Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/AS7f2Tx6ZJc6Kgaoua_7eE33YfM.roa
File: AS7f2Tx6ZJc6Kgaoua_7eE33YfM.roa (raw, json)
Hash identifier: hfkU9eLm2TX1a4t862Yp6ya3ITZsnp3goCdepvHFdf8=
Subject key identifier: 01:2E:DF:D9:3C:7A:64:97:3A:2A:06:A8:B9:AF:FB:78:4D:F7:61:F3
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018727764AF8A5B15B567DC09E0B6400731C
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/AS7f2Tx6ZJc6Kgaoua_7eE33YfM.roa
Signing time: Tue 28 Mar 2023 09:04:36 +0000
ROA not before: Tue 28 Mar 2023 09:04:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31627
IP address blocks: 195.76.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:76:4a:f8:a5:b1:5b:56:7d:c0:9e:0b:64:00:73:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Mar 28 09:04:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=012edfd93c7a64973a2a06a8b9affb784df761f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:da:93:6b:94:55:2b:b3:ab:88:37:df:8f:4a:
22:10:c1:aa:d9:0f:81:7b:e2:c7:36:db:f1:6b:23:
5f:ab:a6:be:8b:51:8b:af:6f:be:97:4f:92:d9:62:
23:a3:93:5c:77:70:72:14:e7:92:6a:2c:fc:80:65:
f7:a8:d0:a0:55:4c:4e:6f:8f:3e:90:09:cb:a6:94:
d8:5a:ac:cf:98:92:2b:de:df:72:12:94:61:46:aa:
b4:a3:2f:45:e0:fe:0b:f7:2d:7a:8b:09:f8:12:68:
17:9b:7e:3d:dc:8d:38:16:ae:a9:57:39:3e:f2:c0:
af:2c:28:bd:28:a5:6d:d9:4d:ee:01:b9:21:68:6c:
4d:b3:7e:15:58:1e:14:9c:d9:8d:b2:f3:32:36:b5:
cb:98:9e:e7:9a:ab:8a:d3:41:d6:4d:fd:db:69:f9:
e2:a3:e7:7c:bb:28:19:6e:09:38:ad:e8:da:bb:da:
e3:fb:d1:f1:61:fa:47:40:21:c6:bc:6d:96:43:c8:
cc:9d:45:4a:7a:9e:be:01:51:72:dc:6c:02:40:e1:
41:8a:eb:47:1e:c3:e7:e2:7e:a3:3c:6f:7a:17:8c:
18:7d:f2:e1:2c:49:4e:ec:43:5b:29:4a:a6:c3:92:
89:b4:1f:8d:55:94:14:9a:39:bb:34:b5:6c:06:cf:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2E:DF:D9:3C:7A:64:97:3A:2A:06:A8:B9:AF:FB:78:4D:F7:61:F3
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/AS7f2Tx6ZJc6Kgaoua_7eE33YfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.76.9.0/24
Signature Algorithm: sha256WithRSAEncryption
ea:64:f1:14:4d:b5:cf:9e:73:2a:c4:8f:17:58:1d:4f:44:df:
81:2d:42:8f:4c:0a:f5:0c:2b:6e:47:55:1f:3b:db:4f:f3:8c:
4c:9b:57:8b:46:14:11:84:86:2a:74:8e:f1:7d:6d:53:32:8a:
f9:89:76:26:17:60:86:a2:02:d8:5f:40:e9:7c:8e:af:de:07:
ae:1e:50:52:8b:5e:30:d7:25:32:69:bd:43:94:33:8e:58:db:
67:6a:df:4f:5b:1e:6b:e3:98:7b:6c:9a:2e:24:a2:b0:ce:38:
c0:61:c3:20:16:56:28:1a:4f:d1:8a:53:05:ed:b1:06:ef:b7:
62:ef:c2:42:34:34:5f:c9:26:f5:d4:5b:59:97:d5:3a:18:fa:
28:4b:b7:22:b0:ce:eb:92:fd:db:64:b4:4e:ca:44:42:34:a5:
6d:3c:e0:66:58:76:3e:72:8b:ab:fe:20:66:f8:f5:06:7f:e7:
f9:5e:e8:8b:0e:93:6a:7d:be:b8:3d:08:3a:5e:38:dc:f0:ce:
6c:7b:88:c5:29:a5:4f:89:50:d7:77:93:f1:d5:05:06:3d:01:
a0:e0:cf:bf:0f:49:37:d5:ea:71:f8:32:e2:32:c7:c0:b3:f3:
a5:3d:ad:b8:e8:d6:c0:71:e1:df:93:69:10:c8:80:3a:d6:ec:
ba:7d:68:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcndkr4pbFbVn3AngtkAHMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjMwMzI4MDkwNDM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTJlZGZkOTNjN2E2NDk3M2EyYTA2YThiOWFmZmI3ODRkZjc2MWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tqTa5RVK7OriDffj0oiEMGq2Q+B
e+LHNtvxayNfq6a+i1GLr2++l0+S2WIjo5Ncd3ByFOeSaiz8gGX3qNCgVUxOb48+
kAnLppTYWqzPmJIr3t9yEpRhRqq0oy9F4P4L9y16iwn4EmgXm3493I04Fq6pVzk+
8sCvLCi9KKVt2U3uAbkhaGxNs34VWB4UnNmNsvMyNrXLmJ7nmquK00HWTf3bafni
o+d8uygZbgk4rejau9rj+9HxYfpHQCHGvG2WQ8jMnUVKep6+AVFy3GwCQOFBiutH
HsPn4n6jPG96F4wYffLhLElO7ENbKUqmw5KJtB+NVZQUmjm7NLVsBs/0WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAEu39k8emSXOioGqLmv+3hN92HzMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvQVM3ZjJUeDZaSmM2S2dhb3VhXzdlRTMzWWZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0wJMA0G
CSqGSIb3DQEBCwUAA4IBAQDqZPEUTbXPnnMqxI8XWB1PRN+BLUKPTAr1DCtuR1Uf
O9tP84xMm1eLRhQRhIYqdI7xfW1TMor5iXYmF2CGogLYX0DpfI6v3geuHlBSi14w
1yUyab1DlDOOWNtnat9PWx5r45h7bJouJKKwzjjAYcMgFlYoGk/RilMF7bEG77di
78JCNDRfySb11FtZl9U6GPooS7cisM7rkv3bZLROykRCNKVtPOBmWHY+cour/iBm
+PUGf+f5XuiLDpNqfb64PQg6Xjjc8M5se4jFKaVPiVDXd5Px1QUGPQGg4M+/D0k3
1epx+DLiMsfAs/OlPa246NbAceHfk2kQyIA61uy6fWjY
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:35 2024 by rpki-client on console-ams.rpki-client.org