Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/Pv1_zrqHbWDflL0_DZtnJiXUlJI.roa
File: Pv1_zrqHbWDflL0_DZtnJiXUlJI.roa (raw, json)
Hash identifier: B7l0KallWJ9sEKTcuFK/toQQO20avLvhfwX9gIo41yg=
Subject key identifier: 3E:FD:7F:CE:BA:87:6D:60:DF:94:BD:3F:0D:9B:67:26:25:D4:94:92
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 01870A6B73435B13E6EE4E637C697CF5E124
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/Pv1_zrqHbWDflL0_DZtnJiXUlJI.roa
Signing time: Wed 22 Mar 2023 17:43:46 +0000
ROA not before: Wed 22 Mar 2023 17:43:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 155.204.224.0/19 maxlen: 19
137.174.224.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0a:6b:73:43:5b:13:e6:ee:4e:63:7c:69:7c:f5:e1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Mar 22 17:43:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3efd7fceba876d60df94bd3f0d9b672625d49492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cf:0c:ed:82:3e:05:96:aa:3a:46:06:ba:81:
fc:bc:e5:28:72:45:69:36:40:c6:a1:12:77:03:3d:
0b:e3:8a:c0:c7:8b:87:8f:fd:df:73:89:bf:3a:10:
28:8c:42:1e:0d:21:49:29:17:12:c5:cd:35:c2:66:
76:94:a9:7e:37:13:3c:75:4f:3c:a8:fe:9d:b1:6b:
91:fc:48:8d:51:16:59:2f:d9:4f:0b:ad:93:48:e8:
74:14:ab:ce:e2:24:48:f4:d0:09:f5:50:34:c6:e5:
bb:6b:b6:bc:6b:a1:8d:3b:e5:36:32:d6:60:22:18:
83:ff:81:d0:1b:c1:94:6c:0d:53:62:dc:56:5b:b6:
01:ee:bb:59:fb:b6:f1:90:3e:60:8e:79:01:14:d9:
a6:b2:14:f6:00:e9:66:12:51:b0:10:ec:d9:f9:02:
1c:1f:ad:2d:fe:04:30:3e:7e:86:cf:ae:99:58:40:
9f:d1:55:53:7b:88:15:9f:65:49:fe:e7:50:93:a0:
26:e4:25:32:f2:32:96:e6:6b:78:b0:56:b1:ae:5f:
8c:05:ce:42:27:9e:0c:68:1b:f2:12:b3:70:83:6f:
33:6f:05:f7:05:0e:ec:f4:df:a2:12:46:37:70:d4:
cf:c6:06:3f:a8:fb:a0:fa:b8:ac:b2:d1:20:46:2a:
29:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FD:7F:CE:BA:87:6D:60:DF:94:BD:3F:0D:9B:67:26:25:D4:94:92
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/Pv1_zrqHbWDflL0_DZtnJiXUlJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.174.224.0/19
155.204.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:d0:20:6b:df:1e:31:d3:f5:61:18:59:d9:97:9a:99:0e:73:
be:b7:02:68:59:3a:1c:8b:68:bd:9e:d1:87:84:7a:cb:93:54:
04:8a:37:e4:21:64:c8:19:e4:39:45:7d:bb:0e:11:e4:ec:a7:
ff:f4:fc:11:00:cd:ee:6d:18:ab:c9:8a:69:ea:2a:52:a1:79:
7b:5c:29:3f:30:e3:33:ad:56:a5:78:11:11:bc:dc:68:34:13:
10:4d:1f:29:1e:00:2b:06:d7:32:cb:6a:a1:42:c9:4f:73:da:
13:97:f2:1e:34:5d:4d:5a:9a:9e:c6:fe:b9:f7:33:bb:c6:62:
f4:01:dc:dc:f5:a8:df:7d:35:b8:b0:84:48:12:82:65:75:c1:
af:76:1c:f9:33:34:c9:15:08:bc:a7:db:84:d4:fb:89:d5:e9:
cf:0f:a5:3f:a6:6d:da:e3:9d:c2:94:55:06:79:5a:22:2c:44:
1f:64:6d:62:0b:be:fa:cf:9d:7e:ef:98:ac:f2:2d:9d:54:e4:
b8:fb:5c:73:c8:2d:5f:20:8d:99:5c:eb:a7:07:27:19:93:58:
9f:7c:7b:a7:92:ba:60:81:25:26:f5:fd:b1:b2:6a:bc:85:07:
0f:5b:5b:11:95:ee:4d:20:07:6f:66:68:18:43:83:4c:1c:a3:
aa:e6:30:ff
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYcKa3NDWxPm7k5jfGl89eEkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm
Nzk2NzgwHhcNMjMwMzIyMTc0MzQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWZkN2ZjZWJhODc2ZDYwZGY5NGJkM2YwZDliNjcyNjI1ZDQ5NDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc8M7YI+BZaqOkYGuoH8vOUockVp
NkDGoRJ3Az0L44rAx4uHj/3fc4m/OhAojEIeDSFJKRcSxc01wmZ2lKl+NxM8dU88
qP6dsWuR/EiNURZZL9lPC62TSOh0FKvO4iRI9NAJ9VA0xuW7a7a8a6GNO+U2MtZg
IhiD/4HQG8GUbA1TYtxWW7YB7rtZ+7bxkD5gjnkBFNmmshT2AOlmElGwEOzZ+QIc
H60t/gQwPn6Gz66ZWECf0VVTe4gVn2VJ/udQk6Am5CUy8jKW5mt4sFaxrl+MBc5C
J54MaBvyErNwg28zbwX3BQ7s9N+iEkY3cNTPxgY/qPug+risstEgRiopUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFD79f866h21g35S9Pw2bZyYl1JSSMB8GA1UdIwQY
MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt
NTkxY2FmNTM2ZWNjLzEvUHYxX3pycUhiV0RmbEwwX0RadG5KaVhVbEpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj
LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFia7gAwQF
m8zgMA0GCSqGSIb3DQEBCwUAA4IBAQCh0CBr3x4x0/VhGFnZl5qZDnO+twJoWToc
i2i9ntGHhHrLk1QEijfkIWTIGeQ5RX27DhHk7Kf/9PwRAM3ubRiryYpp6ipSoXl7
XCk/MOMzrValeBERvNxoNBMQTR8pHgArBtcyy2qhQslPc9oTl/IeNF1NWpqexv65
9zO7xmL0Adzc9ajffTW4sIRIEoJldcGvdhz5MzTJFQi8p9uE1PuJ1enPD6U/pm3a
453ClFUGeVoiLEQfZG1iC776z51+75is8i2dVOS4+1xzyC1fII2ZXOunBycZk1if
fHunkrpggSUm9f2xsmq8hQcPW1sRle5NIAdvZmgYQ4NMHKOq5jD/
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:45 2024 by rpki-client on console-ams.rpki-client.org