Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/bIw3LuiftDm_FpghR2v5x-kgOKU.roa
File: bIw3LuiftDm_FpghR2v5x-kgOKU.roa (raw, json)
Hash identifier: yZ0QOjhWI75dn6IlTFmmqfD1TxQ0WruABrAirbCzkQ4=
Subject key identifier: 6C:8C:37:2E:E8:9F:B4:39:BF:16:98:21:47:6B:F9:C7:E9:20:38:A5
Certificate issuer: /CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Certificate serial: 01856F0B6350012561381606CB23FCD5ED12
Authority key identifier: DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/bIw3LuiftDm_FpghR2v5x-kgOKU.roa
Signing time: Sun 01 Jan 2023 20:34:55 +0000
ROA not before: Sun 01 Jan 2023 20:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33843
IP address blocks: 194.11.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:63:50:01:25:61:38:16:06:cb:23:fc:d5:ed:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc03aa9a4fe9d60c5cf853a924822269f1cc7452
Validity
Not Before: Jan 1 20:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c8c372ee89fb439bf169821476bf9c7e92038a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3e:ad:ea:3b:d9:0c:d7:2f:4d:38:4f:2e:22:
5a:69:e4:dc:b1:ba:b0:a4:a8:75:e3:07:94:11:7b:
68:e7:30:9f:d5:34:ee:8f:42:23:08:25:f4:a1:98:
34:5a:17:db:9c:8b:6f:fa:7d:54:e2:87:7a:f1:4e:
53:8d:6b:01:d9:67:78:bd:4c:97:53:10:74:81:7e:
ab:9c:b5:07:e7:b5:f1:89:00:0b:9c:74:8f:ad:ad:
c4:d4:e6:2a:dd:50:1f:13:83:98:aa:3e:da:6d:e0:
e9:f0:4c:b7:ea:3d:b2:85:2f:d2:34:97:c1:39:f9:
b6:58:77:b0:56:ff:c7:cc:30:46:c3:42:a3:27:ac:
41:55:83:46:93:89:69:5b:88:65:78:11:b0:df:97:
1e:82:62:7c:41:a7:1f:b4:e2:b7:71:15:4b:27:db:
cd:15:5f:28:07:9f:a0:73:0e:5e:19:57:70:29:46:
6b:e0:bb:b6:99:f8:ae:cf:f6:06:57:d1:69:e6:fb:
ae:c0:16:37:70:e5:7d:17:7b:d8:9c:b9:cc:2b:a9:
e4:c6:f7:b3:2c:92:4a:c8:ce:b2:41:d7:05:5a:09:
7a:d4:23:82:91:40:b6:80:c3:9f:9c:26:03:d6:75:
f8:ed:e5:30:d0:cb:86:bf:6e:56:48:b7:0f:43:b0:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8C:37:2E:E8:9F:B4:39:BF:16:98:21:47:6B:F9:C7:E9:20:38:A5
X509v3 Authority Key Identifier:
keyid:DC:03:AA:9A:4F:E9:D6:0C:5C:F8:53:A9:24:82:22:69:F1:CC:74:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AOqmk_p1gxc-FOpJIIiafHMdFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/bIw3LuiftDm_FpghR2v5x-kgOKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d84e1e-cc53-4cc2-aab9-1ca766fbeeba/1/3AOqmk_p1gxc-FOpJIIiafHMdFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.170.0/24
Signature Algorithm: sha256WithRSAEncryption
23:65:36:c9:e6:bb:33:89:40:62:2b:b4:33:9c:c9:fa:1d:be:
44:9d:8b:98:e0:36:ba:7b:91:26:5f:66:7f:71:42:84:e0:f0:
70:e6:f7:87:0f:31:a7:2d:3c:35:ca:d0:32:5e:f3:a2:d9:99:
3d:e3:18:c5:ea:b8:3a:24:c4:79:3e:34:c1:84:c7:db:67:a6:
d3:82:18:f3:97:c2:82:19:91:e2:d9:34:2b:ea:62:85:53:39:
d9:e4:ab:fd:85:2c:63:1b:59:f3:23:0f:11:74:cb:09:2d:4e:
0c:5b:e4:94:60:f8:ca:30:d8:51:9c:9f:b0:26:3b:91:81:e6:
14:a5:5c:4d:17:85:9a:6e:4c:82:98:cb:db:83:4a:84:f4:8d:
a6:34:ce:32:14:69:fe:4c:d0:50:dc:37:47:7e:da:e8:95:71:
05:1d:56:ec:d6:09:6f:a2:80:95:e9:64:82:c2:be:54:3d:0a:
be:8a:8e:bf:b7:a0:a3:9c:f8:fe:aa:da:0d:c4:15:a5:11:bd:
93:11:08:f3:be:ed:7b:89:61:02:28:ec:93:9b:bb:6f:6c:8d:
96:d5:9b:24:e2:2f:5e:7c:dd:1c:cf:a6:54:e6:d0:60:c3:62:
ec:fe:3c:e4:45:0f:d1:7d:3c:b8:6b:62:4b:fc:35:84:bc:f8:
22:99:e2:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvC2NQASVhOBYGyyP81e0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDNhYTlhNGZlOWQ2MGM1Y2Y4NTNhOTI0ODIyMjY5ZjFj
Yzc0NTIwHhcNMjMwMTAxMjAzNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzhjMzcyZWU4OWZiNDM5YmYxNjk4MjE0NzZiZjljN2U5MjAzOGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz6t6jvZDNcvTThPLiJaaeTcsbqw
pKh14weUEXto5zCf1TTuj0IjCCX0oZg0WhfbnItv+n1U4od68U5TjWsB2Wd4vUyX
UxB0gX6rnLUH57XxiQALnHSPra3E1OYq3VAfE4OYqj7abeDp8Ey36j2yhS/SNJfB
Ofm2WHewVv/HzDBGw0KjJ6xBVYNGk4lpW4hleBGw35cegmJ8QacftOK3cRVLJ9vN
FV8oB5+gcw5eGVdwKUZr4Lu2mfiuz/YGV9Fp5vuuwBY3cOV9F3vYnLnMK6nkxvez
LJJKyM6yQdcFWgl61COCkUC2gMOfnCYD1nX47eUw0MuGv25WSLcPQ7CpKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGyMNy7on7Q5vxaYIUdr+cfpIDilMB8GA1UdIwQY
MBaAFNwDqppP6dYMXPhTqSSCImnxzHRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kODRlMWUtY2M1My00Y2MyLWFhYjkt
MWNhNzY2ZmJlZWJhLzEvYkl3M0x1aWZ0RG1fRnBnaFIydjV4LWtnT0tVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kODRlMWUtY2M1My00Y2MyLWFhYjktMWNhNzY2ZmJlZWJh
LzEvM0FPcW1rX3AxZ3hjLUZPcEpJSWlhZkhNZEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwguqMA0G
CSqGSIb3DQEBCwUAA4IBAQAjZTbJ5rsziUBiK7QznMn6Hb5EnYuY4Da6e5EmX2Z/
cUKE4PBw5veHDzGnLTw1ytAyXvOi2Zk94xjF6rg6JMR5PjTBhMfbZ6bTghjzl8KC
GZHi2TQr6mKFUznZ5Kv9hSxjG1nzIw8RdMsJLU4MW+SUYPjKMNhRnJ+wJjuRgeYU
pVxNF4WabkyCmMvbg0qE9I2mNM4yFGn+TNBQ3DdHftrolXEFHVbs1glvooCV6WSC
wr5UPQq+io6/t6CjnPj+qtoNxBWlEb2TEQjzvu17iWECKOyTm7tvbI2W1Zsk4i9e
fN0cz6ZU5tBgw2Ls/jzkRQ/RfTy4a2JL/DWEvPgimeIz
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:34 2024 by rpki-client on console-fra.rpki-client.org