Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Ulzl5WvT0Xhjr7XoZCniTXxbw4g.roa
File: Ulzl5WvT0Xhjr7XoZCniTXxbw4g.roa (raw, json)
Hash identifier: kTaVlNZznnQf5rThc//n/0LLL/N8jE31c2SO2KZ/jmo=
Subject key identifier: 52:5C:E5:E5:6B:D3:D1:78:63:AF:B5:E8:64:29:E2:4D:7C:5B:C3:88
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 01856C6EFBE8A39A63A42C8C0E615E7B0B5C
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Ulzl5WvT0Xhjr7XoZCniTXxbw4g.roa
Signing time: Sun 01 Jan 2023 08:24:50 +0000
ROA not before: Sun 01 Jan 2023 08:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57034
IP address blocks: 93.174.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:fb:e8:a3:9a:63:a4:2c:8c:0e:61:5e:7b:0b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 1 08:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=525ce5e56bd3d17863afb5e86429e24d7c5bc388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:9e:e2:5e:bd:e4:da:6a:4b:a2:11:90:20:
f6:8b:8e:9f:92:05:95:49:39:0b:da:34:1f:a9:e7:
68:46:00:26:68:c1:e8:f5:b3:fe:d5:8c:95:4a:62:
e8:39:19:78:dc:51:54:b8:22:69:8a:13:b1:e2:33:
a5:e2:7d:88:97:9b:40:21:f7:bf:94:01:2a:eb:fc:
f1:7f:73:a7:58:92:98:29:f3:8e:7f:ed:39:b9:2c:
52:24:a0:07:50:37:d7:b3:23:d8:f3:68:5c:f3:0c:
e2:4e:4c:a9:11:3b:39:b0:38:84:50:e1:f3:b0:00:
67:ec:2e:c5:5e:55:ee:d8:ed:ce:71:c2:3c:11:d5:
7e:39:3c:ce:d1:c4:7c:c6:be:6d:8e:51:ee:6d:ee:
fd:40:5a:95:10:36:7c:9c:9e:55:26:5b:2c:9e:4c:
e9:95:2d:a3:cc:bd:ee:22:65:e8:2e:4c:b9:cc:5f:
a1:ce:6f:5b:2e:66:49:8a:cf:d2:45:ca:60:af:e0:
f2:4c:98:99:2b:0b:17:23:eb:15:39:6f:07:88:3d:
a3:1e:52:f0:39:d5:2b:9d:12:0e:cb:9c:ae:a7:00:
38:3e:c9:31:37:8b:de:12:26:9f:1c:b0:92:a9:75:
ad:80:0a:74:a9:5c:57:7d:c8:d7:c8:39:ee:c6:e0:
a8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5C:E5:E5:6B:D3:D1:78:63:AF:B5:E8:64:29:E2:4D:7C:5B:C3:88
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/Ulzl5WvT0Xhjr7XoZCniTXxbw4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.164.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e8:9e:ad:ce:ff:ff:28:8a:1a:e7:6b:ea:6f:41:5c:e8:ba:
5f:04:7b:e9:6d:19:6b:0e:b9:21:31:fe:13:0c:1a:2d:bf:52:
08:52:2c:d7:1c:36:59:5c:02:ec:7a:fb:e4:89:0b:98:60:f8:
26:1a:b5:60:0a:5d:20:fd:62:e0:ab:99:06:2c:41:ef:0c:0b:
af:07:66:60:5a:31:3c:10:ea:72:71:13:6b:56:ac:aa:65:60:
3c:2d:2d:6e:5b:b7:bd:6e:54:75:08:db:40:e3:26:c6:50:66:
c1:3e:3c:c0:eb:fd:d6:02:9c:91:dd:2f:25:d4:d5:be:7f:ad:
69:d1:9e:58:d0:a1:24:d7:bf:d5:bb:4b:9a:67:1b:a7:45:4f:
8d:41:74:a5:6f:15:8e:ea:ee:22:94:2d:79:02:be:d7:12:b8:
a6:5c:c5:29:8e:70:5e:b8:a3:40:df:c0:87:cf:64:58:12:89:
c1:b5:0b:60:f0:4a:51:a1:df:41:34:bb:a2:c0:ea:da:32:f3:
1d:6a:69:76:10:14:54:bb:3d:c1:63:15:48:1a:7a:6c:da:9f:
74:e9:52:15:3a:a7:9d:22:43:91:f2:10:a0:d3:88:50:f8:da:
23:b5:6b:b8:12:cf:a4:05:81:7d:93:ea:d9:fe:f2:01:cb:1e:
2b:12:a5:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsbvvoo5pjpCyMDmFeewtcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3
YjQ1ODkwHhcNMjMwMTAxMDgyNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjVjZTVlNTZiZDNkMTc4NjNhZmI1ZTg2NDI5ZTI0ZDdjNWJjMzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveue4l695NpqS6IRkCD2i46fkgWV
STkL2jQfqedoRgAmaMHo9bP+1YyVSmLoORl43FFUuCJpihOx4jOl4n2Il5tAIfe/
lAEq6/zxf3OnWJKYKfOOf+05uSxSJKAHUDfXsyPY82hc8wziTkypETs5sDiEUOHz
sABn7C7FXlXu2O3OccI8EdV+OTzO0cR8xr5tjlHube79QFqVEDZ8nJ5VJlssnkzp
lS2jzL3uImXoLky5zF+hzm9bLmZJis/SRcpgr+DyTJiZKwsXI+sVOW8HiD2jHlLw
OdUrnRIOy5yupwA4PskxN4veEiafHLCSqXWtgAp0qVxXfcjXyDnuxuCoAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFJc5eVr09F4Y6+16GQp4k18W8OIMB8GA1UdIwQY
MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt
MmVjZTA0ZTE4NWMyLzEvVWx6bDVXdlQwWGhqcjdYb1pDbmlUWHhidzRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy
LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXa6kMA0G
CSqGSIb3DQEBCwUAA4IBAQAh6J6tzv//KIoa52vqb0Fc6LpfBHvpbRlrDrkhMf4T
DBotv1IIUizXHDZZXALsevvkiQuYYPgmGrVgCl0g/WLgq5kGLEHvDAuvB2ZgWjE8
EOpycRNrVqyqZWA8LS1uW7e9blR1CNtA4ybGUGbBPjzA6/3WApyR3S8l1NW+f61p
0Z5Y0KEk17/Vu0uaZxunRU+NQXSlbxWO6u4ilC15Ar7XErimXMUpjnBeuKNA38CH
z2RYEonBtQtg8EpRod9BNLuiwOraMvMdaml2EBRUuz3BYxVIGnps2p906VIVOqed
IkOR8hCg04hQ+NojtWu4Es+kBYF9k+rZ/vIByx4rEqVf
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:28 2024 by rpki-client on console-fra.rpki-client.org