Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/RoDJd48v29f4L1Czo5vNfOKm5Nw.roa
File: RoDJd48v29f4L1Czo5vNfOKm5Nw.roa (raw, json)
Hash identifier: Q/wlgo5/H9qfpkZFVW1/eQlqX7mKXewObB2nRMpS8IU=
Subject key identifier: 46:80:C9:77:8F:2F:DB:D7:F8:2F:50:B3:A3:9B:CD:7C:E2:A6:E4:DC
Certificate issuer: /CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Certificate serial: 0185720C75104CA2079E77672E9278D05708
Authority key identifier: 0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/RoDJd48v29f4L1Czo5vNfOKm5Nw.roa
Signing time: Mon 02 Jan 2023 10:34:57 +0000
ROA not before: Mon 02 Jan 2023 10:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15924
IP address blocks: 195.177.230.0/24 maxlen: 24
195.177.231.0/24 maxlen: 24
195.178.104.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:75:10:4c:a2:07:9e:77:67:2e:92:78:d0:57:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9c77a1dcdb8eed62cd3ca80a5144dc4e243f4e
Validity
Not Before: Jan 2 10:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4680c9778f2fdbd7f82f50b3a39bcd7ce2a6e4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:8a:8d:f6:e5:84:eb:c6:1c:3d:f6:39:eb:
4f:1d:87:28:da:47:9e:84:ac:40:2f:6b:b8:b9:e8:
02:f3:28:82:5a:7b:16:ab:c1:3b:94:3c:90:54:c1:
88:7c:af:57:af:85:da:58:61:4c:f4:11:d5:48:e8:
ba:84:e7:ec:ab:5f:e0:b4:41:c4:c0:16:a8:f4:d7:
11:0a:d0:e3:79:65:7d:f9:36:ee:94:87:67:f6:33:
64:ba:1a:ae:69:c5:62:a5:8f:25:b2:09:dd:2f:48:
3c:0a:7c:23:32:67:d0:82:5b:de:3b:c6:60:bb:e4:
6c:35:99:09:20:0b:bd:ba:c0:88:5c:93:33:8f:66:
b2:66:63:8c:ec:cb:dd:c3:e2:f4:ae:c2:88:1f:70:
38:1c:36:36:5f:ac:09:fe:19:ec:cc:1a:77:9d:80:
30:03:31:f6:07:c5:dd:43:56:7f:66:af:af:15:f7:
95:c3:a1:b5:19:87:dc:28:57:1f:04:4f:70:17:d1:
47:d0:20:1b:f1:3f:7c:37:df:24:e3:cc:08:ec:22:
e7:82:76:e5:bb:57:c4:73:ac:89:a4:00:09:55:d6:
e2:c5:72:8c:28:96:42:f7:ef:02:c4:c2:27:a2:eb:
80:66:b2:2f:dc:a8:c8:42:e3:05:91:ad:31:9a:bb:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:80:C9:77:8F:2F:DB:D7:F8:2F:50:B3:A3:9B:CD:7C:E2:A6:E4:DC
X509v3 Authority Key Identifier:
keyid:0F:9C:77:A1:DC:DB:8E:ED:62:CD:3C:A8:0A:51:44:DC:4E:24:3F:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5x3odzbju1izTyoClFE3E4kP04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/RoDJd48v29f4L1Czo5vNfOKm5Nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9d0e14-113b-4cba-8308-acc56977b6f4/1/D5x3odzbju1izTyoClFE3E4kP04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.230.0/23
195.178.104.0/23
Signature Algorithm: sha256WithRSAEncryption
62:0a:0e:e4:c5:80:13:7b:33:c1:c0:1a:09:ca:c9:07:cd:f6:
15:07:fd:f3:c9:f5:79:11:ee:20:06:1b:fb:95:33:fb:34:b4:
07:fe:25:d9:8b:82:9c:2a:52:65:86:0d:2e:42:38:7f:e8:c3:
b1:9e:ae:59:b0:4c:61:9d:c8:c4:d0:08:bf:70:ce:bf:c6:80:
59:8a:99:d4:ba:79:13:69:c0:18:1f:9a:c1:b9:f3:5b:2e:9e:
c0:9f:94:e8:ce:84:eb:5f:a7:be:e4:67:f4:ac:52:0d:e9:9b:
d9:02:5c:71:7a:37:ff:cf:33:6d:5c:c1:86:f5:df:25:cb:7a:
46:0b:e4:b8:f3:bc:4f:4a:fb:01:5c:53:08:b0:eb:ec:64:0f:
10:e7:db:11:0c:e2:6e:b5:3b:28:98:10:13:f6:1b:4a:07:4e:
53:f4:2f:f9:f4:14:81:6f:88:b2:28:7a:4c:dd:8d:c6:ec:85:
b4:b6:32:52:2e:e6:87:66:a6:8b:60:9b:b5:97:aa:fc:5b:4a:
b5:65:3a:c9:8a:75:2f:da:29:da:3e:bf:f3:99:d6:88:9b:ab:
a5:99:c8:cf:83:1e:74:60:64:74:43:1c:e2:4b:f1:5d:12:f0:
e9:64:15:77:d0:25:dc:77:59:44:7a:7c:c8:0c:f2:50:7d:50:
1e:55:f3:e2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVyDHUQTKIHnndnLpJ40FcIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOWM3N2ExZGNkYjhlZWQ2MmNkM2NhODBhNTE0NGRjNGUy
NDNmNGUwHhcNMjMwMTAyMTAzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjgwYzk3NzhmMmZkYmQ3ZjgyZjUwYjNhMzliY2Q3Y2UyYTZlNGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuKKjfblhOvGHD32OetPHYco2kee
hKxAL2u4uegC8yiCWnsWq8E7lDyQVMGIfK9Xr4XaWGFM9BHVSOi6hOfsq1/gtEHE
wBao9NcRCtDjeWV9+TbulIdn9jNkuhquacVipY8lsgndL0g8CnwjMmfQglveO8Zg
u+RsNZkJIAu9usCIXJMzj2ayZmOM7Mvdw+L0rsKIH3A4HDY2X6wJ/hnszBp3nYAw
AzH2B8XdQ1Z/Zq+vFfeVw6G1GYfcKFcfBE9wF9FH0CAb8T98N98k48wI7CLngnbl
u1fEc6yJpAAJVdbixXKMKJZC9+8CxMInouuAZrIv3KjIQuMFka0xmrsdgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEaAyXePL9vX+C9Qs6ObzXzipuTcMB8GA1UdIwQY
MBaAFA+cd6Hc247tYs08qApRRNxOJD9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgt
YWNjNTY5NzdiNmY0LzEvUm9ESmQ0OHYyOWY0TDFDem81dk5mT0ttNU53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85ZDBlMTQtMTEzYi00Y2JhLTgzMDgtYWNjNTY5NzdiNmY0
LzEvRDV4M29kemJqdTFpelR5b0NsRkUzRTRrUDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw7HmAwQB
w7JoMA0GCSqGSIb3DQEBCwUAA4IBAQBiCg7kxYATezPBwBoJyskHzfYVB/3zyfV5
Ee4gBhv7lTP7NLQH/iXZi4KcKlJlhg0uQjh/6MOxnq5ZsExhncjE0Ai/cM6/xoBZ
ipnUunkTacAYH5rBufNbLp7An5TozoTrX6e+5Gf0rFIN6ZvZAlxxejf/zzNtXMGG
9d8ly3pGC+S487xPSvsBXFMIsOvsZA8Q59sRDOJutTsomBAT9htKB05T9C/59BSB
b4iyKHpM3Y3G7IW0tjJSLuaHZqaLYJu1l6r8W0q1ZTrJinUv2inaPr/zmdaIm6ul
mcjPgx50YGR0QxziS/FdEvDpZBV30CXcd1lEenzIDPJQfVAeVfPi
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:59 2023 by rpki-client on console-fra.rpki-client.org