Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xnLRXHfxU0_ldEZSPABYoFhGbhQ.roa
File: xnLRXHfxU0_ldEZSPABYoFhGbhQ.roa (raw, json)
Hash identifier: 0l0zvFuIHi3KWl/HaVXgHWYzRdWGVeVCQ00FRsc7LiA=
Subject key identifier: C6:72:D1:5C:77:F1:53:4F:E5:74:46:52:3C:00:58:A0:58:46:6E:14
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0C31C19D3C3858414207695A9CA0C
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xnLRXHfxU0_ldEZSPABYoFhGbhQ.roa
Signing time: Mon 02 Jan 2023 05:25:04 +0000
ROA not before: Mon 02 Jan 2023 05:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205608
IP address blocks: 195.136.4.0/22 maxlen: 22
195.136.38.0/23 maxlen: 23
195.136.156.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:c3:1c:19:d3:c3:85:84:14:20:76:95:a9:ca:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c672d15c77f1534fe57446523c0058a058466e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:cd:79:0f:21:10:c6:29:39:7b:35:05:64:
5c:de:0d:84:65:e5:c6:a5:c7:af:46:21:c4:5e:11:
0e:b7:df:1e:f7:a7:fe:b1:d7:77:db:68:6e:5e:59:
80:5b:93:86:a2:61:3c:f8:8b:bc:ee:86:43:77:11:
63:18:ba:b2:85:b4:2a:32:bd:a8:8d:59:a5:74:db:
b1:7c:e1:36:71:0d:04:2a:ea:fb:12:4b:94:7e:25:
3c:17:b5:69:f1:dd:98:30:77:9c:c3:03:2e:20:df:
e1:72:4d:cd:2e:9b:5f:c6:48:29:1c:ef:35:d2:7f:
4b:69:93:b6:47:51:98:2c:bb:d1:31:b7:a1:8d:43:
72:03:f1:96:b1:f4:cc:8e:fb:bc:4a:91:f7:1d:a5:
54:85:42:3a:a9:6a:29:95:41:88:4f:70:d2:2c:fd:
3d:a2:a0:28:80:dc:21:5c:19:40:9b:bd:1b:66:8e:
e6:1d:ef:47:37:88:80:9d:42:2a:38:19:48:4d:1b:
81:3d:81:4f:ee:bb:32:9f:57:cc:a6:6d:83:47:ab:
dc:7b:39:6f:ec:a4:43:7e:1a:a2:c8:6d:96:66:b7:
a0:e8:0b:a1:4c:70:c0:9d:af:9c:7d:92:5f:7b:0b:
b0:db:07:f3:3c:8f:ad:9e:53:b5:ab:74:fe:59:83:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:72:D1:5C:77:F1:53:4F:E5:74:46:52:3C:00:58:A0:58:46:6E:14
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/xnLRXHfxU0_ldEZSPABYoFhGbhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.4.0/22
195.136.38.0/23
195.136.156.0/23
Signature Algorithm: sha256WithRSAEncryption
60:35:36:d5:43:67:56:c8:3d:75:4b:1d:7c:f6:7d:6b:dc:33:
74:9c:ff:e6:04:82:43:d0:b7:8d:87:50:f7:17:6f:17:43:ad:
b9:5e:27:5d:83:f0:70:dc:02:3f:1c:f8:6f:1d:50:46:c9:9f:
8f:ec:68:6a:39:4b:62:7d:ba:44:4f:20:a0:02:d8:e4:9b:e2:
ac:93:e8:63:99:ec:a3:ed:8c:67:fd:bf:45:9d:9b:a1:0b:da:
2b:cf:6b:5a:35:ca:1c:9b:c2:e6:ee:4a:64:9e:95:2c:26:02:
ee:d6:ad:20:09:94:05:5c:5e:0d:5a:96:61:10:03:ff:37:72:
d3:54:71:f8:cd:ce:9a:ba:67:7d:00:e2:96:bc:97:84:08:e0:
96:ed:ce:1a:e6:60:13:47:f8:81:46:04:9a:1d:d3:c5:01:b5:
80:3a:61:f4:fe:15:90:7b:2c:f0:c8:48:95:f3:e8:0b:f6:b4:
e6:44:94:71:3e:7a:86:30:61:cf:37:a7:ee:8c:22:eb:62:80:
db:0e:79:e9:1b:ef:74:a8:0a:a8:8a:07:58:0e:1a:71:50:e6:
d9:c4:24:3c:94:d8:dd:b6:94:0b:b8:76:d5:bb:76:ef:89:00:
e2:49:ef:ad:e1:8e:24:5f:7a:70:5b:ed:51:03:14:09:91:04:
56:d3:50:48
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVw8MMcGdPDhYQUIHaVqcoMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjMwMTAyMDUyNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjcyZDE1Yzc3ZjE1MzRmZTU3NDQ2NTIzYzAwNThhMDU4NDY2ZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopPNeQ8hEMYpOXs1BWRc3g2EZeXG
pcevRiHEXhEOt98e96f+sdd322huXlmAW5OGomE8+Iu87oZDdxFjGLqyhbQqMr2o
jVmldNuxfOE2cQ0EKur7EkuUfiU8F7Vp8d2YMHecwwMuIN/hck3NLptfxkgpHO81
0n9LaZO2R1GYLLvRMbehjUNyA/GWsfTMjvu8SpH3HaVUhUI6qWoplUGIT3DSLP09
oqAogNwhXBlAm70bZo7mHe9HN4iAnUIqOBlITRuBPYFP7rsyn1fMpm2DR6vcezlv
7KRDfhqiyG2WZreg6AuhTHDAna+cfZJfewuw2wfzPI+tnlO1q3T+WYMnLQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMZy0Vx38VNP5XRGUjwAWKBYRm4UMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEveG5MUlhIZnhVMF9sZEVaU1BBQllvRmhHYmhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCw4gEAwQB
w4gmAwQBw4icMA0GCSqGSIb3DQEBCwUAA4IBAQBgNTbVQ2dWyD11Sx189n1r3DN0
nP/mBIJD0LeNh1D3F28XQ625Xiddg/Bw3AI/HPhvHVBGyZ+P7GhqOUtifbpETyCg
Atjkm+Ksk+hjmeyj7Yxn/b9FnZuhC9orz2taNcocm8Lm7kpknpUsJgLu1q0gCZQF
XF4NWpZhEAP/N3LTVHH4zc6aumd9AOKWvJeECOCW7c4a5mATR/iBRgSaHdPFAbWA
OmH0/hWQeyzwyEiV8+gL9rTmRJRxPnqGMGHPN6fujCLrYoDbDnnpG+90qAqoigdY
DhpxUObZxCQ8lNjdtpQLuHbVu3bviQDiSe+t4Y4kX3pwW+1RAxQJkQRW01BI
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:37 2024 by rpki-client on console-fra.rpki-client.org