Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/VZ3-5oeetjEwxctnFrgAfWExElo.roa
File: VZ3-5oeetjEwxctnFrgAfWExElo.roa (raw, json)
Hash identifier: IRbVjBedyuuy/t8OsXPPIbTEuX1W7XtayZGSOBtYLrw=
Subject key identifier: 55:9D:FE:E6:87:9E:B6:31:30:C5:CB:67:16:B8:00:7D:61:31:12:5A
Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Certificate serial: 018572BA48334E959925F8A868ADA819D292
Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/VZ3-5oeetjEwxctnFrgAfWExElo.roa
Signing time: Mon 02 Jan 2023 13:44:48 +0000
ROA not before: Mon 02 Jan 2023 13:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15948
IP address blocks: 195.251.205.0/24 maxlen: 24
195.251.206.0/23 maxlen: 23
194.177.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:48:33:4e:95:99:25:f8:a8:68:ad:a8:19:d2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3
Validity
Not Before: Jan 2 13:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=559dfee6879eb63130c5cb6716b8007d6131125a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ef:90:f1:eb:42:35:b0:49:24:87:bb:01:40:
24:1d:c5:0e:dc:66:e6:31:98:36:d5:19:a8:77:d8:
d4:62:55:76:73:ae:61:53:d4:7d:e9:27:f9:0e:0f:
56:e0:f2:0a:3b:26:66:84:3a:c5:7d:54:d6:1c:a2:
3b:1b:ba:ba:c0:6f:64:c6:b1:f1:96:2e:43:9e:57:
38:87:33:c5:4a:2a:d0:cb:f0:1b:85:87:30:76:12:
74:26:69:dd:5c:e0:97:86:e8:76:65:35:b8:ac:20:
2f:89:7c:c8:92:00:25:71:9d:a9:b2:4a:77:1e:46:
0f:1c:ba:ca:68:8a:c1:db:73:3b:53:4b:08:48:17:
00:65:b1:f6:e8:e0:7a:95:d7:75:3c:3a:e2:84:da:
7e:07:91:4e:e3:56:c7:45:c5:6c:f4:1b:1a:f1:a7:
b4:87:53:bc:48:30:68:22:5f:dc:8d:0a:35:11:26:
46:9f:91:ac:b7:06:d5:bf:d6:51:5f:35:3f:5c:95:
2a:ab:2b:9a:80:28:07:51:e4:c5:f7:9a:6a:cf:1c:
6c:7d:25:c8:e8:da:37:91:8b:32:28:0b:5a:d1:ce:
f6:9f:b0:d0:0f:3a:14:67:e8:94:61:6f:79:29:65:
6f:24:d8:f7:97:3f:c7:1c:8e:d1:88:a6:48:eb:be:
84:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9D:FE:E6:87:9E:B6:31:30:C5:CB:67:16:B8:00:7D:61:31:12:5A
X509v3 Authority Key Identifier:
keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/VZ3-5oeetjEwxctnFrgAfWExElo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.177.193.0/24
195.251.205.0-195.251.207.255
Signature Algorithm: sha256WithRSAEncryption
49:48:b3:5e:3b:7a:ac:61:aa:16:bb:e4:8c:57:ca:47:a1:5e:
66:9f:df:d2:ce:1a:be:42:d8:20:cb:8a:42:ce:fe:5b:03:0e:
04:7b:05:e7:dc:7b:1e:20:64:76:eb:11:03:c2:b7:8c:83:19:
ab:5c:fa:6b:26:49:4b:10:e5:2e:e9:cd:73:4d:46:3e:55:47:
35:a3:ec:b3:9c:a4:45:6d:31:91:84:63:ba:e0:5e:c6:a9:0e:
ec:75:be:d8:b3:bd:a5:64:c5:36:44:ec:e3:54:4d:70:d9:35:
67:f9:d0:52:9b:76:3c:4e:c6:e6:aa:df:d4:84:d5:cd:57:2a:
2b:29:d7:df:fa:88:88:db:c1:64:6f:57:57:15:e9:af:2e:24:
df:64:d3:29:c3:eb:b2:ea:7e:64:83:93:ed:3e:93:3d:84:b3:
9e:42:f4:ca:0a:d3:b4:7b:eb:f0:db:25:a6:0d:b7:c4:07:da:
34:12:6d:15:1d:be:3c:4d:ca:88:6a:91:33:2b:fd:37:39:b9:
a5:94:63:c6:1b:2c:a8:fa:1c:78:e6:08:38:bf:97:08:ef:eb:
b9:f6:72:c5:5a:e3:8f:71:98:64:eb:81:7a:2f:7a:4f:a6:d8:
d7:f9:ba:1a:20:01:e0:de:b4:83:4b:2d:22:37:65:c9:c2:ac:
35:80:bb:0c
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVyukgzTpWZJfioaK2oGdKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1
MjlkYzMwHhcNMjMwMTAyMTM0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTlkZmVlNjg3OWViNjMxMzBjNWNiNjcxNmI4MDA3ZDYxMzExMjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu+Q8etCNbBJJIe7AUAkHcUO3Gbm
MZg21Rmod9jUYlV2c65hU9R96Sf5Dg9W4PIKOyZmhDrFfVTWHKI7G7q6wG9kxrHx
li5Dnlc4hzPFSirQy/AbhYcwdhJ0JmndXOCXhuh2ZTW4rCAviXzIkgAlcZ2pskp3
HkYPHLrKaIrB23M7U0sISBcAZbH26OB6ldd1PDrihNp+B5FO41bHRcVs9Bsa8ae0
h1O8SDBoIl/cjQo1ESZGn5GstwbVv9ZRXzU/XJUqqyuagCgHUeTF95pqzxxsfSXI
6No3kYsyKAta0c72n7DQDzoUZ+iUYW95KWVvJNj3lz/HHI7RiKZI676EbQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFFWd/uaHnrYxMMXLZxa4AH1hMRJaMB8GA1UdIwQY
MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut
YWFhNDU1M2QyYWJkLzEvVlozLTVvZWV0akV3eGN0bkZyZ0FmV0V4RWxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk
LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAwrHBMAwD
BADD+80DBATD+8AwDQYJKoZIhvcNAQELBQADggEBAElIs147eqxhqha75IxXykeh
Xmaf39LOGr5C2CDLikLO/lsDDgR7Befcex4gZHbrEQPCt4yDGatc+msmSUsQ5S7p
zXNNRj5VRzWj7LOcpEVtMZGEY7rgXsapDux1vtizvaVkxTZE7ONUTXDZNWf50FKb
djxOxuaq39SE1c1XKisp19/6iIjbwWRvV1cV6a8uJN9k0ynD67LqfmSDk+0+kz2E
s55C9MoK07R76/DbJaYNt8QH2jQSbRUdvjxNyohqkTMr/Tc5uaWUY8YbLKj6HHjm
CDi/lwjv67n2csVa449xmGTrgXovek+m2Nf5uhogAeDetINLLSI3ZcnCrDWAuww=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org