Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/4w-h8vC_fRuzvwg4zS4UWyaM0hY.roa
File: 4w-h8vC_fRuzvwg4zS4UWyaM0hY.roa (raw, json)
Hash identifier: j3ALi2fgW8cS5BDbaOkXswbuKRNNUoKs+bMZzKQeWYs=
Subject key identifier: E3:0F:A1:F2:F0:BF:7D:1B:B3:BF:08:38:CD:2E:14:5B:26:8C:D2:16
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 01856B8A2A10D4E1DBBBF91618A082E72FDF
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/4w-h8vC_fRuzvwg4zS4UWyaM0hY.roa
Signing time: Sun 01 Jan 2023 04:14:54 +0000
ROA not before: Sun 01 Jan 2023 04:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47475
IP address blocks: 195.43.146.0/24 maxlen: 24
91.194.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:2a:10:d4:e1:db:bb:f9:16:18:a0:82:e7:2f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 1 04:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e30fa1f2f0bf7d1bb3bf0838cd2e145b268cd216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:e6:03:e3:20:0b:d9:c8:5b:e4:48:43:db:
f1:80:95:36:5a:c7:fd:8c:d2:4c:cc:bb:39:e7:7d:
b4:e0:37:bd:4c:0d:17:49:4d:17:f1:01:49:94:bb:
13:54:55:73:a4:a6:a3:55:95:95:a4:71:c6:de:8c:
99:e3:70:96:b1:8d:e9:0e:4e:b2:c9:91:8d:cc:30:
cc:ff:d8:54:98:20:81:cf:3f:0f:f1:c2:f0:ee:13:
db:a2:ea:5b:92:6c:10:06:1c:8b:cb:5c:d6:b6:a9:
0e:7f:25:f0:3a:ae:b9:43:7a:e9:b0:5e:cb:0e:b0:
eb:db:cc:38:67:3e:a1:3a:ec:93:29:8b:04:d2:c3:
d0:b4:0f:d9:d6:69:1f:d6:a8:e3:9c:78:27:8f:bd:
42:ae:3f:f6:a4:95:0b:37:90:33:66:1c:7a:22:a0:
de:0f:e8:6f:4c:1f:87:55:3e:9d:c3:57:2b:6e:0d:
70:30:dd:5b:19:e7:bf:96:a4:66:f9:d7:e6:2b:04:
8c:09:07:a6:df:6e:2a:1a:40:4b:f5:b0:28:26:26:
b3:3c:4f:5a:8f:a3:54:b8:ae:04:68:c8:d9:bc:8d:
58:2d:25:d9:53:06:50:43:99:97:7e:67:01:5c:0e:
5e:96:8b:da:d7:06:53:39:6a:08:70:56:25:e5:09:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0F:A1:F2:F0:BF:7D:1B:B3:BF:08:38:CD:2E:14:5B:26:8C:D2:16
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/4w-h8vC_fRuzvwg4zS4UWyaM0hY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.80.0/24
195.43.146.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:51:62:0b:c9:d6:4f:14:3c:b8:8d:71:cf:1c:8d:a2:94:6f:
8d:ff:bb:84:62:4a:9d:de:90:a7:c9:09:04:02:c1:b3:36:c5:
09:f4:56:66:ba:c7:cd:83:9a:31:ea:a9:7d:ff:50:ae:64:b7:
df:e8:d2:be:ec:09:8c:fa:01:e4:e0:68:ae:88:09:72:a6:72:
31:92:1f:26:c4:2b:ae:40:a1:08:1d:3e:7e:c0:ee:71:80:6b:
7f:47:d4:6a:0c:11:df:1f:aa:3a:26:f4:6a:6a:49:68:14:f4:
ef:91:c0:8f:61:b7:2a:59:14:f3:95:57:30:eb:83:69:39:78:
bd:db:7c:1d:b0:74:f7:93:1d:e5:64:94:17:85:9e:7a:2f:6d:
95:2c:51:30:17:5d:a5:7f:a1:75:66:44:ca:fa:9a:93:d2:65:
06:b3:00:9d:f0:3a:79:c9:6a:b7:bc:04:94:18:bc:c2:1a:06:
67:e4:ad:21:a5:52:11:3a:88:05:09:e1:8f:ea:1c:60:c4:74:
64:38:38:89:81:5c:bf:bd:21:d1:74:b6:d1:49:c2:3e:d4:69:
e6:d0:e3:c2:01:0d:ea:9b:8e:62:e4:2a:84:32:ef:2e:60:1c:
f9:68:60:9d:0e:3d:9f:6b:79:73:56:2b:a2:b1:5b:3b:a6:2e:
c5:16:0c:b2
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVriioQ1OHbu/kWGKCC5y/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NDEyODE0NmI3YmVjOGJkMTE4NWJiZTBjM2I5MzQwYWFm
NWI3MTQwHhcNMjMwMTAxMDQxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzBmYTFmMmYwYmY3ZDFiYjNiZjA4MzhjZDJlMTQ1YjI2OGNkMjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sfmA+MgC9nIW+RIQ9vxgJU2Wsf9
jNJMzLs553204De9TA0XSU0X8QFJlLsTVFVzpKajVZWVpHHG3oyZ43CWsY3pDk6y
yZGNzDDM/9hUmCCBzz8P8cLw7hPboupbkmwQBhyLy1zWtqkOfyXwOq65Q3rpsF7L
DrDr28w4Zz6hOuyTKYsE0sPQtA/Z1mkf1qjjnHgnj71Crj/2pJULN5AzZhx6IqDe
D+hvTB+HVT6dw1crbg1wMN1bGee/lqRm+dfmKwSMCQem324qGkBL9bAoJiazPE9a
j6NUuK4EaMjZvI1YLSXZUwZQQ5mXfmcBXA5elova1wZTOWoIcFYl5QmmswIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOMPofLwv30bs78IOM0uFFsmjNIWMB8GA1UdIwQY
MBaAFPhBKBRre+yL0Rhbvgw7k0Cq9bcUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FRW9GR3Q3N0l2UkdGdS1ERHVUUUtyMXR4US5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQx
LTEzODM5NjQwYTYwNC8xLzR3LWg4dkNfZlJ1enZ3ZzR6UzRVV3lhTTBoWS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjIvZmIyNDExLTQ4NWItNDE0My05MjQxLTEzODM5NjQwYTYw
NC8xLzEtRUVvRkd0NzdJdlJHRnUtRER1VFFLcjF0eFEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABbwlAD
BADDK5IwDQYJKoZIhvcNAQELBQADggEBALBRYgvJ1k8UPLiNcc8cjaKUb43/u4Ri
Sp3ekKfJCQQCwbM2xQn0Vma6x82DmjHqqX3/UK5kt9/o0r7sCYz6AeTgaK6ICXKm
cjGSHybEK65AoQgdPn7A7nGAa39H1GoMEd8fqjom9GpqSWgU9O+RwI9htypZFPOV
VzDrg2k5eL3bfB2wdPeTHeVklBeFnnovbZUsUTAXXaV/oXVmRMr6mpPSZQazAJ3w
OnnJare8BJQYvMIaBmfkrSGlUhE6iAUJ4Y/qHGDEdGQ4OImBXL+9IdF0ttFJwj7U
aebQ48IBDeqbjmLkKoQy7y5gHPloYJ0OPZ9reXNWK6KxWzumLsUWDLI=
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:51 2024 by rpki-client on console-fra.rpki-client.org