4:
9b:5e:31:e8:75:e2:9c:6c:20:9f:8f:34:d5:84:f4:
f2:40:d7:8c:4b:7e:b6:cc:f3:62:e2:12:25:c5:74:
42:11:3c:5f:94:b5:ac:b2:3e:8b:7e:ba:df:32:b4:
ff:6e:93:d2:62:fe:6e:46:29:da:55:24:b9:48:f9:
39:9c:7c:45:c1:c4:af:84:0b:be:92:43:3e:cb:80:
ae:2d:25:04:bd:83:21:3b:6d:7a:4e:24:7a:ce:c5:
24:73:22:27:29:46:63:fc:ae:b2:7a:91:99:39:20:
dc:77:29:35:c5:a1:52:b2:af:8a:fd:1d:c7:be:79:
b7:87:07:dd:23:e4:2e:5a:73:ab:16:4b:df:26:9b:
55:01:ae:55:ba:e6:70:3d:63:ea:b4:19:1c:c1:36:
db:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DD:80:44:41:B3:3E:60:66:25:07:9A:46:94:60:CC:04:40:E2:14
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/vd2AREGzPmBmJQeaRpRgzARA4hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.8.0/24
195.242.241.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:86:9b:86:e9:38:f1:93:b0:3e:70:3d:99:3b:cb:0c:9f:67:
5c:a5:dc:7e:1b:64:65:9f:61:27:19:3a:15:40:68:e0:d3:38:
12:51:51:58:1d:b6:72:5d:bc:91:7e:22:60:53:f1:8c:7c:e8:
05:0d:b6:cf:da:91:cd:e9:f1:46:37:17:aa:26:bb:af:25:4e:
a0:26:fe:d8:03:54:e1:56:3b:29:fa:d4:e0:0e:28:a0:11:c9:
ba:1f:7d:fc:67:c2:d9:13:d7:dd:61:e6:72:18:b0:0d:57:d3:
0e:47:50:38:c7:39:a0:ca:95:70:29:f1:fd:e8:79:39:1d:c0:
79:0a:08:33:55:fb:58:cd:fe:c6:6d:18:d9:cf:9e:0c:71:a8:
a1:14:df:a0:0e:d0:3a:7d:2c:89:ff:e7:6c:4d:2b:4e:b2:9d:
dc:f3:60:84:d6:90:ca:04:8b:50:ca:dc:9b:39:7b:96:58:9a:
ee:a6:0d:d1:72:ff:eb:b8:1d:81:4f:69:fc:3e:d7:db:01:37:
c2:a1:e2:f4:24:1d:c9:9b:28:df:80:4f:ed:f7:cf:80:60:34:
fe:75:1d:48:15:49:3b:fa:6c:70:c7:ee:0b:d4:4c:6d:29:d6:
7c:24:a5:34:76:13:8c:73:0c:e5:ce:80:12:1e:41:c2:f8:b8:
4d:4c:09:10
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYWqYLz9HdovfBHke1FNd9/IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjMwMTEzMDkwNTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGRkODA0NDQxYjMzZTYwNjYyNTA3OWE0Njk0NjBjYzA0NDBlMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJcYCWxzJhFsN1MqrLdKNUWyN+tc
cjK6KcTVSMCUF0S888dCWqLjfDKXhpX5su2kqO+keEXYCRDUUSzyxg8hk1rRRc3/
ZagpQXzImS6TO0POL403fUprQXEd+P18Dr0A7qRY1MUJatSbXjHodeKcbCCfjzTV
hPTyQNeMS362zPNi4hIlxXRCETxflLWssj6LfrrfMrT/bpPSYv5uRinaVSS5SPk5
nHxFwcSvhAu+kkM+y4CuLSUEvYMhO216TiR6zsUkcyInKUZj/K6yepGZOSDcdyk1
xaFSsq+K/R3Hvnm3hwfdI+QuWnOrFkvfJptVAa5VuuZwPWPqtBkcwTbbswIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL3dgERBsz5gZiUHmkaUYMwEQOIUMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvdmQyQVJFR3pQbUJtSlFlYVJwUmd6QVJBNGhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWS4IAwQA
w/LxMA0GCSqGSIb3DQEBCwUAA4IBAQAshpuG6Tjxk7A+cD2ZO8sMn2dcpdx+G2Rl
n2EnGToVQGjg0zgSUVFYHbZyXbyRfiJgU/GMfOgFDbbP2pHN6fFGNxeqJruvJU6g
Jv7YA1ThVjsp+tTgDiigEcm6H338Z8LZE9fdYeZyGLANV9MOR1A4xzmgypVwKfH9
6Hk5HcB5CggzVftYzf7GbRjZz54McaihFN+gDtA6fSyJ/+dsTStOsp3c82CE1pDK
BItQytybOXuWWJrupg3Rcv/ruB2BT2n8PtfbATfCoeL0JB3JmyjfgE/t98+AYDT+
dR1IFUk7+mxwx+4L1ExtKdZ8JKU0dhOMcwzlzoASHkHC+LhNTAkQ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:04 2023 by rpki-client on console-ams.rpki-client.org