Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4tfZxYAaH05dCaj70BuLd_vm-T4.roa
File: 4tfZxYAaH05dCaj70BuLd_vm-T4.roa (raw, json)
Hash identifier: 1986PEkaeE9KEyK8cDpjlebeR4LLLulET19Yp7ZLwuo=
Subject key identifier: E2:D7:D9:C5:80:1A:1F:4E:5D:09:A8:FB:D0:1B:8B:77:FB:E6:F9:3E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018A93CE34937AD382B5BAA4FE7EA02FDBCA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4tfZxYAaH05dCaj70BuLd_vm-T4.roa
Signing time: Thu 14 Sep 2023 13:07:59 +0000
ROA not before: Thu 14 Sep 2023 13:07:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47957
IP address blocks: 193.183.113.0/24 maxlen: 24
193.183.114.0/24 maxlen: 24
194.71.146.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:ce:34:93:7a:d3:82:b5:ba:a4:fe:7e:a0:2f:db:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 14 13:07:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2d7d9c5801a1f4e5d09a8fbd01b8b77fbe6f93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:08:e4:c2:24:41:61:79:76:78:0f:6b:b8:11:
6a:d1:6d:f0:ad:9b:27:2a:eb:ec:fe:3c:a7:53:b4:
5f:c7:7d:39:e2:13:6f:97:f9:ef:d4:c9:04:cd:c3:
fc:50:ec:06:5d:88:29:c8:fd:c7:2b:42:8b:2b:35:
71:54:a4:39:08:fd:1f:99:f0:53:da:03:9b:e6:0f:
6c:a5:fb:13:93:42:46:ea:20:90:cc:07:6c:59:41:
4d:c0:8e:da:e4:33:72:3b:19:89:2d:0b:fb:94:d2:
dd:0e:f3:00:97:df:24:42:14:cd:0a:7e:5a:7b:d1:
3e:02:b2:a2:b1:f2:0c:a7:25:5b:05:98:ce:45:9a:
e2:12:82:47:97:ab:75:e2:d3:5e:c3:76:a2:7d:a6:
82:05:0d:7a:12:8a:b2:2e:32:55:82:c4:40:74:3b:
6f:a7:16:bf:33:33:66:e0:d7:76:80:ae:66:2c:40:
4e:42:58:1c:f0:56:02:03:ec:bd:05:c7:15:3f:59:
2d:8d:08:30:d4:88:17:c9:42:2e:49:84:c4:70:3b:
2b:9f:25:e1:1e:91:3e:ee:fa:38:67:47:5d:b7:6c:
79:ca:96:4c:c1:c9:ad:fe:1d:cf:06:1f:ec:26:21:
43:68:7e:5c:5c:ab:26:4f:e8:71:f6:19:21:5c:bd:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D7:D9:C5:80:1A:1F:4E:5D:09:A8:FB:D0:1B:8B:77:FB:E6:F9:3E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4tfZxYAaH05dCaj70BuLd_vm-T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.183.113.0-193.183.114.255
194.71.146.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:6b:59:90:c8:d4:0b:63:02:c8:f0:a0:60:75:61:b1:0e:8a:
27:74:b2:79:50:36:b9:78:52:b1:84:e5:5a:ad:d4:cd:76:fc:
cd:e2:bd:ab:d4:06:ec:6b:2d:79:2f:c6:9e:1d:16:c3:a1:59:
c7:17:81:76:af:41:c1:91:c2:23:17:05:b5:31:9a:a7:e7:b8:
2e:32:81:c0:45:36:09:39:05:8e:08:0d:03:e5:a2:ec:32:9e:
d9:73:75:27:bf:b6:a7:ce:0a:78:23:ae:74:19:4c:9f:74:8a:
2d:71:4c:2a:c0:27:60:12:c8:e5:ea:5a:20:0c:e0:85:6e:ec:
b7:b2:ca:ed:6a:8d:7a:14:29:69:52:15:f2:bb:dd:4f:23:a8:
a4:01:dc:ae:9d:03:e7:e8:00:1c:23:71:bf:f9:03:ec:f8:68:
ba:20:db:57:e3:9d:60:0f:c9:3d:19:8f:5d:d6:82:69:9a:eb:
10:6f:2c:a9:7d:35:d8:2b:f6:13:52:14:73:0d:42:a7:21:fc:
fa:e9:4c:e9:35:47:2c:bd:8c:15:3c:f3:dd:5e:0a:be:6c:cb:
2f:56:a9:10:03:30:55:c4:f5:5a:d6:54:17:fb:56:cb:9f:1b:
bf:4e:7a:ae:70:5c:aa:c4:a5:75:57:87:e5:52:1d:f8:29:26:
8f:02:11:36
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYqTzjSTetOCtbqk/n6gL9vKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwOTE0MTMwNzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmQ3ZDljNTgwMWExZjRlNWQwOWE4ZmJkMDFiOGI3N2ZiZTZmOTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggjkwiRBYXl2eA9ruBFq0W3wrZsn
Kuvs/jynU7Rfx3054hNvl/nv1MkEzcP8UOwGXYgpyP3HK0KLKzVxVKQ5CP0fmfBT
2gOb5g9spfsTk0JG6iCQzAdsWUFNwI7a5DNyOxmJLQv7lNLdDvMAl98kQhTNCn5a
e9E+ArKisfIMpyVbBZjORZriEoJHl6t14tNew3aifaaCBQ16EoqyLjJVgsRAdDtv
pxa/MzNm4Nd2gK5mLEBOQlgc8FYCA+y9BccVP1ktjQgw1IgXyUIuSYTEcDsrnyXh
HpE+7vo4Z0ddt2x5ypZMwcmt/h3PBh/sJiFDaH5cXKsmT+hx9hkhXL3sUQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFOLX2cWAGh9OXQmo+9Abi3f75vk+MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvNHRmWnhZQWFIMDVkQ2FqNzBCdUxkX3ZtLVQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADBt3ED
BADBt3IDBAHCR5IwDQYJKoZIhvcNAQELBQADggEBAMFrWZDI1AtjAsjwoGB1YbEO
iid0snlQNrl4UrGE5Vqt1M12/M3ivavUBuxrLXkvxp4dFsOhWccXgXavQcGRwiMX
BbUxmqfnuC4ygcBFNgk5BY4IDQPlouwyntlzdSe/tqfOCngjrnQZTJ90ii1xTCrA
J2ASyOXqWiAM4IVu7Leyyu1qjXoUKWlSFfK73U8jqKQB3K6dA+foABwjcb/5A+z4
aLog21fjnWAPyT0Zj13Wgmma6xBvLKl9Ndgr9hNSFHMNQqch/PrpTOk1Ryy9jBU8
891eCr5syy9WqRADMFXE9VrWVBf7VsufG79Oeq5wXKrEpXVXh+VSHfgpJo8CETY=
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org