Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/eb3c94-1de9-4ed3-b7b3-162efdf8283e/1/pVgCIDjXZyvVEVwz5zqF1_rF8VQ.roa
File: pVgCIDjXZyvVEVwz5zqF1_rF8VQ.roa (raw, json)
Hash identifier: F1aO4o32YdHHU4ZXGDjEpN1dC8lmLoz0dispgyeUYPs=
Subject key identifier: A5:58:02:20:38:D7:67:2B:D5:11:5C:33:E7:3A:85:D7:FA:C5:F1:54
Certificate issuer: /CN=f8b6ce18102b36aca6f7e97507c65cdcdd1aeea5
Certificate serial: 01856C9CC762A1BE7CF00295503DCFAFE573
Authority key identifier: F8:B6:CE:18:10:2B:36:AC:A6:F7:E9:75:07:C6:5C:DC:DD:1A:EE:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-LbOGBArNqym9-l1B8Zc3N0a7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/eb3c94-1de9-4ed3-b7b3-162efdf8283e/1/pVgCIDjXZyvVEVwz5zqF1_rF8VQ.roa
Signing time: Sun 01 Jan 2023 09:14:51 +0000
ROA not before: Sun 01 Jan 2023 09:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 213.109.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:c7:62:a1:be:7c:f0:02:95:50:3d:cf:af:e5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b6ce18102b36aca6f7e97507c65cdcdd1aeea5
Validity
Not Before: Jan 1 09:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a558022038d7672bd5115c33e73a85d7fac5f154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:66:92:c6:f7:3a:18:b6:b1:29:b8:67:f8:f1:
9f:59:34:52:4a:ea:c9:5d:ec:fb:a6:06:db:87:f2:
45:74:30:79:f1:6b:c0:bd:10:79:40:20:a8:eb:92:
2f:9f:7f:9a:91:70:4a:27:3d:bf:49:ea:67:71:ec:
bb:00:27:b4:76:5b:80:12:9a:cc:3b:f1:e3:bb:74:
c0:a4:36:b5:7b:0a:5c:a0:c9:1a:a0:4c:76:d4:93:
e5:5f:af:39:a9:02:a5:21:2b:32:02:8a:76:f1:2a:
14:f4:e0:26:da:0c:b5:ed:3c:3b:34:13:70:fb:b5:
44:99:8e:a8:c9:4d:07:95:d0:8a:53:b6:45:de:28:
81:db:66:5c:14:fd:ec:28:4d:eb:06:82:e2:c5:2f:
9e:2b:0a:8f:61:a5:37:a2:dd:ed:1f:54:f6:62:57:
f2:af:77:ad:c8:26:ed:48:6c:35:c9:9c:e5:bb:ef:
de:5b:12:5c:4e:9f:04:0a:b6:65:bb:d9:94:fd:52:
12:c4:5e:83:d9:69:a3:1c:0a:d3:81:9f:d7:77:66:
2b:21:f8:2c:f9:ec:dc:a4:a8:13:8f:43:3d:93:1b:
8d:60:a8:2d:bb:85:0c:a1:f9:21:c5:59:92:25:80:
f3:9a:95:05:64:df:07:05:c6:7a:a7:f0:32:79:c0:
97:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:58:02:20:38:D7:67:2B:D5:11:5C:33:E7:3A:85:D7:FA:C5:F1:54
X509v3 Authority Key Identifier:
keyid:F8:B6:CE:18:10:2B:36:AC:A6:F7:E9:75:07:C6:5C:DC:DD:1A:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LbOGBArNqym9-l1B8Zc3N0a7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eb3c94-1de9-4ed3-b7b3-162efdf8283e/1/pVgCIDjXZyvVEVwz5zqF1_rF8VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/eb3c94-1de9-4ed3-b7b3-162efdf8283e/1/1-LbOGBArNqym9-l1B8Zc3N0a7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.195.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9b:b9:ee:32:9a:b1:59:62:eb:27:02:d0:9b:bb:38:dc:c6:
6b:fe:f7:ba:a4:80:52:9b:93:91:14:3b:d0:61:a1:82:50:c2:
2b:c6:f1:57:3b:a5:d1:f1:d8:5d:c4:e1:97:ce:5b:bb:8e:98:
79:fd:e1:9c:c8:07:82:52:c1:db:be:40:1a:de:43:69:7b:6b:
a3:89:44:ab:a6:af:9e:59:c8:40:ef:26:22:e5:39:18:95:a8:
da:64:af:76:e2:1a:12:5d:15:fc:71:ba:6d:6f:23:96:0c:01:
88:aa:6f:dc:1f:7f:2b:23:e9:4d:0f:f8:55:4d:c3:f8:4f:03:
fa:2c:99:ce:ca:fa:25:4a:fe:4a:b6:4f:ac:30:06:fc:f7:22:
8b:55:8d:f3:e0:4d:4c:7f:a4:e3:30:fa:4b:3f:7e:98:51:14:
ff:3a:63:5a:76:5b:42:07:41:47:ca:37:28:39:39:45:bd:b9:
93:c5:b1:dd:c6:c9:b9:ec:39:a7:59:62:e2:69:ee:b3:b1:69:
0d:4a:7a:60:26:60:fa:04:e3:a3:35:a6:1c:33:b6:ec:3b:8d:
92:7d:94:26:ea:e3:81:fc:74:74:b8:de:ee:e3:ec:1e:2b:bd:
5b:69:a3:aa:53:1c:a6:30:45:1f:74:ee:14:01:13:03:f6:b8:
5c:64:c4:1f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVsnMdiob588AKVUD3Pr+VzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YjZjZTE4MTAyYjM2YWNhNmY3ZTk3NTA3YzY1Y2RjZGQx
YWVlYTUwHhcNMjMwMTAxMDkxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTU4MDIyMDM4ZDc2NzJiZDUxMTVjMzNlNzNhODVkN2ZhYzVmMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2aSxvc6GLaxKbhn+PGfWTRSSurJ
Xez7pgbbh/JFdDB58WvAvRB5QCCo65Ivn3+akXBKJz2/Sepncey7ACe0dluAEprM
O/Hju3TApDa1ewpcoMkaoEx21JPlX685qQKlISsyAop28SoU9OAm2gy17Tw7NBNw
+7VEmY6oyU0HldCKU7ZF3iiB22ZcFP3sKE3rBoLixS+eKwqPYaU3ot3tH1T2Ylfy
r3etyCbtSGw1yZzlu+/eWxJcTp8ECrZlu9mU/VISxF6D2WmjHArTgZ/Xd2YrIfgs
+ezcpKgTj0M9kxuNYKgtu4UMofkhxVmSJYDzmpUFZN8HBcZ6p/AyecCXfwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFKVYAiA412cr1RFcM+c6hdf6xfFUMB8GA1UdIwQY
MBaAFPi2zhgQKzaspvfpdQfGXNzdGu6lMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1MYk9HQkFyTnF5bTktbDFCOFpjM04wYTdxVS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvZWIzYzk0LTFkZTktNGVkMy1iN2Iz
LTE2MmVmZGY4MjgzZS8xL3BWZ0NJRGpYWnl2VkVWd3o1enFGMV9yRjhWUS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZDYvZWIzYzk0LTFkZTktNGVkMy1iN2IzLTE2MmVmZGY4Mjgz
ZS8xLzEtTGJPR0JBck5xeW05LWwxQjhaYzNOMGE3cVUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADVbcMw
DQYJKoZIhvcNAQELBQADggEBABqbue4ymrFZYusnAtCbuzjcxmv+97qkgFKbk5EU
O9BhoYJQwivG8Vc7pdHx2F3E4ZfOW7uOmHn94ZzIB4JSwdu+QBreQ2l7a6OJRKum
r55ZyEDvJiLlORiVqNpkr3biGhJdFfxxum1vI5YMAYiqb9wffysj6U0P+FVNw/hP
A/osmc7K+iVK/kq2T6wwBvz3IotVjfPgTUx/pOMw+ks/fphRFP86Y1p2W0IHQUfK
Nyg5OUW9uZPFsd3GybnsOadZYuJp7rOxaQ1KemAmYPoE46M1phwztuw7jZJ9lCbq
44H8dHS43u7j7B4rvVtpo6pTHKYwRR907hQBEwP2uFxkxB8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:31 2023 by rpki-client on console-ams.rpki-client.org