Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/iN-_LCjkso3is8D4-HAALCOwb1k.roa
File: iN-_LCjkso3is8D4-HAALCOwb1k.roa (raw, json)
Hash identifier: EpidCZN1YjYI5zX4/ND/RBjwI0UL0+DZcnTJuX3S9wE=
Subject key identifier: 88:DF:BF:2C:28:E4:B2:8D:E2:B3:C0:F8:F8:70:00:2C:23:B0:6F:59
Certificate issuer: /CN=1b22cdf53249049d04914b1837fc027d6964ce07
Certificate serial: 01857880C0152E8B70C40C341CEA35851491
Authority key identifier: 1B:22:CD:F5:32:49:04:9D:04:91:4B:18:37:FC:02:7D:69:64:CE:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/iN-_LCjkso3is8D4-HAALCOwb1k.roa
Signing time: Tue 03 Jan 2023 16:39:41 +0000
ROA not before: Tue 03 Jan 2023 16:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48551
IP address blocks: 194.147.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:78:80:c0:15:2e:8b:70:c4:0c:34:1c:ea:35:85:14:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b22cdf53249049d04914b1837fc027d6964ce07
Validity
Not Before: Jan 3 16:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88dfbf2c28e4b28de2b3c0f8f870002c23b06f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:06:4d:16:22:bb:55:51:81:9e:5d:93:79:
5b:f8:16:ed:f9:dc:03:d6:c6:8d:40:fc:e7:55:bd:
30:eb:48:bd:b8:5f:0d:d7:8d:9b:06:25:7b:70:eb:
b8:ac:d7:1e:43:34:15:e7:8d:3d:ae:96:3a:4d:6b:
b1:7d:46:e0:4d:58:5c:aa:50:83:9c:15:41:d7:69:
cd:fb:89:66:e2:20:3c:50:31:63:98:59:6c:fa:4d:
c5:44:14:59:e8:9e:67:a0:19:67:2c:dc:d6:a6:02:
c3:cb:8e:43:39:05:0f:ed:27:7a:fb:06:07:da:d0:
7b:32:35:fb:36:6a:31:f9:62:f9:2d:eb:7d:d6:cd:
cd:17:96:1e:59:43:89:91:ea:15:54:db:ae:9f:5f:
05:66:f3:31:20:37:ce:f5:6c:13:1f:2f:b4:d0:6f:
15:b2:a8:da:5e:16:c1:36:a9:85:25:ce:54:9f:86:
4e:98:3e:ae:c3:ee:1d:d6:00:2a:8a:89:ca:b5:c8:
69:1e:4e:ba:24:bc:b7:e9:5a:d4:1d:80:c8:13:33:
1d:36:00:20:de:9f:88:d7:55:62:c8:02:a6:29:8e:
83:b1:83:dd:91:34:f3:73:99:47:da:db:a4:96:69:
41:fb:67:97:d4:3e:57:90:88:38:77:48:da:82:77:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DF:BF:2C:28:E4:B2:8D:E2:B3:C0:F8:F8:70:00:2C:23:B0:6F:59
X509v3 Authority Key Identifier:
keyid:1B:22:CD:F5:32:49:04:9D:04:91:4B:18:37:FC:02:7D:69:64:CE:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/iN-_LCjkso3is8D4-HAALCOwb1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0cd7cc-af08-417b-bd58-3e1bb1e29422/1/GyLN9TJJBJ0EkUsYN_wCfWlkzgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.212.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d2:5f:6e:48:dc:cc:34:e8:67:66:b4:fd:ca:e4:70:2d:c4:
1e:4c:90:85:f6:b5:22:33:71:f8:e6:c6:78:ea:5a:2e:f6:dc:
23:8c:b1:30:d2:fd:10:0c:d8:28:e7:b8:34:52:46:83:28:47:
0c:4f:c2:9f:f7:df:b5:2a:a9:fa:c2:bc:23:36:77:8b:0b:be:
4e:a7:8f:5a:4e:33:5e:73:b8:20:b2:43:3e:33:5f:69:bc:8e:
28:f0:9b:1e:5e:54:22:98:8d:e2:08:cb:d7:b9:10:f9:5e:ec:
83:b5:b5:75:9c:33:16:3c:32:ff:4e:04:1e:bf:b5:ef:96:ea:
51:c7:78:d7:41:85:18:a9:4b:58:05:e9:10:2d:0a:6f:1f:ee:
7f:1a:b6:a1:a3:26:cc:10:c2:b9:13:8b:06:25:e3:c7:ff:b8:
14:1a:9a:19:2c:42:83:50:7a:31:90:63:4b:d3:6e:74:62:22:
d0:ab:38:15:50:3d:4e:05:f2:14:cc:b6:85:6a:bc:4a:2c:a9:
65:9a:c7:1f:cf:cb:f2:1d:f0:60:74:1b:23:66:29:2b:26:34:
09:36:b4:54:05:66:a0:5a:07:6c:ad:11:1c:12:e0:ee:8a:10:
03:bc:80:cb:a6:bc:64:32:58:fc:fa:15:03:73:81:20:69:b0:
15:b3:63:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYV4gMAVLotwxAw0HOo1hRSRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMjJjZGY1MzI0OTA0OWQwNDkxNGIxODM3ZmMwMjdkNjk2
NGNlMDcwHhcNMjMwMTAzMTYzOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGRmYmYyYzI4ZTRiMjhkZTJiM2MwZjhmODcwMDAyYzIzYjA2ZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb8GTRYiu1VRgZ5dk3lb+Bbt+dwD
1saNQPznVb0w60i9uF8N142bBiV7cOu4rNceQzQV5409rpY6TWuxfUbgTVhcqlCD
nBVB12nN+4lm4iA8UDFjmFls+k3FRBRZ6J5noBlnLNzWpgLDy45DOQUP7Sd6+wYH
2tB7MjX7Nmox+WL5Let91s3NF5YeWUOJkeoVVNuun18FZvMxIDfO9WwTHy+00G8V
sqjaXhbBNqmFJc5Un4ZOmD6uw+4d1gAqionKtchpHk66JLy36VrUHYDIEzMdNgAg
3p+I11ViyAKmKY6DsYPdkTTzc5lH2tuklmlB+2eX1D5XkIg4d0jagndXyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIjfvywo5LKN4rPA+PhwACwjsG9ZMB8GA1UdIwQY
MBaAFBsizfUySQSdBJFLGDf8An1pZM4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3lMTjlUSkpCSjBFa1VzWU5fd0NmV2xremdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wY2Q3Y2MtYWYwOC00MTdiLWJkNTgt
M2UxYmIxZTI5NDIyLzEvaU4tX0xDamtzbzNpczhENC1IQUFMQ093YjFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wY2Q3Y2MtYWYwOC00MTdiLWJkNTgtM2UxYmIxZTI5NDIy
LzEvR3lMTjlUSkpCSjBFa1VzWU5fd0NmV2xremdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpPUMA0G
CSqGSIb3DQEBCwUAA4IBAQBP0l9uSNzMNOhnZrT9yuRwLcQeTJCF9rUiM3H45sZ4
6lou9twjjLEw0v0QDNgo57g0UkaDKEcMT8Kf99+1Kqn6wrwjNneLC75Op49aTjNe
c7ggskM+M19pvI4o8JseXlQimI3iCMvXuRD5XuyDtbV1nDMWPDL/TgQev7XvlupR
x3jXQYUYqUtYBekQLQpvH+5/GrahoybMEMK5E4sGJePH/7gUGpoZLEKDUHoxkGNL
0250YiLQqzgVUD1OBfIUzLaFarxKLKllmscfz8vyHfBgdBsjZikrJjQJNrRUBWag
WgdsrREcEuDuihADvIDLprxkMlj8+hUDc4EgabAVs2No
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:08 2024 by rpki-client on console-fra.rpki-client.org