Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a2cf05-939a-401f-8407-c39853672dd7/1/AR4gB8G-hGp2mxZTOOS36RdMPHE.roa
File: AR4gB8G-hGp2mxZTOOS36RdMPHE.roa (raw, json)
Hash identifier: mli8IDL/1cYnMuGeDhNuG+95ECNWiWZOfWezKsm+KK0=
Subject key identifier: 01:1E:20:07:C1:BE:84:6A:76:9B:16:53:38:E4:B7:E9:17:4C:3C:71
Certificate issuer: /CN=d5de6c65ecf201d9a356dfc4501337ee8d965382
Certificate serial: 01867547AEA23592E7D5D55B31863734759B
Authority key identifier: D5:DE:6C:65:EC:F2:01:D9:A3:56:DF:C4:50:13:37:EE:8D:96:53:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1d5sZezyAdmjVt_EUBM37o2WU4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a2cf05-939a-401f-8407-c39853672dd7/1/AR4gB8G-hGp2mxZTOOS36RdMPHE.roa
Signing time: Tue 21 Feb 2023 18:41:17 +0000
ROA not before: Tue 21 Feb 2023 18:41:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 195.225.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:75:47:ae:a2:35:92:e7:d5:d5:5b:31:86:37:34:75:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5de6c65ecf201d9a356dfc4501337ee8d965382
Validity
Not Before: Feb 21 18:41:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=011e2007c1be846a769b165338e4b7e9174c3c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:c9:41:d7:ea:9e:a4:a3:0a:dc:df:b6:d8:
a9:80:8b:f6:a7:4e:f7:94:40:00:cd:59:56:5c:08:
89:97:62:a5:0a:9c:bf:5f:02:26:fd:f8:6b:96:c0:
d4:c0:3f:cd:28:d8:aa:7b:32:b3:e5:98:c2:df:22:
6a:14:00:27:5d:9e:8c:ea:f0:11:dd:f3:dc:04:0a:
72:7d:a9:89:32:2a:2d:49:10:c9:eb:4e:2b:4d:cd:
a2:e9:25:6e:3d:c0:c1:fa:2f:da:dc:ff:e7:be:56:
cd:1c:3b:45:31:0a:a2:96:d9:c4:88:7c:f5:fa:3c:
ec:e9:0b:5c:9e:8f:4e:b1:7b:12:ac:9b:b9:31:79:
bc:3a:86:30:74:ac:61:0f:c7:72:ce:db:9b:10:cf:
18:2b:8d:9e:0c:7a:ff:62:f1:6d:44:84:7d:d4:1b:
6d:3b:1f:ee:f8:35:17:03:35:e0:96:cf:f3:ab:64:
c5:91:0d:37:9a:e9:d8:69:1a:37:97:7a:af:82:1b:
2a:2b:d0:8d:cb:3f:59:ba:f0:f0:d8:ba:89:6f:bb:
73:3b:8a:c2:79:87:eb:8a:fa:b5:c1:92:af:ff:8a:
f9:02:d1:3c:64:21:65:8d:18:5e:12:5f:5c:be:18:
15:5c:76:7e:75:22:79:64:07:54:b6:a8:99:3f:01:
6a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1E:20:07:C1:BE:84:6A:76:9B:16:53:38:E4:B7:E9:17:4C:3C:71
X509v3 Authority Key Identifier:
keyid:D5:DE:6C:65:EC:F2:01:D9:A3:56:DF:C4:50:13:37:EE:8D:96:53:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5sZezyAdmjVt_EUBM37o2WU4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a2cf05-939a-401f-8407-c39853672dd7/1/AR4gB8G-hGp2mxZTOOS36RdMPHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a2cf05-939a-401f-8407-c39853672dd7/1/1d5sZezyAdmjVt_EUBM37o2WU4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.97.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e3:e3:c7:7a:3e:08:93:75:23:d6:e5:cd:9b:85:39:3d:21:
94:72:c0:3f:1c:ab:08:8f:b8:d9:85:3c:c0:6c:74:d2:e7:7f:
de:43:ac:d4:cc:ae:58:47:b0:64:56:ff:11:1b:be:61:fc:5a:
cd:8d:ce:07:59:b7:3e:cc:1c:2e:bc:f7:06:d5:eb:f2:6f:b7:
79:73:db:63:4f:7c:ee:18:59:c9:de:4d:e6:16:23:ed:5e:72:
df:d2:17:54:17:13:44:5e:45:03:01:9f:02:8f:1f:0d:80:16:
67:38:2d:82:72:65:54:c8:76:cc:20:e9:15:a1:84:68:4f:8a:
5c:d1:7f:01:f3:58:23:ff:d4:7c:6a:b8:05:4c:e7:af:5e:22:
54:24:bc:da:17:8f:84:8c:d1:93:84:c4:33:63:a6:29:77:73:
9b:81:56:50:40:cf:8b:0d:32:24:d8:d5:19:08:74:0a:1d:4b:
66:61:2c:a7:dc:81:aa:c3:5a:3f:7e:f9:71:d0:ed:ed:86:91:
57:74:a3:6f:c9:a9:ba:4f:42:48:fe:27:b0:f8:d5:78:99:f2:
45:ad:48:ae:0c:b7:54:b4:88:ac:16:fb:bd:1a:79:a5:76:cd:
ae:09:b9:6b:8d:90:e6:42:25:be:39:ba:11:87:c2:39:cc:c7:
ee:da:bf:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ1R66iNZLn1dVbMYY3NHWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZGU2YzY1ZWNmMjAxZDlhMzU2ZGZjNDUwMTMzN2VlOGQ5
NjUzODIwHhcNMjMwMjIxMTg0MTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTFlMjAwN2MxYmU4NDZhNzY5YjE2NTMzOGU0YjdlOTE3NGMzYzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbDJQdfqnqSjCtzfttipgIv2p073
lEAAzVlWXAiJl2KlCpy/XwIm/fhrlsDUwD/NKNiqezKz5ZjC3yJqFAAnXZ6M6vAR
3fPcBApyfamJMiotSRDJ604rTc2i6SVuPcDB+i/a3P/nvlbNHDtFMQqiltnEiHz1
+jzs6Qtcno9OsXsSrJu5MXm8OoYwdKxhD8dyztubEM8YK42eDHr/YvFtRIR91Btt
Ox/u+DUXAzXgls/zq2TFkQ03munYaRo3l3qvghsqK9CNyz9ZuvDw2LqJb7tzO4rC
eYfrivq1wZKv/4r5AtE8ZCFljRheEl9cvhgVXHZ+dSJ5ZAdUtqiZPwFqlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAEeIAfBvoRqdpsWUzjkt+kXTDxxMB8GA1UdIwQY
MBaAFNXebGXs8gHZo1bfxFATN+6NllOCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWQ1c1plenlBZG1qVnRfRVVCTTM3bzJXVTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hMmNmMDUtOTM5YS00MDFmLTg0MDct
YzM5ODUzNjcyZGQ3LzEvQVI0Z0I4Ry1oR3AybXhaVE9PUzM2UmRNUEhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hMmNmMDUtOTM5YS00MDFmLTg0MDctYzM5ODUzNjcyZGQ3
LzEvMWQ1c1plenlBZG1qVnRfRVVCTTM3bzJXVTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+FhMA0G
CSqGSIb3DQEBCwUAA4IBAQCs4+PHej4Ik3Uj1uXNm4U5PSGUcsA/HKsIj7jZhTzA
bHTS53/eQ6zUzK5YR7BkVv8RG75h/FrNjc4HWbc+zBwuvPcG1evyb7d5c9tjT3zu
GFnJ3k3mFiPtXnLf0hdUFxNEXkUDAZ8Cjx8NgBZnOC2CcmVUyHbMIOkVoYRoT4pc
0X8B81gj/9R8argFTOevXiJUJLzaF4+EjNGThMQzY6Ypd3ObgVZQQM+LDTIk2NUZ
CHQKHUtmYSyn3IGqw1o/fvlx0O3thpFXdKNvyam6T0JI/iew+NV4mfJFrUiuDLdU
tIisFvu9Gnmlds2uCblrjZDmQiW+OboRh8I5zMfu2r/O
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:40 2023 by rpki-client on console-fra.rpki-client.org