Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/DWuTHbLzh5_ne-KLSrF3sdnHiyc.roa
File: DWuTHbLzh5_ne-KLSrF3sdnHiyc.roa (raw, json)
Hash identifier: 4h1yAa4t8Lnvy/Ff73HW/OGhccDhu4Rqd974IFmFxrU=
Subject key identifier: 0D:6B:93:1D:B2:F3:87:9F:E7:7B:E2:8B:4A:B1:77:B1:D9:C7:8B:27
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 0188B88DD746B5DB45E54AD4008702FF5707
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/DWuTHbLzh5_ne-KLSrF3sdnHiyc.roa
Signing time: Wed 14 Jun 2023 06:18:03 +0000
ROA not before: Wed 14 Jun 2023 06:18:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34471
IP address blocks: 195.177.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Nov 2023 14:19:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:8d:d7:46:b5:db:45:e5:4a:d4:00:87:02:ff:57:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Jun 14 06:18:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d6b931db2f3879fe77be28b4ab177b1d9c78b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f7:95:63:18:ab:bd:b3:c3:00:55:a8:10:a1:
11:33:65:5f:21:b0:e3:b1:0a:5e:8d:c1:39:31:a2:
61:d2:6f:21:2f:a0:89:6a:ce:6a:e9:f4:e2:11:99:
2b:da:9b:95:af:95:26:22:21:cd:7e:08:33:40:b0:
48:1a:71:db:88:eb:ed:ae:64:6b:83:55:53:72:01:
1b:e6:8d:35:31:ed:c0:f7:f5:3b:05:73:29:0c:12:
ee:dc:d8:c9:ef:b7:48:d1:56:06:b7:15:41:24:64:
6a:e0:96:8a:3b:af:4d:18:20:0e:a0:83:07:c6:68:
38:19:4d:37:cd:7f:65:43:f0:c4:37:f0:a5:54:4e:
65:60:37:48:13:ea:55:f5:8a:f1:af:ff:9f:0b:f2:
19:b4:dc:7c:24:29:98:b6:6c:dc:60:6a:ed:0b:75:
7c:7d:46:c9:11:15:63:8a:09:38:bc:24:bd:3a:a8:
6f:df:e1:79:88:e2:c9:f9:00:3a:5c:be:7f:48:4b:
08:60:5c:d7:64:30:fb:5c:c0:7e:78:7a:d0:c6:d6:
2a:89:25:a4:b1:d6:d4:6e:65:a0:06:7d:cf:2b:04:
f2:29:57:5a:b5:27:d2:1b:f4:d7:83:8e:7f:6a:3f:
64:f4:0b:9a:14:a7:b9:a3:a8:48:c1:66:e3:b2:6b:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6B:93:1D:B2:F3:87:9F:E7:7B:E2:8B:4A:B1:77:B1:D9:C7:8B:27
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/DWuTHbLzh5_ne-KLSrF3sdnHiyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.88.0/22
Signature Algorithm: sha256WithRSAEncryption
81:f4:02:60:d3:c2:64:ed:9a:36:9d:65:76:01:96:04:17:fa:
7d:6d:c9:4a:15:0e:bc:f9:62:21:12:60:74:bd:bb:cc:70:d0:
d6:ce:ae:44:2b:8b:5a:16:72:e2:33:37:cd:65:05:2d:d3:07:
8b:fb:8d:d4:45:d0:ad:55:fb:a5:6d:54:2b:ad:ae:d0:ff:0c:
6f:6d:9e:1d:5c:34:35:67:8b:9d:47:af:81:b1:a9:80:4c:d3:
55:4d:2c:9f:0a:9f:da:4c:6d:4a:e6:12:50:f9:5e:3e:d9:42:
e6:cc:dc:0f:65:48:98:9d:cd:b7:ec:12:ba:a0:80:50:bd:e9:
11:9d:ba:ae:bf:d0:11:ba:b0:af:81:0e:6d:87:a7:50:18:14:
78:43:94:25:42:bf:d4:3d:41:99:c9:5c:07:f8:57:0a:02:09:
9e:39:c0:55:e4:88:3b:22:c9:45:1a:37:8c:72:86:9d:96:00:
83:be:a0:fd:dc:5c:ed:8a:64:c1:eb:c9:83:a3:db:c9:9a:44:
4b:9c:d1:52:95:88:31:66:d7:e0:a9:f9:6d:05:de:a1:a3:16:
02:b0:41:43:11:59:b8:63:b8:f6:26:90:1f:da:5d:79:88:3c:
1d:68:ce:fd:fd:a7:b7:10:2c:cd:f5:b5:0f:e4:90:47:a2:c4:
46:38:de:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYi4jddGtdtF5UrUAIcC/1cHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjMwNjE0MDYxODAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDZiOTMxZGIyZjM4NzlmZTc3YmUyOGI0YWIxNzdiMWQ5Yzc4YjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfeVYxirvbPDAFWoEKERM2VfIbDj
sQpejcE5MaJh0m8hL6CJas5q6fTiEZkr2puVr5UmIiHNfggzQLBIGnHbiOvtrmRr
g1VTcgEb5o01Me3A9/U7BXMpDBLu3NjJ77dI0VYGtxVBJGRq4JaKO69NGCAOoIMH
xmg4GU03zX9lQ/DEN/ClVE5lYDdIE+pV9Yrxr/+fC/IZtNx8JCmYtmzcYGrtC3V8
fUbJERVjigk4vCS9Oqhv3+F5iOLJ+QA6XL5/SEsIYFzXZDD7XMB+eHrQxtYqiSWk
sdbUbmWgBn3PKwTyKVdatSfSG/TXg45/aj9k9AuaFKe5o6hIwWbjsmtz6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA1rkx2y84ef53vii0qxd7HZx4snMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvRFd1VEhiTHpoNV9uZS1LTFNyRjNzZG5IaXljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw7FYMA0G
CSqGSIb3DQEBCwUAA4IBAQCB9AJg08Jk7Zo2nWV2AZYEF/p9bclKFQ68+WIhEmB0
vbvMcNDWzq5EK4taFnLiMzfNZQUt0weL+43URdCtVfulbVQrra7Q/wxvbZ4dXDQ1
Z4udR6+BsamATNNVTSyfCp/aTG1K5hJQ+V4+2ULmzNwPZUiYnc237BK6oIBQvekR
nbquv9ARurCvgQ5th6dQGBR4Q5QlQr/UPUGZyVwH+FcKAgmeOcBV5Ig7IslFGjeM
coadlgCDvqD93FztimTB68mDo9vJmkRLnNFSlYgxZtfgqfltBd6hoxYCsEFDEVm4
Y7j2JpAf2l15iDwdaM79/ae3ECzN9bUP5JBHosRGON4w
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:50 2024 by rpki-client on console-ams.rpki-client.org