Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/iEAaRHyv6BKWKg5MM8aKzVdCFO4.roa
File: iEAaRHyv6BKWKg5MM8aKzVdCFO4.roa (raw, json)
Hash identifier: QDutsHANGsbHHksTz4NEWbhKr4bcxrUS1EyYIruE6Qs=
Subject key identifier: 88:40:1A:44:7C:AF:E8:12:96:2A:0E:4C:33:C6:8A:CD:57:42:14:EE
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 01865454DC742C63BBB7754CA18B2C6EE84E
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/iEAaRHyv6BKWKg5MM8aKzVdCFO4.roa
Signing time: Wed 15 Feb 2023 09:08:12 +0000
ROA not before: Wed 15 Feb 2023 09:08:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35378
IP address blocks: 195.136.116.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:54:54:dc:74:2c:63:bb:b7:75:4c:a1:8b:2c:6e:e8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Feb 15 09:08:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88401a447cafe812962a0e4c33c68acd574214ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:6f:18:bb:2e:dc:60:7e:ff:44:5e:70:f3:
02:34:c4:9a:dc:60:05:c7:e1:3b:0e:b4:b4:da:24:
1f:56:ad:46:d1:1d:57:55:3a:df:16:3a:9a:c2:f1:
d7:6d:58:62:8f:e2:cb:66:3e:57:a2:62:02:c6:40:
fe:40:5a:d2:a3:c5:34:13:58:2e:3d:8f:14:87:ee:
c1:85:95:de:af:f9:12:59:36:c1:51:fe:1e:4d:cc:
83:a0:5a:71:5b:c3:53:d9:a9:be:ed:4f:c0:58:35:
e1:b1:99:0a:01:24:a5:83:9a:4d:7f:ea:fe:f4:97:
51:1d:99:28:83:9b:58:d2:b4:a5:c9:95:2e:82:2c:
9f:7b:55:0e:de:89:2b:49:72:b3:34:d9:f2:a0:bc:
56:66:c8:7c:f4:f9:21:45:0d:e1:91:1b:80:29:18:
3d:5d:aa:58:ba:12:f5:16:aa:52:7e:69:fa:16:b6:
e5:e9:6e:cf:22:62:78:57:44:bb:b8:07:a5:b4:f8:
f0:66:74:29:d4:56:26:e1:b0:dc:73:d9:bf:fa:6d:
dc:28:6c:6c:ee:64:d5:ae:ac:66:fc:fa:65:fa:49:
92:dc:85:61:db:68:62:90:1e:40:ec:d6:7c:46:4a:
69:48:dd:86:24:ac:7d:e1:c3:2a:8c:3f:e9:56:71:
18:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:40:1A:44:7C:AF:E8:12:96:2A:0E:4C:33:C6:8A:CD:57:42:14:EE
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/iEAaRHyv6BKWKg5MM8aKzVdCFO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.116.0/22
Signature Algorithm: sha256WithRSAEncryption
41:ad:db:f1:e8:36:92:db:e3:39:90:3d:15:43:c2:77:f9:83:
42:9a:4c:fc:b0:ea:80:21:af:81:4f:36:d9:09:f2:52:6b:a3:
e0:62:be:63:d4:b1:39:ef:4e:78:b8:40:ae:65:96:95:ec:9d:
5c:49:8d:d8:55:d7:97:ec:c3:b5:fa:e4:b8:43:21:86:97:9c:
41:e2:cf:64:a2:19:cc:85:00:7f:38:3f:9d:1d:9a:08:cb:3c:
35:2b:c4:5e:cf:70:fa:1c:d2:7a:34:fc:1a:ef:d5:0f:17:d6:
ed:45:8b:84:6b:2f:c4:4b:c4:f3:5b:c4:f0:2d:56:b4:fb:2e:
7c:51:3c:35:57:af:3f:3f:54:bb:5d:95:cf:1b:01:a1:3c:87:
6a:c4:1b:34:0e:ac:3b:67:f2:2a:77:d0:af:41:42:dd:ae:98:
2b:db:f5:60:99:87:af:c7:18:2a:8c:0c:c8:c8:2d:66:62:10:
17:86:1a:00:2c:38:06:c8:7b:3b:d8:07:53:5a:9a:da:92:d6:
f8:1f:f5:54:f6:1a:fc:f7:e6:14:ea:4f:8f:ed:ce:f2:af:f4:
c6:35:24:db:f8:12:b9:57:87:63:34:b1:e8:3c:f8:58:8f:5b:
87:0b:d9:de:67:76:c9:1a:66:73:1c:1b:b9:27:4e:3e:49:34:
d0:d4:e0:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZUVNx0LGO7t3VMoYssbuhOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjMwMjE1MDkwODEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODQwMWE0NDdjYWZlODEyOTYyYTBlNGMzM2M2OGFjZDU3NDIxNGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmplvGLsu3GB+/0RecPMCNMSa3GAF
x+E7DrS02iQfVq1G0R1XVTrfFjqawvHXbVhij+LLZj5XomICxkD+QFrSo8U0E1gu
PY8Uh+7BhZXer/kSWTbBUf4eTcyDoFpxW8NT2am+7U/AWDXhsZkKASSlg5pNf+r+
9JdRHZkog5tY0rSlyZUugiyfe1UO3okrSXKzNNnyoLxWZsh89PkhRQ3hkRuAKRg9
XapYuhL1FqpSfmn6Frbl6W7PImJ4V0S7uAeltPjwZnQp1FYm4bDcc9m/+m3cKGxs
7mTVrqxm/Ppl+kmS3IVh22hikB5A7NZ8RkppSN2GJKx94cMqjD/pVnEYhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIhAGkR8r+gSlioOTDPGis1XQhTuMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvaUVBYVJIeXY2QktXS2c1TU04YUt6VmRDRk80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw4h0MA0G
CSqGSIb3DQEBCwUAA4IBAQBBrdvx6DaS2+M5kD0VQ8J3+YNCmkz8sOqAIa+BTzbZ
CfJSa6PgYr5j1LE57054uECuZZaV7J1cSY3YVdeX7MO1+uS4QyGGl5xB4s9kohnM
hQB/OD+dHZoIyzw1K8Rez3D6HNJ6NPwa79UPF9btRYuEay/ES8TzW8TwLVa0+y58
UTw1V68/P1S7XZXPGwGhPIdqxBs0Dqw7Z/Iqd9CvQULdrpgr2/VgmYevxxgqjAzI
yC1mYhAXhhoALDgGyHs72AdTWpraktb4H/VU9hr89+YU6k+P7c7yr/TGNSTb+BK5
V4djNLHoPPhYj1uHC9neZ3bJGmZzHBu5J04+STTQ1OAl
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:20 2024 by rpki-client on console-ams.rpki-client.org