Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/toQrbhYPvy3wR3nAf1RwfONCl0s.roa
File: toQrbhYPvy3wR3nAf1RwfONCl0s.roa (raw, json)
Hash identifier: VFji2RKvDIt0X9Rsa3BEmmG8uJwX+z5SsBSske8VJuU=
Subject key identifier: B6:84:2B:6E:16:0F:BF:2D:F0:47:79:C0:7F:54:70:7C:E3:42:97:4B
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 018C115FD1C004A419CE2797C8843A43B308
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/toQrbhYPvy3wR3nAf1RwfONCl0s.roa
Signing time: Mon 27 Nov 2023 15:22:21 +0000
ROA not before: Mon 27 Nov 2023 15:22:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 195.14.105.0/24 maxlen: 24
147.185.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:5f:d1:c0:04:a4:19:ce:27:97:c8:84:3a:43:b3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Nov 27 15:22:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6842b6e160fbf2df04779c07f54707ce342974b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7f:ff:c5:af:e9:f0:ee:d5:86:cf:36:93:bf:
20:5e:43:6b:6b:6b:15:63:00:fb:5f:e0:42:31:8c:
8f:73:1c:95:4e:dd:57:da:70:40:a1:4d:59:a9:ff:
d7:a3:92:23:bf:e2:8a:f6:4f:2c:d1:07:a5:c0:0c:
8d:0f:d2:d5:48:f4:f5:33:84:3d:b4:88:aa:f9:b7:
64:16:70:7b:2e:76:1e:e0:3d:33:c5:d0:a0:01:64:
f9:f2:6d:6c:e1:80:66:5a:a2:e7:f9:44:ba:1a:02:
65:d3:f4:e1:f7:93:da:1c:b8:85:3a:c3:f3:d5:48:
2e:9a:c7:3c:1f:82:1f:b5:63:b7:55:fe:fa:83:43:
cb:19:06:6e:88:af:a2:09:17:b9:ef:4d:d4:8b:6d:
a8:8e:07:54:8f:1d:58:89:b0:3d:26:18:c8:a0:fe:
33:b0:34:66:1d:d1:d4:92:3a:c4:2f:8e:1b:34:94:
19:8e:aa:72:e0:2a:ed:03:d7:1d:d5:75:dc:ad:32:
65:5c:f2:80:ad:5d:30:c9:25:48:42:be:21:44:7d:
21:88:40:ec:5e:a7:b8:54:32:b7:b1:5e:2f:d9:f6:
b6:51:6c:66:94:3e:3d:73:47:b1:3e:a7:85:8e:23:
c3:b1:11:d7:44:0e:ff:5d:5a:78:3e:ed:b9:3f:4e:
86:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:84:2B:6E:16:0F:BF:2D:F0:47:79:C0:7F:54:70:7C:E3:42:97:4B
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/toQrbhYPvy3wR3nAf1RwfONCl0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.106.0/24
195.14.105.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:eb:35:c1:62:29:9b:5b:ea:85:db:63:85:a8:24:9d:77:69:
b5:23:38:eb:19:0e:3f:9a:97:a4:9b:c3:57:d1:18:18:38:47:
80:aa:08:62:01:ff:0c:e2:39:7d:00:1e:ff:24:21:c5:49:68:
70:fb:92:ff:03:ef:50:d1:17:0b:ee:b7:6b:b7:93:c2:47:9c:
5b:c5:51:4e:c3:ee:6a:9f:43:b8:13:b6:4a:e1:89:2a:a0:e0:
9f:bc:08:26:b4:6f:c6:b8:e3:61:69:62:78:59:f5:69:c9:ec:
82:5a:4a:09:0b:e4:93:1d:ad:34:bb:84:16:14:b4:51:69:93:
e5:cf:aa:8a:df:08:9b:63:9c:b5:43:ab:f8:02:b0:e1:f2:54:
3e:cb:5b:2d:20:de:c9:94:cd:38:a8:a6:b6:bb:3c:69:d6:c6:
69:d0:80:f3:96:87:98:2f:9e:40:bf:3f:36:d7:fd:70:9b:5a:
8b:ab:dd:ca:cc:b4:67:d4:4a:f5:a1:32:95:7f:fd:c1:39:96:
25:79:e2:96:35:2c:2d:99:57:bb:a7:25:ca:59:27:c1:7e:50:
4b:d8:cf:4c:62:a9:c9:94:da:27:2c:53:0c:e5:ae:a8:32:bc:
ce:94:c6:62:cc:17:af:11:8a:3b:94:cd:8e:c4:77:e5:ec:bc:
8d:9b:67:cd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYwRX9HABKQZzieXyIQ6Q7MIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYzJjMWFmZDRiZGVjOTgwNTA2ZmEwN2RmN2M4NjYyZDU1
NGZhNDYwHhcNMjMxMTI3MTUyMjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjg0MmI2ZTE2MGZiZjJkZjA0Nzc5YzA3ZjU0NzA3Y2UzNDI5NzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5H//xa/p8O7Vhs82k78gXkNra2sV
YwD7X+BCMYyPcxyVTt1X2nBAoU1Zqf/Xo5Ijv+KK9k8s0QelwAyND9LVSPT1M4Q9
tIiq+bdkFnB7LnYe4D0zxdCgAWT58m1s4YBmWqLn+US6GgJl0/Th95PaHLiFOsPz
1Ugumsc8H4IftWO3Vf76g0PLGQZuiK+iCRe5703Ui22ojgdUjx1YibA9JhjIoP4z
sDRmHdHUkjrEL44bNJQZjqpy4CrtA9cd1XXcrTJlXPKArV0wySVIQr4hRH0hiEDs
Xqe4VDK3sV4v2fa2UWxmlD49c0exPqeFjiPDsRHXRA7/XVp4Pu25P06GaQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLaEK24WD78t8Ed5wH9UcHzjQpdLMB8GA1UdIwQY
MBaAFOrCwa/UveyYBQb6B998hmLVVPpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMt
YzBjZWIwMzdhZDQyLzEvdG9RcmJoWVB2eTN3UjNuQWYxUndmT05DbDBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS81ODlhNmItNGQ3ZS00MDEyLWEwZmMtYzBjZWIwMzdhZDQy
LzEvNnNMQnI5Uzk3SmdGQnZvSDMzeUdZdFZVLWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk7lqAwQA
ww5pMA0GCSqGSIb3DQEBCwUAA4IBAQB/6zXBYimbW+qF22OFqCSdd2m1IzjrGQ4/
mpekm8NX0RgYOEeAqghiAf8M4jl9AB7/JCHFSWhw+5L/A+9Q0RcL7rdrt5PCR5xb
xVFOw+5qn0O4E7ZK4YkqoOCfvAgmtG/GuONhaWJ4WfVpyeyCWkoJC+STHa00u4QW
FLRRaZPlz6qK3wibY5y1Q6v4ArDh8lQ+y1stIN7JlM04qKa2uzxp1sZp0IDzloeY
L55Avz821/1wm1qLq93KzLRn1Er1oTKVf/3BOZYleeKWNSwtmVe7pyXKWSfBflBL
2M9MYqnJlNonLFMM5a6oMrzOlMZizBevEYo7lM2OxHfl7LyNm2fN
-----END CERTIFICATE-----
Generated at Thu Dec 21 10:15:36 2023 by rpki-client on console-fra.rpki-client.org