Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-EJPnAIWxyKqIOT7BFaqVDS-za4.roa
File: 1-EJPnAIWxyKqIOT7BFaqVDS-za4.roa (raw, json)
Hash identifier: o77gXTteHqEadWhTgPuHJTaQFvY0Tduw7YYhVM1bvQE=
Subject key identifier: F8:42:4F:9C:02:16:C7:22:AA:20:E4:FB:04:56:AA:54:34:BE:CD:AE
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0188EDDAC0A5D96C249DAF3A7DF24A2B6B7B
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-EJPnAIWxyKqIOT7BFaqVDS-za4.roa
Signing time: Sat 24 Jun 2023 14:41:56 +0000
ROA not before: Sat 24 Jun 2023 14:41:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198064
IP address blocks: 83.147.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ed:da:c0:a5:d9:6c:24:9d:af:3a:7d:f2:4a:2b:6b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jun 24 14:41:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8424f9c0216c722aa20e4fb0456aa5434becdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:16:23:0d:b6:ee:b4:6c:17:34:b5:17:51:94:
0d:b7:ba:b5:58:a7:81:d5:27:ab:b9:a5:f4:22:eb:
b0:c8:8f:13:1a:0e:ab:c4:29:11:2b:68:49:3d:6f:
54:0a:10:28:9b:4f:fd:a6:17:80:c6:11:79:9d:94:
7f:0e:fb:46:52:c2:7a:83:4c:fb:bf:ce:74:5f:04:
88:08:ed:87:a2:58:83:42:94:d3:dc:c4:75:fd:d5:
62:22:c8:fd:4b:9d:51:54:af:aa:f8:39:3d:6d:62:
09:4e:fb:16:fc:54:00:50:9b:9e:18:06:8a:2a:bf:
77:05:dd:a9:6c:61:c1:5e:f9:cb:de:33:b9:65:db:
2b:50:c3:14:65:df:93:b3:88:1f:d8:98:dd:5a:b6:
de:94:28:50:2d:32:7d:25:a1:27:28:24:43:d2:23:
0f:b1:50:29:75:14:29:b1:a4:da:8e:20:45:41:94:
24:e5:92:e8:fa:da:e5:48:34:f1:4b:24:c7:2b:94:
8c:d0:02:66:dd:b4:ce:ed:10:be:58:52:b5:0a:01:
d6:f1:2f:7b:1b:87:e8:d6:35:3d:0b:66:d3:fc:26:
73:10:47:9f:38:e4:32:5b:8d:a0:95:87:04:7f:cb:
d9:02:e5:b6:5a:69:66:86:83:5d:ef:35:90:30:e7:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:42:4F:9C:02:16:C7:22:AA:20:E4:FB:04:56:AA:54:34:BE:CD:AE
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/1-EJPnAIWxyKqIOT7BFaqVDS-za4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.223.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7d:48:67:ee:2c:c7:b7:a2:79:f1:34:db:5d:7f:62:23:4e:
f7:53:81:91:4d:01:92:8a:73:05:6d:92:9c:64:ea:70:d4:d6:
6b:21:3f:cd:2a:f8:45:15:84:d5:af:bd:08:73:d8:b0:84:98:
5d:ff:41:5b:bf:d7:c2:e0:8b:82:4c:5a:27:e2:9e:bc:8c:86:
5a:3f:3e:9a:27:75:2b:5c:74:7c:60:e9:2e:b4:4b:61:94:14:
0b:7a:7e:73:e5:8f:73:50:7e:fc:1c:d9:9f:67:de:98:e4:b0:
d5:d5:d2:e0:68:39:d1:43:c5:47:fe:39:13:89:1f:13:6c:a4:
38:93:58:af:2e:cc:22:0d:6c:2c:76:75:85:d8:de:2a:68:6e:
80:b2:8e:1d:8a:50:c2:bf:31:3f:2c:3a:63:e7:90:0f:d9:50:
6f:49:c3:8c:85:cd:04:8a:5f:d4:b8:40:70:11:90:5c:db:3f:
84:3b:d1:77:38:9a:88:ce:75:0e:05:e5:45:c1:a5:9c:8d:f0:
17:4f:aa:bd:03:43:dc:6c:fd:70:7e:4b:d0:7e:f1:d4:4e:43:
7f:8b:28:f6:3a:ff:24:19:91:61:fd:36:fc:51:aa:c6:2e:d4:
38:50:2b:4f:95:e7:31:37:5f:a6:c3:c6:a4:fc:5b:16:38:36:
d7:d5:1f:1c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYjt2sCl2Wwkna86ffJKK2t7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjMwNjI0MTQ0MTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODQyNGY5YzAyMTZjNzIyYWEyMGU0ZmIwNDU2YWE1NDM0YmVjZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BYjDbbutGwXNLUXUZQNt7q1WKeB
1SeruaX0IuuwyI8TGg6rxCkRK2hJPW9UChAom0/9pheAxhF5nZR/DvtGUsJ6g0z7
v850XwSICO2HoliDQpTT3MR1/dViIsj9S51RVK+q+Dk9bWIJTvsW/FQAUJueGAaK
Kr93Bd2pbGHBXvnL3jO5ZdsrUMMUZd+Ts4gf2JjdWrbelChQLTJ9JaEnKCRD0iMP
sVApdRQpsaTajiBFQZQk5ZLo+trlSDTxSyTHK5SM0AJm3bTO7RC+WFK1CgHW8S97
G4fo1jU9C2bT/CZzEEefOOQyW42glYcEf8vZAuW2WmlmhoNd7zWQMOec/wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPhCT5wCFsciqiDk+wRWqlQ0vs2uMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvMS1FSlBuQUlXeHlLcUlPVDdCRmFxVkRTLXphNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjgvNDEwOTMwLTlkNjUtNGJlOC05ZWJhLWY5OGRhNTRhZjQz
NC8xL3duZU40cW0tbUFJU0E0TG5VTkZaNlZoeXdxNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFOT3zAN
BgkqhkiG9w0BAQsFAAOCAQEAiH1IZ+4sx7eiefE0211/YiNO91OBkU0BkopzBW2S
nGTqcNTWayE/zSr4RRWE1a+9CHPYsISYXf9BW7/XwuCLgkxaJ+KevIyGWj8+mid1
K1x0fGDpLrRLYZQUC3p+c+WPc1B+/BzZn2femOSw1dXS4Gg50UPFR/45E4kfE2yk
OJNYry7MIg1sLHZ1hdjeKmhugLKOHYpQwr8xPyw6Y+eQD9lQb0nDjIXNBIpf1LhA
cBGQXNs/hDvRdziaiM51DgXlRcGlnI3wF0+qvQND3Gz9cH5L0H7x1E5Df4so9jr/
JBmRYf02/FGqxi7UOFArT5XnMTdfpsPGpPxbFjg219UfHA==
-----END CERTIFICATE-----
Generated at Mon Jul 24 20:10:48 2023 by rpki-client on console-fra.rpki-client.org