Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/_HVTr-z0QJ0oSehESaT5G3uuiik.roa
File: _HVTr-z0QJ0oSehESaT5G3uuiik.roa (raw, json)
Hash identifier: ldYOWMS2ItrvbDNSWUeFQzjlY69Pghi5Jvol6N7CFdY=
Subject key identifier: FC:75:53:AF:EC:F4:40:9D:28:49:E8:44:49:A4:F9:1B:7B:AE:8A:29
Certificate issuer: /CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Certificate serial: 018572B3F5F6218CE9C4F4843B8B4E6E5BAE
Authority key identifier: 51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/_HVTr-z0QJ0oSehESaT5G3uuiik.roa
Signing time: Mon 02 Jan 2023 13:37:54 +0000
ROA not before: Mon 02 Jan 2023 13:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 195.47.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b3:f5:f6:21:8c:e9:c4:f4:84:3b:8b:4e:6e:5b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5189db2e5f574dda0e3c17e395d5f05b66254ec5
Validity
Not Before: Jan 2 13:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc7553afecf4409d2849e84449a4f91b7bae8a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1c:e5:17:4f:a4:f3:0b:2a:24:cc:d2:23:29:
09:cc:3c:f3:d4:8c:d4:a6:89:a9:03:c1:24:1c:72:
17:aa:00:47:9d:70:4a:fc:cf:9e:d3:ad:5b:4e:62:
71:bd:50:47:5f:04:d1:6e:84:9e:a3:ca:0a:f7:0a:
1c:02:d1:a0:14:26:53:8e:22:94:cc:41:9f:d3:73:
96:fe:91:1b:4c:10:0e:52:c2:d5:d0:f1:b1:44:19:
dd:47:d3:f7:c7:10:11:14:b9:ff:59:00:43:2b:fb:
57:a4:3c:63:8b:5b:73:17:7d:7c:d8:e4:3c:c2:15:
68:e0:bc:85:d9:7e:9d:be:58:8a:6f:2c:e3:bb:29:
58:73:ed:b1:ad:90:5c:b3:bc:14:97:64:30:5a:13:
c2:f9:2e:6e:78:7c:ba:5a:b9:58:6f:01:51:f8:41:
d3:f1:1b:c4:fd:47:3c:3f:21:96:bf:8c:9a:dd:eb:
d9:16:6c:c7:08:d1:b0:23:8c:82:50:6b:6f:89:c6:
e1:11:e5:84:e7:24:71:a7:6a:f8:d7:bb:27:44:55:
4d:b1:00:f3:f9:ed:1e:db:4d:47:30:65:bc:6d:3f:
14:ec:23:ad:ce:d8:80:4a:4d:06:44:0a:6c:e1:cb:
1a:23:a9:7f:54:4a:de:0c:0d:cb:d5:af:b1:f9:0a:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:75:53:AF:EC:F4:40:9D:28:49:E8:44:49:A4:F9:1B:7B:AE:8A:29
X509v3 Authority Key Identifier:
keyid:51:89:DB:2E:5F:57:4D:DA:0E:3C:17:E3:95:D5:F0:5B:66:25:4E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYnbLl9XTdoOPBfjldXwW2YlTsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/_HVTr-z0QJ0oSehESaT5G3uuiik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/380c3c-f308-4dfe-a3a3-e21c6d0f8f04/1/UYnbLl9XTdoOPBfjldXwW2YlTsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.231.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:67:f2:33:3d:3a:41:0e:72:65:e3:38:b3:97:ee:25:c6:74:
d2:8d:1b:d7:61:bd:bc:4c:32:77:fe:43:95:a1:4c:7b:1f:92:
d0:3f:c4:d0:ad:ed:8d:78:3f:c8:4b:98:34:43:00:69:ef:85:
75:56:85:f5:37:06:39:3a:21:6a:ba:00:ec:63:8b:c5:36:92:
64:ed:a4:17:75:17:35:c4:03:4c:6c:4c:8a:c6:5a:27:aa:34:
6e:91:62:af:8a:33:be:d4:52:b3:d0:84:07:cc:ad:e9:75:01:
25:0d:f2:9e:ec:ff:10:36:e9:15:93:53:7f:af:b2:93:58:c3:
e0:9d:32:86:66:e7:aa:8f:f5:b1:b7:4e:1f:0a:3c:0a:45:2b:
b2:e4:4e:df:2d:7c:fa:24:ee:dc:d6:cb:14:e3:c3:de:08:c8:
18:78:b6:c5:21:fd:6e:d1:23:bd:53:73:19:8f:1a:62:c2:e4:
1d:b4:bb:5e:6f:31:7f:a4:52:88:8d:88:88:41:93:d1:2e:94:
23:8e:b2:47:a0:7e:ba:49:19:cd:43:bd:d4:f8:09:a2:ce:6c:
16:ce:7a:5e:59:48:83:b6:1e:b8:00:9c:a1:e0:77:0f:b5:df:
dc:f8:74:c8:eb:be:ec:48:5d:3f:d8:c7:c8:d9:3e:23:ab:ac:
5b:7a:50:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVys/X2IYzpxPSEO4tObluuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxODlkYjJlNWY1NzRkZGEwZTNjMTdlMzk1ZDVmMDViNjYy
NTRlYzUwHhcNMjMwMTAyMTMzNzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzc1NTNhZmVjZjQ0MDlkMjg0OWU4NDQ0OWE0ZjkxYjdiYWU4YTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhzlF0+k8wsqJMzSIykJzDzz1IzU
pompA8EkHHIXqgBHnXBK/M+e061bTmJxvVBHXwTRboSeo8oK9wocAtGgFCZTjiKU
zEGf03OW/pEbTBAOUsLV0PGxRBndR9P3xxARFLn/WQBDK/tXpDxji1tzF3182OQ8
whVo4LyF2X6dvliKbyzjuylYc+2xrZBcs7wUl2QwWhPC+S5ueHy6WrlYbwFR+EHT
8RvE/Uc8PyGWv4ya3evZFmzHCNGwI4yCUGtvicbhEeWE5yRxp2r417snRFVNsQDz
+e0e201HMGW8bT8U7COtztiASk0GRAps4csaI6l/VEreDA3L1a+x+Qqm8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPx1U6/s9ECdKEnoREmk+Rt7roopMB8GA1UdIwQY
MBaAFFGJ2y5fV03aDjwX45XV8FtmJU7FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVluYkxsOVhUZG9PUEJmamxkWHdXMllsVHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zODBjM2MtZjMwOC00ZGZlLWEzYTMt
ZTIxYzZkMGY4ZjA0LzEvX0hWVHItejBRSjBvU2VoRVNhVDVHM3V1aWlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zODBjM2MtZjMwOC00ZGZlLWEzYTMtZTIxYzZkMGY4ZjA0
LzEvVVluYkxsOVhUZG9PUEJmamxkWHdXMllsVHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwy/nMA0G
CSqGSIb3DQEBCwUAA4IBAQArZ/IzPTpBDnJl4zizl+4lxnTSjRvXYb28TDJ3/kOV
oUx7H5LQP8TQre2NeD/IS5g0QwBp74V1VoX1NwY5OiFqugDsY4vFNpJk7aQXdRc1
xANMbEyKxlonqjRukWKvijO+1FKz0IQHzK3pdQElDfKe7P8QNukVk1N/r7KTWMPg
nTKGZueqj/Wxt04fCjwKRSuy5E7fLXz6JO7c1ssU48PeCMgYeLbFIf1u0SO9U3MZ
jxpiwuQdtLtebzF/pFKIjYiIQZPRLpQjjrJHoH66SRnNQ73U+AmizmwWznpeWUiD
th64AJyh4HcPtd/c+HTI677sSF0/2MfI2T4jq6xbelAJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:39 2024 by rpki-client on console-fra.rpki-client.org