Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/VLtpulED1tKfWjRRJET9pfHiLOE.roa
File: VLtpulED1tKfWjRRJET9pfHiLOE.roa (raw, json)
Hash identifier: pXP77w9yp3tSvELqZ2Untcu0rPbBBnQ6m0vPFShlADs=
Subject key identifier: 54:BB:69:BA:51:03:D6:D2:9F:5A:34:51:24:44:FD:A5:F1:E2:2C:E1
Certificate issuer: /CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Certificate serial: 01856FD5120F1AC8CBDE6A41804E44471846
Authority key identifier: DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/VLtpulED1tKfWjRRJET9pfHiLOE.roa
Signing time: Mon 02 Jan 2023 00:15:12 +0000
ROA not before: Mon 02 Jan 2023 00:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196816
IP address blocks: 94.143.24.0/21 maxlen: 24
185.21.32.0/22 maxlen: 24
2a01:4480::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:12:0f:1a:c8:cb:de:6a:41:80:4e:44:47:18:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df14fe6cda90c9afe807590d2d50374a76a28e13
Validity
Not Before: Jan 2 00:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54bb69ba5103d6d29f5a34512444fda5f1e22ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:44:81:54:25:62:98:1c:78:d9:8d:12:07:
07:57:97:0d:d1:80:b1:de:e4:dc:5a:67:3c:10:07:
84:87:50:4a:1c:66:fd:62:1b:0f:df:bd:0d:e7:11:
a9:44:75:ec:c1:bd:a9:57:15:5d:51:bc:7a:cf:f3:
1f:66:b5:c8:04:1f:a3:3f:8e:72:4b:4c:cc:d3:c1:
af:5d:a7:d3:b0:78:5a:9e:4a:07:5c:45:f2:dc:43:
bf:05:56:65:db:eb:dc:e1:06:59:9e:9c:bf:59:cd:
cb:e4:7a:09:0f:4c:79:dc:05:c5:37:f8:50:89:0c:
1c:25:a4:f4:0d:45:f3:d5:a1:83:53:f3:e2:50:5f:
91:9d:ad:6e:87:25:59:f3:a3:7d:77:8c:61:75:98:
78:d0:d4:d7:a2:59:63:87:4e:ec:0e:ac:23:50:23:
e2:45:88:c6:66:16:cf:49:64:0a:98:79:77:99:f2:
25:29:48:ec:84:1c:08:b2:34:0c:7b:f5:b2:70:a7:
a6:42:13:6c:c3:05:3a:95:e5:6b:48:f8:6d:b9:94:
76:5d:da:23:47:3f:86:87:a9:0f:72:b5:2d:9f:7e:
cf:fc:09:e9:c7:25:f9:42:b4:5b:48:ca:c2:1d:9c:
47:03:b0:14:ed:0e:81:f3:14:c8:c8:e6:59:12:7c:
8e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BB:69:BA:51:03:D6:D2:9F:5A:34:51:24:44:FD:A5:F1:E2:2C:E1
X509v3 Authority Key Identifier:
keyid:DF:14:FE:6C:DA:90:C9:AF:E8:07:59:0D:2D:50:37:4A:76:A2:8E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xT-bNqQya_oB1kNLVA3SnaijhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/VLtpulED1tKfWjRRJET9pfHiLOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b3dcf-cbab-465b-8e90-da738a390f6e/1/3xT-bNqQya_oB1kNLVA3SnaijhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.24.0/21
185.21.32.0/22
IPv6:
2a01:4480::/32
Signature Algorithm: sha256WithRSAEncryption
36:6d:c8:09:58:e9:da:38:af:f7:7c:fe:9e:45:24:27:18:fe:
8c:22:3f:04:e7:d9:66:c6:0a:12:11:b2:25:0c:96:09:88:37:
2a:4c:c2:e5:0e:b8:8b:57:b8:2a:c9:e0:47:57:f8:06:05:c6:
d7:93:b6:88:4d:1f:fd:2b:12:1d:fe:33:9a:d9:60:5a:e4:78:
42:1a:0f:2b:96:63:e0:aa:b8:dc:62:87:bf:48:57:81:47:c8:
16:dc:64:67:35:d7:82:82:b1:e0:73:f9:bf:dd:b9:04:0a:fc:
7a:00:60:5a:b9:13:cc:3f:39:70:91:60:eb:9c:be:0b:65:8b:
d4:81:18:46:ba:ae:09:fe:4d:a4:d6:d7:4a:5b:59:b5:09:6e:
2f:9b:c8:e5:2c:86:1a:07:4a:2e:c8:83:c1:39:c0:db:06:4f:
ca:cf:42:7a:2a:df:fa:1c:b5:25:41:0e:c6:5b:d0:5c:1f:10:
86:b4:e5:a9:09:8b:33:69:e0:2b:b0:f9:23:4d:c3:c4:ff:20:
31:9e:8d:92:0f:fc:9d:b8:8c:b6:a4:06:5c:df:4e:4b:84:44:
92:27:0f:3d:b1:e4:85:80:03:d6:2b:15:a8:d4:a5:fc:f1:11:
f5:da:21:ed:9d:8b:29:a4:28:b3:cd:68:ed:e9:ff:1e:d5:e5:
4c:60:0c:21
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVv1RIPGsjL3mpBgE5ERxhGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMTRmZTZjZGE5MGM5YWZlODA3NTkwZDJkNTAzNzRhNzZh
MjhlMTMwHhcNMjMwMTAyMDAxNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGJiNjliYTUxMDNkNmQyOWY1YTM0NTEyNDQ0ZmRhNWYxZTIyY2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwVEgVQlYpgceNmNEgcHV5cN0YCx
3uTcWmc8EAeEh1BKHGb9YhsP370N5xGpRHXswb2pVxVdUbx6z/MfZrXIBB+jP45y
S0zM08GvXafTsHhankoHXEXy3EO/BVZl2+vc4QZZnpy/Wc3L5HoJD0x53AXFN/hQ
iQwcJaT0DUXz1aGDU/PiUF+Rna1uhyVZ86N9d4xhdZh40NTXolljh07sDqwjUCPi
RYjGZhbPSWQKmHl3mfIlKUjshBwIsjQMe/WycKemQhNswwU6leVrSPhtuZR2Xdoj
Rz+Gh6kPcrUtn37P/AnpxyX5QrRbSMrCHZxHA7AU7Q6B8xTIyOZZEnyOXwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFS7abpRA9bSn1o0USRE/aXx4izhMB8GA1UdIwQY
MBaAFN8U/mzakMmv6AdZDS1QN0p2oo4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAt
ZGE3MzhhMzkwZjZlLzEvVkx0cHVsRUQxdEtmV2pSUkpFVDlwZkhpTE9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zYjNkY2YtY2JhYi00NjViLThlOTAtZGE3MzhhMzkwZjZl
LzEvM3hULWJOcVF5YV9vQjFrTkxWQTNTbmFpamhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXo8YAwQC
uRUgMA0EAgACMAcDBQAqAUSAMA0GCSqGSIb3DQEBCwUAA4IBAQA2bcgJWOnaOK/3
fP6eRSQnGP6MIj8E59lmxgoSEbIlDJYJiDcqTMLlDriLV7gqyeBHV/gGBcbXk7aI
TR/9KxId/jOa2WBa5HhCGg8rlmPgqrjcYoe/SFeBR8gW3GRnNdeCgrHgc/m/3bkE
Cvx6AGBauRPMPzlwkWDrnL4LZYvUgRhGuq4J/k2k1tdKW1m1CW4vm8jlLIYaB0ou
yIPBOcDbBk/Kz0J6Kt/6HLUlQQ7GW9BcHxCGtOWpCYszaeArsPkjTcPE/yAxno2S
D/yduIy2pAZc305LhESSJw89seSFgAPWKxWo1KX88RH12iHtnYsppCizzWjt6f8e
1eVMYAwh
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:16 2024 by rpki-client on console-ams.rpki-client.org