Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/DX0Lcv473Stvj6NduXbDcse9bTk.roa
File: DX0Lcv473Stvj6NduXbDcse9bTk.roa (raw, json)
Hash identifier: BMPoiHtoWailTDdUbpTUUHlHthIptFtYnKv1kHlqrCg=
Subject key identifier: 0D:7D:0B:72:FE:3B:DD:2B:6F:8F:A3:5D:B9:76:C3:72:C7:BD:6D:39
Certificate issuer: /CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Certificate serial: 01856FF94A2E57A3BE92A02C5DCD80B4F8F0
Authority key identifier: 8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/DX0Lcv473Stvj6NduXbDcse9bTk.roa
Signing time: Mon 02 Jan 2023 00:54:46 +0000
ROA not before: Mon 02 Jan 2023 00:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 194.37.85.0/24 maxlen: 24
194.37.86.0/24 maxlen: 24
194.37.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Mar 2023 12:46:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:4a:2e:57:a3:be:92:a0:2c:5d:cd:80:b4:f8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Validity
Not Before: Jan 2 00:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d7d0b72fe3bdd2b6f8fa35db976c372c7bd6d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:42:15:9d:a0:a4:43:c6:01:39:89:ba:10:
39:42:e3:17:d1:36:a9:57:bf:41:38:f4:3f:89:a3:
4b:75:d1:90:1d:2a:73:d2:1a:97:84:fc:f2:9b:21:
29:68:ed:c5:53:8f:22:32:79:80:b1:0a:dd:f1:ed:
32:ad:8f:3f:d7:00:66:7f:56:04:55:ae:03:a4:ed:
48:fe:c7:f3:09:e3:67:bd:13:e0:59:36:14:99:50:
e0:50:35:16:98:7c:c8:13:37:d8:45:41:85:a7:a5:
67:a0:a8:76:e7:c2:4d:a5:51:0a:0c:b2:e3:a5:64:
df:91:23:82:d3:7c:6f:12:9f:9c:c8:98:85:38:b6:
08:eb:90:2d:24:7a:14:8d:38:5c:6e:8a:a6:30:09:
76:9f:b9:d7:b9:47:ef:2f:e2:16:9a:3c:88:1e:5e:
dc:a1:62:73:c5:6c:1c:b8:cb:81:0a:01:1b:82:14:
6d:99:53:05:23:a8:ba:94:d4:4b:0b:7b:e5:00:6f:
90:17:6b:fc:1a:3f:0d:7b:ca:0c:9a:0b:3d:fd:ed:
92:05:40:96:eb:0d:8c:41:69:85:8c:d8:a6:86:34:
91:20:25:dc:4a:0e:14:5f:ff:d7:41:28:a0:04:66:
88:48:5b:e4:bd:be:1d:01:ca:e1:c9:a2:7c:8c:3f:
bc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7D:0B:72:FE:3B:DD:2B:6F:8F:A3:5D:B9:76:C3:72:C7:BD:6D:39
X509v3 Authority Key Identifier:
keyid:8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/DX0Lcv473Stvj6NduXbDcse9bTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.85.0-194.37.87.255
Signature Algorithm: sha256WithRSAEncryption
b2:7e:43:95:fd:c6:18:36:6a:8e:41:3c:10:22:a6:53:c8:ab:
c2:8f:4f:92:ff:1b:e1:c7:1c:0d:70:b6:f6:ba:2d:4a:e2:18:
5b:a7:80:3a:ed:3f:17:28:6c:7e:8f:0f:27:ef:41:5c:f8:4b:
8c:24:80:d7:b7:4a:1c:d3:22:af:66:88:ba:f1:a4:39:01:1a:
2e:5c:68:ec:9b:fb:57:cd:cc:53:a4:43:81:98:38:64:96:8a:
cc:68:0a:d3:68:1f:28:5f:c8:a0:dc:dc:4c:89:8b:74:24:6d:
b4:75:20:17:cc:03:78:4c:01:8c:f8:7f:dc:27:2a:53:38:92:
01:4f:1a:84:95:c8:a2:06:24:e5:12:a7:d4:ed:eb:78:4f:f6:
99:e4:95:57:05:f8:c6:91:c6:fe:3f:c2:dd:4b:64:95:27:42:
2e:58:c7:cf:72:20:ce:64:2e:66:80:bc:ab:8c:a8:51:59:2d:
ee:7e:27:13:8c:cb:fa:4d:74:57:2c:04:ca:47:81:fe:63:88:
64:5c:53:8a:eb:38:8e:38:ef:aa:69:18:6e:b9:b7:0c:59:b6:
49:64:53:98:62:81:cc:8f:96:df:be:98:88:48:f9:f7:be:83:
88:f3:5c:23:e6:42:48:8e:57:f8:46:aa:2e:a3:34:83:82:1b:
7f:b1:b5:eb
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVv+UouV6O+kqAsXc2AtPjwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTM3MjAwYzllYTE1NjBhM2Y0MmZkN2UxMDBlZDI4NDEx
NDE2YmMwHhcNMjMwMTAyMDA1NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDdkMGI3MmZlM2JkZDJiNmY4ZmEzNWRiOTc2YzM3MmM3YmQ2ZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydRCFZ2gpEPGATmJuhA5QuMX0Tap
V79BOPQ/iaNLddGQHSpz0hqXhPzymyEpaO3FU48iMnmAsQrd8e0yrY8/1wBmf1YE
Va4DpO1I/sfzCeNnvRPgWTYUmVDgUDUWmHzIEzfYRUGFp6VnoKh258JNpVEKDLLj
pWTfkSOC03xvEp+cyJiFOLYI65AtJHoUjThcboqmMAl2n7nXuUfvL+IWmjyIHl7c
oWJzxWwcuMuBCgEbghRtmVMFI6i6lNRLC3vlAG+QF2v8Gj8Ne8oMmgs9/e2SBUCW
6w2MQWmFjNimhjSRICXcSg4UX//XQSigBGaISFvkvb4dAcrhyaJ8jD+8lwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFA19C3L+O90rb4+jXbl2w3LHvW05MB8GA1UdIwQY
MBaAFI8TcgDJ6hVgo/Qv1+EA7ShBFBa8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhOeUFNbnFGV0NqOUNfWDRRRHRLRUVVRnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kZGJiYWItNWVkYy00YTE0LWIwZTct
ZWI4MDIyMWU1MzhkLzEvRFgwTGN2NDczU3R2ajZOZHVYYkRjc2U5YlRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9kZGJiYWItNWVkYy00YTE0LWIwZTctZWI4MDIyMWU1Mzhk
LzEvanhOeUFNbnFGV0NqOUNfWDRRRHRLRUVVRnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADCJVUD
BAPCJVAwDQYJKoZIhvcNAQELBQADggEBALJ+Q5X9xhg2ao5BPBAiplPIq8KPT5L/
G+HHHA1wtva6LUriGFungDrtPxcobH6PDyfvQVz4S4wkgNe3ShzTIq9miLrxpDkB
Gi5caOyb+1fNzFOkQ4GYOGSWisxoCtNoHyhfyKDc3EyJi3QkbbR1IBfMA3hMAYz4
f9wnKlM4kgFPGoSVyKIGJOUSp9Tt63hP9pnklVcF+MaRxv4/wt1LZJUnQi5Yx89y
IM5kLmaAvKuMqFFZLe5+JxOMy/pNdFcsBMpHgf5jiGRcU4rrOI4476ppGG65twxZ
tklkU5higcyPlt++mIhI+fe+g4jzXCPmQkiOV/hGqi6jNIOCG3+xtes=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:59 2024 by rpki-client on console-ams.rpki-client.org