Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Rv4kazONCuF7Si1bV_-Txn8EK0E.roa
File: Rv4kazONCuF7Si1bV_-Txn8EK0E.roa (raw, json)
Hash identifier: vPLDtIhD8Z0YtWnjZijpv+QYFXQEIZhieq2+zkJ7Ymk=
Subject key identifier: 46:FE:24:6B:33:8D:0A:E1:7B:4A:2D:5B:57:FF:93:C6:7F:04:2B:41
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 01856C6EFD70FB8A69CC4D7D32EB7F789339
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Rv4kazONCuF7Si1bV_-Txn8EK0E.roa
Signing time: Sun 01 Jan 2023 08:24:51 +0000
ROA not before: Sun 01 Jan 2023 08:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59511
IP address blocks: 94.177.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:fd:70:fb:8a:69:cc:4d:7d:32:eb:7f:78:93:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 08:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46fe246b338d0ae17b4a2d5b57ff93c67f042b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:1f:a7:1d:a1:25:ca:1a:aa:20:d5:3f:23:
9c:d6:73:22:6a:6f:1e:20:fb:60:1e:92:03:3e:34:
d4:3d:41:79:94:69:c2:bd:f3:93:5e:19:58:50:e0:
c4:b3:05:25:4e:e4:73:a7:c9:32:1f:50:21:cb:4e:
89:97:7d:15:ca:0a:0d:0b:8a:b0:51:5b:c8:fd:89:
76:67:01:c2:cf:b2:7f:ef:51:8a:08:c8:21:61:e9:
86:16:0c:dd:17:11:d9:64:8d:26:82:f1:a7:e2:6a:
c1:58:22:0c:f9:e5:c5:17:c3:6f:33:73:72:bb:1a:
48:74:9c:10:57:c6:e4:aa:4c:92:e0:3f:dc:d1:ab:
e5:4a:59:ca:7d:03:7e:51:cd:8a:c8:11:d9:ce:3c:
12:14:c8:00:71:22:c3:00:7d:9d:70:b5:f7:bf:32:
0d:b3:92:59:d2:df:43:d1:ef:25:15:19:27:b5:73:
5c:67:04:aa:42:6c:80:4c:56:28:59:db:78:20:bd:
b5:51:2d:c2:9b:88:a6:59:ae:eb:e5:92:00:81:f5:
9d:b8:ac:07:4b:b1:5a:f3:0f:a5:b3:bb:18:e0:9c:
15:b0:2d:fe:66:35:89:0b:b7:a1:18:af:af:9b:36:
d6:f6:01:d6:0d:f5:84:e2:46:0b:c2:e3:bd:30:69:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FE:24:6B:33:8D:0A:E1:7B:4A:2D:5B:57:FF:93:C6:7F:04:2B:41
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Rv4kazONCuF7Si1bV_-Txn8EK0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.26.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ce:58:61:f2:d1:25:c9:ff:07:9b:7f:ab:bb:f2:87:f1:56:
24:8d:9a:21:10:c5:7c:19:08:28:a9:6e:e3:00:62:50:23:4e:
59:b3:60:14:4a:4a:d1:4b:35:bf:12:55:be:cd:22:eb:67:22:
d3:eb:77:c8:d9:97:87:49:85:32:c4:93:ad:db:41:db:9a:0b:
cd:8e:e1:ed:dc:8b:7a:17:12:4a:2b:d9:e9:41:63:74:f7:99:
30:8c:d7:2b:19:d5:09:c6:e8:a6:be:02:31:b8:f9:73:b3:a0:
3e:08:c5:bb:26:d7:f6:14:11:82:1b:d7:52:2f:39:d9:fd:54:
23:2c:5d:12:a8:33:47:59:58:fd:cc:0c:cf:2b:0d:87:5c:c4:
de:07:73:9c:8d:de:c5:15:0f:e2:a8:83:e1:6e:3c:66:76:a9:
d5:d3:b5:d7:be:11:fc:52:91:6e:63:c3:ee:33:f5:4f:0f:ec:
14:72:36:53:83:74:c7:4e:21:61:9b:f5:db:99:ce:4f:5d:8d:
da:88:50:57:8f:80:a3:6d:0b:fc:0f:47:58:6e:e5:9f:ca:ed:
6f:d6:7f:3b:f8:0b:fd:79:db:dd:ac:fb:0d:13:e6:4d:7b:67:
be:bc:01:5e:03:d4:06:4a:8f:71:ae:8b:e5:df:5f:51:9f:b8:
3f:21:55:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsbv1w+4ppzE19Mut/eJM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3
YjQ1ODkwHhcNMjMwMTAxMDgyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmZlMjQ2YjMzOGQwYWUxN2I0YTJkNWI1N2ZmOTNjNjdmMDQyYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspEfpx2hJcoaqiDVPyOc1nMiam8e
IPtgHpIDPjTUPUF5lGnCvfOTXhlYUODEswUlTuRzp8kyH1Ahy06Jl30VygoNC4qw
UVvI/Yl2ZwHCz7J/71GKCMghYemGFgzdFxHZZI0mgvGn4mrBWCIM+eXFF8NvM3Ny
uxpIdJwQV8bkqkyS4D/c0avlSlnKfQN+Uc2KyBHZzjwSFMgAcSLDAH2dcLX3vzIN
s5JZ0t9D0e8lFRkntXNcZwSqQmyATFYoWdt4IL21US3Cm4imWa7r5ZIAgfWduKwH
S7Fa8w+ls7sY4JwVsC3+ZjWJC7ehGK+vmzbW9gHWDfWE4kYLwuO9MGnKdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEb+JGszjQrhe0otW1f/k8Z/BCtBMB8GA1UdIwQY
MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvUnY0a2F6T05DdUY3U2kxYlZfLVR4bjhFSzBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXrEaMA0G
CSqGSIb3DQEBCwUAA4IBAQB5zlhh8tElyf8Hm3+ru/KH8VYkjZohEMV8GQgoqW7j
AGJQI05Zs2AUSkrRSzW/ElW+zSLrZyLT63fI2ZeHSYUyxJOt20HbmgvNjuHt3It6
FxJKK9npQWN095kwjNcrGdUJxuimvgIxuPlzs6A+CMW7Jtf2FBGCG9dSLznZ/VQj
LF0SqDNHWVj9zAzPKw2HXMTeB3Ocjd7FFQ/iqIPhbjxmdqnV07XXvhH8UpFuY8Pu
M/VPD+wUcjZTg3THTiFhm/Xbmc5PXY3aiFBXj4CjbQv8D0dYbuWfyu1v1n87+Av9
edvdrPsNE+ZNe2e+vAFeA9QGSo9xrovl319Rn7g/IVXN
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:28 2024 by rpki-client on console-fra.rpki-client.org