Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/hDK3qgMzVY0Bc0DRFL_qJXFY1VQ.roa
File: hDK3qgMzVY0Bc0DRFL_qJXFY1VQ.roa (raw, json)
Hash identifier: QlyswL2aJ6p9RoxjsEAGSwRGfQCaVgHsS+ndMnD0JLs=
Subject key identifier: 84:32:B7:AA:03:33:55:8D:01:73:40:D1:14:BF:EA:25:71:58:D5:54
Certificate issuer: /CN=58ce32a57bd4169e5bddb498aa5507ef834e4772
Certificate serial: 0185720C7A9723BDA1C852886D96A5A53003
Authority key identifier: 58:CE:32:A5:7B:D4:16:9E:5B:DD:B4:98:AA:55:07:EF:83:4E:47:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM4ypXvUFp5b3bSYqlUH74NOR3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/hDK3qgMzVY0Bc0DRFL_qJXFY1VQ.roa
Signing time: Mon 02 Jan 2023 10:34:58 +0000
ROA not before: Mon 02 Jan 2023 10:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 195.64.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:7a:97:23:bd:a1:c8:52:88:6d:96:a5:a5:30:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ce32a57bd4169e5bddb498aa5507ef834e4772
Validity
Not Before: Jan 2 10:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8432b7aa0333558d017340d114bfea257158d554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:61:c7:fa:23:d5:f0:dc:2e:cb:32:37:88:
47:e3:5c:da:77:b1:1d:37:73:08:6d:8b:80:e4:d4:
41:4e:9a:4c:54:9d:e1:96:7e:a5:03:e3:0b:4d:40:
f9:92:29:ef:86:6a:5f:59:95:47:6f:5c:d8:cd:7a:
5a:d1:30:ae:9c:2f:72:7a:b4:62:01:30:4f:f3:c2:
a2:97:bd:c7:86:d4:c7:cf:65:08:46:55:f4:be:67:
01:9d:70:0b:5d:09:dc:87:20:35:c0:6f:f5:15:ee:
71:49:6a:cb:ac:bd:fa:d5:78:c0:6c:f3:13:3a:82:
83:6c:bb:f7:26:64:5d:d0:d4:d4:14:41:f2:4a:4a:
ee:3c:ef:e0:fc:c8:86:2f:a9:15:4a:a5:91:2d:f5:
89:65:d7:c3:a2:9b:a3:86:4d:04:66:37:5c:dd:89:
f7:70:76:2f:20:bc:57:53:32:f5:e2:6e:08:84:f6:
fe:a9:78:f1:c1:87:45:de:47:1e:48:08:96:82:0f:
ef:d3:4d:bb:6d:6a:4d:6c:7e:65:36:31:be:30:80:
67:6a:a2:4d:1e:2b:24:29:33:9f:05:b5:c2:28:99:
e0:cc:c1:16:ec:0c:35:fe:5e:3f:f1:99:45:78:d3:
37:6b:67:9f:0e:50:9b:52:01:b6:73:66:a9:08:a8:
15:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:32:B7:AA:03:33:55:8D:01:73:40:D1:14:BF:EA:25:71:58:D5:54
X509v3 Authority Key Identifier:
keyid:58:CE:32:A5:7B:D4:16:9E:5B:DD:B4:98:AA:55:07:EF:83:4E:47:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM4ypXvUFp5b3bSYqlUH74NOR3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/hDK3qgMzVY0Bc0DRFL_qJXFY1VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5e4f7a-0a1c-4f07-b2da-673de700f112/1/WM4ypXvUFp5b3bSYqlUH74NOR3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.119.0/24
Signature Algorithm: sha256WithRSAEncryption
99:82:74:bc:b9:42:c2:de:b2:71:41:b6:a5:0c:72:50:34:e5:
95:8f:98:19:ad:75:d9:f0:6c:de:1a:f2:bf:7a:fd:18:91:fc:
a6:eb:e4:7b:e3:55:a2:2a:35:c2:40:2e:f5:18:45:d6:e9:2a:
d8:f4:64:bb:da:b6:e7:f5:25:df:01:e2:38:44:89:d1:ca:65:
e3:2d:d7:2c:29:f2:21:16:8f:82:3e:c0:68:b3:23:f9:b2:f1:
b4:ed:dc:c8:0b:0d:2e:a8:81:37:49:df:e1:dc:2a:88:73:e2:
da:73:a5:f0:5d:42:8c:f9:97:80:49:79:eb:f1:de:e7:50:46:
92:50:d9:c3:ea:36:35:47:70:76:9e:e7:6f:6d:a1:0b:1b:6c:
c0:37:20:0e:1d:62:21:e6:16:02:3a:a9:d3:49:51:bc:8e:31:
c9:7d:e3:eb:d1:e8:88:3e:eb:d1:fc:23:e7:1c:7f:76:82:0f:
c7:75:be:01:55:ba:4b:8a:52:9d:5a:33:cb:75:84:00:a3:3d:
00:14:1c:3e:19:7e:94:25:76:54:e4:2c:80:dc:5e:dd:05:b8:
22:65:7b:67:84:30:54:e1:2f:aa:68:ce:84:33:03:0c:29:af:
08:42:68:aa:79:4a:51:bd:d3:80:c2:0a:82:4b:cf:ef:27:eb:
76:e5:e0:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyDHqXI72hyFKIbZalpTADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Y2UzMmE1N2JkNDE2OWU1YmRkYjQ5OGFhNTUwN2VmODM0
ZTQ3NzIwHhcNMjMwMTAyMTAzNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDMyYjdhYTAzMzM1NThkMDE3MzQwZDExNGJmZWEyNTcxNThkNTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3Nhx/oj1fDcLssyN4hH41zad7Ed
N3MIbYuA5NRBTppMVJ3hln6lA+MLTUD5kinvhmpfWZVHb1zYzXpa0TCunC9yerRi
ATBP88Kil73HhtTHz2UIRlX0vmcBnXALXQnchyA1wG/1Fe5xSWrLrL361XjAbPMT
OoKDbLv3JmRd0NTUFEHySkruPO/g/MiGL6kVSqWRLfWJZdfDopujhk0EZjdc3Yn3
cHYvILxXUzL14m4IhPb+qXjxwYdF3kceSAiWgg/v0027bWpNbH5lNjG+MIBnaqJN
HiskKTOfBbXCKJngzMEW7Aw1/l4/8ZlFeNM3a2efDlCbUgG2c2apCKgVFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIQyt6oDM1WNAXNA0RS/6iVxWNVUMB8GA1UdIwQY
MBaAFFjOMqV71BaeW920mKpVB++DTkdyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV000eXBYdlVGcDViM2JTWXFsVUg3NE5PUjNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81ZTRmN2EtMGExYy00ZjA3LWIyZGEt
NjczZGU3MDBmMTEyLzEvaERLM3FnTXpWWTBCYzBEUkZMX3FKWEZZMVZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi81ZTRmN2EtMGExYy00ZjA3LWIyZGEtNjczZGU3MDBmMTEy
LzEvV000eXBYdlVGcDViM2JTWXFsVUg3NE5PUjNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0B3MA0G
CSqGSIb3DQEBCwUAA4IBAQCZgnS8uULC3rJxQbalDHJQNOWVj5gZrXXZ8GzeGvK/
ev0Ykfym6+R741WiKjXCQC71GEXW6SrY9GS72rbn9SXfAeI4RInRymXjLdcsKfIh
Fo+CPsBosyP5svG07dzICw0uqIE3Sd/h3CqIc+Lac6XwXUKM+ZeASXnr8d7nUEaS
UNnD6jY1R3B2nudvbaELG2zANyAOHWIh5hYCOqnTSVG8jjHJfePr0eiIPuvR/CPn
HH92gg/Hdb4BVbpLilKdWjPLdYQAoz0AFBw+GX6UJXZU5CyA3F7dBbgiZXtnhDBU
4S+qaM6EMwMMKa8IQmiqeUpRvdOAwgqCS8/vJ+t25eDb
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:55 2024 by rpki-client on console-ams.rpki-client.org