Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/V7Zb6NOANp1wBaePR-b1-1Zeab4.roa
File: V7Zb6NOANp1wBaePR-b1-1Zeab4.roa (raw, json)
Hash identifier: +yeqppqjfLTMHgI9k59U0brGQ2IF1PyTv8BZAP0pq5A=
Subject key identifier: 57:B6:5B:E8:D3:80:36:9D:70:05:A7:8F:47:E6:F5:FB:56:5E:69:BE
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0BD73DD6529AA3B0EE13D210C53DE
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/V7Zb6NOANp1wBaePR-b1-1Zeab4.roa
Signing time: Mon 02 Jan 2023 05:25:03 +0000
ROA not before: Mon 02 Jan 2023 05:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201893
IP address blocks: 195.136.66.0/23 maxlen: 24
82.177.134.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:bd:73:dd:65:29:aa:3b:0e:e1:3d:21:0c:53:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57b65be8d380369d7005a78f47e6f5fb565e69be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:1f:4f:b7:c1:c2:be:77:17:e6:40:66:49:
78:33:28:e7:6d:70:29:0a:65:84:67:b2:15:09:77:
94:9f:c6:7a:22:5a:a7:09:46:25:de:06:60:b7:e2:
68:9e:03:f9:47:0b:43:3d:16:bf:70:72:ed:bc:fd:
b1:04:14:b5:c2:b4:ee:2e:c2:25:24:05:bf:ac:3f:
21:b4:69:f0:f1:85:96:eb:09:8a:f7:62:5d:8c:9e:
98:22:c8:29:79:7e:c9:77:43:1c:db:49:87:27:72:
2f:50:0a:1f:af:1b:2f:9c:c7:a5:a3:53:cd:7b:2f:
2b:d9:a3:df:cb:96:b3:e5:b8:c2:b6:70:8d:41:58:
4d:b6:fb:75:11:8a:5f:e6:9b:94:c9:88:b1:06:b6:
e9:fd:07:b1:cd:52:6e:af:f9:41:00:21:49:27:4c:
6a:87:cb:ca:58:fd:48:cb:34:1f:4c:15:e1:e2:69:
39:40:66:ce:e4:23:5f:11:6c:c5:99:6c:44:0f:1f:
11:7e:50:4d:8c:47:09:28:07:cd:1c:40:9f:36:83:
67:6c:ee:c9:4c:a2:84:fa:a9:27:9c:7a:ec:d0:2f:
a5:00:92:e6:c2:b5:f0:31:b6:d0:79:88:06:8c:1f:
d4:69:c5:36:c7:e8:2f:fc:83:d6:1c:79:8a:3c:03:
be:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B6:5B:E8:D3:80:36:9D:70:05:A7:8F:47:E6:F5:FB:56:5E:69:BE
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/V7Zb6NOANp1wBaePR-b1-1Zeab4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.134.0/23
195.136.66.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:c9:5c:9d:45:40:8b:16:50:66:2b:df:31:62:72:86:5d:b3:
bc:63:e2:8e:e6:9f:49:b4:b7:ab:fd:59:c3:68:a4:f9:82:2d:
2e:8c:d3:b3:68:23:b6:60:f5:ff:22:c8:71:1c:66:18:d1:26:
b8:4f:9d:5f:b6:e4:8a:14:17:b5:c6:4d:1e:d0:6f:b9:9b:7b:
d9:11:7c:93:aa:ab:16:d6:3e:00:7b:f3:4a:ae:de:0e:76:b9:
b7:69:0d:3e:0a:31:96:0b:73:41:bb:2d:89:56:f0:f6:d0:79:
9c:4d:63:31:1e:2f:44:6b:be:24:f5:8c:e9:5c:cc:fc:d6:b9:
6a:4c:08:d5:64:6b:19:9f:b8:e9:a6:2e:97:8a:7f:fa:9c:28:
9d:35:80:fe:6e:b7:6a:8c:4b:0f:1b:a2:1b:83:30:9f:5a:d9:
ec:a1:e4:84:b8:c0:29:e7:24:ca:c3:b7:e3:14:a9:1b:7f:80:
b0:c5:88:a3:af:b6:e7:52:a1:36:4f:b1:11:7f:7a:ad:5b:2a:
1b:e6:d3:8e:b7:be:dc:2a:f9:bb:97:6a:a1:d6:aa:ff:2a:0a:
21:19:07:25:10:0c:6d:97:8f:23:28:a0:d7:0b:8e:cf:e5:7b:
ef:3a:4e:21:0b:46:52:ff:c4:ad:61:db:40:07:95:4d:0f:5e:
c8:6e:37:93
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVw8L1z3WUpqjsO4T0hDFPeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjMwMTAyMDUyNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2I2NWJlOGQzODAzNjlkNzAwNWE3OGY0N2U2ZjVmYjU2NWU2OWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndcfT7fBwr53F+ZAZkl4MyjnbXAp
CmWEZ7IVCXeUn8Z6IlqnCUYl3gZgt+JongP5RwtDPRa/cHLtvP2xBBS1wrTuLsIl
JAW/rD8htGnw8YWW6wmK92JdjJ6YIsgpeX7Jd0Mc20mHJ3IvUAofrxsvnMelo1PN
ey8r2aPfy5az5bjCtnCNQVhNtvt1EYpf5puUyYixBrbp/QexzVJur/lBACFJJ0xq
h8vKWP1IyzQfTBXh4mk5QGbO5CNfEWzFmWxEDx8RflBNjEcJKAfNHECfNoNnbO7J
TKKE+qknnHrs0C+lAJLmwrXwMbbQeYgGjB/UacU2x+gv/IPWHHmKPAO+IQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFe2W+jTgDadcAWnj0fm9ftWXmm+MB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvVjdaYjZOT0FOcDF3QmFlUFItYjEtMVplYWI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUrGGAwQB
w4hCMA0GCSqGSIb3DQEBCwUAA4IBAQC3yVydRUCLFlBmK98xYnKGXbO8Y+KO5p9J
tLer/VnDaKT5gi0ujNOzaCO2YPX/IshxHGYY0Sa4T51ftuSKFBe1xk0e0G+5m3vZ
EXyTqqsW1j4Ae/NKrt4Odrm3aQ0+CjGWC3NBuy2JVvD20HmcTWMxHi9Ea74k9Yzp
XMz81rlqTAjVZGsZn7jppi6Xin/6nCidNYD+brdqjEsPG6IbgzCfWtnsoeSEuMAp
5yTKw7fjFKkbf4CwxYijr7bnUqE2T7ERf3qtWyob5tOOt77cKvm7l2qh1qr/Kgoh
GQclEAxtl48jKKDXC47P5XvvOk4hC0ZS/8StYdtAB5VND17IbjeT
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:37 2024 by rpki-client on console-fra.rpki-client.org