Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/V-HOhnIA7CymVsBvRBfaF48JBrU.roa
File: V-HOhnIA7CymVsBvRBfaF48JBrU.roa (raw, json)
Hash identifier: JkQVnQjp7IkWVnG+lXqLXRTG86B7+fjttB3fxCgOVyg=
Subject key identifier: 57:E1:CE:86:72:00:EC:2C:A6:56:C0:6F:44:17:DA:17:8F:09:06:B5
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 0185730CCEEBD85827EBEF8D44210691C0BB
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/V-HOhnIA7CymVsBvRBfaF48JBrU.roa
Signing time: Mon 02 Jan 2023 15:14:57 +0000
ROA not before: Mon 02 Jan 2023 15:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56596
IP address blocks: 147.234.6.0/24 maxlen: 24
147.234.6.0/23 maxlen: 23
147.234.7.0/24 maxlen: 24
147.234.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:ce:eb:d8:58:27:eb:ef:8d:44:21:06:91:c0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 15:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57e1ce867200ec2ca656c06f4417da178f0906b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:bf:80:a8:33:2e:1f:8e:8f:06:2c:06:26:
e2:0c:c9:75:0b:72:25:b8:ef:a3:a3:50:0e:aa:45:
06:e8:4c:9e:21:c6:67:cf:89:ad:83:6c:e7:f4:18:
31:5d:73:0d:ac:cc:f4:c5:9f:dc:1c:18:b3:df:0d:
b6:09:07:b4:87:70:72:ed:08:63:a5:f1:4c:08:3d:
47:71:7e:ad:0f:8e:f5:8f:1e:35:e6:ef:64:26:9e:
75:66:10:5b:d2:0d:8e:c4:14:07:65:4e:13:f2:87:
81:94:9d:3a:c6:aa:cc:af:18:88:4f:fd:3f:a7:58:
25:02:a4:6b:01:2b:9a:ff:7c:72:3f:51:c8:99:35:
4a:47:48:42:02:fe:a5:68:28:70:e4:4d:a3:c3:ad:
fa:d5:08:df:3c:87:6c:0a:96:1d:8a:31:68:00:f7:
9a:07:4e:0c:05:32:c2:2b:5e:de:e4:d5:8b:62:8e:
27:80:8a:15:3c:e2:7a:2e:d1:e6:f6:9c:a6:32:ba:
71:a8:11:b9:3b:8a:ee:b5:a9:26:78:53:e0:b9:bf:
ff:a9:06:a3:d8:57:32:e9:bd:9e:2f:55:36:a3:a3:
6f:44:f5:00:2a:a2:22:7d:97:fb:e4:5d:d4:42:f1:
32:2f:83:e2:e3:99:e5:e9:b8:1b:39:9a:74:75:24:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E1:CE:86:72:00:EC:2C:A6:56:C0:6F:44:17:DA:17:8F:09:06:B5
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/V-HOhnIA7CymVsBvRBfaF48JBrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.6.0/23
147.234.16.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:2d:39:77:73:e2:99:7f:88:6b:21:4a:0e:f3:06:55:8d:9b:
db:01:88:9b:a9:e5:5f:fc:c9:37:50:14:6b:dc:e2:bb:67:6b:
c5:03:83:fb:c7:4d:cc:67:25:1e:5f:f9:43:9b:d9:2f:38:92:
b6:9a:48:65:90:d0:eb:88:22:71:b8:dd:dc:ab:a9:1e:88:9f:
b0:f9:1e:0d:1d:80:21:9e:25:ee:32:88:a9:c2:f1:2d:4c:d2:
e3:2e:c7:0f:02:63:e1:56:94:c3:06:c3:f3:61:88:f1:f8:6f:
93:84:05:55:36:31:2c:92:80:db:db:a3:07:09:c2:63:4a:e2:
75:f2:c6:5b:8b:00:52:d4:33:97:c9:a1:11:ea:4e:8a:70:41:
49:5a:ae:c1:b2:31:58:a5:5b:6e:38:b8:e8:6c:23:93:78:65:
20:37:06:51:78:6c:ce:29:9b:5c:22:27:04:e2:56:14:2a:61:
0d:54:6c:26:e2:f5:24:90:95:a0:cf:c2:e8:26:3b:46:64:69:
bb:b4:9f:53:9c:a6:71:c1:2d:92:47:a4:0b:94:d9:90:7e:b1:
e8:fa:79:83:c0:9d:f7:dc:a2:8a:d5:f4:31:78:52:78:7f:4d:
b9:95:03:7c:cc:10:c0:0b:2b:3b:58:22:2f:81:6f:4f:b1:cf:
fa:bf:34:34
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVzDM7r2Fgn6++NRCEGkcC7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjMwMTAyMTUxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2UxY2U4NjcyMDBlYzJjYTY1NmMwNmY0NDE3ZGExNzhmMDkwNmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt2/gKgzLh+OjwYsBibiDMl1C3Il
uO+jo1AOqkUG6EyeIcZnz4mtg2zn9BgxXXMNrMz0xZ/cHBiz3w22CQe0h3By7Qhj
pfFMCD1HcX6tD471jx415u9kJp51ZhBb0g2OxBQHZU4T8oeBlJ06xqrMrxiIT/0/
p1glAqRrASua/3xyP1HImTVKR0hCAv6laChw5E2jw6361QjfPIdsCpYdijFoAPea
B04MBTLCK17e5NWLYo4ngIoVPOJ6LtHm9pymMrpxqBG5O4rutakmeFPgub//qQaj
2Fcy6b2eL1U2o6NvRPUAKqIifZf75F3UQvEyL4Pi45nl6bgbOZp0dSTODQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFfhzoZyAOwsplbAb0QX2hePCQa1MB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvVi1IT2huSUE3Q3ltVnNCdlJCZmFGNDhKQnJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBk+oGAwQA
k+oQMA0GCSqGSIb3DQEBCwUAA4IBAQDPLTl3c+KZf4hrIUoO8wZVjZvbAYibqeVf
/Mk3UBRr3OK7Z2vFA4P7x03MZyUeX/lDm9kvOJK2mkhlkNDriCJxuN3cq6keiJ+w
+R4NHYAhniXuMoipwvEtTNLjLscPAmPhVpTDBsPzYYjx+G+ThAVVNjEskoDb26MH
CcJjSuJ18sZbiwBS1DOXyaER6k6KcEFJWq7BsjFYpVtuOLjobCOTeGUgNwZReGzO
KZtcIicE4lYUKmENVGwm4vUkkJWgz8LoJjtGZGm7tJ9TnKZxwS2SR6QLlNmQfrHo
+nmDwJ333KKK1fQxeFJ4f025lQN8zBDACys7WCIvgW9Psc/6vzQ0
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:44 2024 by rpki-client on console-ams.rpki-client.org