Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/PDkfZHzSWcfZ6h6yE_3VMcq_l-Q.roa
File: PDkfZHzSWcfZ6h6yE_3VMcq_l-Q.roa (raw, json)
Hash identifier: ooTnO7aJrnrnBZ54cPdi0UzDk+5ZVjRAXq/nVxy//fs=
Subject key identifier: 3C:39:1F:64:7C:D2:59:C7:D9:EA:1E:B2:13:FD:D5:31:CA:BF:97:E4
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 018571A7B8038AE7E7D2CD9452677A3DB3F1
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/PDkfZHzSWcfZ6h6yE_3VMcq_l-Q.roa
Signing time: Mon 02 Jan 2023 08:44:55 +0000
ROA not before: Mon 02 Jan 2023 08:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12779
IP address blocks: 194.28.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:b8:03:8a:e7:e7:d2:cd:94:52:67:7a:3d:b3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: Jan 2 08:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c391f647cd259c7d9ea1eb213fdd531cabf97e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:45:43:c0:1d:90:f1:82:c8:3f:30:f3:84:4e:
db:7a:89:31:db:e5:2e:13:4e:51:7f:e5:93:43:ca:
bb:82:11:6e:96:0d:39:eb:fc:2a:20:34:66:49:6b:
28:d8:ad:17:49:84:02:c0:5d:29:08:08:27:4a:91:
67:2c:8f:1e:c0:f9:d1:09:0d:e7:59:69:4e:00:c8:
d9:c2:0c:7a:52:95:47:39:c7:ab:a8:f1:a0:e2:34:
45:89:d3:57:c2:6d:5e:73:10:a0:e0:23:9f:6f:e4:
c6:d8:0e:25:07:4b:5e:9d:2b:89:88:c7:31:8c:99:
d5:f8:5d:f5:2f:8b:c8:d6:9a:4e:bf:14:ea:54:a0:
c4:14:14:0f:9f:83:7c:ee:fe:43:65:a5:54:b4:dc:
71:cb:9b:24:a2:91:3c:a0:67:28:a0:3b:31:1f:00:
10:b1:f3:5e:1f:6d:b4:33:3f:2a:65:59:3b:bd:5a:
58:b9:97:90:98:2d:c5:0a:7c:da:ee:5f:e6:b0:a8:
af:96:3f:28:1b:26:f2:14:5a:68:98:8e:6d:8a:a0:
ca:ba:9b:b7:9e:e9:7c:30:56:62:4a:ab:e0:33:66:
6e:d3:6d:8f:4e:b5:00:3d:15:13:7d:0b:f9:d5:00:
ec:c5:fc:cc:20:60:66:9a:12:8e:7d:9b:e7:30:37:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:39:1F:64:7C:D2:59:C7:D9:EA:1E:B2:13:FD:D5:31:CA:BF:97:E4
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/PDkfZHzSWcfZ6h6yE_3VMcq_l-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.116.0/22
Signature Algorithm: sha256WithRSAEncryption
63:70:20:4d:db:8d:9b:e2:ce:23:ba:9e:ab:95:55:f2:e7:1e:
b6:7d:63:88:1e:89:b8:ac:78:46:5e:42:e5:57:3d:49:cd:02:
7a:ed:c4:60:d6:65:85:3f:98:47:ff:4b:47:d0:b5:bc:93:b4:
a6:ca:1f:5b:41:bc:b8:4b:e3:9c:3e:93:5f:31:69:0b:0c:96:
fd:29:85:62:22:1d:42:d5:1f:62:9d:89:23:6b:90:31:1b:96:
cc:4d:81:e4:28:2b:f0:37:73:e7:c3:fb:21:90:da:ee:20:6a:
8f:dd:37:db:8a:4d:57:3b:f9:12:11:36:66:4d:a1:0e:9b:0f:
72:1d:64:94:9e:6a:4e:61:b6:c2:e7:62:8d:07:e2:37:41:00:
da:1a:13:30:f2:10:70:86:fc:6e:12:fb:77:24:56:f9:41:c2:
a3:12:cb:8e:7d:4e:5c:0b:92:83:ab:de:66:b2:ea:8a:5b:65:
dc:ce:99:81:bb:36:26:d3:28:ea:6e:ed:9b:9c:63:37:56:b8:
de:fd:ed:d4:d5:98:2f:e2:4e:68:0d:5c:53:fa:cc:d3:9e:ec:
b0:a9:65:e3:9e:89:33:bf:2a:07:36:e5:50:4d:ac:10:b7:c4:
8b:15:cb:27:93:3e:b2:7d:ff:56:e5:6a:97:2a:c5:9b:a1:84:
33:f7:b4:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxp7gDiufn0s2UUmd6PbPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkODE4ZDkzZTY4NTcxZjk1YzQ1ZWJjMjgxNTk4YzdjOThm
MzI1NzcwHhcNMjMwMTAyMDg0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzM5MWY2NDdjZDI1OWM3ZDllYTFlYjIxM2ZkZDUzMWNhYmY5N2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0VDwB2Q8YLIPzDzhE7beokx2+Uu
E05Rf+WTQ8q7ghFulg056/wqIDRmSWso2K0XSYQCwF0pCAgnSpFnLI8ewPnRCQ3n
WWlOAMjZwgx6UpVHOcerqPGg4jRFidNXwm1ecxCg4COfb+TG2A4lB0tenSuJiMcx
jJnV+F31L4vI1ppOvxTqVKDEFBQPn4N87v5DZaVUtNxxy5skopE8oGcooDsxHwAQ
sfNeH220Mz8qZVk7vVpYuZeQmC3FCnza7l/msKivlj8oGybyFFpomI5tiqDKupu3
nul8MFZiSqvgM2Zu022PTrUAPRUTfQv51QDsxfzMIGBmmhKOfZvnMDe/OQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDw5H2R80lnH2eoeshP91THKv5fkMB8GA1UdIwQY
MBaAFP2BjZPmhXH5XEXrwoFZjHyY8yV3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1lHTmstYUZjZmxjUmV2Q2dWbU1mSmp6SlhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zZDM3MGMtMzI5NS00MzA2LTk4ZGMt
ZjY5OGIwNWJhOTcxLzEvUERrZlpIelNXY2ZaNmg2eUVfM1ZNY3FfbC1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8zZDM3MGMtMzI5NS00MzA2LTk4ZGMtZjY5OGIwNWJhOTcx
LzEvX1lHTmstYUZjZmxjUmV2Q2dWbU1mSmp6SlhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwhx0MA0G
CSqGSIb3DQEBCwUAA4IBAQBjcCBN242b4s4jup6rlVXy5x62fWOIHom4rHhGXkLl
Vz1JzQJ67cRg1mWFP5hH/0tH0LW8k7Smyh9bQby4S+OcPpNfMWkLDJb9KYViIh1C
1R9inYkja5AxG5bMTYHkKCvwN3Pnw/shkNruIGqP3Tfbik1XO/kSETZmTaEOmw9y
HWSUnmpOYbbC52KNB+I3QQDaGhMw8hBwhvxuEvt3JFb5QcKjEsuOfU5cC5KDq95m
suqKW2XczpmBuzYm0yjqbu2bnGM3Vrje/e3U1Zgv4k5oDVxT+szTnuywqWXjnokz
vyoHNuVQTawQt8SLFcsnkz6yff9W5WqXKsWboYQz97Sc
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:37 2024 by rpki-client on console-ams.rpki-client.org