Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/4gjjWuJtf2w6U6XNiYM3Q2rWJxo.roa
File: 4gjjWuJtf2w6U6XNiYM3Q2rWJxo.roa (raw, json)
Hash identifier: 24+Lj7vUpwqft9YoPpMOcZLTE3WNGzLL38XPqYu0M/U=
Subject key identifier: E2:08:E3:5A:E2:6D:7F:6C:3A:53:A5:CD:89:83:37:43:6A:D6:27:1A
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018BD84B165F342EDD0CB7CE2D740280BCA1
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/4gjjWuJtf2w6U6XNiYM3Q2rWJxo.roa
Signing time: Thu 16 Nov 2023 13:21:21 +0000
ROA not before: Thu 16 Nov 2023 13:21:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215985
IP address blocks: 195.136.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:4b:16:5f:34:2e:dd:0c:b7:ce:2d:74:02:80:bc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Nov 16 13:21:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e208e35ae26d7f6c3a53a5cd898337436ad6271a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:aa:49:9f:ba:aa:8d:28:b6:17:81:6a:3c:
8c:7d:74:1c:ad:b5:cc:15:7b:d2:c6:d9:e4:4a:a4:
72:78:73:e2:40:ee:2d:58:67:19:74:ae:43:c1:8b:
c7:57:b4:43:ce:f7:7b:dc:fe:68:fe:37:fb:ca:0f:
04:c4:12:eb:c8:be:55:51:6e:5b:9f:7b:60:ae:28:
2a:b8:f7:4c:62:29:10:30:ae:36:b7:4d:d1:d7:c3:
eb:ac:fc:b3:8c:63:87:72:64:7f:1c:ae:94:be:b0:
c4:16:54:84:d2:4f:a2:60:42:21:97:28:3a:d5:91:
b9:36:11:03:2f:30:37:82:60:da:fa:a1:e9:05:8b:
eb:26:8b:df:6b:3e:76:8c:73:96:8e:2d:75:4f:82:
24:1f:ab:0c:fb:62:65:1f:4f:05:e0:38:4a:cc:8b:
59:fa:68:75:a9:8c:df:3a:b0:77:eb:6e:0a:ef:e3:
44:86:e5:5d:ea:7e:89:81:01:c7:14:9a:9f:b2:37:
14:2b:7a:73:e1:2c:3b:ae:7c:2d:00:e3:94:6f:3d:
c6:61:1e:13:3d:42:6a:b4:a4:4f:8a:d7:ea:d2:23:
7d:f0:a1:21:c5:a2:6b:2d:63:66:97:b7:c8:16:41:
21:7c:cf:40:58:f1:14:8a:50:1a:16:1b:8b:04:50:
07:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:08:E3:5A:E2:6D:7F:6C:3A:53:A5:CD:89:83:37:43:6A:D6:27:1A
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/4gjjWuJtf2w6U6XNiYM3Q2rWJxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:7f:84:05:c7:57:fc:b4:d1:71:16:9d:85:7f:82:eb:43:29:
52:a4:15:4e:fb:92:9d:ce:7f:fe:26:27:94:29:8a:4e:5d:91:
70:0a:25:55:da:7a:c4:6f:66:3d:e3:97:93:42:c0:05:3d:df:
78:e7:2d:b2:35:63:96:07:e6:24:53:60:83:2b:7a:c0:03:30:
09:e2:e9:f0:a4:76:8b:6f:2e:47:af:f9:b0:85:71:1c:32:fc:
97:30:68:6d:02:6b:0f:6e:10:ce:de:61:05:62:1e:5d:ca:e0:
8c:98:5e:73:dc:68:0f:bf:bc:6f:84:f5:90:69:9d:9b:fa:8c:
db:18:a1:fa:72:ff:77:a7:9c:76:49:f5:79:35:12:88:a7:7e:
61:41:4b:93:4f:da:42:5a:1a:99:8d:9d:bf:ef:02:b4:12:b7:
ae:bc:52:ed:f0:dd:c4:87:4a:2d:c4:31:50:91:34:54:2c:2d:
0b:24:1f:c9:62:28:04:ca:d9:09:c3:22:91:08:3f:bf:c5:f4:
ab:e6:38:86:29:14:cb:75:d8:ae:c7:33:25:88:87:4a:03:d2:
f8:bd:e7:51:0f:ab:19:26:33:60:ab:98:ee:1e:11:21:08:2e:
34:d9:84:87:c8:82:b5:61:de:99:b6:13:69:59:41:c9:b9:f7:
eb:8e:05:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvYSxZfNC7dDLfOLXQCgLyhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjMxMTE2MTMyMTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjA4ZTM1YWUyNmQ3ZjZjM2E1M2E1Y2Q4OTgzMzc0MzZhZDYyNzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszOqSZ+6qo0otheBajyMfXQcrbXM
FXvSxtnkSqRyeHPiQO4tWGcZdK5DwYvHV7RDzvd73P5o/jf7yg8ExBLryL5VUW5b
n3tgrigquPdMYikQMK42t03R18PrrPyzjGOHcmR/HK6UvrDEFlSE0k+iYEIhlyg6
1ZG5NhEDLzA3gmDa+qHpBYvrJovfaz52jHOWji11T4IkH6sM+2JlH08F4DhKzItZ
+mh1qYzfOrB3624K7+NEhuVd6n6JgQHHFJqfsjcUK3pz4Sw7rnwtAOOUbz3GYR4T
PUJqtKRPitfq0iN98KEhxaJrLWNml7fIFkEhfM9AWPEUilAaFhuLBFAH4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOII41ribX9sOlOlzYmDN0Nq1icaMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvNGdqald1SnRmMnc2VTZYTmlZTTNRMnJXSnhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4j3MA0G
CSqGSIb3DQEBCwUAA4IBAQCnf4QFx1f8tNFxFp2Ff4LrQylSpBVO+5Kdzn/+JieU
KYpOXZFwCiVV2nrEb2Y945eTQsAFPd945y2yNWOWB+YkU2CDK3rAAzAJ4unwpHaL
by5Hr/mwhXEcMvyXMGhtAmsPbhDO3mEFYh5dyuCMmF5z3GgPv7xvhPWQaZ2b+ozb
GKH6cv93p5x2SfV5NRKIp35hQUuTT9pCWhqZjZ2/7wK0EreuvFLt8N3Eh0otxDFQ
kTRULC0LJB/JYigEytkJwyKRCD+/xfSr5jiGKRTLddiuxzMliIdKA9L4vedRD6sZ
JjNgq5juHhEhCC402YSHyIK1Yd6ZthNpWUHJuffrjgVn
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:20 2024 by rpki-client on console-ams.rpki-client.org