Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/4Fzq1Yc-WN-p0A87hJqqbDpvxE0.roa
File: 4Fzq1Yc-WN-p0A87hJqqbDpvxE0.roa (raw, json)
Hash identifier: ylR0zqSamkNzTBzU2BTxbVKsFC9lGpaS5tpjAqgxseg=
Subject key identifier: E0:5C:EA:D5:87:3E:58:DF:A9:D0:0F:3B:84:9A:AA:6C:3A:6F:C4:4D
Certificate issuer: /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial: 01856D01C3C2A44D2933B4AB81B31CDEFE2F
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/4Fzq1Yc-WN-p0A87hJqqbDpvxE0.roa
Signing time: Sun 01 Jan 2023 11:05:10 +0000
ROA not before: Sun 01 Jan 2023 11:05:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44254
IP address blocks: 195.93.151.0/24 maxlen: 24
195.93.150.0/23 maxlen: 23
195.93.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:c3:c2:a4:4d:29:33:b4:ab:81:b3:1c:de:fe:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Validity
Not Before: Jan 1 11:05:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e05cead5873e58dfa9d00f3b849aaa6c3a6fc44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:b1:42:60:75:cf:fc:51:e0:3f:dc:77:0d:
49:77:05:01:86:5e:b4:1c:1e:03:2f:e3:62:45:3b:
8e:d3:db:62:bc:82:98:bf:bf:45:41:5b:c3:6e:e0:
21:c5:99:78:69:5a:d7:b1:07:02:98:4e:7e:b0:ce:
98:39:a0:c7:4a:2e:0f:41:a4:2d:04:b5:c5:02:b4:
4c:24:e6:4a:a9:17:cb:01:5c:ea:00:91:57:2a:b9:
d6:45:18:91:76:d4:35:b4:60:7e:b3:28:c4:e7:eb:
ae:39:98:49:5d:2f:30:38:f3:bd:07:76:a1:47:d4:
fd:05:e5:45:44:1d:9a:2e:36:0e:16:da:dc:71:45:
fd:0e:3f:c7:a5:17:d8:50:e9:e8:59:42:ca:c7:ec:
66:d6:33:d3:98:1d:39:b9:81:35:bd:2f:4d:ad:17:
aa:8f:aa:6e:ce:83:0c:10:a6:ac:38:15:55:0b:d0:
00:a0:86:ec:ea:d5:fa:76:24:42:e9:6f:5c:f8:70:
b0:30:6f:a6:43:04:0d:9f:23:cf:1d:97:bf:22:5d:
25:b6:14:d3:1b:55:12:76:17:d8:e2:16:16:d2:10:
b3:3c:76:02:2f:ae:98:71:a7:d5:af:1c:90:4d:6d:
93:29:8c:67:fd:78:14:6b:27:7d:bf:67:15:ba:6a:
9a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5C:EA:D5:87:3E:58:DF:A9:D0:0F:3B:84:9A:AA:6C:3A:6F:C4:4D
X509v3 Authority Key Identifier:
keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/4Fzq1Yc-WN-p0A87hJqqbDpvxE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.93.150.0/23
Signature Algorithm: sha256WithRSAEncryption
23:1f:d3:79:36:05:26:ac:2c:78:12:c7:13:1a:f7:86:d2:d8:
73:1c:1e:ca:af:52:af:82:c8:e0:3e:31:c7:88:c1:af:7a:00:
ab:0e:e3:80:73:54:3a:88:4f:03:6e:ae:da:50:76:62:5d:ed:
3c:6d:ac:77:46:32:85:26:33:99:45:09:cf:75:26:92:18:55:
a6:cf:8c:49:b7:9e:d0:87:93:7a:36:b6:16:7c:27:f1:c8:a6:
15:19:f9:67:8a:43:fd:31:0d:d9:f5:a1:30:98:ab:d8:16:9a:
7e:25:ab:5c:49:ef:3b:1e:bd:6f:e2:26:9f:96:5f:f6:f2:f1:
83:d3:22:a1:d0:e3:05:f2:2e:19:de:c4:75:01:77:4d:f2:74:
e6:d0:d1:b5:cf:a3:cd:e5:20:95:0d:85:1f:4a:ff:88:d6:20:
ca:a0:91:cf:fa:33:c5:65:37:f1:e2:95:60:98:eb:f5:37:75:
0e:f6:bd:b4:4a:c4:a9:fa:08:f2:93:08:0f:b2:55:8f:5e:fe:
9b:0f:41:87:df:1b:8d:c9:2c:8a:5e:58:4f:1e:29:48:4b:aa:
67:9f:52:2f:85:17:9d:76:df:2b:6e:d9:7c:c4:8e:7b:f0:ec:
49:ad:f7:00:48:ef:5a:20:79:7b:34:75:1e:9b:fa:d1:90:ea:
ee:2b:25:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtAcPCpE0pM7SrgbMc3v4vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDg4MmU3OTE3NDE0MmQ0ZTU0Y2QxMWY3MWMxNWJhNmUz
OTcyMTMwHhcNMjMwMTAxMTEwNTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDVjZWFkNTg3M2U1OGRmYTlkMDBmM2I4NDlhYWE2YzNhNmZjNDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso+xQmB1z/xR4D/cdw1JdwUBhl60
HB4DL+NiRTuO09tivIKYv79FQVvDbuAhxZl4aVrXsQcCmE5+sM6YOaDHSi4PQaQt
BLXFArRMJOZKqRfLAVzqAJFXKrnWRRiRdtQ1tGB+syjE5+uuOZhJXS8wOPO9B3ah
R9T9BeVFRB2aLjYOFtrccUX9Dj/HpRfYUOnoWULKx+xm1jPTmB05uYE1vS9NrReq
j6puzoMMEKasOBVVC9AAoIbs6tX6diRC6W9c+HCwMG+mQwQNnyPPHZe/Il0lthTT
G1USdhfY4hYW0hCzPHYCL66YcafVrxyQTW2TKYxn/XgUayd9v2cVumqasQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOBc6tWHPljfqdAPO4Saqmw6b8RNMB8GA1UdIwQY
MBaAFO4IgueRdBQtTlTNEfccFbpuOXITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80NzYwMzQtNTI3ZC00OTM5LWFkNzUt
NGYzYzMzYzA4ODg0LzEvNEZ6cTFZYy1XTi1wMEE4N2hKcXFiRHB2eEUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS80NzYwMzQtNTI3ZC00OTM5LWFkNzUtNGYzYzMzYzA4ODg0
LzEvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw12WMA0G
CSqGSIb3DQEBCwUAA4IBAQAjH9N5NgUmrCx4EscTGveG0thzHB7Kr1KvgsjgPjHH
iMGvegCrDuOAc1Q6iE8Dbq7aUHZiXe08bax3RjKFJjOZRQnPdSaSGFWmz4xJt57Q
h5N6NrYWfCfxyKYVGflnikP9MQ3Z9aEwmKvYFpp+JatcSe87Hr1v4iafll/28vGD
0yKh0OMF8i4Z3sR1AXdN8nTm0NG1z6PN5SCVDYUfSv+I1iDKoJHP+jPFZTfx4pVg
mOv1N3UO9r20SsSp+gjykwgPslWPXv6bD0GH3xuNySyKXlhPHilIS6pnn1IvhRed
dt8rbtl8xI578OxJrfcASO9aIHl7NHUem/rRkOruKyVC
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:20 2024 by rpki-client on console-fra.rpki-client.org