Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/Ez1McJmjYcH-2bvsw1sDZW8Z-tY.roa
File: Ez1McJmjYcH-2bvsw1sDZW8Z-tY.roa (raw, json)
Hash identifier: WnyF7cF/ou5yILRgSFZdGgo+DBNrNcdH+JQRfrQtMjQ=
Subject key identifier: 13:3D:4C:70:99:A3:61:C1:FE:D9:BB:EC:C3:5B:03:65:6F:19:FA:D6
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 0185701EE4A13ECCE6CE760960BEEBFCBC7F
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/Ez1McJmjYcH-2bvsw1sDZW8Z-tY.roa
Signing time: Mon 02 Jan 2023 01:35:50 +0000
ROA not before: Mon 02 Jan 2023 01:35:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53340
IP address blocks: 86.106.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:e4:a1:3e:cc:e6:ce:76:09:60:be:eb:fc:bc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Jan 2 01:35:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=133d4c7099a361c1fed9bbecc35b03656f19fad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:c5:af:fe:ab:dc:9a:10:c1:b1:5d:bb:a8:
dc:7c:59:fd:89:78:9b:50:ee:2a:ef:85:eb:c2:76:
c5:40:e6:ea:65:ea:24:84:24:e5:88:2e:84:9b:31:
57:2a:53:81:bc:b6:58:a3:7a:8d:27:73:d8:ed:c9:
1c:df:51:38:4a:51:59:a0:54:42:75:81:1a:a7:17:
61:66:16:f5:cb:86:99:c0:b8:34:e1:c9:c9:5b:1d:
8a:c9:bc:75:ed:cd:77:e8:c8:f1:e2:af:95:9d:6c:
f2:2f:8a:87:27:45:2c:53:97:5c:89:79:b6:35:f7:
57:d2:90:e2:57:b5:32:ed:f8:79:38:a2:42:03:a7:
87:f6:29:3b:29:48:09:32:b0:27:9e:b2:51:08:26:
5c:6a:97:4a:c1:dd:d8:d2:54:13:ac:6d:e9:97:06:
92:07:12:e9:10:19:02:09:9a:7a:a5:39:a6:e7:8d:
69:42:0c:92:8f:06:d6:7e:1d:55:78:df:e3:99:fe:
66:6a:90:1a:43:2b:51:47:36:4c:b7:1a:f1:b7:6a:
ce:3c:98:21:ad:fa:18:33:88:79:dc:bd:28:2d:bf:
e5:38:54:db:f3:e3:f6:90:6c:14:bd:e7:f8:5e:07:
3d:c2:ab:0c:ed:53:c0:86:02:7f:5a:d8:46:3c:08:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3D:4C:70:99:A3:61:C1:FE:D9:BB:EC:C3:5B:03:65:6F:19:FA:D6
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/Ez1McJmjYcH-2bvsw1sDZW8Z-tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.183.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a9:4d:6b:58:35:fc:71:14:1d:36:ca:2f:99:87:3c:7f:0a:
4c:57:1a:11:63:c9:04:58:72:51:7d:b6:76:37:54:a9:3a:e1:
1e:1b:ed:55:67:34:3e:f0:d7:cb:c1:33:9c:77:29:c1:11:3a:
d7:35:80:66:5a:5b:44:e1:09:7c:ef:9c:ce:68:35:71:35:be:
05:d1:5c:89:83:ba:89:64:63:b9:ef:1e:87:87:95:df:e8:49:
10:06:9d:c6:22:28:34:c4:6a:14:79:a5:b7:d5:31:f3:4e:27:
65:11:37:56:89:3e:99:ba:82:87:37:be:95:52:00:2f:81:67:
45:ac:aa:9f:60:d3:32:27:80:1c:b5:ba:99:4b:ef:02:e4:08:
b6:7e:cd:3c:ee:0f:fb:e0:78:00:98:ac:00:d3:78:1a:73:df:
56:a5:d3:b1:02:8e:e2:93:e5:4e:77:67:93:b1:04:44:d3:03:
d9:ad:06:77:ed:6b:fc:45:1a:5e:86:65:2f:a3:7b:ef:54:cc:
9e:58:3c:34:79:b7:5f:9e:46:04:8e:3c:6d:cc:0b:8e:c1:89:
23:88:6a:e5:f6:cb:0e:08:3b:76:69:70:5f:e5:8d:b3:6d:97:
50:dc:ad:17:4f:0b:06:ba:6b:58:3a:b2:cb:0a:c5:fe:6e:7e:
60:81:c3:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwHuShPszmznYJYL7r/Lx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2YwZmJkNWY2ZTE3NTk5MDNjYzY5ZGUwZGM0ZWEyNGMx
ZjgzZGYwHhcNMjMwMTAyMDEzNTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzNkNGM3MDk5YTM2MWMxZmVkOWJiZWNjMzViMDM2NTZmMTlmYWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrHFr/6r3JoQwbFdu6jcfFn9iXib
UO4q74XrwnbFQObqZeokhCTliC6EmzFXKlOBvLZYo3qNJ3PY7ckc31E4SlFZoFRC
dYEapxdhZhb1y4aZwLg04cnJWx2Kybx17c136Mjx4q+VnWzyL4qHJ0UsU5dciXm2
NfdX0pDiV7Uy7fh5OKJCA6eH9ik7KUgJMrAnnrJRCCZcapdKwd3Y0lQTrG3plwaS
BxLpEBkCCZp6pTmm541pQgySjwbWfh1VeN/jmf5mapAaQytRRzZMtxrxt2rOPJgh
rfoYM4h53L0oLb/lOFTb8+P2kGwUvef4Xgc9wqsM7VPAhgJ/WthGPAhSKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBM9THCZo2HB/tm77MNbA2VvGfrWMB8GA1UdIwQY
MBaAFNTPD71fbhdZkDzGneDcTqJMH4PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMt
NTg1N2YxYzE3NjI0LzEvRXoxTWNKbWpZY0gtMmJ2c3cxc0RaVzhaLXRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMtNTg1N2YxYzE3NjI0
LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmq3MA0G
CSqGSIb3DQEBCwUAA4IBAQCOqU1rWDX8cRQdNsovmYc8fwpMVxoRY8kEWHJRfbZ2
N1SpOuEeG+1VZzQ+8NfLwTOcdynBETrXNYBmWltE4Ql875zOaDVxNb4F0VyJg7qJ
ZGO57x6Hh5Xf6EkQBp3GIig0xGoUeaW31THzTidlETdWiT6ZuoKHN76VUgAvgWdF
rKqfYNMyJ4ActbqZS+8C5Ai2fs087g/74HgAmKwA03gac99WpdOxAo7ik+VOd2eT
sQRE0wPZrQZ37Wv8RRpehmUvo3vvVMyeWDw0ebdfnkYEjjxtzAuOwYkjiGrl9ssO
CDt2aXBf5Y2zbZdQ3K0XTwsGumtYOrLLCsX+bn5ggcMx
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:50 2023 by rpki-client on console-ams.rpki-client.org