Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/cvXd1VImcZuEiHo526I-QAWxFlo.roa
File: cvXd1VImcZuEiHo526I-QAWxFlo.roa (raw, json)
Hash identifier: F+BDiyUJf/j+p8MihiKHpmWzAHfvoOhAa+rlQilj75M=
Subject key identifier: 72:F5:DD:D5:52:26:71:9B:84:88:7A:39:DB:A2:3E:40:05:B1:16:5A
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 01857195491503301A7992B9CA259B32DE8C
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/cvXd1VImcZuEiHo526I-QAWxFlo.roa
Signing time: Mon 02 Jan 2023 08:24:46 +0000
ROA not before: Mon 02 Jan 2023 08:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202673
IP address blocks: 194.15.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:49:15:03:30:1a:79:92:b9:ca:25:9b:32:de:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Jan 2 08:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=72f5ddd55226719b84887a39dba23e4005b1165a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:27:bd:d3:10:40:95:3b:ee:56:29:de:ec:
a1:ec:4f:6b:e6:ac:46:92:14:98:2d:bd:13:40:5b:
a1:f0:b1:79:d3:5f:1b:83:69:a0:49:64:9f:2f:78:
86:97:c4:b3:ec:fc:e7:aa:2c:d4:84:e2:db:2d:18:
0c:1f:d7:74:ff:dc:8d:8a:5b:5f:66:d3:3d:f8:dd:
b8:c0:a7:26:6c:0a:17:2b:96:88:20:73:8d:b4:81:
32:aa:0b:97:fb:fb:4b:0d:a7:ff:07:d1:ae:41:4c:
20:0b:6f:20:cc:73:56:4c:f5:5b:27:93:d9:b3:73:
01:b6:66:18:b2:1b:95:58:1d:bc:6f:06:93:9f:6f:
cd:6e:87:22:1b:7e:18:67:ec:70:74:a0:53:6d:b7:
5f:da:d5:2c:a4:5f:e9:50:94:63:b1:18:94:a6:c1:
91:ce:b3:f1:1c:08:c2:73:3d:cd:3c:7e:a7:3c:73:
d5:cd:b5:6a:da:c0:99:d2:59:90:06:64:3a:1d:9a:
25:5e:1e:d4:f2:b6:3e:6e:c4:9e:d9:89:9b:60:9a:
48:02:18:a1:c0:c1:3d:01:f1:a8:14:b5:d7:2a:b1:
49:ac:2c:1e:1d:aa:1b:4f:bc:ce:82:7c:e6:39:e3:
d2:a8:fb:c4:63:e3:bb:ec:8a:cf:61:9e:d6:17:61:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F5:DD:D5:52:26:71:9B:84:88:7A:39:DB:A2:3E:40:05:B1:16:5A
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/cvXd1VImcZuEiHo526I-QAWxFlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.154.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:68:67:05:f3:c0:86:4e:8d:5b:36:23:57:ee:c2:65:8f:bc:
0b:f8:eb:aa:46:ea:bb:a5:95:c3:c9:06:77:cb:72:54:19:59:
83:77:21:98:37:6c:fe:16:4e:2f:df:96:be:fa:5f:0d:aa:50:
67:15:5c:80:f4:cc:e3:37:b1:91:2a:5f:7d:f0:ae:c2:67:36:
c8:7a:7a:8e:d1:98:00:16:7e:8d:64:72:67:35:c8:60:e7:2d:
be:94:65:20:38:18:74:15:90:cd:a3:e2:d8:59:34:60:80:d0:
45:ee:0e:9c:39:91:ac:ed:a2:12:8c:f1:4f:da:50:d5:65:aa:
b6:60:48:bb:ec:35:67:e8:7d:04:9a:02:f0:a7:10:d0:a6:a8:
df:8f:0b:3b:49:60:60:97:55:5d:a0:57:10:67:7b:31:d3:85:
9d:78:04:73:46:b0:c0:d3:26:cd:ef:45:4e:30:56:9e:2f:a8:
b8:b5:59:a9:69:c2:c0:9a:10:d9:46:50:c6:d8:27:96:ab:98:
da:f9:92:06:bc:05:bb:1b:44:ae:7c:91:24:e9:00:57:39:c9:
cd:a5:24:a9:1c:0b:6f:5e:8c:c4:65:ed:aa:5b:48:5f:ac:60:
4f:da:7c:c8:b5:34:52:b3:2a:a3:6c:6b:45:d7:a1:f1:c4:c9:
6c:71:1d:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxlUkVAzAaeZK5yiWbMt6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGVkOTQyZTVjNzQyZTc3YmZiOWJlYjk1NGY4NzI1MzRm
NTI4NDgwHhcNMjMwMTAyMDgyNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmY1ZGRkNTUyMjY3MTliODQ4ODdhMzlkYmEyM2U0MDA1YjExNjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2InvdMQQJU77lYp3uyh7E9r5qxG
khSYLb0TQFuh8LF5018bg2mgSWSfL3iGl8Sz7PznqizUhOLbLRgMH9d0/9yNiltf
ZtM9+N24wKcmbAoXK5aIIHONtIEyqguX+/tLDaf/B9GuQUwgC28gzHNWTPVbJ5PZ
s3MBtmYYshuVWB28bwaTn2/NbociG34YZ+xwdKBTbbdf2tUspF/pUJRjsRiUpsGR
zrPxHAjCcz3NPH6nPHPVzbVq2sCZ0lmQBmQ6HZolXh7U8rY+bsSe2YmbYJpIAhih
wME9AfGoFLXXKrFJrCweHaobT7zOgnzmOePSqPvEY+O77IrPYZ7WF2HPKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHL13dVSJnGbhIh6OduiPkAFsRZaMB8GA1UdIwQY
MBaAFDxO2ULlx0Lne/ub65VPhyU09ShIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2Et
NzczNDRiY2M5MTkxLzEvY3ZYZDFWSW1jWnVFaUhvNTI2SS1RQVd4RmxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2EtNzczNDRiY2M5MTkx
LzEvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg+aMA0G
CSqGSIb3DQEBCwUAA4IBAQBvaGcF88CGTo1bNiNX7sJlj7wL+OuqRuq7pZXDyQZ3
y3JUGVmDdyGYN2z+Fk4v35a++l8NqlBnFVyA9MzjN7GRKl998K7CZzbIenqO0ZgA
Fn6NZHJnNchg5y2+lGUgOBh0FZDNo+LYWTRggNBF7g6cOZGs7aISjPFP2lDVZaq2
YEi77DVn6H0EmgLwpxDQpqjfjws7SWBgl1VdoFcQZ3sx04WdeARzRrDA0ybN70VO
MFaeL6i4tVmpacLAmhDZRlDG2CeWq5ja+ZIGvAW7G0SufJEk6QBXOcnNpSSpHAtv
XozEZe2qW0hfrGBP2nzItTRSsyqjbGtF16HxxMlscR3l
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:54 2023 by rpki-client on console-ams.rpki-client.org