Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/uKc9_EoGS1xi3Gu0nKKjFNUWnig.roa
File: uKc9_EoGS1xi3Gu0nKKjFNUWnig.roa (raw, json)
Hash identifier: ppkulT7wTbeEXCX7tCY3u16oZ50bio18cLFJuS43+K0=
Subject key identifier: B8:A7:3D:FC:4A:06:4B:5C:62:DC:6B:B4:9C:A2:A3:14:D5:16:9E:28
Certificate issuer: /CN=807709e7b0efba127025c83e5d3194c71ba428c3
Certificate serial: 018570304DF1DE1F60EF9E8190928A92AAAB
Authority key identifier: 80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/uKc9_EoGS1xi3Gu0nKKjFNUWnig.roa
Signing time: Mon 02 Jan 2023 01:54:51 +0000
ROA not before: Mon 02 Jan 2023 01:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48806
IP address blocks: 195.238.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:4d:f1:de:1f:60:ef:9e:81:90:92:8a:92:aa:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=807709e7b0efba127025c83e5d3194c71ba428c3
Validity
Not Before: Jan 2 01:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8a73dfc4a064b5c62dc6bb49ca2a314d5169e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7c:41:9a:44:ef:ab:1d:b4:d1:26:28:e1:03:
7f:4b:2b:18:d3:a2:c8:f0:3e:e2:f2:1b:3a:c9:98:
48:60:b4:17:d4:59:fb:ad:b0:f9:9d:a1:a4:b0:29:
cd:c4:a2:0e:53:d6:23:41:a4:e1:62:e4:87:2a:8b:
e0:e3:f4:ae:1f:1e:72:0a:91:d3:ee:8a:ea:a9:f8:
83:c2:b4:59:45:b2:c3:1d:72:9c:37:fe:c8:7f:d7:
b6:bb:5b:f7:db:7d:68:f0:8b:33:79:53:92:72:ca:
ba:65:d1:fd:7f:98:5f:47:2f:ab:66:9d:55:58:6d:
bd:46:7a:c5:27:ec:be:72:2d:89:1e:c8:f9:8e:05:
c5:6c:26:2e:87:01:2d:a1:3d:46:17:f9:d4:3d:28:
70:ae:c5:05:c3:87:fa:eb:15:60:a8:1d:54:3a:6b:
fa:7d:97:98:3f:ba:b0:34:e1:dd:f4:05:fc:1e:7b:
5f:79:6a:94:59:90:d4:8b:5f:2c:e0:d3:94:66:14:
6a:5c:d6:8f:30:f0:1a:02:0e:9e:44:8f:de:14:59:
43:e9:33:5b:61:b0:a7:94:1e:55:d5:1a:59:c4:83:
65:d3:a8:80:dc:34:ad:54:94:e7:70:0c:fe:b6:e5:
7e:37:2d:de:ce:72:05:3f:03:36:c8:74:33:a9:2b:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A7:3D:FC:4A:06:4B:5C:62:DC:6B:B4:9C:A2:A3:14:D5:16:9E:28
X509v3 Authority Key Identifier:
keyid:80:77:09:E7:B0:EF:BA:12:70:25:C8:3E:5D:31:94:C7:1B:A4:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gHcJ57DvuhJwJcg-XTGUxxukKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/uKc9_EoGS1xi3Gu0nKKjFNUWnig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c426c3-4f03-46bb-8008-be9ad2bf725f/1/gHcJ57DvuhJwJcg-XTGUxxukKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.94.0/24
Signature Algorithm: sha256WithRSAEncryption
25:55:0e:45:93:17:0b:7f:db:fc:82:d9:69:7e:c6:53:0f:e6:
83:9a:2d:0a:7f:f9:8d:b2:93:0d:b6:8d:7d:1a:1b:70:4d:e7:
56:50:20:9c:2f:e3:30:91:21:f4:2e:1d:2b:19:9e:68:06:26:
13:ba:42:2d:57:43:af:31:82:6b:ba:d1:8f:16:a5:44:29:6a:
5e:0a:46:1b:fc:59:71:1e:06:13:bd:72:17:0e:18:3f:7a:7e:
74:5e:df:1d:fd:20:0d:ca:82:99:23:10:a8:f0:fd:ea:b0:18:
1b:84:ca:d0:c7:0a:f3:6d:6f:25:e1:93:29:19:d7:5f:79:bd:
91:7e:b7:2c:b1:35:b2:4a:c1:a5:92:40:0e:26:d3:d1:60:d5:
a1:89:44:f5:f5:23:32:d6:1b:20:a3:b6:27:65:99:b4:5b:d9:
66:ca:d9:e1:a6:b9:9e:58:27:12:c6:df:28:71:a6:7b:b7:4c:
73:cb:c5:98:f0:2b:e6:61:de:c9:de:88:df:6b:e0:94:f4:09:
01:49:e9:22:78:ca:9b:e7:8a:29:bc:d2:4c:b1:e4:9e:a5:fd:
24:e1:61:b2:ab:b6:79:95:be:4d:58:41:55:90:59:b7:56:a0:
ed:62:52:05:8e:ab:89:4c:8a:a7:eb:a5:cc:3a:ed:ee:5f:0b:
da:e1:6c:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwME3x3h9g756BkJKKkqqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNzcwOWU3YjBlZmJhMTI3MDI1YzgzZTVkMzE5NGM3MWJh
NDI4YzMwHhcNMjMwMTAyMDE1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGE3M2RmYzRhMDY0YjVjNjJkYzZiYjQ5Y2EyYTMxNGQ1MTY5ZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHxBmkTvqx200SYo4QN/SysY06LI
8D7i8hs6yZhIYLQX1Fn7rbD5naGksCnNxKIOU9YjQaThYuSHKovg4/SuHx5yCpHT
7orqqfiDwrRZRbLDHXKcN/7If9e2u1v3231o8IszeVOScsq6ZdH9f5hfRy+rZp1V
WG29RnrFJ+y+ci2JHsj5jgXFbCYuhwEtoT1GF/nUPShwrsUFw4f66xVgqB1UOmv6
fZeYP7qwNOHd9AX8HntfeWqUWZDUi18s4NOUZhRqXNaPMPAaAg6eRI/eFFlD6TNb
YbCnlB5V1RpZxINl06iA3DStVJTncAz+tuV+Ny3eznIFPwM2yHQzqSsH5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLinPfxKBktcYtxrtJyioxTVFp4oMB8GA1UdIwQY
MBaAFIB3Ceew77oScCXIPl0xlMcbpCjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgt
YmU5YWQyYmY3MjVmLzEvdUtjOV9Fb0dTMXhpM0d1MG5LS2pGTlVXbmlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jNDI2YzMtNGYwMy00NmJiLTgwMDgtYmU5YWQyYmY3MjVm
LzEvZ0hjSjU3RHZ1aEp3SmNnLVhUR1V4eHVrS01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+5eMA0G
CSqGSIb3DQEBCwUAA4IBAQAlVQ5FkxcLf9v8gtlpfsZTD+aDmi0Kf/mNspMNto19
GhtwTedWUCCcL+MwkSH0Lh0rGZ5oBiYTukItV0OvMYJrutGPFqVEKWpeCkYb/Flx
HgYTvXIXDhg/en50Xt8d/SANyoKZIxCo8P3qsBgbhMrQxwrzbW8l4ZMpGddfeb2R
frcssTWySsGlkkAOJtPRYNWhiUT19SMy1hsgo7YnZZm0W9lmytnhprmeWCcSxt8o
caZ7t0xzy8WY8CvmYd7J3ojfa+CU9AkBSekieMqb54opvNJMseSepf0k4WGyq7Z5
lb5NWEFVkFm3VqDtYlIFjquJTIqn66XMOu3uXwva4Wx9
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:09 2024 by rpki-client on console-ams.rpki-client.org