Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Eck02P7hLvyZ5U34eYtOE4XnU0s.roa
File: Eck02P7hLvyZ5U34eYtOE4XnU0s.roa (raw, json)
Hash identifier: xT24evUhIFSYchUUdIUaavXrB6RXv1xxMztRzqrzImw=
Subject key identifier: 11:C9:34:D8:FE:E1:2E:FC:99:E5:4D:F8:79:8B:4E:13:85:E7:53:4B
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAD8ED5D70119CFB2149323A7CA3DA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Eck02P7hLvyZ5U34eYtOE4XnU0s.roa
Signing time: Sun 01 Jan 2023 10:05:10 +0000
ROA not before: Sun 01 Jan 2023 10:05:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 194.132.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:d8:ed:5d:70:11:9c:fb:21:49:32:3a:7c:a3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11c934d8fee12efc99e54df8798b4e1385e7534b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:7e:b5:a5:6d:5d:8c:4b:cd:11:da:99:a0:
06:22:63:70:34:82:7a:c7:7a:af:a7:30:3a:8c:3a:
f0:78:9b:66:22:4b:c6:bb:d6:9a:cf:b2:6d:2e:61:
0d:7c:39:80:df:d1:00:16:b4:cf:d1:2a:79:ea:f9:
87:02:4a:2f:80:8f:0f:65:68:83:9b:ca:75:fb:1e:
b3:97:48:c2:5f:8b:5b:98:53:9a:d3:6f:5b:84:c7:
5c:59:f1:a4:55:0a:96:eb:47:e0:61:e8:d1:62:f2:
ef:24:b1:2f:4f:6e:83:b5:cd:20:76:d9:ed:d2:b2:
85:b4:43:42:4b:a0:7c:0c:b3:8e:06:ef:b2:f7:3b:
78:ce:7a:ce:aa:c4:97:97:03:7b:83:b0:d7:0a:ad:
40:b6:b4:c1:b3:c2:76:63:e4:89:6f:b9:f2:24:94:
f5:8e:5c:3a:7e:05:75:cf:ee:66:a3:fe:ac:39:c2:
82:8a:37:62:1d:09:e8:39:9b:4d:1e:89:b3:a6:e0:
03:ca:a8:4e:85:7d:95:21:44:70:46:a9:9d:67:27:
4f:48:70:5f:4d:7d:fc:b1:74:ac:ae:e3:56:f3:bf:
9d:b0:87:5d:2a:92:ed:93:b3:86:62:a9:94:f8:b6:
70:82:e7:97:ad:b3:8d:f9:c0:8a:a9:4f:c0:d6:f5:
e1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C9:34:D8:FE:E1:2E:FC:99:E5:4D:F8:79:8B:4E:13:85:E7:53:4B
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Eck02P7hLvyZ5U34eYtOE4XnU0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.60.0/24
Signature Algorithm: sha256WithRSAEncryption
11:27:bf:a2:8e:e0:65:ac:96:03:e3:22:00:2b:fe:24:4d:3e:
be:cc:fe:95:9d:e1:96:2f:c0:f6:81:38:ee:d5:e4:ff:02:de:
a5:9a:65:9f:15:c4:96:79:d6:1a:53:c1:f1:8d:e3:f1:1a:c5:
33:4d:06:33:4b:c5:6f:1c:3a:04:76:20:96:fb:71:39:a3:09:
db:c3:4a:40:9d:f6:74:22:69:6d:47:8f:cb:51:61:01:df:14:
12:d7:40:60:32:b4:bf:a7:ec:5e:fe:0e:b4:76:de:40:7b:29:
5d:29:8a:ae:43:b9:8a:af:de:47:86:ba:39:48:6a:c3:0a:36:
01:77:44:3b:34:b7:b2:02:c7:4f:71:6d:bd:43:c8:89:76:63:
68:31:6b:69:8b:d1:39:95:b4:79:0e:bb:24:8a:5d:07:1b:93:
ad:b5:04:0f:56:8f:25:dd:75:b2:bc:0a:6c:ed:7d:fc:b8:eb:
7d:33:fc:18:0a:10:f7:14:2e:27:82:14:d3:15:c1:2c:23:04:
fe:7b:62:13:87:23:b3:62:49:bd:9d:dd:b7:f1:cb:2e:5f:e4:
68:b5:c0:c9:e7:a5:1f:32:86:74:af:54:73:10:c9:ce:35:50:
4b:92:5f:55:4e:7b:96:3d:11:ae:13:d5:7c:72:41:c1:6c:d4:
76:11:2a:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsytjtXXARnPshSTI6fKPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwMTAxMTAwNTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWM5MzRkOGZlZTEyZWZjOTllNTRkZjg3OThiNGUxMzg1ZTc1MzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeB+taVtXYxLzRHamaAGImNwNIJ6
x3qvpzA6jDrweJtmIkvGu9aaz7JtLmENfDmA39EAFrTP0Sp56vmHAkovgI8PZWiD
m8p1+x6zl0jCX4tbmFOa029bhMdcWfGkVQqW60fgYejRYvLvJLEvT26Dtc0gdtnt
0rKFtENCS6B8DLOOBu+y9zt4znrOqsSXlwN7g7DXCq1AtrTBs8J2Y+SJb7nyJJT1
jlw6fgV1z+5mo/6sOcKCijdiHQnoOZtNHomzpuADyqhOhX2VIURwRqmdZydPSHBf
TX38sXSsruNW87+dsIddKpLtk7OGYqmU+LZwgueXrbON+cCKqU/A1vXhZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBHJNNj+4S78meVN+HmLThOF51NLMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvRWNrMDJQN2hMdnlaNVUzNGVZdE9FNFhuVTBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwoQ8MA0G
CSqGSIb3DQEBCwUAA4IBAQARJ7+ijuBlrJYD4yIAK/4kTT6+zP6VneGWL8D2gTju
1eT/At6lmmWfFcSWedYaU8HxjePxGsUzTQYzS8VvHDoEdiCW+3E5ownbw0pAnfZ0
ImltR4/LUWEB3xQS10BgMrS/p+xe/g60dt5AeyldKYquQ7mKr95Hhro5SGrDCjYB
d0Q7NLeyAsdPcW29Q8iJdmNoMWtpi9E5lbR5Drskil0HG5OttQQPVo8l3XWyvAps
7X38uOt9M/wYChD3FC4nghTTFcEsIwT+e2IThyOzYkm9nd238csuX+RotcDJ56Uf
MoZ0r1RzEMnONVBLkl9VTnuWPRGuE9V8ckHBbNR2ESpj
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org