Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/IHxxAT3wJNw35TxnDoJqLiq0q3k.roa
File: IHxxAT3wJNw35TxnDoJqLiq0q3k.roa (raw, json)
Hash identifier: DlKNPJH4cUx+uz5swsowPErGw34xN4Ww1Ee41wmroyc=
Subject key identifier: 20:7C:71:01:3D:F0:24:DC:37:E5:3C:67:0E:82:6A:2E:2A:B4:AB:79
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 01879E5016CD2B7DC249F2D021994D878899
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/IHxxAT3wJNw35TxnDoJqLiq0q3k.roa
Signing time: Thu 20 Apr 2023 10:57:41 +0000
ROA not before: Thu 20 Apr 2023 10:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.178.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:50:16:cd:2b:7d:c2:49:f2:d0:21:99:4d:87:88:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: Apr 20 10:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=207c71013df024dc37e53c670e826a2e2ab4ab79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:37:de:d4:ab:bd:4c:88:05:68:08:cb:f8:
8b:1d:b7:7f:a4:17:fb:a5:44:21:da:e8:bb:9f:2f:
66:ff:9c:69:01:77:d5:fc:38:d0:67:75:ee:e2:10:
17:73:8b:78:05:46:68:3b:37:69:a5:5f:36:3c:bd:
65:49:e8:5e:fc:16:81:73:50:b1:41:0e:ae:e7:c5:
80:e6:f6:39:b3:5a:f3:47:c0:a7:af:9f:66:d1:c1:
2f:f3:bd:57:10:60:93:1b:94:6b:9c:74:51:5e:71:
21:0f:65:f8:ab:00:5d:eb:6d:12:14:f0:87:bf:a3:
3d:cf:cc:4c:fb:72:77:ed:b5:d6:61:06:bf:45:da:
e2:4b:72:99:4d:7b:42:52:14:f5:93:8e:72:ee:a4:
2e:0b:43:ba:b4:ca:25:43:05:a3:ff:8a:6f:5f:d5:
ef:e9:1f:e8:90:4d:21:b3:0e:d0:87:9f:b2:36:9e:
6f:34:0e:2f:e7:21:f4:2e:b5:15:f1:7d:2f:50:c4:
1b:9a:88:34:ae:f9:ef:cf:99:af:6e:3d:87:8e:c9:
a0:05:21:03:f7:6a:de:d7:ea:cb:dc:3c:de:fa:ef:
29:8d:13:ee:32:4c:8f:57:1d:41:17:3d:92:b7:67:
ec:38:1a:c7:86:9b:37:c8:6d:4c:21:37:2a:30:de:
9b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7C:71:01:3D:F0:24:DC:37:E5:3C:67:0E:82:6A:2E:2A:B4:AB:79
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/IHxxAT3wJNw35TxnDoJqLiq0q3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.115.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f2:0c:6f:65:11:45:1a:4f:1f:c2:60:7f:7c:c2:ff:8a:c7:
c2:18:6d:bd:85:75:8d:16:18:a6:58:83:fd:36:66:aa:d3:b9:
31:1c:30:24:a7:1f:50:cf:18:91:8b:ea:42:1b:fc:da:28:18:
1c:b5:3a:0c:d1:7b:ee:bc:93:24:a7:13:d2:26:ec:e6:5d:9f:
01:53:e8:10:c3:07:b8:ca:75:8f:f5:8e:d9:d8:dc:48:a2:9d:
ee:bb:d6:e1:9b:86:8c:8a:2b:17:63:73:0f:b6:84:6f:bd:0f:
e5:ce:7a:9f:63:b0:5a:63:dc:5f:78:22:6b:01:01:8d:14:f3:
e9:7a:df:95:76:41:a6:c3:03:8b:7c:c9:97:79:3e:5d:ce:41:
53:75:10:73:fa:28:39:f4:cc:3f:8f:4f:ae:8e:23:ca:fd:c1:
f2:cd:fe:e8:a9:19:72:ed:73:36:bd:1e:2c:14:2b:83:c2:1a:
be:9e:bf:3b:4d:45:2d:a2:69:8b:45:89:af:3b:39:82:89:06:
0b:67:9f:75:f5:bc:27:c4:ea:b7:39:9b:09:0b:d2:a6:7a:0d:
56:9c:64:89:7b:09:9d:bc:35:96:d4:ce:15:39:ab:32:7e:c3:
3b:f4:f4:f0:51:cc:0d:82:66:7a:ea:5c:6a:c4:f6:24:df:23:
e4:ea:fa:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeeUBbNK33CSfLQIZlNh4iZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjA2NWM4YmRiNzhmZjI5NGY3YzU0NTQ5NzFkYmZhYmZi
NmMxODQwHhcNMjMwNDIwMTA1NzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDdjNzEwMTNkZjAyNGRjMzdlNTNjNjcwZTgyNmEyZTJhYjRhYjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwg33tSrvUyIBWgIy/iLHbd/pBf7
pUQh2ui7ny9m/5xpAXfV/DjQZ3Xu4hAXc4t4BUZoOzdppV82PL1lSehe/BaBc1Cx
QQ6u58WA5vY5s1rzR8Cnr59m0cEv871XEGCTG5RrnHRRXnEhD2X4qwBd620SFPCH
v6M9z8xM+3J37bXWYQa/RdriS3KZTXtCUhT1k45y7qQuC0O6tMolQwWj/4pvX9Xv
6R/okE0hsw7Qh5+yNp5vNA4v5yH0LrUV8X0vUMQbmog0rvnvz5mvbj2HjsmgBSED
92re1+rL3Dze+u8pjRPuMkyPVx1BFz2St2fsOBrHhps3yG1MITcqMN6b3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCB8cQE98CTcN+U8Zw6Cai4qtKt5MB8GA1UdIwQY
MBaAFNXwZci9t4/ylPfFRUlx2/q/tsGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWIt
MzVhNWRjMmM3OTJjLzEvSUh4eEFUM3dKTnczNVR4bkRvSnFMaXEwcTNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWItMzVhNWRjMmM3OTJj
LzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbJzMA0G
CSqGSIb3DQEBCwUAA4IBAQBP8gxvZRFFGk8fwmB/fML/isfCGG29hXWNFhimWIP9
Nmaq07kxHDAkpx9QzxiRi+pCG/zaKBgctToM0XvuvJMkpxPSJuzmXZ8BU+gQwwe4
ynWP9Y7Z2NxIop3uu9bhm4aMiisXY3MPtoRvvQ/lznqfY7BaY9xfeCJrAQGNFPPp
et+VdkGmwwOLfMmXeT5dzkFTdRBz+ig59Mw/j0+ujiPK/cHyzf7oqRly7XM2vR4s
FCuDwhq+nr87TUUtommLRYmvOzmCiQYLZ5919bwnxOq3OZsJC9Kmeg1WnGSJewmd
vDWW1M4VOasyfsM79PTwUcwNgmZ66lxqxPYk3yPk6vqZ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org