Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/UBzzNirlq-qY_giaqN8bZ9GH0vc.roa
File: UBzzNirlq-qY_giaqN8bZ9GH0vc.roa (raw, json)
Hash identifier: /xCYP0B5WjkkqkMDKq+QupuH2YlZd2Zuld9sNC4TaFE=
Subject key identifier: 50:1C:F3:36:2A:E5:AB:EA:98:FE:08:9A:A8:DF:1B:67:D1:87:D2:F7
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCADB201A2DF32D1565B6EECC476B04
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/UBzzNirlq-qY_giaqN8bZ9GH0vc.roa
Signing time: Sun 01 Jan 2023 10:05:11 +0000
ROA not before: Sun 01 Jan 2023 10:05:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20625
IP address blocks: 194.14.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:db:20:1a:2d:f3:2d:15:65:b6:ee:cc:47:6b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=501cf3362ae5abea98fe089aa8df1b67d187d2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:2a:d4:cd:ed:39:45:27:d4:26:5a:38:77:
4d:f2:41:e2:be:e7:c7:a3:57:d8:51:11:03:c4:cf:
7e:51:8e:21:e4:d6:42:9c:b4:ec:08:8a:70:46:e2:
cb:c7:8e:78:96:e7:24:ec:eb:ac:f3:a7:4d:e6:a9:
9b:95:a4:d7:eb:4c:64:72:d1:9c:89:9b:d3:64:8a:
6d:7a:ff:79:75:fc:92:80:50:34:be:5b:2a:d7:84:
54:90:75:8c:2a:97:a7:5a:0b:39:d2:7b:ba:64:6c:
dc:c5:11:54:c5:f6:95:7e:b3:0d:10:dc:0a:60:c2:
27:aa:b1:32:20:ce:01:e6:4b:1c:45:75:ef:56:62:
7d:8d:8d:bd:35:78:7a:d1:c0:1e:6f:ce:38:63:19:
6c:e0:16:ed:b5:39:24:64:88:3b:f9:a6:7f:e6:21:
b0:c8:f3:47:c5:aa:2a:61:ce:f5:56:21:bf:7b:64:
dc:43:f2:0d:5c:c2:27:d4:86:b9:31:f1:c4:ea:ba:
4f:e2:b2:c6:41:fd:3f:3c:5a:25:cb:75:24:ab:48:
84:19:dd:5b:be:96:cb:3b:c4:2d:4e:ec:91:1f:9b:
a3:90:0c:05:ff:c6:52:b7:7b:c4:9f:1a:89:aa:fa:
a4:f7:f0:94:00:b7:15:1d:3b:24:3d:c8:67:f3:0c:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1C:F3:36:2A:E5:AB:EA:98:FE:08:9A:A8:DF:1B:67:D1:87:D2:F7
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/UBzzNirlq-qY_giaqN8bZ9GH0vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.14.103.0/24
Signature Algorithm: sha256WithRSAEncryption
04:0c:e4:e5:5c:ce:b8:f4:26:e8:c8:a5:99:91:e0:08:65:49:
40:75:f0:96:d9:9d:c9:05:f9:aa:c5:49:60:93:6a:91:d7:fe:
b4:66:9a:8d:53:2f:55:5f:97:5f:12:4d:a1:22:0d:ff:fe:fd:
9a:54:f8:c2:70:08:ec:6a:98:38:90:cd:a7:e9:6f:b9:28:3c:
1a:6a:bd:b1:65:20:d0:33:2f:71:60:e2:1a:77:16:17:da:9a:
18:2b:97:4c:b7:c9:f9:b6:c6:71:12:60:b6:b8:6b:f3:ca:7e:
83:7c:f4:e5:3a:f9:af:03:60:8b:91:5b:97:89:78:a0:67:89:
12:94:f5:c5:18:1d:b7:0a:0e:b2:e9:8d:b3:c1:58:c0:b2:cb:
eb:11:92:7c:1e:0a:3c:ed:0b:53:72:01:27:ab:78:38:11:d1:
2c:20:8d:c5:66:0e:34:1a:8b:8f:a7:9e:5a:28:44:09:93:7f:
bb:1b:73:0c:da:08:c1:59:67:3d:7a:d4:41:0f:40:32:59:75:
a5:30:bd:4d:5d:a8:85:d2:76:be:5a:52:db:dc:c2:fd:c2:e5:
b3:15:02:4f:7e:7f:e6:c2:0e:55:52:bc:8f:38:cd:8c:4b:58:
bb:32:73:d7:25:45:66:a1:c2:67:0f:9b:3e:42:af:10:86:41:
c7:af:d2:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsytsgGi3zLRVltu7MR2sEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwMTAxMTAwNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDFjZjMzNjJhZTVhYmVhOThmZTA4OWFhOGRmMWI2N2QxODdkMmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne0q1M3tOUUn1CZaOHdN8kHivufH
o1fYUREDxM9+UY4h5NZCnLTsCIpwRuLLx454luck7Ous86dN5qmblaTX60xkctGc
iZvTZIptev95dfySgFA0vlsq14RUkHWMKpenWgs50nu6ZGzcxRFUxfaVfrMNENwK
YMInqrEyIM4B5kscRXXvVmJ9jY29NXh60cAeb844Yxls4BbttTkkZIg7+aZ/5iGw
yPNHxaoqYc71ViG/e2TcQ/INXMIn1Ia5MfHE6rpP4rLGQf0/PFoly3Ukq0iEGd1b
vpbLO8QtTuyRH5ujkAwF/8ZSt3vEnxqJqvqk9/CUALcVHTskPchn8wysIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFAc8zYq5avqmP4ImqjfG2fRh9L3MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvVUJ6ek5pcmxxLXFZX2dpYXFOOGJaOUdIMHZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg5nMA0G
CSqGSIb3DQEBCwUAA4IBAQAEDOTlXM649CboyKWZkeAIZUlAdfCW2Z3JBfmqxUlg
k2qR1/60ZpqNUy9VX5dfEk2hIg3//v2aVPjCcAjsapg4kM2n6W+5KDwaar2xZSDQ
My9xYOIadxYX2poYK5dMt8n5tsZxEmC2uGvzyn6DfPTlOvmvA2CLkVuXiXigZ4kS
lPXFGB23Cg6y6Y2zwVjAssvrEZJ8Hgo87QtTcgEnq3g4EdEsII3FZg40GouPp55a
KEQJk3+7G3MM2gjBWWc9etRBD0AyWXWlML1NXaiF0na+WlLb3ML9wuWzFQJPfn/m
wg5VUryPOM2MS1i7MnPXJUVmocJnD5s+Qq8QhkHHr9I6
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org