Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/n5Ekz_h3QYE7kNUKtlMhkAd5BTw.roa
File: n5Ekz_h3QYE7kNUKtlMhkAd5BTw.roa (raw, json)
Hash identifier: fV0bSjrFuNlgAmpOwHXHNERwQjEdghLGx2N1Bpxdav0=
Subject key identifier: 9F:91:24:CF:F8:77:41:81:3B:90:D5:0A:B6:53:21:90:07:79:05:3C
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 01856E01C5EF8C09E9A0F46694A16E74C01B
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/n5Ekz_h3QYE7kNUKtlMhkAd5BTw.roa
Signing time: Sun 01 Jan 2023 15:44:47 +0000
ROA not before: Sun 01 Jan 2023 15:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8748
IP address blocks: 194.47.128.0/19 maxlen: 19
193.11.184.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:c5:ef:8c:09:e9:a0:f4:66:94:a1:6e:74:c0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f9124cff87741813b90d50ab65321900779053c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:01:c6:4e:06:35:ac:ae:98:87:3e:90:52:
27:05:92:a6:83:45:01:a2:4e:81:e1:ed:f4:7b:2c:
04:fc:bb:71:0b:a0:2a:f3:c8:df:75:da:0c:b9:80:
ed:be:cb:b4:a3:5d:6b:38:ed:f2:16:46:ab:9d:76:
e5:67:97:fc:0a:dd:90:6d:a7:00:2a:5f:fa:9b:01:
9f:ee:81:e5:6e:4d:15:2b:98:62:c7:74:f7:19:b4:
1b:62:5e:56:e3:a8:ff:b0:58:8d:0a:28:05:11:aa:
fd:f7:37:d8:a5:89:67:a3:5d:b8:db:55:4e:b6:31:
57:35:fd:85:c9:2c:48:f5:5b:26:c4:2a:1a:60:48:
a8:62:d6:40:b8:df:f6:34:ca:85:95:9d:39:c4:bf:
05:3f:7b:17:29:36:1d:1c:86:af:d4:61:9a:99:de:
e5:8b:11:bd:8d:1f:f9:9a:9b:cd:b8:b8:be:a7:31:
d2:08:ec:45:03:71:32:8e:9b:bb:7d:e7:14:3a:7b:
1e:1c:28:62:e2:e8:12:4c:52:05:19:1d:57:5c:dd:
dc:97:26:25:06:b2:4f:ad:bb:3e:92:36:ec:b3:b8:
85:54:83:1d:76:71:2c:f9:52:60:e8:6c:4a:66:7f:
83:4a:2c:57:d4:61:19:a5:83:c4:8b:d7:3d:de:14:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:91:24:CF:F8:77:41:81:3B:90:D5:0A:B6:53:21:90:07:79:05:3C
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/n5Ekz_h3QYE7kNUKtlMhkAd5BTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.11.184.0/21
194.47.128.0/19
Signature Algorithm: sha256WithRSAEncryption
2a:db:ac:36:b7:1b:25:92:0c:51:c7:a7:68:a2:25:9c:07:a4:
d9:6c:a5:63:7a:51:a2:f1:be:f5:1b:20:9f:34:41:41:8d:10:
c3:e5:53:ed:eb:1d:f3:02:84:c3:5d:f0:2a:dc:f0:f9:e8:60:
30:fb:46:d7:ea:cb:9e:15:ab:37:f0:25:d5:ee:1e:67:b7:9a:
fb:36:0b:df:39:f1:65:d6:15:fe:a6:cb:2c:5c:f1:42:c2:3f:
14:06:89:38:e9:cb:86:d1:50:8d:c1:e8:24:26:6c:a7:16:50:
bd:41:4f:94:39:05:96:f3:f5:85:da:ec:e3:e1:51:f6:22:81:
00:f6:11:c4:40:4c:92:c7:03:63:5f:58:02:78:8d:8d:fb:41:
68:78:53:44:e6:63:a7:00:f6:ae:7a:59:d0:e6:b9:51:f9:cf:
7b:19:eb:9f:69:af:42:4c:e7:f8:45:18:d5:8e:00:ec:03:ca:
06:39:d2:ec:61:44:53:d2:b6:a4:80:fa:85:b9:4b:81:63:85:
8d:cf:1c:37:d4:5c:58:bc:56:6b:07:b8:17:6a:25:8f:cd:64:
7b:0d:de:9e:29:0e:78:0d:7c:f2:ed:4b:12:a8:9c:33:b2:9b:
bd:28:e6:4f:a4:40:f7:94:3b:86:81:8b:86:15:f6:07:fc:01:
b0:00:bd:05
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVuAcXvjAnpoPRmlKFudMAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5
NGM1ZjIwHhcNMjMwMTAxMTU0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjkxMjRjZmY4Nzc0MTgxM2I5MGQ1MGFiNjUzMjE5MDA3NzkwNTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHABxk4GNayumIc+kFInBZKmg0UB
ok6B4e30eywE/LtxC6Aq88jfddoMuYDtvsu0o11rOO3yFkarnXblZ5f8Ct2QbacA
Kl/6mwGf7oHlbk0VK5hix3T3GbQbYl5W46j/sFiNCigFEar99zfYpYlno12421VO
tjFXNf2FySxI9VsmxCoaYEioYtZAuN/2NMqFlZ05xL8FP3sXKTYdHIav1GGamd7l
ixG9jR/5mpvNuLi+pzHSCOxFA3Eyjpu7fecUOnseHChi4ugSTFIFGR1XXN3clyYl
BrJPrbs+kjbss7iFVIMddnEs+VJg6GxKZn+DSixX1GEZpYPEi9c93hSyywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ+RJM/4d0GBO5DVCrZTIZAHeQU8MB8GA1UdIwQY
MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt
NDY0ZWIxODNiNTY4LzEvbjVFa3pfaDNRWUU3a05VS3RsTWhrQWQ1QlR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4
LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDwQu4AwQF
wi+AMA0GCSqGSIb3DQEBCwUAA4IBAQAq26w2txslkgxRx6dooiWcB6TZbKVjelGi
8b71GyCfNEFBjRDD5VPt6x3zAoTDXfAq3PD56GAw+0bX6sueFas38CXV7h5nt5r7
NgvfOfFl1hX+psssXPFCwj8UBok46cuG0VCNwegkJmynFlC9QU+UOQWW8/WF2uzj
4VH2IoEA9hHEQEySxwNjX1gCeI2N+0FoeFNE5mOnAPauelnQ5rlR+c97Geufaa9C
TOf4RRjVjgDsA8oGOdLsYURT0rakgPqFuUuBY4WNzxw31FxYvFZrB7gXaiWPzWR7
Dd6eKQ54DXzy7UsSqJwzspu9KOZPpED3lDuGgYuGFfYH/AGwAL0F
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:12 2024 by rpki-client on console-ams.rpki-client.org