Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/RaapAxm9SVDmPwEKuMIQ_MCUbuU.roa
File: RaapAxm9SVDmPwEKuMIQ_MCUbuU.roa (raw, json)
Hash identifier: E3xFPNpqqUyHskAfiVxAyUmi6Z3Qb2POzfIjImMGhMQ=
Subject key identifier: 45:A6:A9:03:19:BD:49:50:E6:3F:01:0A:B8:C2:10:FC:C0:94:6E:E5
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01857139C815814A36EE9926D9538250D320
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/RaapAxm9SVDmPwEKuMIQ_MCUbuU.roa
Signing time: Mon 02 Jan 2023 06:44:50 +0000
ROA not before: Mon 02 Jan 2023 06:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 195.34.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:c8:15:81:4a:36:ee:99:26:d9:53:82:50:d3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 2 06:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45a6a90319bd4950e63f010ab8c210fcc0946ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:aa:7a:8d:78:54:35:12:ff:66:79:0c:90:c4:
63:e3:45:b2:de:ee:7a:18:0c:0a:7f:af:3b:b5:06:
a2:1e:89:e1:05:b5:25:7c:c3:4f:0f:08:1c:6f:ab:
aa:f0:69:c5:fc:41:8e:6e:5a:91:62:6d:b2:c9:2f:
b9:1b:7e:f5:57:94:39:46:3f:15:e8:f6:9e:7b:bf:
f8:17:e5:f8:29:88:5b:53:71:b4:15:d2:6a:00:5c:
f9:be:8e:2f:8c:dc:46:eb:83:98:67:4d:95:a3:54:
72:88:93:02:e6:22:fb:8a:5c:bc:f2:11:c5:02:c4:
e0:65:fb:ac:aa:83:c6:d4:fd:f3:32:c2:b8:3e:38:
a0:e2:87:13:70:a9:5f:4b:f7:bc:81:27:d9:f8:9e:
01:b4:3a:62:75:4f:9c:8e:2e:d8:30:fd:d5:0b:08:
99:08:de:79:e1:6f:d1:f8:09:37:2d:72:a3:98:ca:
80:75:c8:46:f0:ca:5a:6a:d4:20:d7:42:f1:f4:68:
c1:5d:ae:b0:e3:62:5c:74:b6:37:f0:12:01:4e:67:
86:b4:94:37:d6:32:4d:91:b0:07:89:23:97:9f:40:
79:ab:a7:d9:92:b2:45:3a:2a:37:3e:1b:6e:bc:0d:
7d:d2:9d:02:41:05:d8:af:e1:9c:6b:d1:64:a7:54:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A6:A9:03:19:BD:49:50:E6:3F:01:0A:B8:C2:10:FC:C0:94:6E:E5
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/RaapAxm9SVDmPwEKuMIQ_MCUbuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.78.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5c:78:9d:4e:cc:52:0c:f5:f0:4b:37:fa:49:ca:92:16:90:
52:3e:ce:fb:cd:2d:3f:ba:67:2f:c6:99:e2:72:df:46:3c:f2:
e0:5c:3e:9d:8c:bb:99:4d:dc:b5:ed:d4:56:f7:04:83:7d:86:
a8:b3:ac:42:46:41:10:24:86:73:67:4c:da:77:6f:19:6f:78:
07:2d:a9:a9:6d:a0:65:eb:06:c5:75:c4:c2:82:a3:5e:94:dc:
7f:9e:bc:a2:e7:74:a4:4d:50:9f:68:9f:dc:9a:67:89:40:7e:
8e:dd:c2:82:e9:d7:ae:b8:40:36:f9:d3:90:3f:46:e1:34:9c:
9e:e4:93:28:86:d8:4e:6d:c9:47:ea:10:b0:3b:96:26:36:f8:
95:cc:7f:4c:91:44:87:0b:b4:1a:29:67:33:c8:a5:68:6b:2d:
d1:85:b4:34:8f:e2:c1:25:29:4f:c2:22:4f:3b:1f:13:fe:72:
95:6a:eb:6d:26:a3:ea:18:a6:5a:8b:e7:7d:fc:bd:bc:ce:72:
93:5c:61:84:a7:e9:5a:1d:19:b0:cc:9e:88:c4:bd:28:71:bc:
ac:2b:b9:11:b0:85:18:0a:8a:dc:41:d7:a4:53:c2:a9:8c:34:
7a:ab:aa:2f:db:85:b7:7b:93:83:c0:3e:f6:94:cc:6e:57:ae:
8a:0a:3d:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxOcgVgUo27pkm2VOCUNMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl
ZWFmMzgwHhcNMjMwMTAyMDY0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWE2YTkwMzE5YmQ0OTUwZTYzZjAxMGFiOGMyMTBmY2MwOTQ2ZWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgap6jXhUNRL/ZnkMkMRj40Wy3u56
GAwKf687tQaiHonhBbUlfMNPDwgcb6uq8GnF/EGOblqRYm2yyS+5G371V5Q5Rj8V
6Paee7/4F+X4KYhbU3G0FdJqAFz5vo4vjNxG64OYZ02Vo1RyiJMC5iL7ily88hHF
AsTgZfusqoPG1P3zMsK4Pjig4ocTcKlfS/e8gSfZ+J4BtDpidU+cji7YMP3VCwiZ
CN554W/R+Ak3LXKjmMqAdchG8MpaatQg10Lx9GjBXa6w42JcdLY38BIBTmeGtJQ3
1jJNkbAHiSOXn0B5q6fZkrJFOio3PhtuvA190p0CQQXYr+Gca9Fkp1TadQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEWmqQMZvUlQ5j8BCrjCEPzAlG7lMB8GA1UdIwQY
MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct
NjJiYjZkNjNlNTlkLzEvUmFhcEF4bTlTVkRtUHdFS3VNSVFfTUNVYnVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk
LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyJOMA0G
CSqGSIb3DQEBCwUAA4IBAQA1XHidTsxSDPXwSzf6ScqSFpBSPs77zS0/umcvxpni
ct9GPPLgXD6djLuZTdy17dRW9wSDfYaos6xCRkEQJIZzZ0zad28Zb3gHLampbaBl
6wbFdcTCgqNelNx/nryi53SkTVCfaJ/cmmeJQH6O3cKC6deuuEA2+dOQP0bhNJye
5JMohthObclH6hCwO5YmNviVzH9MkUSHC7QaKWczyKVoay3RhbQ0j+LBJSlPwiJP
Ox8T/nKVauttJqPqGKZai+d9/L28znKTXGGEp+laHRmwzJ6IxL0ocbysK7kRsIUY
CorcQdekU8KpjDR6q6ov24W3e5ODwD72lMxuV66KCj1V
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:53 2023 by rpki-client on console-fra.rpki-client.org