Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/dc2ed1-e167-4508-881a-22225c3b6ef0/1/v5bquaPn4xfzEKFK7Gau_QcKjVs.roa
File: v5bquaPn4xfzEKFK7Gau_QcKjVs.roa (raw, json)
Hash identifier: pPBWzQKRVUuhiC+c1mEjhnBteltfONSC/qk7URgnACI=
Subject key identifier: BF:96:EA:B9:A3:E7:E3:17:F3:10:A1:4A:EC:66:AE:FD:07:0A:8D:5B
Certificate issuer: /CN=3a6c747d0a6e50fb9f79fc7f3a3d0b58b5ec3674
Certificate serial: 01856D8AC2B49290CD21403B15B3CC0E36A2
Authority key identifier: 3A:6C:74:7D:0A:6E:50:FB:9F:79:FC:7F:3A:3D:0B:58:B5:EC:36:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Omx0fQpuUPufefx_Oj0LWLXsNnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/dc2ed1-e167-4508-881a-22225c3b6ef0/1/v5bquaPn4xfzEKFK7Gau_QcKjVs.roa
Signing time: Sun 01 Jan 2023 13:34:48 +0000
ROA not before: Sun 01 Jan 2023 13:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207937
IP address blocks: 146.19.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:c2:b4:92:90:cd:21:40:3b:15:b3:cc:0e:36:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6c747d0a6e50fb9f79fc7f3a3d0b58b5ec3674
Validity
Not Before: Jan 1 13:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf96eab9a3e7e317f310a14aec66aefd070a8d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:88:fd:da:f0:c5:41:bb:0d:62:1b:29:c2:32:
a9:47:51:47:78:0d:64:80:11:fe:32:9f:00:23:65:
85:8b:96:c7:43:54:67:95:d1:7e:15:74:48:f6:d1:
ef:35:65:b1:f4:13:62:74:28:5c:bb:86:5d:8a:31:
3c:1d:21:27:02:29:16:e2:a3:8d:e8:17:b6:87:a6:
ae:79:0f:81:5d:de:83:90:a0:48:80:9c:3a:8b:83:
03:1f:bd:8f:e6:47:75:da:8a:6f:12:eb:07:45:df:
1a:df:37:c3:c0:0f:91:07:a1:6f:70:ad:f1:1d:42:
9e:78:60:52:e5:8f:23:24:c1:ed:96:f1:7d:ae:4a:
b4:3f:d6:85:25:87:15:1d:c1:a3:18:53:b5:51:ec:
0e:53:c2:df:6e:bd:94:4f:7c:8b:57:c7:0b:d3:4a:
08:10:fb:6a:53:41:db:95:37:27:2e:41:65:86:d7:
b0:64:f5:f2:cb:e3:93:43:1e:5a:e4:e9:11:a8:9d:
40:42:91:61:f0:d7:72:0a:2e:07:65:47:72:8c:ec:
bc:9b:e5:67:6a:f5:45:fa:19:73:2c:b6:1a:3d:a7:
48:3c:64:d5:c6:21:7e:5b:f9:72:d0:c3:71:1e:6c:
e6:5e:e2:32:e1:1d:c3:8d:4a:59:fe:d1:da:8b:28:
c7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:96:EA:B9:A3:E7:E3:17:F3:10:A1:4A:EC:66:AE:FD:07:0A:8D:5B
X509v3 Authority Key Identifier:
keyid:3A:6C:74:7D:0A:6E:50:FB:9F:79:FC:7F:3A:3D:0B:58:B5:EC:36:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omx0fQpuUPufefx_Oj0LWLXsNnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/dc2ed1-e167-4508-881a-22225c3b6ef0/1/v5bquaPn4xfzEKFK7Gau_QcKjVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/dc2ed1-e167-4508-881a-22225c3b6ef0/1/Omx0fQpuUPufefx_Oj0LWLXsNnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ff:fd:05:6d:1f:00:d3:f5:19:6b:fc:85:99:52:ba:d0:14:
4b:a1:4e:17:40:a1:65:14:5c:1d:03:68:9a:0d:92:2a:61:fb:
5a:42:e0:5f:75:a4:5b:40:ce:1c:09:bd:95:76:29:06:e2:ab:
26:15:04:29:d3:c6:1d:86:e4:f8:a1:be:ea:57:a1:5d:09:8d:
26:1e:b5:8d:f1:26:88:dd:ea:7e:b8:96:dc:c2:18:03:d3:7c:
d7:75:5b:dc:fb:c4:be:21:4b:32:c5:55:4f:95:ee:b6:de:56:
75:35:15:7a:e9:23:c9:a3:62:9c:ed:9d:bb:f7:07:19:60:0b:
58:d6:e6:d9:0a:06:d4:3c:d1:4f:9e:a9:98:66:6b:ef:76:50:
df:df:17:f7:e6:c3:7c:32:0d:1d:dc:81:53:e3:e3:04:cc:3f:
d6:ef:2d:fc:d3:52:6f:63:06:6d:66:e9:af:da:08:a5:b5:7f:
08:58:c0:1f:96:64:d7:5d:2b:ed:e4:47:d0:d6:c5:b5:4b:6d:
61:5e:3a:ef:03:cc:33:ed:ed:95:e7:34:4a:cf:f6:f9:6c:19:
81:b5:59:74:b4:3e:77:e9:21:9d:c7:53:38:3d:fb:ec:f9:e7:
dc:29:15:73:03:d5:7a:b0:6b:54:fa:f8:84:82:5c:4d:0e:50:
a6:ba:6c:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtisK0kpDNIUA7FbPMDjaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNmM3NDdkMGE2ZTUwZmI5Zjc5ZmM3ZjNhM2QwYjU4YjVl
YzM2NzQwHhcNMjMwMTAxMTMzNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjk2ZWFiOWEzZTdlMzE3ZjMxMGExNGFlYzY2YWVmZDA3MGE4ZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIj92vDFQbsNYhspwjKpR1FHeA1k
gBH+Mp8AI2WFi5bHQ1RnldF+FXRI9tHvNWWx9BNidChcu4ZdijE8HSEnAikW4qON
6Be2h6aueQ+BXd6DkKBIgJw6i4MDH72P5kd12opvEusHRd8a3zfDwA+RB6FvcK3x
HUKeeGBS5Y8jJMHtlvF9rkq0P9aFJYcVHcGjGFO1UewOU8Lfbr2UT3yLV8cL00oI
EPtqU0HblTcnLkFlhtewZPXyy+OTQx5a5OkRqJ1AQpFh8NdyCi4HZUdyjOy8m+Vn
avVF+hlzLLYaPadIPGTVxiF+W/ly0MNxHmzmXuIy4R3DjUpZ/tHaiyjHgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL+W6rmj5+MX8xChSuxmrv0HCo1bMB8GA1UdIwQY
MBaAFDpsdH0KblD7n3n8fzo9C1i17DZ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT214MGZRcHVVUHVmZWZ4X09qMExXTFhzTm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9kYzJlZDEtZTE2Ny00NTA4LTg4MWEt
MjIyMjVjM2I2ZWYwLzEvdjVicXVhUG40eGZ6RUtGSzdHYXVfUWNLalZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9kYzJlZDEtZTE2Ny00NTA4LTg4MWEtMjIyMjVjM2I2ZWYw
LzEvT214MGZRcHVVUHVmZWZ4X09qMExXTFhzTm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPeMA0G
CSqGSIb3DQEBCwUAA4IBAQAt//0FbR8A0/UZa/yFmVK60BRLoU4XQKFlFFwdA2ia
DZIqYftaQuBfdaRbQM4cCb2VdikG4qsmFQQp08YdhuT4ob7qV6FdCY0mHrWN8SaI
3ep+uJbcwhgD03zXdVvc+8S+IUsyxVVPle623lZ1NRV66SPJo2Kc7Z279wcZYAtY
1ubZCgbUPNFPnqmYZmvvdlDf3xf35sN8Mg0d3IFT4+MEzD/W7y3801JvYwZtZumv
2giltX8IWMAflmTXXSvt5EfQ1sW1S21hXjrvA8wz7e2V5zRKz/b5bBmBtVl0tD53
6SGdx1M4Pfvs+efcKRVzA9V6sGtU+viEglxNDlCmumzs
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:01 2024 by rpki-client on console-fra.rpki-client.org