Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/dH2Jq9Nz2Mw7NWLINatCrnHtcx0.roa
File: dH2Jq9Nz2Mw7NWLINatCrnHtcx0.roa (raw, json)
Hash identifier: ufBdPEDDdpiPV/PT8K5Uj2w5y84bGZ6TbS4szx57bB4=
Subject key identifier: 74:7D:89:AB:D3:73:D8:CC:3B:35:62:C8:35:AB:42:AE:71:ED:73:1D
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018B25E0DD7FD5A545D76575515B152D1151
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/dH2Jq9Nz2Mw7NWLINatCrnHtcx0.roa
Signing time: Thu 12 Oct 2023 21:52:55 +0000
ROA not before: Thu 12 Oct 2023 21:52:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 194.156.102.0/24 maxlen: 24
62.133.60.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:25:e0:dd:7f:d5:a5:45:d7:65:75:51:5b:15:2d:11:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Oct 12 21:52:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=747d89abd373d8cc3b3562c835ab42ae71ed731d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:03:4e:10:be:7c:05:4a:67:7d:b8:3e:2f:
ae:a7:8d:43:92:fa:45:3f:d4:22:05:07:1f:60:d8:
76:13:3f:ef:a8:92:9b:89:4c:4e:b5:94:6f:df:55:
0a:f2:47:45:11:45:57:f2:e1:6a:37:af:72:7d:50:
9d:a9:21:39:ef:11:0d:61:d1:ec:de:f5:15:1e:45:
eb:f8:01:57:e3:30:97:70:6e:bd:8b:ba:9e:1d:44:
86:15:f0:e1:2e:bb:67:fb:31:e3:b1:3c:31:5d:4c:
2e:af:a8:b4:f0:5a:98:46:98:d7:33:fd:34:60:bc:
00:b9:3e:47:1f:37:38:fd:44:d6:26:d1:20:4f:a0:
8b:28:17:e9:e8:5d:2e:2a:09:64:68:b6:54:42:45:
80:39:b9:d3:c9:27:f3:5a:8a:aa:51:d0:66:88:e2:
15:82:87:05:60:22:9d:58:43:8d:0d:d1:af:95:17:
d8:6b:eb:ec:3c:90:37:7e:8d:d8:38:ef:54:f9:0d:
91:51:1d:59:b3:c4:75:f4:4d:e3:5f:dc:d5:cc:70:
d3:a0:1a:3e:98:70:21:73:ca:ab:90:ed:8d:68:17:
b2:98:e1:37:90:40:68:22:ad:8e:63:0c:76:b7:38:
18:ea:6d:7f:2a:82:10:68:da:b0:bd:10:62:dc:2f:
6d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:7D:89:AB:D3:73:D8:CC:3B:35:62:C8:35:AB:42:AE:71:ED:73:1D
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/dH2Jq9Nz2Mw7NWLINatCrnHtcx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.133.60.0/22
194.156.102.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:98:f9:f9:42:67:70:d7:5d:5c:6a:7a:7b:19:68:bd:35:b7:
16:3a:a6:18:11:90:b2:db:8c:56:42:af:d0:66:e7:85:92:24:
41:08:e3:81:1a:a1:0b:55:23:d1:f8:d3:74:05:91:d2:32:16:
69:01:2e:4a:04:75:77:7c:99:10:d9:8b:ba:58:73:02:71:74:
27:3d:80:a4:67:61:ac:8e:12:ca:f4:24:f0:2c:41:93:35:92:
65:6a:92:4f:44:d7:3e:3a:89:ab:c6:ed:da:cd:cb:62:b5:6a:
8c:df:be:32:30:58:b5:ef:3a:0e:83:48:8f:e3:64:ec:81:60:
a7:49:80:4c:5f:39:b5:4b:1d:f6:ca:1e:e5:37:9d:47:44:1a:
72:73:5b:87:05:d5:a0:a0:86:08:be:e8:69:5d:2f:f8:83:fe:
8d:b0:5b:86:93:b1:67:61:95:2b:9d:c8:8e:96:e1:d1:e9:c1:
06:02:77:4f:2a:31:e2:63:1e:7d:c6:3c:7c:7f:14:ec:9e:14:
80:10:37:f8:1a:54:c5:eb:28:67:d7:b2:4f:43:63:2e:96:07:
ac:b5:71:6b:8d:03:a7:39:84:46:a8:f6:0f:bf:1e:4a:40:97:
0f:4e:d9:c4:18:d1:de:c3:2f:da:1b:49:43:d7:b6:9d:4c:59:
34:e5:39:1f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYsl4N1/1aVF12V1UVsVLRFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjMxMDEyMjE1MjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDdkODlhYmQzNzNkOGNjM2IzNTYyYzgzNWFiNDJhZTcxZWQ3MzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx0DThC+fAVKZ324Pi+up41DkvpF
P9QiBQcfYNh2Ez/vqJKbiUxOtZRv31UK8kdFEUVX8uFqN69yfVCdqSE57xENYdHs
3vUVHkXr+AFX4zCXcG69i7qeHUSGFfDhLrtn+zHjsTwxXUwur6i08FqYRpjXM/00
YLwAuT5HHzc4/UTWJtEgT6CLKBfp6F0uKglkaLZUQkWAObnTySfzWoqqUdBmiOIV
gocFYCKdWEONDdGvlRfYa+vsPJA3fo3YOO9U+Q2RUR1Zs8R19E3jX9zVzHDToBo+
mHAhc8qrkO2NaBeymOE3kEBoIq2OYwx2tzgY6m1/KoIQaNqwvRBi3C9tbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHR9iavTc9jMOzViyDWrQq5x7XMdMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvZEgySnE5TnoyTXc3TldMSU5hdENybkh0Y3gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCPoU8AwQA
wpxmMA0GCSqGSIb3DQEBCwUAA4IBAQDXmPn5Qmdw111canp7GWi9NbcWOqYYEZCy
24xWQq/QZueFkiRBCOOBGqELVSPR+NN0BZHSMhZpAS5KBHV3fJkQ2Yu6WHMCcXQn
PYCkZ2GsjhLK9CTwLEGTNZJlapJPRNc+Oomrxu3azctitWqM374yMFi17zoOg0iP
42TsgWCnSYBMXzm1Sx32yh7lN51HRBpyc1uHBdWgoIYIvuhpXS/4g/6NsFuGk7Fn
YZUrnciOluHR6cEGAndPKjHiYx59xjx8fxTsnhSAEDf4GlTF6yhn17JPQ2Mulges
tXFrjQOnOYRGqPYPvx5KQJcPTtnEGNHewy/aG0lD17adTFk05Tkf
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:17 2024 by rpki-client on console-ams.rpki-client.org