Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/eCQpCa05miaIzQn2DLB15soyPg0.roa
File: eCQpCa05miaIzQn2DLB15soyPg0.roa (raw, json)
Hash identifier: 8iA6DFi6pwrC3f3bjoWcEjlXTtplP/QtZl8D8srRQ44=
Subject key identifier: 78:24:29:09:AD:39:9A:26:88:CD:09:F6:0C:B0:75:E6:CA:32:3E:0D
Certificate issuer: /CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Certificate serial: 01856EAFC9B5C950507089F640BF0F6A74EE
Authority key identifier: 74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/eCQpCa05miaIzQn2DLB15soyPg0.roa
Signing time: Sun 01 Jan 2023 18:54:52 +0000
ROA not before: Sun 01 Jan 2023 18:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42415
IP address blocks: 194.6.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:c9:b5:c9:50:50:70:89:f6:40:bf:0f:6a:74:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743d850cd12a363ddcdb0dc273e1dfc863b705f7
Validity
Not Before: Jan 1 18:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78242909ad399a2688cd09f60cb075e6ca323e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:15:43:c6:45:52:36:f8:1c:1c:ba:1d:61:75:
9b:cf:21:9d:01:6b:4d:70:c0:6d:78:ec:c4:8d:ae:
89:65:64:5c:46:65:5a:cf:4f:56:89:bc:9a:a4:b5:
a1:5e:99:71:ac:6c:40:e3:bd:cc:78:bb:04:fb:37:
ee:8b:dd:a5:b4:f4:97:20:ec:aa:eb:1c:a4:ee:f8:
36:f9:29:28:3d:df:72:d4:ff:d4:a7:f3:01:37:43:
e8:38:28:84:db:f1:ba:3b:01:61:fe:b3:2c:57:7c:
90:e9:f5:26:51:42:61:9c:51:23:18:2f:1c:fc:8c:
2e:30:aa:29:31:43:06:15:be:0b:6f:57:6f:62:5c:
4c:c2:ff:2f:e8:6d:46:48:b0:7c:47:d2:06:51:14:
77:6d:79:1a:40:44:e1:a6:6a:0d:08:70:fb:3d:41:
3e:d9:8a:ed:41:43:4a:b8:59:d0:4b:5a:a1:49:ce:
4d:af:53:11:71:0f:75:b4:da:c5:20:c2:0f:4c:07:
e2:a3:80:ae:d4:3d:6a:db:89:f8:36:b4:73:5a:f8:
66:26:4d:d0:f9:b8:3f:d7:09:b7:bc:97:18:b5:50:
8a:96:7e:f1:da:5f:7d:1a:2d:89:bc:5f:01:cd:c2:
b3:08:62:7a:d0:9a:ca:4b:79:a5:3c:e2:0b:0a:c2:
4a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:24:29:09:AD:39:9A:26:88:CD:09:F6:0C:B0:75:E6:CA:32:3E:0D
X509v3 Authority Key Identifier:
keyid:74:3D:85:0C:D1:2A:36:3D:DC:DB:0D:C2:73:E1:DF:C8:63:B7:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/eCQpCa05miaIzQn2DLB15soyPg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/081e96-10e1-4c97-b932-1daf80c519d0/1/dD2FDNEqNj3c2w3Cc-HfyGO3Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.255.0/24
Signature Algorithm: sha256WithRSAEncryption
85:dc:38:a9:3b:4d:c5:75:aa:da:04:ab:74:4d:2e:3d:d2:c1:
85:69:2e:2c:8c:70:57:26:7c:06:53:3f:5a:f8:43:1a:ae:85:
f8:cb:4c:55:26:8a:b0:d1:d5:fb:ab:46:8a:be:be:53:e6:e1:
3f:41:b4:13:80:59:43:31:47:51:86:cc:82:7c:7c:d2:82:f7:
e4:22:56:44:df:73:be:1e:d2:20:c5:10:75:8d:b8:8b:c8:73:
60:af:5b:a2:26:7d:2f:59:9c:e3:d6:32:ac:82:48:4f:15:98:
d5:22:3c:4d:d9:e2:24:14:4e:f2:f6:b3:e6:15:74:29:26:f0:
6c:cc:8e:56:b9:a6:9e:67:65:43:db:55:d0:57:db:ca:2b:b3:
64:17:ac:17:a4:24:d7:5d:d7:cc:d6:8f:fb:ed:a4:cb:08:90:
93:d4:00:6d:b7:b0:bc:a8:96:c4:0e:99:2e:61:8d:af:ac:ac:
20:e4:54:db:4e:92:41:4c:22:ec:fc:8b:64:4f:b8:ac:f0:81:
f8:a5:a3:df:40:56:53:34:63:15:ff:87:6a:23:88:81:a5:b1:
b7:59:7b:65:74:a4:11:33:78:83:90:46:a5:9e:50:2c:7b:12:
ba:af:da:8e:8e:7d:e9:22:fb:14:52:03:83:2d:2c:4e:a9:26:
61:4c:67:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVur8m1yVBQcIn2QL8PanTuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2Q4NTBjZDEyYTM2M2RkY2RiMGRjMjczZTFkZmM4NjNi
NzA1ZjcwHhcNMjMwMTAxMTg1NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODI0MjkwOWFkMzk5YTI2ODhjZDA5ZjYwY2IwNzVlNmNhMzIzZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxVDxkVSNvgcHLodYXWbzyGdAWtN
cMBteOzEja6JZWRcRmVaz09WibyapLWhXplxrGxA473MeLsE+zfui92ltPSXIOyq
6xyk7vg2+SkoPd9y1P/Up/MBN0PoOCiE2/G6OwFh/rMsV3yQ6fUmUUJhnFEjGC8c
/IwuMKopMUMGFb4Lb1dvYlxMwv8v6G1GSLB8R9IGURR3bXkaQEThpmoNCHD7PUE+
2YrtQUNKuFnQS1qhSc5Nr1MRcQ91tNrFIMIPTAfio4Cu1D1q24n4NrRzWvhmJk3Q
+bg/1wm3vJcYtVCKln7x2l99Gi2JvF8BzcKzCGJ60JrKS3mlPOILCsJK5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHgkKQmtOZomiM0J9gywdebKMj4NMB8GA1UdIwQY
MBaAFHQ9hQzRKjY93NsNwnPh38hjtwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzIt
MWRhZjgwYzUxOWQwLzEvZUNRcENhMDVtaWFJelFuMkRMQjE1c295UGcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8wODFlOTYtMTBlMS00Yzk3LWI5MzItMWRhZjgwYzUxOWQw
LzEvZEQyRkRORXFOajNjMnczQ2MtSGZ5R08zQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgb/MA0G
CSqGSIb3DQEBCwUAA4IBAQCF3DipO03FdaraBKt0TS490sGFaS4sjHBXJnwGUz9a
+EMaroX4y0xVJoqw0dX7q0aKvr5T5uE/QbQTgFlDMUdRhsyCfHzSgvfkIlZE33O+
HtIgxRB1jbiLyHNgr1uiJn0vWZzj1jKsgkhPFZjVIjxN2eIkFE7y9rPmFXQpJvBs
zI5WuaaeZ2VD21XQV9vKK7NkF6wXpCTXXdfM1o/77aTLCJCT1ABtt7C8qJbEDpku
YY2vrKwg5FTbTpJBTCLs/ItkT7is8IH4paPfQFZTNGMV/4dqI4iBpbG3WXtldKQR
M3iDkEalnlAsexK6r9qOjn3pIvsUUgODLSxOqSZhTGeF
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:57:03 2024 by rpki-client on console-fra.rpki-client.org