Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/Ot5OhOwwYG4Rp6zXp0AVtCgiDx0.roa
File: Ot5OhOwwYG4Rp6zXp0AVtCgiDx0.roa (raw, json)
Hash identifier: ASDgQwjxyWBxHoLuhJ2zJHMyQvMsz4RtVEFhF/mUPvs=
Subject key identifier: 3A:DE:4E:84:EC:30:60:6E:11:A7:AC:D7:A7:40:15:B4:28:22:0F:1D
Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Certificate serial: 01856E2FCF9C46E5FFC393E698D7C6A497CD
Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/Ot5OhOwwYG4Rp6zXp0AVtCgiDx0.roa
Signing time: Sun 01 Jan 2023 16:35:05 +0000
ROA not before: Sun 01 Jan 2023 16:35:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211947
IP address blocks: 195.64.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jul 2023 10:35:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:cf:9c:46:e5:ff:c3:93:e6:98:d7:c6:a4:97:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d
Validity
Not Before: Jan 1 16:35:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ade4e84ec30606e11a7acd7a74015b428220f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:89:a1:02:f0:f1:c6:e0:49:17:91:db:4f:b1:
03:3e:5c:2a:fa:dd:7f:75:d0:b4:9b:d5:80:a1:8b:
15:c2:05:3e:96:47:9f:86:88:23:5a:e8:db:f1:16:
2e:dc:60:c9:9b:40:4f:b5:8b:b1:35:12:40:9d:cf:
a6:36:de:f9:72:e5:f4:f9:b9:68:d4:1b:65:d9:2b:
67:f0:70:cb:95:55:9c:01:18:ff:f8:b2:5a:58:c7:
d0:30:1e:49:88:97:0f:88:68:ef:7c:1c:28:09:a2:
aa:9d:ba:ef:76:1b:6a:3d:85:86:f3:f9:71:03:f1:
c7:10:db:1e:61:80:1d:b6:4c:57:b2:65:ec:05:ac:
46:e7:d0:d7:b0:a2:31:f7:d5:6b:c6:7b:56:ec:cb:
77:6d:8b:74:2c:24:be:79:50:98:fc:a9:63:93:7d:
4f:d2:71:ef:59:4f:65:83:c0:03:2c:89:b9:7e:d0:
cd:d6:dc:db:8b:40:fb:e4:a1:9a:99:f8:1d:c5:5e:
a9:bc:c3:b0:28:cd:2b:6a:68:51:89:cf:95:03:e0:
0b:33:96:c1:80:1a:95:ed:f9:da:31:ef:6e:1d:23:
65:5e:14:09:f6:24:08:30:96:e3:09:df:5b:ea:a3:
0e:ae:f9:2c:8c:38:06:c5:9e:11:40:ce:52:b8:c2:
32:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DE:4E:84:EC:30:60:6E:11:A7:AC:D7:A7:40:15:B4:28:22:0F:1D
X509v3 Authority Key Identifier:
keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/Ot5OhOwwYG4Rp6zXp0AVtCgiDx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.231.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0c:7f:0a:b8:1a:4c:3f:1d:80:d5:3e:ed:e4:bb:b1:ad:75:
62:7b:60:ae:89:6c:24:db:8b:0a:11:b5:42:be:36:a0:f9:0d:
ef:fc:93:9a:9d:15:d1:e3:b6:bb:45:26:c2:7a:75:5b:a4:15:
d5:9d:39:a8:79:d9:56:a4:c3:c4:cb:2a:a9:00:f0:e5:3a:79:
63:c0:d5:2e:95:a0:42:7a:5c:2f:7f:95:80:df:bd:17:8a:c4:
b9:06:ad:47:d4:ff:ff:c2:01:e3:53:24:ea:66:c9:f4:22:3d:
b6:98:b3:e2:82:b0:db:9f:c0:25:1b:41:f1:54:e7:ca:c7:15:
08:81:d8:81:3c:3c:a8:36:36:9e:15:e5:55:6f:07:e7:55:9b:
58:59:a6:21:12:63:a2:d1:d5:23:75:67:69:44:38:50:cf:28:
0e:ad:da:94:11:57:a0:5e:20:a9:82:27:00:52:b2:c8:df:3d:
10:c9:1e:a8:0d:ec:3c:15:f9:2a:be:f2:86:2c:32:57:51:a1:
45:80:8d:92:55:88:f6:e3:5c:56:aa:b6:41:7e:8f:ab:d2:35:
a6:d9:72:b5:62:db:ba:e8:6b:55:e9:7c:a0:cc:98:a0:80:44:
37:c6:5c:e4:66:b8:0f:a2:cb:45:79:03:68:17:1e:29:18:48:
a9:73:cb:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuL8+cRuX/w5PmmNfGpJfNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx
ODRmNGQwHhcNMjMwMTAxMTYzNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWRlNGU4NGVjMzA2MDZlMTFhN2FjZDdhNzQwMTViNDI4MjIwZjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmomhAvDxxuBJF5HbT7EDPlwq+t1/
ddC0m9WAoYsVwgU+lkefhogjWujb8RYu3GDJm0BPtYuxNRJAnc+mNt75cuX0+blo
1Btl2Stn8HDLlVWcARj/+LJaWMfQMB5JiJcPiGjvfBwoCaKqnbrvdhtqPYWG8/lx
A/HHENseYYAdtkxXsmXsBaxG59DXsKIx99VrxntW7Mt3bYt0LCS+eVCY/Kljk31P
0nHvWU9lg8ADLIm5ftDN1tzbi0D75KGamfgdxV6pvMOwKM0ramhRic+VA+ALM5bB
gBqV7fnaMe9uHSNlXhQJ9iQIMJbjCd9b6qMOrvksjDgGxZ4RQM5SuMIy5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDreToTsMGBuEaes16dAFbQoIg8dMB8GA1UdIwQY
MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt
OGU5M2NiNWM1MzU1LzEvT3Q1T2hPd3dZRzRScDZ6WHAwQVZ0Q2dpRHgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1
LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0DnMA0G
CSqGSIb3DQEBCwUAA4IBAQCHDH8KuBpMPx2A1T7t5LuxrXVie2CuiWwk24sKEbVC
vjag+Q3v/JOanRXR47a7RSbCenVbpBXVnTmoedlWpMPEyyqpAPDlOnljwNUulaBC
elwvf5WA370XisS5Bq1H1P//wgHjUyTqZsn0Ij22mLPigrDbn8AlG0HxVOfKxxUI
gdiBPDyoNjaeFeVVbwfnVZtYWaYhEmOi0dUjdWdpRDhQzygOrdqUEVegXiCpgicA
UrLI3z0QyR6oDew8FfkqvvKGLDJXUaFFgI2SVYj241xWqrZBfo+r0jWm2XK1Ytu6
6GtV6XygzJiggEQ3xlzkZrgPostFeQNoFx4pGEipc8vs
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:56 2024 by rpki-client on console-fra.rpki-client.org