Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/Pr723iy5kVFRxhx_nHGn4nT2XD8.roa
File: Pr723iy5kVFRxhx_nHGn4nT2XD8.roa (raw, json)
Hash identifier: +0S63fROjosGHbn4s/doZ9a3Lhrqypkl9D/9bnGn9ng=
Subject key identifier: 3E:BE:F6:DE:2C:B9:91:51:51:C6:1C:7F:9C:71:A7:E2:74:F6:5C:3F
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 0185A4F34353B334D51DAE04F8CEEE6B9036
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/Pr723iy5kVFRxhx_nHGn4nT2XD8.roa
Signing time: Thu 12 Jan 2023 07:48:03 +0000
ROA not before: Thu 12 Jan 2023 07:48:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 195.230.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:f3:43:53:b3:34:d5:1d:ae:04:f8:ce:ee:6b:90:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Jan 12 07:48:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ebef6de2cb9915151c61c7f9c71a7e274f65c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:05:fb:33:5e:b9:5e:48:dc:d2:a4:c4:fb:
90:e0:10:51:73:92:59:ef:e0:72:68:75:5c:e5:5d:
f3:eb:e2:15:16:d9:87:cb:bb:87:ad:37:b7:84:ba:
b0:6a:f0:2c:58:9f:a0:d8:25:59:d4:e0:45:df:b5:
93:21:aa:ff:1b:46:0c:19:0e:e1:73:bf:4c:dd:3a:
a1:f7:09:e5:23:a5:86:38:5b:fe:11:ff:f6:3a:42:
ef:1b:2c:a4:c6:8b:f0:93:16:4e:41:35:90:56:0a:
ea:fc:71:43:2c:e5:d7:f4:5d:05:37:7c:9d:ca:20:
d5:92:e2:ad:4f:a5:39:3f:ac:32:3f:f9:6c:3c:44:
29:7f:42:49:0c:12:b9:86:8e:28:4e:dc:f4:f3:51:
9e:f0:43:0e:de:c1:5a:1a:89:db:a5:0b:86:8a:42:
89:0e:7e:b6:44:d1:42:03:05:63:e1:50:26:d8:eb:
b5:c0:ab:5b:91:ba:c2:c4:4e:1a:eb:fb:61:ae:c8:
c6:57:68:03:a7:a7:ce:6c:e5:9e:e5:20:d4:90:f8:
73:fd:29:13:77:24:04:06:68:90:08:15:4e:a3:cc:
6a:8f:39:73:cf:0f:06:28:97:0b:53:41:3f:2a:f9:
ad:0d:c9:53:6f:25:b1:83:06:1a:d9:f9:a8:8d:c8:
23:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BE:F6:DE:2C:B9:91:51:51:C6:1C:7F:9C:71:A7:E2:74:F6:5C:3F
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/Pr723iy5kVFRxhx_nHGn4nT2XD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.117.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a9:e2:41:45:dd:97:f9:8a:2f:b5:e5:25:03:bb:68:1d:ad:
25:e0:57:55:9b:19:9f:c2:be:27:e3:67:03:71:8a:a1:eb:cc:
27:ba:61:5a:58:a2:66:bf:5f:6b:8b:76:c2:17:23:af:37:b8:
69:3b:20:f6:a1:15:b1:02:96:24:42:2c:c0:11:c7:a4:26:d8:
d5:ea:3b:7a:58:7d:7f:a2:fe:27:9f:ce:87:87:43:f0:d6:31:
c5:6f:94:61:dd:51:fa:d7:11:5d:bd:e1:2e:0a:d7:5d:a9:1b:
9c:97:25:79:ad:3f:45:94:11:06:09:27:ce:64:fb:6d:25:08:
d6:e5:63:1c:d7:a4:9e:d7:5f:ee:cd:99:ca:ef:06:5d:1a:f7:
02:00:be:78:77:36:5d:2f:9c:b9:aa:76:b3:5d:fd:fb:76:ae:
8d:08:16:c7:c8:d7:a3:8e:e8:1a:96:c9:50:66:68:bf:47:56:
85:63:fd:e2:e0:31:fb:95:ab:35:31:e9:3d:ef:32:89:41:77:
cb:dd:b0:65:19:c8:96:0a:bd:24:19:9f:f6:12:66:86:84:43:
fb:eb:95:85:72:d2:30:f2:f9:74:fd:a4:4f:56:da:44:a0:d5:
4a:71:d5:7b:1f:8a:da:e3:dc:e7:af:a4:c4:62:8b:58:2d:5f:
0b:6d:65:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWk80NTszTVHa4E+M7ua5A2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlN2MxM2Y1ZmYxNjlhZmVkODI1Yjc1ZDhmYzA3N2FmY2E1
MGQ2YTEwHhcNMjMwMTEyMDc0ODAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWJlZjZkZTJjYjk5MTUxNTFjNjFjN2Y5YzcxYTdlMjc0ZjY1YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCgF+zNeuV5I3NKkxPuQ4BBRc5JZ
7+ByaHVc5V3z6+IVFtmHy7uHrTe3hLqwavAsWJ+g2CVZ1OBF37WTIar/G0YMGQ7h
c79M3Tqh9wnlI6WGOFv+Ef/2OkLvGyykxovwkxZOQTWQVgrq/HFDLOXX9F0FN3yd
yiDVkuKtT6U5P6wyP/lsPEQpf0JJDBK5ho4oTtz081Ge8EMO3sFaGonbpQuGikKJ
Dn62RNFCAwVj4VAm2Ou1wKtbkbrCxE4a6/thrsjGV2gDp6fObOWe5SDUkPhz/SkT
dyQEBmiQCBVOo8xqjzlzzw8GKJcLU0E/KvmtDclTbyWxgwYa2fmojcgjcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD6+9t4suZFRUcYcf5xxp+J09lw/MB8GA1UdIwQY
MBaAFF58E/X/Fpr+2CW3XY/Ad6/KUNahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85NGY2NDItNTVmNy00YzFjLTgxZDQt
OWU1OWMxMTFhYTM4LzEvUHI3MjNpeTVrVkZSeGh4X25IR240blQyWEQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS85NGY2NDItNTVmNy00YzFjLTgxZDQtOWU1OWMxMTFhYTM4
LzEvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+Z1MA0G
CSqGSIb3DQEBCwUAA4IBAQCQqeJBRd2X+YovteUlA7toHa0l4FdVmxmfwr4n42cD
cYqh68wnumFaWKJmv19ri3bCFyOvN7hpOyD2oRWxApYkQizAEcekJtjV6jt6WH1/
ov4nn86Hh0Pw1jHFb5Rh3VH61xFdveEuCtddqRuclyV5rT9FlBEGCSfOZPttJQjW
5WMc16Se11/uzZnK7wZdGvcCAL54dzZdL5y5qnazXf37dq6NCBbHyNejjugalslQ
Zmi/R1aFY/3i4DH7las1Mek97zKJQXfL3bBlGciWCr0kGZ/2EmaGhEP765WFctIw
8vl0/aRPVtpEoNVKcdV7H4ra49znr6TEYotYLV8LbWXw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:47 2024 by rpki-client on console-fra.rpki-client.org