Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/4XSZy-Jv07kG6dbnsxw-QkMi5Yk.roa
File: 4XSZy-Jv07kG6dbnsxw-QkMi5Yk.roa (raw, json)
Hash identifier: O8NRLO2E11DjqeFU5bCKsGqtaKOc9T8PAd3+Q+IlgXg=
Subject key identifier: E1:74:99:CB:E2:6F:D3:B9:06:E9:D6:E7:B3:1C:3E:42:43:22:E5:89
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01856D53EDD7871996054DD5DFDE30A37249
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/4XSZy-Jv07kG6dbnsxw-QkMi5Yk.roa
Signing time: Sun 01 Jan 2023 12:34:54 +0000
ROA not before: Sun 01 Jan 2023 12:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46562
IP address blocks: 188.74.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:ed:d7:87:19:96:05:4d:d5:df:de:30:a3:72:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 1 12:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e17499cbe26fd3b906e9d6e7b31c3e424322e589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:a4:01:77:79:64:3e:e7:a6:e9:3b:72:db:
be:8a:48:6d:a6:8f:77:6a:08:a4:46:9c:16:b0:47:
9b:ec:4e:76:8c:71:72:03:54:66:25:d4:e8:f3:b3:
40:d6:10:5c:e8:69:37:30:e1:e9:89:19:72:79:94:
f4:91:d6:c0:f7:b1:76:29:eb:41:c0:a7:cc:eb:06:
13:82:c9:dc:16:e4:57:f2:1e:a9:8e:fb:25:ad:fb:
0e:34:db:fc:9c:37:97:b4:bb:8e:15:00:77:56:fe:
98:4f:34:cd:0d:95:07:79:69:71:b6:65:19:5c:14:
fd:80:ca:b8:bd:73:28:fa:cb:2a:de:63:77:d5:f5:
21:48:28:87:d9:63:64:2c:91:14:6d:bf:22:85:c6:
cf:1c:ba:c9:a9:9b:3d:70:e7:8c:71:59:cc:82:2a:
f2:c1:19:6a:44:a1:78:65:8d:9b:80:c6:88:6d:99:
0e:c7:6d:91:6c:7d:2f:d8:8b:2b:df:94:f4:25:0d:
03:7f:7a:fb:9c:68:6a:93:c0:69:4c:81:1f:14:a2:
b4:3b:48:e4:d2:73:bf:fb:da:a1:ec:d6:c2:d3:ae:
3c:70:6d:34:88:5c:f4:2b:f1:a3:85:00:a0:48:b4:
87:f0:1e:25:1b:c7:ed:32:a1:c1:83:e7:a3:81:3a:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:74:99:CB:E2:6F:D3:B9:06:E9:D6:E7:B3:1C:3E:42:43:22:E5:89
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/4XSZy-Jv07kG6dbnsxw-QkMi5Yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.74.180.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:9f:82:62:dd:d2:b8:26:d6:2f:06:68:65:d3:04:cf:11:7c:
51:37:a5:77:85:9f:56:fd:b0:14:7e:4d:cd:c0:04:10:da:f9:
bd:11:ea:c6:53:f0:31:eb:08:48:5d:37:c0:f4:a5:a8:c7:19:
4e:90:3a:f5:75:7d:cd:bd:04:83:88:19:8a:ee:57:ce:99:41:
44:8c:27:32:11:14:4a:90:8c:d8:5f:4c:6b:85:ba:39:68:2d:
eb:0b:0c:31:3f:a4:d9:dd:29:0c:4e:0d:62:23:09:b6:79:af:
2e:8c:98:87:f2:d6:8d:6b:75:e8:e2:67:97:7c:66:dd:62:ec:
4c:5a:f5:63:73:0d:86:28:ce:65:e9:ac:a0:5c:fb:9e:08:a1:
54:cb:d2:6f:a9:ca:e4:a6:80:b7:f4:16:33:bf:06:88:75:18:
3a:89:b8:0e:d5:7a:fd:f5:45:15:2c:07:01:0d:0c:6c:4f:88:
05:d8:59:ee:8f:47:1d:87:73:f0:71:0e:16:d0:97:01:ab:7e:
09:88:24:c5:18:ed:46:fb:32:0c:7d:d8:1b:cb:5c:ee:fb:4f:
25:34:1c:3c:ae:64:4c:6b:bd:06:e1:cf:b4:89:e8:d2:77:86:
cd:f4:9b:5c:62:f5:b3:98:b5:d7:ff:3f:af:0e:d2:36:62:50:
fe:5c:16:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtU+3XhxmWBU3V394wo3JJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4
ZDFkMjYwHhcNMjMwMTAxMTIzNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTc0OTljYmUyNmZkM2I5MDZlOWQ2ZTdiMzFjM2U0MjQzMjJlNTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxmkAXd5ZD7npuk7ctu+ikhtpo93
agikRpwWsEeb7E52jHFyA1RmJdTo87NA1hBc6Gk3MOHpiRlyeZT0kdbA97F2KetB
wKfM6wYTgsncFuRX8h6pjvslrfsONNv8nDeXtLuOFQB3Vv6YTzTNDZUHeWlxtmUZ
XBT9gMq4vXMo+ssq3mN31fUhSCiH2WNkLJEUbb8ihcbPHLrJqZs9cOeMcVnMgiry
wRlqRKF4ZY2bgMaIbZkOx22RbH0v2Isr35T0JQ0Df3r7nGhqk8BpTIEfFKK0O0jk
0nO/+9qh7NbC0648cG00iFz0K/GjhQCgSLSH8B4lG8ftMqHBg+ejgTqZUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOF0mcvib9O5BunW57McPkJDIuWJMB8GA1UdIwQY
MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt
ZmE5Y2I1MWNkMGYxLzEvNFhTWnktSnYwN2tHNmRibnN4dy1Ra01pNVlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx
LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEq0MA0G
CSqGSIb3DQEBCwUAA4IBAQCcn4Ji3dK4JtYvBmhl0wTPEXxRN6V3hZ9W/bAUfk3N
wAQQ2vm9EerGU/Ax6whIXTfA9KWoxxlOkDr1dX3NvQSDiBmK7lfOmUFEjCcyERRK
kIzYX0xrhbo5aC3rCwwxP6TZ3SkMTg1iIwm2ea8ujJiH8taNa3Xo4meXfGbdYuxM
WvVjcw2GKM5l6aygXPueCKFUy9JvqcrkpoC39BYzvwaIdRg6ibgO1Xr99UUVLAcB
DQxsT4gF2Fnuj0cdh3PwcQ4W0JcBq34JiCTFGO1G+zIMfdgby1zu+08lNBw8rmRM
a70G4c+0iejSd4bN9JtcYvWzmLXX/z+vDtI2YlD+XBYx
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:25 2024 by rpki-client on console-fra.rpki-client.org