Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/tpeFr0-xXaMy4fKbRpwYSntvSCc.roa
File: tpeFr0-xXaMy4fKbRpwYSntvSCc.roa (raw, json)
Hash identifier: SQjsHAPQ57isY/PGNibPm7xqymCZXDgIVnxshvakXlo=
Subject key identifier: B6:97:85:AF:4F:B1:5D:A3:32:E1:F2:9B:46:9C:18:4A:7B:6F:48:27
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 01856F949CBAC6B74D06ADE59FE779EBA7C3
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/tpeFr0-xXaMy4fKbRpwYSntvSCc.roa
Signing time: Sun 01 Jan 2023 23:04:48 +0000
ROA not before: Sun 01 Jan 2023 23:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51588
IP address blocks: 194.56.94.0/23 maxlen: 23
194.56.94.0/24 maxlen: 24
194.56.92.0/24 maxlen: 24
194.56.92.0/23 maxlen: 23
194.56.92.0/22 maxlen: 22
194.56.95.0/24 maxlen: 24
2a06:3100::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:9c:ba:c6:b7:4d:06:ad:e5:9f:e7:79:eb:a7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Jan 1 23:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b69785af4fb15da332e1f29b469c184a7b6f4827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:c9:f7:bf:cd:bf:b1:33:2d:82:ce:fe:66:
a3:32:e3:b4:fc:cc:cd:b5:f4:92:83:98:dd:84:ca:
38:b9:bb:dc:36:11:67:53:45:65:29:76:05:53:03:
0c:e5:40:99:ea:35:7c:17:f4:1b:d4:e9:a5:1c:31:
00:d5:a7:34:86:ae:f1:9a:5e:0b:0c:fe:10:4c:4d:
eb:8d:b7:fc:ea:32:26:c2:43:a2:89:31:c7:ed:c6:
59:9b:50:6b:6a:1d:5c:e6:c1:db:3f:72:2e:1a:ab:
3c:75:e3:96:ab:87:40:38:99:ca:b6:d5:e4:37:ab:
65:34:70:aa:0c:f9:49:fd:7d:ce:ea:6c:80:de:31:
8e:f1:34:46:0d:09:be:ec:8d:28:d1:8f:63:8f:44:
90:52:24:70:68:14:e8:04:c8:e8:74:71:9c:b3:d3:
57:bc:1f:9a:32:b8:38:47:ed:d0:d1:70:d9:f9:37:
62:0b:16:b3:56:aa:7e:bd:f9:e6:d7:f2:83:56:40:
47:b6:66:5f:49:e9:8c:e9:5b:69:0c:dc:65:79:d6:
69:a2:4c:98:53:40:19:fd:d4:92:96:3c:99:95:da:
53:ba:f7:03:5d:e1:cb:a5:4c:d1:1a:6b:f0:fb:ea:
a3:e3:02:f1:84:f8:af:44:88:6e:b5:89:63:a8:00:
d8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:97:85:AF:4F:B1:5D:A3:32:E1:F2:9B:46:9C:18:4A:7B:6F:48:27
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/tpeFr0-xXaMy4fKbRpwYSntvSCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.92.0/22
IPv6:
2a06:3100::/29
Signature Algorithm: sha256WithRSAEncryption
2c:66:4c:21:82:5e:a0:a7:fd:5f:2e:42:6f:51:21:c4:88:b2:
a0:6a:e0:a8:0c:bd:cf:50:ba:7b:9a:9e:32:29:63:c7:f8:73:
c9:38:d7:4e:cf:ff:79:ab:34:14:84:43:d1:af:b6:c3:57:c2:
41:00:17:76:67:30:04:bc:d5:cc:38:7d:1f:44:42:68:50:f7:
c3:21:ec:05:0c:fb:06:bc:d4:39:e3:ef:7d:8e:9d:e0:45:f8:
ad:ef:6a:11:8b:80:be:56:31:7b:91:01:64:1e:6e:55:5f:54:
be:c2:18:ec:c3:49:e4:ec:af:ab:66:10:62:78:06:6c:16:3f:
7f:e6:53:5e:21:20:17:20:9f:c0:f6:a9:56:18:22:b8:e5:fb:
b9:fd:eb:de:9d:c8:65:db:dd:56:d7:08:cf:c5:ad:70:53:04:
cb:3a:0a:28:62:2a:c3:ab:df:ef:12:ad:af:20:ff:90:07:e1:
22:21:6e:dd:56:2d:9e:ad:e0:6d:a8:d1:ff:cd:54:91:8b:65:
a4:96:bc:d8:3d:4d:c1:3f:02:71:bc:25:92:3d:87:c4:3e:4a:
db:25:e8:a0:0f:d0:3b:87:c0:89:9d:7f:3c:11:89:21:74:be:
80:ff:ed:e8:a4:8a:bf:a0:46:3c:38:c7:a0:d7:b2:d1:5c:45:
d4:69:62:dc
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvlJy6xrdNBq3ln+d566fDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWM3OTYyNDMzYzJmZTBiZjYyYjhjMzg4MzkyOTk1Zjk0
MmIxNGMwHhcNMjMwMTAxMjMwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjk3ODVhZjRmYjE1ZGEzMzJlMWYyOWI0NjljMTg0YTdiNmY0ODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWXJ97/Nv7EzLYLO/majMuO0/MzN
tfSSg5jdhMo4ubvcNhFnU0VlKXYFUwMM5UCZ6jV8F/Qb1OmlHDEA1ac0hq7xml4L
DP4QTE3rjbf86jImwkOiiTHH7cZZm1Brah1c5sHbP3IuGqs8deOWq4dAOJnKttXk
N6tlNHCqDPlJ/X3O6myA3jGO8TRGDQm+7I0o0Y9jj0SQUiRwaBToBMjodHGcs9NX
vB+aMrg4R+3Q0XDZ+TdiCxazVqp+vfnm1/KDVkBHtmZfSemM6VtpDNxledZpokyY
U0AZ/dSSljyZldpTuvcDXeHLpUzRGmvw++qj4wLxhPivRIhutYljqADYAwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLaXha9PsV2jMuHym0acGEp7b0gnMB8GA1UdIwQY
MBaAFNgceWJDPC/gv2K4w4g5KZX5QrFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZWE3MGMtZjVmNi00YjI3LTk0Y2Et
M2QzNDRjOWMyNmI2LzEvdHBlRnIwLXhYYU15NGZLYlJwd1lTbnR2U0NjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZWE3MGMtZjVmNi00YjI3LTk0Y2EtM2QzNDRjOWMyNmI2
LzEvMkJ4NVlrTThMLUNfWXJqRGlEa3BsZmxDc1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwjhcMA0E
AgACMAcDBQMqBjEAMA0GCSqGSIb3DQEBCwUAA4IBAQAsZkwhgl6gp/1fLkJvUSHE
iLKgauCoDL3PULp7mp4yKWPH+HPJONdOz/95qzQUhEPRr7bDV8JBABd2ZzAEvNXM
OH0fREJoUPfDIewFDPsGvNQ54+99jp3gRfit72oRi4C+VjF7kQFkHm5VX1S+whjs
w0nk7K+rZhBieAZsFj9/5lNeISAXIJ/A9qlWGCK45fu5/evenchl291W1wjPxa1w
UwTLOgooYirDq9/vEq2vIP+QB+EiIW7dVi2ereBtqNH/zVSRi2WklrzYPU3BPwJx
vCWSPYfEPkrbJeigD9A7h8CJnX88EYkhdL6A/+3opIq/oEY8OMeg17LRXEXUaWLc
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:57:02 2024 by rpki-client on console-fra.rpki-client.org