Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/TCxYikgJNzkcWqeE7s347AHEL-Y.roa
File: TCxYikgJNzkcWqeE7s347AHEL-Y.roa (raw, json)
Hash identifier: 7T4449E/OaaOK4lmiueqt3fLYrR02YGspOGly8tlY2s=
Subject key identifier: 4C:2C:58:8A:48:09:37:39:1C:5A:A7:84:EE:CD:F8:EC:01:C4:2F:E6
Certificate issuer: /CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Certificate serial: 01856F0B77DDF9F091921C292A09BA7CEE54
Authority key identifier: 20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/TCxYikgJNzkcWqeE7s347AHEL-Y.roa
Signing time: Sun 01 Jan 2023 20:35:00 +0000
ROA not before: Sun 01 Jan 2023 20:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47796
IP address blocks: 195.245.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:77:dd:f9:f0:91:92:1c:29:2a:09:ba:7c:ee:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cd574284a6018e5b03635e9a5d658fdf5734f0
Validity
Not Before: Jan 1 20:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c2c588a480937391c5aa784eecdf8ec01c42fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:b9:14:55:7d:90:c8:7e:a9:e0:2e:13:1d:
17:8d:1d:e5:d9:2e:4d:60:57:b0:49:8b:77:ae:3b:
19:28:c4:ce:6e:74:a8:d6:a5:79:b5:c1:ad:f7:e5:
be:a8:96:9a:82:26:b0:1e:28:17:be:a8:71:fd:c0:
7f:22:2a:e0:79:23:14:00:81:66:14:da:1a:77:52:
63:04:0c:bb:e6:1d:89:06:bf:64:84:68:2b:a1:49:
a9:59:e0:3b:43:90:96:1a:e4:05:c1:f1:40:78:81:
64:15:fa:21:e2:95:10:07:7e:0c:da:80:23:29:65:
d9:c7:13:b5:43:41:dd:59:c3:13:84:ff:7d:ec:8b:
c8:1c:ca:1f:87:7f:d2:29:85:4e:20:2d:2b:67:14:
97:6e:14:04:7f:2f:4e:58:a0:a6:a6:a5:ee:dd:ee:
5a:e9:9c:2d:ef:8a:05:a7:c0:cc:39:0c:10:c3:60:
8b:cc:df:52:3f:6d:70:ec:6c:37:9d:3b:11:88:f0:
41:fe:b8:8b:65:ce:a3:53:76:3b:cf:f8:a0:17:e2:
39:d6:88:ad:49:22:f0:9a:2a:80:13:8f:ca:65:ce:
dc:4c:64:3c:ce:21:ac:0f:40:1a:8b:6b:9a:7c:75:
db:24:c0:7e:a6:a8:91:9f:4c:38:52:0f:6f:92:f7:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2C:58:8A:48:09:37:39:1C:5A:A7:84:EE:CD:F8:EC:01:C4:2F:E6
X509v3 Authority Key Identifier:
keyid:20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/TCxYikgJNzkcWqeE7s347AHEL-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.70.0/24
Signature Algorithm: sha256WithRSAEncryption
65:36:21:c4:ad:da:50:19:af:5f:5a:f6:01:fe:0c:a5:13:ee:
96:e4:a3:0e:47:14:34:39:1d:36:eb:19:09:3b:cf:96:70:5b:
15:9a:e6:50:63:61:ca:83:46:80:52:2b:93:e5:1d:17:78:e4:
30:17:ba:9b:6a:11:88:f7:56:58:7d:25:4e:0f:f0:a2:49:d8:
ec:62:20:2c:c1:54:26:41:d8:fe:77:b0:cb:87:16:3c:15:0c:
a8:04:41:bc:48:a3:c6:0d:c8:cb:7b:86:73:9e:23:c7:29:bf:
87:8c:f8:8d:31:02:58:00:27:13:29:be:c0:92:ca:0b:97:55:
d5:88:cb:75:68:9e:d0:1c:8a:0e:61:b3:36:d1:2d:5b:9b:76:
fa:63:fd:47:61:09:f4:9a:59:20:8e:f6:65:16:55:cd:2b:87:
69:68:34:ec:11:27:3b:cb:b3:0a:b1:16:a6:46:f7:cc:e5:9d:
cf:bd:02:d8:54:07:04:11:60:6c:89:40:b8:2b:21:9e:46:25:
df:8f:80:e1:4e:4b:99:a5:94:92:a6:37:c0:2b:72:7d:01:0f:
57:45:b3:ab:83:a4:61:c6:1e:0b:d7:9d:8d:71:53:9c:f1:87:
a4:ca:f9:dc:5f:d2:4b:fa:52:dd:26:f2:09:0e:56:15:29:6a:
7e:6f:b3:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvC3fd+fCRkhwpKgm6fO5UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwY2Q1NzQyODRhNjAxOGU1YjAzNjM1ZTlhNWQ2NThmZGY1
NzM0ZjAwHhcNMjMwMTAxMjAzNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzJjNTg4YTQ4MDkzNzM5MWM1YWE3ODRlZWNkZjhlYzAxYzQyZmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdS5FFV9kMh+qeAuEx0XjR3l2S5N
YFewSYt3rjsZKMTObnSo1qV5tcGt9+W+qJaagiawHigXvqhx/cB/IirgeSMUAIFm
FNoad1JjBAy75h2JBr9khGgroUmpWeA7Q5CWGuQFwfFAeIFkFfoh4pUQB34M2oAj
KWXZxxO1Q0HdWcMThP997IvIHMofh3/SKYVOIC0rZxSXbhQEfy9OWKCmpqXu3e5a
6Zwt74oFp8DMOQwQw2CLzN9SP21w7Gw3nTsRiPBB/riLZc6jU3Y7z/igF+I51oit
SSLwmiqAE4/KZc7cTGQ8ziGsD0Aai2uafHXbJMB+pqiRn0w4Ug9vkvdUnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEwsWIpICTc5HFqnhO7N+OwBxC/mMB8GA1UdIwQY
MBaAFCDNV0KEpgGOWwNjXppdZY/fVzTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU0xWFFvU21BWTViQTJOZW1sMWxqOTlYTlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9jMjE2Y2EtYWE5ZC00ZDIxLTg0MWUt
NDliNTY4N2ZlZTZkLzEvVEN4WWlrZ0pOemtjV3FlRTdzMzQ3QUhFTC1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9jMjE2Y2EtYWE5ZC00ZDIxLTg0MWUtNDliNTY4N2ZlZTZk
LzEvSU0xWFFvU21BWTViQTJOZW1sMWxqOTlYTlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/VGMA0G
CSqGSIb3DQEBCwUAA4IBAQBlNiHErdpQGa9fWvYB/gylE+6W5KMORxQ0OR026xkJ
O8+WcFsVmuZQY2HKg0aAUiuT5R0XeOQwF7qbahGI91ZYfSVOD/CiSdjsYiAswVQm
Qdj+d7DLhxY8FQyoBEG8SKPGDcjLe4ZzniPHKb+HjPiNMQJYACcTKb7AksoLl1XV
iMt1aJ7QHIoOYbM20S1bm3b6Y/1HYQn0mlkgjvZlFlXNK4dpaDTsESc7y7MKsRam
RvfM5Z3PvQLYVAcEEWBsiUC4KyGeRiXfj4DhTkuZpZSSpjfAK3J9AQ9XRbOrg6Rh
xh4L152NcVOc8YekyvncX9JL+lLdJvIJDlYVKWp+b7Mb
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:17 2024 by rpki-client on console-fra.rpki-client.org