Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/vzUc-6LwtppZXH6KCdr-YnsE2H0.roa
File: vzUc-6LwtppZXH6KCdr-YnsE2H0.roa (raw, json)
Hash identifier: 1DPoHgawHlSIzoWC4N9rpCF/lbMUhYYHbhl0kwZU0S0=
Subject key identifier: BF:35:1C:FB:A2:F0:B6:9A:59:5C:7E:8A:09:DA:FE:62:7B:04:D8:7D
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0185A4DB2867FFA9CFD3E2E55C8539CD73FC
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/vzUc-6LwtppZXH6KCdr-YnsE2H0.roa
Signing time: Thu 12 Jan 2023 07:21:44 +0000
ROA not before: Thu 12 Jan 2023 07:21:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 194.247.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:db:28:67:ff:a9:cf:d3:e2:e5:5c:85:39:cd:73:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 12 07:21:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf351cfba2f0b69a595c7e8a09dafe627b04d87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c5:08:85:46:75:b6:0c:e0:4d:d9:e2:ba:86:
7d:09:18:3e:97:b3:38:7b:57:cf:ab:fc:95:9e:21:
13:92:c4:55:9a:56:b5:03:ef:0a:a2:6d:9f:87:c7:
f7:42:c7:98:42:1e:37:0e:ba:34:d3:0f:bd:a4:e9:
33:a5:8d:58:e4:4a:fb:61:4f:11:ff:e4:45:f5:cf:
20:6d:83:af:4e:c2:f7:a8:62:d8:b0:51:f7:0d:1d:
a7:71:37:c5:77:6f:bb:0c:f3:db:7c:72:f9:8e:e2:
2d:77:34:84:2b:8f:14:b7:a5:4d:e4:83:ca:e6:43:
21:f1:7c:9a:35:4d:30:37:15:c2:78:e7:ba:1d:5b:
77:a8:21:9e:44:4f:37:f1:b2:41:9d:08:21:93:60:
f0:2a:d6:b4:d3:dc:96:b0:1c:07:15:bd:ba:45:ef:
20:1b:78:36:e5:1e:04:bc:9e:aa:db:d2:5e:e7:03:
75:86:84:52:f9:d2:4d:76:ef:b5:8e:3f:a5:4e:31:
0f:57:f0:7c:73:f4:88:45:66:be:20:06:31:e8:80:
93:92:7b:e0:32:36:c7:07:ef:ba:3c:70:1a:9f:20:
1a:77:86:a7:74:a6:8b:1d:ff:17:90:0e:ec:9e:80:
c0:8f:44:a1:a2:70:15:af:55:06:6b:68:b9:cc:c2:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:35:1C:FB:A2:F0:B6:9A:59:5C:7E:8A:09:DA:FE:62:7B:04:D8:7D
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/vzUc-6LwtppZXH6KCdr-YnsE2H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.45.0/24
Signature Algorithm: sha256WithRSAEncryption
54:5e:52:2f:d8:47:58:ea:ff:11:38:ef:d0:bc:8d:ed:72:f2:
6e:91:ed:5e:2b:9f:77:62:17:19:93:25:01:ef:95:78:cd:77:
43:21:a7:65:59:d4:4c:0a:ed:e5:fa:ff:24:ad:54:b4:42:af:
5b:56:ef:34:d8:2c:32:21:da:5f:c5:95:be:de:45:9f:42:58:
bc:82:2a:90:0a:eb:36:36:b9:48:72:01:02:84:7b:a7:ce:86:
93:b4:5d:f2:c4:01:18:78:d9:67:b3:2e:c7:fd:6a:10:92:3e:
71:dd:8e:91:a0:29:a7:07:bd:93:43:1b:61:b5:fa:7e:7a:fe:
8e:eb:af:c8:e7:94:d8:5d:52:cc:ca:70:69:84:b7:33:83:8c:
e1:0d:67:81:9c:07:ca:3d:a1:98:83:cc:e3:ac:da:5e:db:71:
97:6e:d3:ad:73:cd:d6:b8:9f:b2:36:52:78:54:7a:18:48:58:
19:7b:6b:2d:fc:58:a2:41:e1:c4:38:79:65:fa:fb:19:38:61:
72:91:75:f9:9b:c3:e4:bf:4b:ee:c4:9f:b9:6c:e6:e7:8d:88:
e9:cb:6c:72:bc:73:42:10:32:5a:12:a9:96:1f:85:13:d1:79:
2b:50:cc:df:da:a8:c6:36:84:0a:a9:4e:f3:9f:40:d3:f3:57:
c9:92:39:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWk2yhn/6nP0+LlXIU5zXP8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjMwMTEyMDcyMTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjM1MWNmYmEyZjBiNjlhNTk1YzdlOGEwOWRhZmU2MjdiMDRkODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMUIhUZ1tgzgTdniuoZ9CRg+l7M4
e1fPq/yVniETksRVmla1A+8Kom2fh8f3QseYQh43Dro00w+9pOkzpY1Y5Er7YU8R
/+RF9c8gbYOvTsL3qGLYsFH3DR2ncTfFd2+7DPPbfHL5juItdzSEK48Ut6VN5IPK
5kMh8XyaNU0wNxXCeOe6HVt3qCGeRE838bJBnQghk2DwKta009yWsBwHFb26Re8g
G3g25R4EvJ6q29Je5wN1hoRS+dJNdu+1jj+lTjEPV/B8c/SIRWa+IAYx6ICTknvg
MjbHB++6PHAanyAad4andKaLHf8XkA7snoDAj0ShonAVr1UGa2i5zMJbAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL81HPui8LaaWVx+igna/mJ7BNh9MB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvdnpVYy02THd0cHBaWEg2S0Nkci1ZbnNFMkgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvctMA0G
CSqGSIb3DQEBCwUAA4IBAQBUXlIv2EdY6v8ROO/QvI3tcvJuke1eK593YhcZkyUB
75V4zXdDIadlWdRMCu3l+v8krVS0Qq9bVu802CwyIdpfxZW+3kWfQli8giqQCus2
NrlIcgEChHunzoaTtF3yxAEYeNlnsy7H/WoQkj5x3Y6RoCmnB72TQxthtfp+ev6O
66/I55TYXVLMynBphLczg4zhDWeBnAfKPaGYg8zjrNpe23GXbtOtc83WuJ+yNlJ4
VHoYSFgZe2st/FiiQeHEOHll+vsZOGFykXX5m8Pkv0vuxJ+5bObnjYjpy2xyvHNC
EDJaEqmWH4UT0XkrUMzf2qjGNoQKqU7zn0DT81fJkjmD
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:53 2023 by rpki-client on console-fra.rpki-client.org