Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/j4ZpnluTSwl4idjo_xxGxQBdFbw.roa
File: j4ZpnluTSwl4idjo_xxGxQBdFbw.roa (raw, json)
Hash identifier: mDq3Cxf2S1u3OjSvIWw6hluf62pj/x5yq0xwE/Zg17Q=
Subject key identifier: 8F:86:69:9E:5B:93:4B:09:78:89:D8:E8:FF:1C:46:C5:00:5D:15:BC
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C3F96A73FBA80AE071BFC8ED43B18
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/j4ZpnluTSwl4idjo_xxGxQBdFbw.roa
Signing time: Mon 02 Jan 2023 05:55:06 +0000
ROA not before: Mon 02 Jan 2023 05:55:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210071
IP address blocks: 194.36.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:3f:96:a7:3f:ba:80:ae:07:1b:fc:8e:d4:3b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f86699e5b934b097889d8e8ff1c46c5005d15bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:4a:ff:83:07:b5:ac:17:54:59:70:1f:47:
5e:82:4b:10:05:f0:f2:f9:a0:5f:4b:8d:3d:e3:f0:
5d:b2:5e:0f:b7:64:cd:87:2a:f7:f2:8e:8e:8b:2f:
22:e7:8d:f6:07:f8:0c:c2:29:51:79:84:d5:6f:c8:
e4:69:c4:f1:7d:89:ee:41:01:2b:c9:42:2b:da:62:
20:75:34:03:4d:8e:7c:29:55:ef:da:5c:dc:7b:89:
93:c0:16:ca:30:d8:2e:97:07:06:8e:04:86:e2:6d:
00:e5:dc:fe:a3:5f:56:c0:94:c5:de:65:c0:07:6a:
ad:d7:6a:d9:1f:36:1e:d0:50:ec:e9:56:71:cf:71:
62:81:6a:f1:a5:64:d1:c9:17:bd:4b:f2:f8:a0:dd:
b5:f4:49:c3:0b:46:13:04:f4:c4:31:4c:4e:ee:e9:
5e:e4:0d:5c:31:47:ad:05:42:a0:ec:b7:95:29:b1:
23:b4:65:25:02:22:7d:b9:a8:1c:b7:3c:46:8e:71:
9d:36:14:36:58:8e:52:4b:18:dc:97:76:c8:92:3c:
7f:e2:3b:19:a8:53:37:e9:f1:4f:0e:35:26:29:77:
27:a5:0f:89:f9:63:18:16:7b:b9:38:4a:74:c2:24:
88:f1:8f:53:fc:3b:18:9e:80:ca:1b:18:c1:cf:da:
ff:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:86:69:9E:5B:93:4B:09:78:89:D8:E8:FF:1C:46:C5:00:5D:15:BC
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/j4ZpnluTSwl4idjo_xxGxQBdFbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
17:51:08:2c:26:c1:e3:64:13:c2:e3:bb:4a:0e:0a:84:fa:94:
20:f1:e8:ab:8d:7f:fe:be:de:e4:9c:bb:43:ef:b6:15:65:7f:
22:e6:37:dd:b9:1f:bd:d1:e1:56:60:90:58:ff:f4:58:34:9e:
d5:1a:d5:53:5f:9b:79:65:d4:4d:f7:6d:98:b0:28:d9:6b:b7:
b4:c6:0a:85:03:91:c5:b1:d5:ba:ce:c9:fb:6b:ab:fb:d1:2e:
c4:4b:05:06:99:9c:18:3c:44:29:32:2e:96:7d:89:b7:ce:86:
35:06:01:31:3c:4e:85:44:f7:e7:1a:6a:d7:44:df:a3:1c:89:
fc:b5:71:2e:3a:28:15:d7:37:d6:dd:8c:15:3a:50:74:22:2a:
19:0d:85:b9:f2:ac:d5:02:5c:7d:db:05:c0:d6:6b:9f:a1:03:
6e:92:60:5f:18:9e:ad:b8:53:94:c2:1b:9d:10:75:22:55:f1:
bf:b8:e3:47:d2:16:d8:90:8a:69:ac:f2:be:dc:47:02:e0:04:
91:9b:cb:2e:f8:a7:7c:8b:ca:7c:fa:fd:a5:9a:93:e0:59:73:
34:c4:c9:63:76:29:08:e9:66:37:5a:02:41:de:67:1d:93:98:
b3:f8:20:78:bb:ed:2f:42:16:0d:48:52:19:fb:de:0d:e1:4d:
a1:20:fb:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxDD+Wpz+6gK4HG/yO1DsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMwMTAyMDU1NTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Zjg2Njk5ZTViOTM0YjA5Nzg4OWQ4ZThmZjFjNDZjNTAwNWQxNWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluxK/4MHtawXVFlwH0degksQBfDy
+aBfS4094/Bdsl4Pt2TNhyr38o6Oiy8i5432B/gMwilReYTVb8jkacTxfYnuQQEr
yUIr2mIgdTQDTY58KVXv2lzce4mTwBbKMNgulwcGjgSG4m0A5dz+o19WwJTF3mXA
B2qt12rZHzYe0FDs6VZxz3FigWrxpWTRyRe9S/L4oN219EnDC0YTBPTEMUxO7ule
5A1cMUetBUKg7LeVKbEjtGUlAiJ9uagctzxGjnGdNhQ2WI5SSxjcl3bIkjx/4jsZ
qFM36fFPDjUmKXcnpQ+J+WMYFnu5OEp0wiSI8Y9T/DsYnoDKGxjBz9r/YQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI+GaZ5bk0sJeInY6P8cRsUAXRW8MB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvajRacG5sdVRTd2w0aWRqb194eEd4UUJkRmJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiSxMA0G
CSqGSIb3DQEBCwUAA4IBAQAXUQgsJsHjZBPC47tKDgqE+pQg8eirjX/+vt7knLtD
77YVZX8i5jfduR+90eFWYJBY//RYNJ7VGtVTX5t5ZdRN922YsCjZa7e0xgqFA5HF
sdW6zsn7a6v70S7ESwUGmZwYPEQpMi6WfYm3zoY1BgExPE6FRPfnGmrXRN+jHIn8
tXEuOigV1zfW3YwVOlB0IioZDYW58qzVAlx92wXA1mufoQNukmBfGJ6tuFOUwhud
EHUiVfG/uONH0hbYkIpprPK+3EcC4ASRm8su+Kd8i8p8+v2lmpPgWXM0xMljdikI
6WY3WgJB3mcdk5iz+CB4u+0vQhYNSFIZ+94N4U2hIPty
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:29 2023 by rpki-client on console-ams.rpki-client.org