Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/e8FZx0-jdAg0_FRFU-YXcE3Ct0g.roa
File: e8FZx0-jdAg0_FRFU-YXcE3Ct0g.roa (raw, json)
Hash identifier: CqWOPiDh2m9qJWtRc02PiJGniSyiQnZdhSVj0rcuWds=
Subject key identifier: 7B:C1:59:C7:4F:A3:74:08:34:FC:54:45:53:E6:17:70:4D:C2:B7:48
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7DC0D7D1E2776DBB97FC1D13A9E3E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/e8FZx0-jdAg0_FRFU-YXcE3Ct0g.roa
Signing time: Mon 02 Jan 2023 09:37:30 +0000
ROA not before: Mon 02 Jan 2023 09:37:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196886
IP address blocks: 188.255.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:dc:0d:7d:1e:27:76:db:b9:7f:c1:d1:3a:9e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bc159c74fa3740834fc544553e617704dc2b748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:72:f2:a4:6a:2c:b1:6a:bf:83:1f:25:42:39:
6e:fb:44:f7:1a:43:d5:12:90:5d:db:10:66:e4:04:
72:99:2d:34:de:4d:f1:b3:3a:3c:08:08:98:db:f4:
c0:60:02:62:b8:49:c6:f1:ca:e9:70:57:47:d8:44:
09:27:c8:9d:df:ec:7c:57:01:fb:53:de:06:20:a6:
5e:87:42:f7:d3:11:0b:3e:44:be:8b:2d:d5:ba:86:
fe:e6:3c:70:51:25:60:5a:98:59:9a:b9:d6:8b:84:
f5:25:12:18:46:88:c6:59:36:a4:4a:62:68:03:ea:
2b:c1:ea:69:ac:a3:5b:b1:56:83:72:02:0a:c9:f1:
45:16:08:53:62:ee:35:4d:af:76:ad:d9:ec:98:7a:
dd:52:3e:84:48:05:ac:de:c7:05:54:c4:64:8f:5d:
75:7c:07:58:65:de:8a:23:c2:d6:65:ec:5b:06:78:
a2:6c:ab:60:e4:72:1b:d4:1f:ee:fc:0e:00:c3:df:
e5:3c:4b:14:36:07:c7:5a:96:0c:69:3f:55:60:ed:
43:26:d5:de:80:b3:71:af:04:b5:a5:04:a6:4f:09:
6e:16:b1:58:0d:d7:2a:3c:c9:4a:01:a5:3d:d6:12:
dc:9c:45:9f:f5:fb:53:23:a0:6a:b1:e3:6c:52:4f:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C1:59:C7:4F:A3:74:08:34:FC:54:45:53:E6:17:70:4D:C2:B7:48
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/e8FZx0-jdAg0_FRFU-YXcE3Ct0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e1:33:d3:d4:74:ea:80:b4:17:83:d4:45:23:ab:5a:0f:23:
e3:1a:c7:f1:e3:ec:ea:69:53:d9:ef:cb:76:aa:4b:6a:b2:99:
ec:79:7c:2f:0c:34:31:6f:db:a8:14:9b:95:4f:9a:6f:41:c6:
e2:7b:40:1e:ed:8a:5d:a8:57:70:a0:d1:07:11:c9:52:18:39:
58:6d:e7:be:98:1b:99:2a:e0:27:d1:e9:fb:e1:46:1f:cb:03:
f5:44:3a:c6:23:b7:5b:42:7e:db:34:2e:b5:1f:7b:4d:fe:55:
24:28:1f:9a:32:de:72:cf:af:6b:05:38:23:1d:4b:cd:31:10:
b3:28:80:99:ff:5e:4d:f2:2f:d7:ee:c9:76:70:79:56:18:8f:
0d:e8:93:06:24:68:1a:2f:05:ec:f6:69:4d:87:10:d2:b2:8e:
23:a3:f3:f1:2a:3a:7a:87:7e:66:13:c5:7c:e2:83:41:76:0f:
20:67:a2:14:e1:5e:36:7b:b5:7e:3d:f2:d9:ac:7b:c3:c2:51:
c3:89:59:ff:d5:4e:e1:fb:f4:49:7d:5c:b1:e3:95:5e:9b:af:
b7:dd:58:58:c0:e9:d7:92:fb:81:67:3e:c3:ea:9d:df:a6:13:
41:df:9c:ad:9c:1a:5a:5d:ff:20:22:9e:cf:08:6f:af:6f:4c:
ad:36:97:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx19wNfR4ndtu5f8HROp4+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwMTAyMDkzNzMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmMxNTljNzRmYTM3NDA4MzRmYzU0NDU1M2U2MTc3MDRkYzJiNzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnLypGossWq/gx8lQjlu+0T3GkPV
EpBd2xBm5ARymS003k3xszo8CAiY2/TAYAJiuEnG8crpcFdH2EQJJ8id3+x8VwH7
U94GIKZeh0L30xELPkS+iy3Vuob+5jxwUSVgWphZmrnWi4T1JRIYRojGWTakSmJo
A+orwepprKNbsVaDcgIKyfFFFghTYu41Ta92rdnsmHrdUj6ESAWs3scFVMRkj111
fAdYZd6KI8LWZexbBniibKtg5HIb1B/u/A4Aw9/lPEsUNgfHWpYMaT9VYO1DJtXe
gLNxrwS1pQSmTwluFrFYDdcqPMlKAaU91hLcnEWf9ftTI6BqseNsUk923QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHvBWcdPo3QINPxURVPmF3BNwrdIMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvZThGWngwLWpkQWcwX0ZSRlUtWVhjRTNDdDBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP/8MA0G
CSqGSIb3DQEBCwUAA4IBAQBt4TPT1HTqgLQXg9RFI6taDyPjGsfx4+zqaVPZ78t2
qktqspnseXwvDDQxb9uoFJuVT5pvQcbie0Ae7YpdqFdwoNEHEclSGDlYbee+mBuZ
KuAn0en74UYfywP1RDrGI7dbQn7bNC61H3tN/lUkKB+aMt5yz69rBTgjHUvNMRCz
KICZ/15N8i/X7sl2cHlWGI8N6JMGJGgaLwXs9mlNhxDSso4jo/PxKjp6h35mE8V8
4oNBdg8gZ6IU4V42e7V+PfLZrHvDwlHDiVn/1U7h+/RJfVyx45Vem6+33VhYwOnX
kvuBZz7D6p3fphNB35ytnBpaXf8gIp7PCG+vb0ytNpc1
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:36 2024 by rpki-client on console-fra.rpki-client.org