Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/SwT5tiI3uaRf-6EGf7gOaunTyNc.roa
File: SwT5tiI3uaRf-6EGf7gOaunTyNc.roa (raw, json)
Hash identifier: CYAiV1BxWI/wQKPC283LynMG6X//IYgyZA9VIUYG2p8=
Subject key identifier: 4B:04:F9:B6:22:37:B9:A4:5F:FB:A1:06:7F:B8:0E:6A:E9:D3:C8:D7
Certificate issuer: /CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Certificate serial: 0185EF7173D4D114877E9C9492A547A7D7F4
Authority key identifier: F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/SwT5tiI3uaRf-6EGf7gOaunTyNc.roa
Signing time: Thu 26 Jan 2023 18:57:47 +0000
ROA not before: Thu 26 Jan 2023 18:57:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.15.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ef:71:73:d4:d1:14:87:7e:9c:94:92:a5:47:a7:d7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6450d2d0213ee4c9f3181efeeb2d663fe0d365b
Validity
Not Before: Jan 26 18:57:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b04f9b62237b9a45ffba1067fb80e6ae9d3c8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:51:73:de:1a:c8:0f:eb:53:52:9d:ca:36:
9c:b8:46:47:cc:df:9b:0c:c6:6d:17:ba:f6:e6:63:
61:4d:45:86:f3:27:3c:6a:f9:fb:43:d4:27:3c:ce:
3a:21:70:16:9a:ed:f0:36:16:94:79:71:0b:6f:fd:
93:d4:35:f8:78:ab:83:53:42:d7:04:be:4e:4b:5e:
2f:92:1e:58:8d:84:c1:2a:81:ca:de:61:d3:a9:56:
f8:29:a8:66:23:0d:e5:fe:11:70:b1:5b:45:6f:c3:
85:2f:40:c6:ba:48:47:8f:30:dd:6e:b6:24:9c:5b:
08:ce:91:94:78:e6:a4:75:cc:ea:ba:7b:b7:f8:2a:
61:17:6e:ec:ab:9b:ad:4a:80:8e:ee:42:18:86:f8:
0d:60:d5:db:2b:ca:d6:01:50:28:3f:c9:a0:11:2f:
93:55:ba:df:44:a0:0e:56:53:9f:c3:c0:d5:4d:aa:
40:41:3e:5d:ee:31:69:84:c3:08:97:77:71:d4:a8:
be:3a:49:01:51:4e:a6:94:b1:55:9c:06:05:0b:eb:
fa:0c:d9:d5:86:90:96:ac:5f:d3:16:d8:4f:fd:c0:
b2:b3:b0:c6:68:b2:f0:b6:2f:1d:04:dd:18:f9:a6:
95:16:92:a0:99:44:d6:f9:e0:aa:1c:e6:a9:aa:3a:
9d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:04:F9:B6:22:37:B9:A4:5F:FB:A1:06:7F:B8:0E:6A:E9:D3:C8:D7
X509v3 Authority Key Identifier:
keyid:F6:45:0D:2D:02:13:EE:4C:9F:31:81:EF:EE:B2:D6:63:FE:0D:36:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUNLQIT7kyfMYHv7rLWY_4NNls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/SwT5tiI3uaRf-6EGf7gOaunTyNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6378bb-52ce-46af-959c-a9054928b544/1/9kUNLQIT7kyfMYHv7rLWY_4NNls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.151.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a1:10:53:ae:4a:2f:4c:58:bc:6b:85:2b:90:07:9e:3f:5c:
8d:75:25:81:37:dc:de:7c:4b:af:99:e8:ee:ba:77:cf:a3:cf:
bc:a6:9d:43:88:c2:0e:86:bc:ab:45:c2:bc:4e:be:57:05:a5:
eb:4f:a6:20:5a:59:43:91:46:12:6d:aa:dd:26:81:64:c2:d0:
e2:75:01:44:33:42:a3:c7:f2:83:13:ab:69:41:af:89:27:b9:
d3:9a:63:f5:1d:0b:b9:a5:b5:1f:3d:ca:bc:3d:f2:37:bd:0e:
80:60:43:f9:36:16:45:9c:fc:9c:07:39:40:f2:82:0a:83:8c:
a6:52:f8:80:45:1d:7d:85:8b:c3:55:01:a5:eb:f6:d4:ee:9b:
5c:90:eb:1e:09:b1:a3:a4:48:02:79:69:b3:46:e7:e8:35:93:
0d:7e:11:6c:00:8b:d9:65:ec:53:e6:8e:fe:8b:c0:19:41:ff:
27:26:0d:a8:f0:b7:42:fc:fc:7b:8c:bf:f6:34:77:3e:06:5b:
57:dc:a1:72:9e:b4:cb:10:94:3b:8d:3c:97:f9:c7:da:6b:0a:
74:40:53:9d:47:ca:8f:aa:d7:ce:0b:9a:fa:09:e4:00:da:86:
dc:64:b5:21:0e:4b:9c:e4:2e:db:62:ec:d6:72:5f:8f:f3:91:
eb:cd:20:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXvcXPU0RSHfpyUkqVHp9f0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NDUwZDJkMDIxM2VlNGM5ZjMxODFlZmVlYjJkNjYzZmUw
ZDM2NWIwHhcNMjMwMTI2MTg1NzQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjA0ZjliNjIyMzdiOWE0NWZmYmExMDY3ZmI4MGU2YWU5ZDNjOGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnglRc94ayA/rU1KdyjacuEZHzN+b
DMZtF7r25mNhTUWG8yc8avn7Q9QnPM46IXAWmu3wNhaUeXELb/2T1DX4eKuDU0LX
BL5OS14vkh5YjYTBKoHK3mHTqVb4KahmIw3l/hFwsVtFb8OFL0DGukhHjzDdbrYk
nFsIzpGUeOakdczqunu3+CphF27sq5utSoCO7kIYhvgNYNXbK8rWAVAoP8mgES+T
VbrfRKAOVlOfw8DVTapAQT5d7jFphMMIl3dx1Ki+OkkBUU6mlLFVnAYFC+v6DNnV
hpCWrF/TFthP/cCys7DGaLLwti8dBN0Y+aaVFpKgmUTW+eCqHOapqjqdoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEsE+bYiN7mkX/uhBn+4Dmrp08jXMB8GA1UdIwQY
MBaAFPZFDS0CE+5MnzGB7+6y1mP+DTZbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtVTkxRSVQ3a3lmTVlIdjdyTFdZXzROTmxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS82Mzc4YmItNTJjZS00NmFmLTk1OWMt
YTkwNTQ5MjhiNTQ0LzEvU3dUNXRpSTN1YVJmLTZFR2Y3Z09hdW5UeU5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS82Mzc4YmItNTJjZS00NmFmLTk1OWMtYTkwNTQ5MjhiNTQ0
LzEvOWtVTkxRSVQ3a3lmTVlIdjdyTFdZXzROTmxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg+XMA0G
CSqGSIb3DQEBCwUAA4IBAQB1oRBTrkovTFi8a4UrkAeeP1yNdSWBN9zefEuvmeju
unfPo8+8pp1DiMIOhryrRcK8Tr5XBaXrT6YgWllDkUYSbardJoFkwtDidQFEM0Kj
x/KDE6tpQa+JJ7nTmmP1HQu5pbUfPcq8PfI3vQ6AYEP5NhZFnPycBzlA8oIKg4ym
UviARR19hYvDVQGl6/bU7ptckOseCbGjpEgCeWmzRufoNZMNfhFsAIvZZexT5o7+
i8AZQf8nJg2o8LdC/Px7jL/2NHc+BltX3KFynrTLEJQ7jTyX+cfaawp0QFOdR8qP
qtfOC5r6CeQA2obcZLUhDkuc5C7bYuzWcl+P85HrzSAX
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:27 2023 by rpki-client on console-fra.rpki-client.org