Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/ee0aEi0iemmQK6oD0w5IJ7v-DfU.roa
File: ee0aEi0iemmQK6oD0w5IJ7v-DfU.roa (raw, json)
Hash identifier: VYdNAz8qB6ZmA4x8VuBpSgyqvzoz1OKWH/IyE7c+pc8=
Subject key identifier: 79:ED:1A:12:2D:22:7A:69:90:2B:AA:03:D3:0E:48:27:BB:FE:0D:F5
Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial: 01856E14548A87D8AD75FB12EE4005EC3169
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/ee0aEi0iemmQK6oD0w5IJ7v-DfU.roa
Signing time: Sun 01 Jan 2023 16:05:04 +0000
ROA not before: Sun 01 Jan 2023 16:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3304
IP address blocks: 195.22.138.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:54:8a:87:d8:ad:75:fb:12:ee:40:05:ec:31:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Validity
Not Before: Jan 1 16:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79ed1a122d227a69902baa03d30e4827bbfe0df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:47:4f:6d:0b:73:af:73:fa:4f:b7:72:38:b3:
6a:ec:b8:2d:52:9c:cb:fb:4a:76:1a:b3:b2:2d:77:
c3:f8:cd:f8:45:48:58:54:a7:c2:92:04:d6:22:7c:
70:0d:5d:3e:e2:8c:c2:cc:48:8b:9c:55:2c:5f:17:
f2:9e:34:c1:22:4a:e0:49:c7:2a:60:cb:70:a2:66:
83:1d:18:fc:ea:29:ad:c2:bb:7a:d9:6c:45:57:6c:
ac:8e:92:7c:a7:99:20:28:ae:8f:4b:4a:1c:81:75:
13:c7:9c:dc:f7:88:56:8f:7e:54:b8:9e:a3:62:ed:
93:03:14:aa:96:49:0c:67:2e:1f:4d:b4:84:82:9a:
c7:10:1c:05:cd:90:7c:ba:d2:f3:e2:db:b0:d1:b1:
5f:16:54:91:e2:2a:ed:8b:eb:66:37:93:75:b5:63:
87:e8:de:15:00:64:37:77:4b:7c:d7:ea:44:0b:5e:
52:66:ac:e1:0d:b3:a8:81:67:33:27:7d:63:7e:9c:
3b:02:41:89:3c:a0:5a:c6:a7:90:f2:99:1d:78:f9:
32:aa:fd:9d:89:d9:19:10:21:7c:4a:94:b6:47:4d:
64:88:ec:47:7a:2a:36:c4:e5:7d:47:28:ae:fd:f9:
09:ea:37:b0:4a:15:25:1d:b4:e3:48:81:ab:b9:9d:
98:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:ED:1A:12:2D:22:7A:69:90:2B:AA:03:D3:0E:48:27:BB:FE:0D:F5
X509v3 Authority Key Identifier:
keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/ee0aEi0iemmQK6oD0w5IJ7v-DfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.138.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:a7:b8:be:19:f9:90:5e:ff:e5:f4:f5:f3:d6:b7:70:5d:c2:
1e:f1:c6:86:0c:ae:f3:63:43:06:6a:8c:2d:68:84:9f:6f:d7:
0f:c3:51:da:2c:98:2c:fe:a9:4e:ea:f4:ef:95:ea:2d:64:18:
09:da:4f:44:45:04:03:74:af:5d:65:3e:f3:24:cf:28:2f:5f:
d7:06:9e:c7:90:39:c8:cf:65:dd:ce:7b:0c:9c:95:d9:3c:35:
77:bb:81:85:96:cc:b1:ce:63:52:e1:f8:bc:64:7c:9d:5d:f0:
92:6c:c7:51:42:ed:69:d1:5e:b8:37:b7:10:bd:20:06:f0:8b:
ed:95:4e:c3:20:c5:64:44:ff:6f:df:ac:d8:22:06:a6:14:5c:
72:87:ff:9e:2d:9c:d3:ca:2f:3b:2f:fd:9e:ce:14:ef:79:fc:
84:53:c7:b9:4d:2f:7a:aa:9c:2a:3a:67:0d:32:b3:76:11:ee:
e2:50:5f:f1:83:dc:77:c0:09:2a:71:69:53:ab:74:ea:11:0a:
a6:f6:eb:20:5a:b8:a4:c3:c7:5c:55:af:d3:18:19:8e:7b:17:
f6:51:74:40:fa:63:33:f4:43:10:26:83:de:02:31:33:44:45:
2a:4f:17:81:17:e6:c0:a7:09:10:83:ae:bd:4d:c3:c7:51:6b:
e4:2b:57:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuFFSKh9itdfsS7kAF7DFpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDM5MTRhNDhlNWRhZTVhNzU2YjFlM2I4ZmJlNDM3ZWUw
ZDhiMGMwHhcNMjMwMTAxMTYwNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWVkMWExMjJkMjI3YTY5OTAyYmFhMDNkMzBlNDgyN2JiZmUwZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUdPbQtzr3P6T7dyOLNq7LgtUpzL
+0p2GrOyLXfD+M34RUhYVKfCkgTWInxwDV0+4ozCzEiLnFUsXxfynjTBIkrgSccq
YMtwomaDHRj86imtwrt62WxFV2ysjpJ8p5kgKK6PS0ocgXUTx5zc94hWj35UuJ6j
Yu2TAxSqlkkMZy4fTbSEgprHEBwFzZB8utLz4tuw0bFfFlSR4irti+tmN5N1tWOH
6N4VAGQ3d0t81+pEC15SZqzhDbOogWczJ31jfpw7AkGJPKBaxqeQ8pkdePkyqv2d
idkZECF8SpS2R01kiOxHeio2xOV9Ryiu/fkJ6jewShUlHbTjSIGruZ2YGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHntGhItInppkCuqA9MOSCe7/g31MB8GA1UdIwQY
MBaAFLRDkUpI5drlp1ax47j75DfuDYsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAt
MzE0ZWY3NDZkOGE2LzEvZWUwYUVpMGllbW1RSzZvRDB3NUlKN3YtRGZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAtMzE0ZWY3NDZkOGE2
LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwxaKMA0G
CSqGSIb3DQEBCwUAA4IBAQAcp7i+GfmQXv/l9PXz1rdwXcIe8caGDK7zY0MGaowt
aISfb9cPw1HaLJgs/qlO6vTvleotZBgJ2k9ERQQDdK9dZT7zJM8oL1/XBp7HkDnI
z2XdznsMnJXZPDV3u4GFlsyxzmNS4fi8ZHydXfCSbMdRQu1p0V64N7cQvSAG8Ivt
lU7DIMVkRP9v36zYIgamFFxyh/+eLZzTyi87L/2ezhTvefyEU8e5TS96qpwqOmcN
MrN2Ee7iUF/xg9x3wAkqcWlTq3TqEQqm9usgWrikw8dcVa/TGBmOexf2UXRA+mMz
9EMQJoPeAjEzREUqTxeBF+bApwkQg669TcPHUWvkK1dt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:55 2024 by rpki-client on console-ams.rpki-client.org