Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/ojz3Z4Cx0EvWyrEv03xrN4HEouc.roa
File: ojz3Z4Cx0EvWyrEv03xrN4HEouc.roa (raw, json)
Hash identifier: Z7NHw0RrZa/NblD3sXqo6NzETdzQS2ZvZIyTGDqHFLE=
Subject key identifier: A2:3C:F7:67:80:B1:D0:4B:D6:CA:B1:2F:D3:7C:6B:37:81:C4:A2:E7
Certificate issuer: /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial: 0188204A7182E8EE878BF3CD6E4412010139
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/ojz3Z4Cx0EvWyrEv03xrN4HEouc.roa
Signing time: Mon 15 May 2023 16:42:09 +0000
ROA not before: Mon 15 May 2023 16:42:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49367
IP address blocks: 95.141.36.0/23 maxlen: 24
94.198.101.0/24 maxlen: 24
158.58.172.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:4a:71:82:e8:ee:87:8b:f3:cd:6e:44:12:01:01:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
Validity
Not Before: May 15 16:42:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a23cf76780b1d04bd6cab12fd37c6b3781c4a2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c3:35:1e:19:47:e0:35:fb:fe:2d:cd:94:16:
36:cb:29:b7:f9:75:6a:c5:ef:55:6d:cb:8a:88:80:
9d:a8:b2:16:43:98:e7:e0:49:e8:36:54:2f:8c:9c:
ca:52:2b:ab:cf:7f:36:b5:43:70:e2:71:00:58:f9:
b2:f6:42:e6:be:af:04:e0:b7:ce:76:ae:ce:53:92:
20:bb:2c:e3:6e:6c:1d:2d:99:11:17:8a:f6:82:2e:
a1:d4:86:c3:5b:c1:e2:2c:69:7e:0a:80:c8:ef:ef:
13:fb:1e:ed:7e:89:a9:c0:06:ae:e4:8e:65:75:19:
a5:fc:e7:42:91:ec:a5:75:04:e5:9d:c7:1d:e2:92:
6d:3e:35:09:89:10:76:a6:d1:37:30:4c:cb:91:0d:
f0:40:85:0e:05:b2:fa:60:cd:39:46:4a:f7:f4:e7:
e3:15:62:a0:d1:4c:e0:d2:eb:3a:cd:c7:29:70:5e:
ee:a8:95:9c:65:a3:78:62:93:f5:0a:71:3f:3d:d5:
4a:8d:4b:4a:fb:67:1f:bf:5b:64:5c:ef:6d:6f:89:
ab:10:03:59:26:92:07:fd:1f:88:2f:01:3f:bd:ef:
52:3b:9b:77:dd:70:dd:bf:e0:2b:b2:4f:e0:f1:fe:
75:8f:29:0a:03:52:55:f1:e0:97:5c:c0:75:11:3b:
cd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3C:F7:67:80:B1:D0:4B:D6:CA:B1:2F:D3:7C:6B:37:81:C4:A2:E7
X509v3 Authority Key Identifier:
keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/ojz3Z4Cx0EvWyrEv03xrN4HEouc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.101.0/24
95.141.36.0/23
158.58.172.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:d5:1a:0d:9b:be:2b:d0:00:06:56:f3:c0:0e:8c:66:10:05:
f1:7c:dd:0c:d1:41:50:63:0c:7a:a8:87:3b:0c:8c:fe:0c:94:
4a:e9:9e:17:99:ae:14:62:68:6d:29:a8:ca:73:b7:55:4e:a5:
5e:b9:b1:01:c4:21:4b:7c:60:19:8d:63:65:7a:7d:2f:ef:bd:
28:e2:c1:36:38:fe:15:e3:d6:2d:5f:c4:67:c4:8e:a7:b9:42:
e9:cf:85:dd:45:6e:04:b6:a8:2e:2b:20:80:47:d3:b4:49:ee:
e6:64:a2:c2:12:b2:15:f0:9b:2b:07:08:bf:b9:72:3a:54:41:
a6:b2:4d:35:1e:eb:05:4a:f9:2d:c5:d2:06:b2:ae:d3:7b:fa:
75:39:3d:c4:f5:bd:df:ef:1d:ca:31:e6:20:6b:8c:e1:13:01:
14:3c:a9:21:e0:5e:96:92:39:25:9d:27:63:94:17:6e:ed:95:
f3:6b:ed:8e:33:47:ef:86:46:ce:55:ed:77:10:3e:3b:1d:f8:
5d:56:4a:d6:4a:30:a8:b1:6a:0a:34:91:76:0e:a9:23:d0:b6:
90:0d:b6:3f:8b:3f:34:ae:ca:4c:a9:71:e7:87:7c:ce:7f:ca:
85:8e:96:67:ac:ba:79:44:af:23:1b:3f:53:2a:ee:80:cf:f6:
3f:f7:63:cb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYggSnGC6O6Hi/PNbkQSAQE5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MTM4NzI1MTJmMWYyZDAzN2I0MDFjMjYwM2NhODk5NGU3
MjFlNTUwHhcNMjMwNTE1MTY0MjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMjNjZjc2NzgwYjFkMDRiZDZjYWIxMmZkMzdjNmIzNzgxYzRhMmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicM1HhlH4DX7/i3NlBY2yym3+XVq
xe9VbcuKiICdqLIWQ5jn4EnoNlQvjJzKUiurz382tUNw4nEAWPmy9kLmvq8E4LfO
dq7OU5IguyzjbmwdLZkRF4r2gi6h1IbDW8HiLGl+CoDI7+8T+x7tfompwAau5I5l
dRml/OdCkeyldQTlnccd4pJtPjUJiRB2ptE3MEzLkQ3wQIUOBbL6YM05Rkr39Ofj
FWKg0Uzg0us6zccpcF7uqJWcZaN4YpP1CnE/PdVKjUtK+2cfv1tkXO9tb4mrEANZ
JpIH/R+ILwE/ve9SO5t33XDdv+Arsk/g8f51jykKA1JV8eCXXMB1ETvNxQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKI892eAsdBL1sqxL9N8azeBxKLnMB8GA1UdIwQY
MBaAFNUThyUS8fLQN7QBwmA8qJlOch5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEt
NmQ2NTVjZDk0NDY4LzEvb2p6M1o0Q3gwRXZXeXJFdjAzeHJONEhFb3VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9hN2RkZjYtMjM5NC00OGQzLWJmYTEtNmQ2NTVjZDk0NDY4
LzEvMVJPSEpSTHg4dEEzdEFIQ1lEeW9tVTV5SGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXsZlAwQB
X40kAwQBnjqsMA0GCSqGSIb3DQEBCwUAA4IBAQDA1RoNm74r0AAGVvPADoxmEAXx
fN0M0UFQYwx6qIc7DIz+DJRK6Z4Xma4UYmhtKajKc7dVTqVeubEBxCFLfGAZjWNl
en0v770o4sE2OP4V49YtX8RnxI6nuULpz4XdRW4EtqguKyCAR9O0Se7mZKLCErIV
8JsrBwi/uXI6VEGmsk01HusFSvktxdIGsq7Te/p1OT3E9b3f7x3KMeYga4zhEwEU
PKkh4F6WkjklnSdjlBdu7ZXza+2OM0fvhkbOVe13ED47HfhdVkrWSjCosWoKNJF2
Dqkj0LaQDbY/iz80rspMqXHnh3zOf8qFjpZnrLp5RK8jGz9TKu6Az/Y/92PL
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:48 2023 by rpki-client on console-fra.rpki-client.org