Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/w463-UNUfka84s0BuDBTJW325os.roa
File: w463-UNUfka84s0BuDBTJW325os.roa (raw, json)
Hash identifier: XGXEcSyVx51K1J3iBrnkxsdX1iby51Pv1dJZFhhCvGk=
Subject key identifier: C3:8E:B7:F9:43:54:7E:46:BC:E2:CD:01:B8:30:53:25:6D:F6:E6:8B
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 018572C3836BE5992F99105B863A0C8D17AA
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/w463-UNUfka84s0BuDBTJW325os.roa
Signing time: Mon 02 Jan 2023 13:54:53 +0000
ROA not before: Mon 02 Jan 2023 13:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47216
IP address blocks: 194.59.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:83:6b:e5:99:2f:99:10:5b:86:3a:0c:8d:17:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jan 2 13:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c38eb7f943547e46bce2cd01b83053256df6e68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:68:1f:02:46:86:69:cb:86:7d:c9:f0:6a:
92:49:b8:95:0a:bc:ef:d5:07:3f:c6:90:4c:6c:bf:
f4:e0:72:fd:b1:c3:90:a7:cb:65:d6:51:8f:de:16:
65:5f:fc:e0:c7:f8:41:42:b7:f4:ee:8e:4a:b0:97:
55:12:9a:3f:1e:e2:71:1f:0e:78:81:17:84:1a:13:
a3:e2:0d:fc:8f:60:14:77:f0:97:a4:92:d7:7e:dd:
20:95:2e:b2:85:ee:ad:8c:69:4b:ca:52:30:9d:d9:
1d:03:25:32:d4:df:39:a7:33:a1:c7:54:ff:be:de:
18:63:0c:36:9d:e9:de:8c:3f:16:48:c7:c0:43:df:
c7:8a:23:48:dc:12:e2:87:3f:68:51:a3:1f:0d:67:
84:0e:3b:95:8b:72:7a:ae:fe:e0:69:ff:31:a6:d7:
99:4b:dc:4b:19:01:16:d2:fc:6f:3f:a0:3b:d4:b1:
c2:ce:41:32:ed:94:6c:83:9b:e1:fe:40:39:75:86:
11:17:25:4a:ab:3a:27:c2:9f:b0:23:52:d5:6c:56:
0b:2b:ac:0c:f9:99:d1:2d:ef:2f:63:22:fb:ea:c7:
c6:77:49:ef:8d:05:0d:52:5b:36:e9:12:56:df:b1:
e9:36:36:ab:76:79:9f:3d:33:d3:40:29:17:d0:0c:
ca:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8E:B7:F9:43:54:7E:46:BC:E2:CD:01:B8:30:53:25:6D:F6:E6:8B
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/w463-UNUfka84s0BuDBTJW325os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.215.0/24
Signature Algorithm: sha256WithRSAEncryption
38:06:8b:09:bc:fc:2a:b5:ae:17:1a:6d:14:a6:44:22:af:45:
2f:ef:10:b8:a4:14:7d:e0:6e:ea:7e:e4:f2:6b:52:10:bd:00:
4c:14:62:79:c4:4f:f8:cf:e6:9e:75:a5:86:95:ba:6d:11:57:
b1:e3:eb:87:fc:95:b4:71:7e:e4:eb:88:8c:5b:5a:ba:f3:52:
dc:a4:fb:20:6d:2d:28:5e:69:80:47:70:ce:d7:80:50:ac:85:
5f:6c:e8:7e:3b:21:a3:c3:f3:bd:0c:9f:f1:15:1f:6a:8b:f6:
db:96:e0:e8:4e:95:95:dc:49:7a:67:ec:4f:42:ea:94:bf:91:
e5:fa:82:e7:84:6d:f2:63:8a:5d:b6:d4:65:64:65:83:32:90:
f2:54:c3:2c:ff:7e:a6:21:50:aa:e3:cf:9b:91:b1:fd:51:45:
ab:84:01:26:74:09:0a:08:86:ce:84:81:85:05:be:a8:bf:d1:
2c:65:a0:d2:c6:62:5a:76:2b:6c:b2:d0:b5:19:26:19:1d:11:
84:c5:08:e1:7b:c0:e1:94:70:ac:08:13:a1:08:af:f1:3e:02:
fc:76:3e:60:02:3c:c1:e1:89:40:f4:31:ce:ba:e5:77:e9:7c:
71:f1:70:1f:40:2c:a4:af:54:cb:dc:57:0b:1a:5b:87:82:30:
b8:a5:cb:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyw4Nr5ZkvmRBbhjoMjReqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNTI2NjQzNTYxN2ZhMGYxZmQyODM3ZWM4MGM2ZDgzYjBi
OWQ2MDgwHhcNMjMwMTAyMTM1NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzhlYjdmOTQzNTQ3ZTQ2YmNlMmNkMDFiODMwNTMyNTZkZjZlNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliZoHwJGhmnLhn3J8GqSSbiVCrzv
1Qc/xpBMbL/04HL9scOQp8tl1lGP3hZlX/zgx/hBQrf07o5KsJdVEpo/HuJxHw54
gReEGhOj4g38j2AUd/CXpJLXft0glS6yhe6tjGlLylIwndkdAyUy1N85pzOhx1T/
vt4YYww2nenejD8WSMfAQ9/HiiNI3BLihz9oUaMfDWeEDjuVi3J6rv7gaf8xpteZ
S9xLGQEW0vxvP6A71LHCzkEy7ZRsg5vh/kA5dYYRFyVKqzonwp+wI1LVbFYLK6wM
+ZnRLe8vYyL76sfGd0nvjQUNUls26RJW37HpNjardnmfPTPTQCkX0AzKOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMOOt/lDVH5GvOLNAbgwUyVt9uaLMB8GA1UdIwQY
MBaAFCFSZkNWF/oPH9KDfsgMbYOwudYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzIt
YmM5M2NhNjc5ZTFmLzEvdzQ2My1VTlVma2E4NHMwQnVEQlRKVzMyNW9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzItYmM5M2NhNjc5ZTFm
LzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjvXMA0G
CSqGSIb3DQEBCwUAA4IBAQA4BosJvPwqta4XGm0UpkQir0Uv7xC4pBR94G7qfuTy
a1IQvQBMFGJ5xE/4z+aedaWGlbptEVex4+uH/JW0cX7k64iMW1q681LcpPsgbS0o
XmmAR3DO14BQrIVfbOh+OyGjw/O9DJ/xFR9qi/bbluDoTpWV3El6Z+xPQuqUv5Hl
+oLnhG3yY4pdttRlZGWDMpDyVMMs/36mIVCq48+bkbH9UUWrhAEmdAkKCIbOhIGF
Bb6ov9EsZaDSxmJaditsstC1GSYZHRGExQjhe8DhlHCsCBOhCK/xPgL8dj5gAjzB
4YlA9DHOuuV36Xxx8XAfQCykr1TL3FcLGluHgjC4pcvv
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:41 2024 by rpki-client on console-fra.rpki-client.org