Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/1-PD7AZFrXS02fNY0O327fDUpCNc.roa
File: 1-PD7AZFrXS02fNY0O327fDUpCNc.roa (raw, json)
Hash identifier: 7vwOLlZMxJtwFwpqG7+/b1TXonUKgUh+3rUPoJ0PiUo=
Subject key identifier: F8:F0:FB:01:91:6B:5D:2D:36:7C:D6:34:3B:7D:BB:7C:35:29:08:D7
Certificate issuer: /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial: 018573561DC5D76B9CD11BA944B1DAF01437
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/1-PD7AZFrXS02fNY0O327fDUpCNc.roa
Signing time: Mon 02 Jan 2023 16:35:01 +0000
ROA not before: Mon 02 Jan 2023 16:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44056
IP address blocks: 195.88.58.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:1d:c5:d7:6b:9c:d1:1b:a9:44:b1:da:f0:14:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Validity
Not Before: Jan 2 16:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8f0fb01916b5d2d367cd6343b7dbb7c352908d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:57:6a:e0:84:f6:8d:7b:db:dd:1d:e4:2c:
7d:2e:aa:b4:1a:fb:ec:02:0d:27:8e:2a:b7:35:39:
4c:e3:d8:2d:4b:72:e3:46:73:ec:58:62:57:58:39:
d7:63:64:2b:5b:ca:cf:f3:88:47:37:d1:24:b2:1c:
df:9e:48:46:cd:4e:fa:af:a0:03:64:19:b8:d6:37:
18:11:27:d5:24:ef:8f:56:88:68:05:f4:3e:e3:65:
76:fc:91:ae:42:8e:84:4e:c3:75:0f:f2:87:a2:83:
1f:07:a5:b2:c1:7c:a0:4d:00:b8:fd:79:74:32:e2:
6d:aa:fd:a4:51:d9:17:2c:57:54:f5:6c:b4:42:88:
c5:1c:30:4d:74:46:c5:1f:e7:7f:a3:73:ff:93:9a:
28:10:72:13:4f:e1:51:36:16:b5:64:c2:f8:15:41:
da:24:e9:a9:7d:e3:5c:3c:a4:7f:c2:b9:45:35:3a:
e9:89:2a:84:96:56:76:ef:33:d3:90:a1:1f:a9:22:
34:77:e0:98:f7:99:70:0b:d8:ed:50:e1:db:71:34:
49:0e:f9:db:90:52:7a:a6:b0:80:ad:a4:e5:4a:93:
5c:67:68:08:d5:3e:a2:bb:a7:c4:5c:66:64:49:3c:
4b:57:0c:1f:b1:06:75:a0:ba:9b:50:3e:ae:e0:89:
11:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F0:FB:01:91:6B:5D:2D:36:7C:D6:34:3B:7D:BB:7C:35:29:08:D7
X509v3 Authority Key Identifier:
keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/1-PD7AZFrXS02fNY0O327fDUpCNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.58.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:50:c3:86:69:ee:39:ff:2c:19:5a:1b:92:1f:b5:fc:99:59:
37:ff:f5:c1:0d:33:4f:c9:10:ca:c1:04:d6:45:45:16:c3:4e:
49:6f:99:3e:8a:17:a9:0d:b7:f9:23:17:ba:8b:b5:c3:be:fd:
0c:88:f0:5b:c2:19:9f:7c:82:da:b3:6d:86:53:fe:e3:51:ab:
22:f2:cf:2c:24:e3:25:b0:5d:f6:7b:0d:6c:7b:cc:64:d9:9a:
5f:fd:f4:60:82:34:23:48:0a:2d:90:35:ad:cd:48:43:2f:4d:
ab:a7:d5:c5:61:97:d4:f3:8e:85:5a:13:9e:f0:f6:68:31:e1:
3c:52:3b:07:e7:30:49:04:12:05:b1:a3:16:0d:8b:3e:c2:a7:
13:49:66:38:70:e3:23:71:0d:29:ec:3c:5b:05:98:0a:9a:81:
a0:d9:d8:bc:db:5c:2d:ba:df:05:ba:e8:fd:8f:cb:89:42:69:
02:69:4f:66:f6:48:fa:5a:10:e1:8b:0a:c2:c6:11:61:19:6f:
89:72:22:d1:34:e3:2d:17:63:2d:7c:91:de:97:1e:63:d5:65:
55:c6:fd:67:1f:52:12:1e:6d:83:34:f6:73:90:dc:3e:d9:af:
e9:b1:aa:eb:c1:bf:9f:85:2e:41:69:4c:2a:4e:c3:13:5c:88:
ff:8f:e1:d5
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVzVh3F12uc0RupRLHa8BQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMmU4OGY1MDdjZDJlYWRiYjIzMmM4NjRmNzFlZGJhNmVj
YjVkYTAwHhcNMjMwMTAyMTYzNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGYwZmIwMTkxNmI1ZDJkMzY3Y2Q2MzQzYjdkYmI3YzM1MjkwOGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5JXauCE9o17290d5Cx9Lqq0Gvvs
Ag0njiq3NTlM49gtS3LjRnPsWGJXWDnXY2QrW8rP84hHN9EkshzfnkhGzU76r6AD
ZBm41jcYESfVJO+PVohoBfQ+42V2/JGuQo6ETsN1D/KHooMfB6WywXygTQC4/Xl0
MuJtqv2kUdkXLFdU9Wy0QojFHDBNdEbFH+d/o3P/k5ooEHITT+FRNha1ZML4FUHa
JOmpfeNcPKR/wrlFNTrpiSqEllZ27zPTkKEfqSI0d+CY95lwC9jtUOHbcTRJDvnb
kFJ6prCAraTlSpNcZ2gI1T6iu6fEXGZkSTxLVwwfsQZ1oLqbUD6u4IkRhQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPjw+wGRa10tNnzWNDt9u3w1KQjXMB8GA1UdIwQY
MBaAFJ4uiPUHzS6tuyMshk9x7bpuy12gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmk2STlRZk5McTI3SXl5R1QzSHR1bTdMWGFBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zMDc2NGUtNzk5Zi00NzM2LTk2ODYt
OTJkNWQzOTcwYTU5LzEvMS1QRDdBWkZyWFMwMmZOWTBPMzI3ZkRVcENOYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTUvMzA3NjRlLTc5OWYtNDczNi05Njg2LTkyZDVkMzk3MGE1
OS8xL25pNkk5UWZOTHEyN0l5eUdUM0h0dW03TFhhQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcNYOjAN
BgkqhkiG9w0BAQsFAAOCAQEAoFDDhmnuOf8sGVobkh+1/JlZN//1wQ0zT8kQysEE
1kVFFsNOSW+ZPooXqQ23+SMXuou1w779DIjwW8IZn3yC2rNthlP+41GrIvLPLCTj
JbBd9nsNbHvMZNmaX/30YII0I0gKLZA1rc1IQy9Nq6fVxWGX1POOhVoTnvD2aDHh
PFI7B+cwSQQSBbGjFg2LPsKnE0lmOHDjI3ENKew8WwWYCpqBoNnYvNtcLbrfBbro
/Y/LiUJpAmlPZvZI+loQ4YsKwsYRYRlviXIi0TTjLRdjLXyR3pceY9VlVcb9Zx9S
Eh5tgzT2c5DcPtmv6bGq68G/n4UuQWlMKk7DE1yI/4/h1Q==
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:31 2024 by rpki-client on console-ams.rpki-client.org