Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/c2fIPsWxefk7YQRQwHamHjgGgmI.roa
File: c2fIPsWxefk7YQRQwHamHjgGgmI.roa (raw, json)
Hash identifier: RJlfpMKZ5xPc8RcEWPhBAbHoSIXP/Tl8OPms2oMeO9U=
Subject key identifier: 73:67:C8:3E:C5:B1:79:F9:3B:61:04:50:C0:76:A6:1E:38:06:82:62
Certificate issuer: /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial: 018571DE952FD6D122529B95E3E557692CCE
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/c2fIPsWxefk7YQRQwHamHjgGgmI.roa
Signing time: Mon 02 Jan 2023 09:44:50 +0000
ROA not before: Mon 02 Jan 2023 09:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60670
IP address blocks: 195.110.184.0/24 maxlen: 24
195.110.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:95:2f:d6:d1:22:52:9b:95:e3:e5:57:69:2c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Validity
Not Before: Jan 2 09:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7367c83ec5b179f93b610450c076a61e38068262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:36:f8:19:ae:be:64:ff:28:db:96:14:44:42:
00:a0:27:d1:55:02:6e:64:96:74:6d:c0:94:ab:ec:
71:d6:e8:95:b9:eb:67:12:e2:dd:f2:3f:b1:5b:27:
b2:a0:a5:17:d2:ec:1a:77:c9:df:cc:87:35:5d:bc:
aa:d2:5f:33:73:10:f5:74:d6:6a:94:1a:5d:7f:8a:
4a:ad:b2:79:1d:5b:e4:35:f0:8c:30:09:4b:63:aa:
49:5f:d9:33:68:c8:9c:05:a3:4d:6d:c9:d3:ef:be:
5e:36:23:6e:91:d4:ee:21:26:31:23:a1:6f:00:42:
48:f6:ee:cd:d3:1a:a1:66:f3:07:3e:9c:a9:41:0e:
18:32:4e:e6:a0:64:98:24:0a:ae:ed:64:c2:59:f1:
23:39:4e:7f:5b:c0:2c:ab:b6:69:c2:33:fd:90:1c:
c9:67:f9:f7:87:3f:68:a8:81:8b:49:d0:33:b0:18:
7c:6f:8a:e4:57:06:12:af:fe:7a:d1:6f:9e:e3:48:
8a:8a:4c:ba:25:2e:81:6a:62:0e:dc:aa:1f:7c:a4:
4d:6f:c1:7b:df:30:d9:8b:5e:05:13:d4:f8:85:87:
8c:2a:28:95:f8:79:8c:2e:9e:1b:68:e0:9f:2e:26:
a2:b8:b9:89:0e:27:43:c4:fe:b1:08:df:b1:70:f9:
b4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:67:C8:3E:C5:B1:79:F9:3B:61:04:50:C0:76:A6:1E:38:06:82:62
X509v3 Authority Key Identifier:
keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/c2fIPsWxefk7YQRQwHamHjgGgmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.184.0/23
Signature Algorithm: sha256WithRSAEncryption
54:3d:01:e0:c3:5b:31:a9:7b:ae:d0:c4:35:53:b0:7d:b8:18:
1e:9a:9e:ca:fa:1c:15:4d:21:83:63:eb:a1:7c:6b:fe:d2:cf:
eb:3a:c9:f3:be:f9:77:10:c2:fc:dd:a9:7f:b5:da:06:b1:18:
8d:33:45:24:ee:4a:a8:04:fb:fd:16:f5:1a:5d:dd:5f:3a:15:
13:36:fe:5d:c5:51:f7:37:d3:d8:22:2b:38:02:c3:c3:d4:31:
2b:6f:9a:42:f8:a0:37:6e:5d:9a:1a:f8:12:d8:b9:2b:67:c2:
e8:43:23:67:96:4a:08:9f:4b:e8:27:43:9c:6d:0e:32:50:20:
f6:ff:23:ff:5a:4e:b2:69:7e:44:b5:f2:9b:24:b2:86:c3:f5:
63:c5:04:ff:51:a6:79:02:9f:8a:fc:12:11:83:c4:2b:82:b8:
97:05:f4:48:ab:c6:1a:56:fb:64:3b:f6:32:d6:3a:ce:8a:c4:
9a:e5:ac:be:8d:8a:c8:4c:97:16:dd:7c:49:96:28:7a:85:d7:
c7:a8:59:1e:a4:86:b4:aa:5d:69:dc:13:2d:15:08:20:88:6a:
3f:23:3b:0e:a4:07:97:43:6e:60:d3:ef:83:14:aa:60:0a:89:
bd:43:a9:26:89:54:16:6c:73:72:a9:d8:f1:57:b7:ea:ac:de:
c5:fa:5b:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx3pUv1tEiUpuV4+VXaSzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmQ4ZmQ3N2RhZGUzZDNmOTZjYjQ5OTMxOTQ4YzI3Mjlh
ZGEwZGUwHhcNMjMwMTAyMDk0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzY3YzgzZWM1YjE3OWY5M2I2MTA0NTBjMDc2YTYxZTM4MDY4MjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDb4Ga6+ZP8o25YUREIAoCfRVQJu
ZJZ0bcCUq+xx1uiVuetnEuLd8j+xWyeyoKUX0uwad8nfzIc1Xbyq0l8zcxD1dNZq
lBpdf4pKrbJ5HVvkNfCMMAlLY6pJX9kzaMicBaNNbcnT775eNiNukdTuISYxI6Fv
AEJI9u7N0xqhZvMHPpypQQ4YMk7moGSYJAqu7WTCWfEjOU5/W8Asq7ZpwjP9kBzJ
Z/n3hz9oqIGLSdAzsBh8b4rkVwYSr/560W+e40iKiky6JS6BamIO3KoffKRNb8F7
3zDZi14FE9T4hYeMKiiV+HmMLp4baOCfLiaiuLmJDidDxP6xCN+xcPm0pwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHNnyD7FsXn5O2EEUMB2ph44BoJiMB8GA1UdIwQY
MBaAFA5tj9d9rePT+Wy0mTGUjCcpraDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG0yUDEzMnQ0OVA1YkxTWk1aU01KeW10b040LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82OTc3Y2QtNDM0My00YjRjLThjZWEt
YmQzNWMwNDhiOTMwLzEvYzJmSVBzV3hlZms3WVFSUXdIYW1IamdHZ21JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82OTc3Y2QtNDM0My00YjRjLThjZWEtYmQzNWMwNDhiOTMw
LzEvRG0yUDEzMnQ0OVA1YkxTWk1aU01KeW10b040LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw264MA0G
CSqGSIb3DQEBCwUAA4IBAQBUPQHgw1sxqXuu0MQ1U7B9uBgemp7K+hwVTSGDY+uh
fGv+0s/rOsnzvvl3EML83al/tdoGsRiNM0Uk7kqoBPv9FvUaXd1fOhUTNv5dxVH3
N9PYIis4AsPD1DErb5pC+KA3bl2aGvgS2LkrZ8LoQyNnlkoIn0voJ0OcbQ4yUCD2
/yP/Wk6yaX5EtfKbJLKGw/VjxQT/UaZ5Ap+K/BIRg8QrgriXBfRIq8YaVvtkO/Yy
1jrOisSa5ay+jYrITJcW3XxJlih6hdfHqFkepIa0ql1p3BMtFQggiGo/IzsOpAeX
Q25g0++DFKpgCom9Q6kmiVQWbHNyqdjxV7fqrN7F+luf
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:56 2024 by rpki-client on console-fra.rpki-client.org