Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/eWXR0dyM_1txx28KjdNcWswmH4k.roa
File: eWXR0dyM_1txx28KjdNcWswmH4k.roa (raw, json)
Hash identifier: CT2DN42m6vvHs0YOA+IZZIJVBrxc+ljcsufNXqshI6w=
Subject key identifier: 79:65:D1:D1:DC:8C:FF:5B:71:C7:6F:0A:8D:D3:5C:5A:CC:26:1F:89
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 01856C53D0BDBDC1DB4A5AC523F60BB16B89
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/eWXR0dyM_1txx28KjdNcWswmH4k.roa
Signing time: Sun 01 Jan 2023 07:55:10 +0000
ROA not before: Sun 01 Jan 2023 07:55:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207433
IP address blocks: 84.47.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d0:bd:bd:c1:db:4a:5a:c5:23:f6:0b:b1:6b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 1 07:55:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7965d1d1dc8cff5b71c76f0a8dd35c5acc261f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:9c:0d:79:62:ff:aa:74:04:4e:95:82:94:
6d:db:8a:94:2e:5d:05:db:60:a4:ba:13:e7:70:91:
43:f0:ef:f1:34:0d:22:32:e6:67:1e:20:31:ad:25:
d8:98:cd:56:30:59:e9:6e:58:93:2b:01:ee:b6:8c:
f3:f2:93:d9:39:7c:ad:59:6c:4a:4e:ec:b1:34:9e:
23:75:a3:61:25:63:38:2e:f6:8a:1e:b5:d4:09:1c:
e1:91:c1:ab:05:47:fd:e1:3e:2b:84:db:89:19:61:
98:7c:a8:ad:bf:fd:9e:49:79:23:83:04:c6:30:d5:
fe:4e:be:98:7f:a9:ed:f1:96:76:ef:c6:82:b7:3a:
c1:37:65:43:58:13:fb:49:82:88:53:8b:d5:5b:4e:
cc:cb:87:ae:0a:59:49:cd:4c:52:2c:a3:b0:14:e0:
e7:a0:65:50:4a:f8:ed:28:d6:ee:e0:f8:57:3d:53:
f0:f4:f3:4d:58:ac:7f:98:01:73:63:30:6a:1d:dd:
dd:f3:b0:ed:00:e2:12:c6:d9:6b:c2:4e:1c:ae:30:
e7:08:eb:51:a1:e8:48:7f:e3:43:e5:e8:c8:df:e0:
4f:76:89:6f:36:b2:30:11:4c:d2:74:2a:bd:4e:9c:
5b:ac:e6:f1:68:13:f9:ba:01:8a:46:ac:01:34:d0:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:65:D1:D1:DC:8C:FF:5B:71:C7:6F:0A:8D:D3:5C:5A:CC:26:1F:89
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/eWXR0dyM_1txx28KjdNcWswmH4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.47.163.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f0:2b:e6:1a:7e:14:b9:85:e8:cc:98:25:bc:1a:a0:64:aa:
e3:56:c2:34:bc:1c:7c:30:7a:57:7b:f4:c4:e1:9d:d9:94:04:
ee:33:dc:a7:35:64:d7:44:82:06:19:77:71:3b:5c:63:30:2d:
8a:c7:21:22:5b:c0:21:4b:68:51:4e:e3:6f:ad:c8:eb:61:e7:
4e:c0:12:29:e1:c7:79:cb:a8:88:15:7f:ce:ff:ff:e2:95:c9:
cf:c6:86:fa:67:87:3c:1d:ff:53:2f:52:e9:64:06:bd:ec:fc:
25:f6:88:82:69:75:ba:cc:73:4d:8f:36:f2:30:f0:08:30:1d:
a7:72:63:43:09:7b:42:74:a1:82:04:53:b6:b1:7f:c1:8e:d4:
d4:17:c3:a7:cb:e9:48:bb:9d:d1:61:37:b2:83:01:4c:66:79:
97:64:61:24:e6:37:b7:c1:3e:9d:e6:a7:16:99:24:0f:10:2c:
e6:e5:c5:60:ea:4a:5f:9d:57:0c:4a:2a:1c:2b:2d:ef:de:85:
24:a0:ff:ce:a4:15:4a:60:32:dc:a6:08:35:da:ee:db:8a:7b:
d3:37:3c:59:42:fa:b3:cf:8e:a2:54:8d:58:c7:42:d1:25:95:
94:6f:df:66:a1:27:60:69:24:b0:51:f8:31:f2:d0:00:79:82:
58:dd:de:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU9C9vcHbSlrFI/YLsWuJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy
NzAxMjMwHhcNMjMwMTAxMDc1NTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTY1ZDFkMWRjOGNmZjViNzFjNzZmMGE4ZGQzNWM1YWNjMjYxZjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0smcDXli/6p0BE6VgpRt24qULl0F
22CkuhPncJFD8O/xNA0iMuZnHiAxrSXYmM1WMFnpbliTKwHutozz8pPZOXytWWxK
TuyxNJ4jdaNhJWM4LvaKHrXUCRzhkcGrBUf94T4rhNuJGWGYfKitv/2eSXkjgwTG
MNX+Tr6Yf6nt8ZZ278aCtzrBN2VDWBP7SYKIU4vVW07My4euCllJzUxSLKOwFODn
oGVQSvjtKNbu4PhXPVPw9PNNWKx/mAFzYzBqHd3d87DtAOISxtlrwk4crjDnCOtR
oehIf+ND5ejI3+BPdolvNrIwEUzSdCq9TpxbrObxaBP5ugGKRqwBNNDwRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHll0dHcjP9bccdvCo3TXFrMJh+JMB8GA1UdIwQY
MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt
YmZiNGJhMzBlNDVhLzEvZVdYUjBkeU1fMXR4eDI4S2pkTmNXc3dtSDRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh
LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVC+jMA0G
CSqGSIb3DQEBCwUAA4IBAQAT8CvmGn4UuYXozJglvBqgZKrjVsI0vBx8MHpXe/TE
4Z3ZlATuM9ynNWTXRIIGGXdxO1xjMC2KxyEiW8AhS2hRTuNvrcjrYedOwBIp4cd5
y6iIFX/O///ilcnPxob6Z4c8Hf9TL1LpZAa97Pwl9oiCaXW6zHNNjzbyMPAIMB2n
cmNDCXtCdKGCBFO2sX/BjtTUF8Ony+lIu53RYTeygwFMZnmXZGEk5je3wT6d5qcW
mSQPECzm5cVg6kpfnVcMSiocKy3v3oUkoP/OpBVKYDLcpgg12u7binvTNzxZQvqz
z46iVI1Yx0LRJZWUb99moSdgaSSwUfgx8tAAeYJY3d7q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:36 2024 by rpki-client on console-fra.rpki-client.org