Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/5rZin2wnwZVXf8_HXQCktEhYMN4.roa
File: 5rZin2wnwZVXf8_HXQCktEhYMN4.roa (raw, json)
Hash identifier: q3OxIi0Rhdipb/0GAvyyNIextFu2tKcMX9mqIneg1m0=
Subject key identifier: E6:B6:62:9F:6C:27:C1:95:57:7F:CF:C7:5D:00:A4:B4:48:58:30:DE
Certificate issuer: /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial: 0185719E92BA1D61258E155347FB2DFE9324
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/5rZin2wnwZVXf8_HXQCktEhYMN4.roa
Signing time: Mon 02 Jan 2023 08:34:55 +0000
ROA not before: Mon 02 Jan 2023 08:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2865
IP address blocks: 195.138.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:92:ba:1d:61:25:8e:15:53:47:fb:2d:fe:93:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Validity
Not Before: Jan 2 08:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6b6629f6c27c195577fcfc75d00a4b4485830de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:da:4b:b9:6b:c8:34:06:60:65:eb:e7:85:
6f:c2:bd:65:f6:53:68:10:ca:20:1e:7d:19:ea:4a:
37:69:8e:5b:7a:59:5f:1e:be:e4:df:bd:06:ad:c4:
58:75:13:4e:0a:9f:f0:6c:74:c8:ce:41:a1:2f:a3:
db:79:99:d7:35:b5:68:64:b0:85:62:74:04:0c:43:
34:a0:c8:34:c7:f5:f2:2d:8e:b2:26:f2:ba:a8:dc:
82:38:8b:05:f1:c6:04:1c:b0:95:45:b9:6b:73:2d:
a1:07:4e:e8:1f:7a:66:1d:f3:f0:22:8c:06:d9:56:
6e:20:8e:16:be:16:73:8d:ac:c6:d3:bc:79:c5:a6:
49:c2:f7:ea:3e:26:de:43:64:fb:a9:5b:c3:69:5b:
d3:cb:d2:e2:50:f6:01:cb:8f:a6:77:ad:ed:90:db:
e7:2a:46:5e:50:44:87:f7:a7:8f:07:0a:ce:cc:2b:
09:42:00:d1:af:66:09:43:60:eb:81:30:ec:8e:e5:
e5:7d:77:c0:b9:1a:e2:90:d4:30:63:38:d9:e3:7e:
89:ed:3f:17:ba:e4:8d:87:c0:69:75:78:31:ed:fb:
f5:17:fd:a5:bf:68:c0:f1:13:7c:66:cf:f9:d4:3c:
32:4c:fd:4e:3a:ac:40:0d:d2:66:70:4f:22:e4:c4:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B6:62:9F:6C:27:C1:95:57:7F:CF:C7:5D:00:A4:B4:48:58:30:DE
X509v3 Authority Key Identifier:
keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/5rZin2wnwZVXf8_HXQCktEhYMN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.221.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:02:87:4a:ac:9f:c2:b8:0e:6a:be:c3:0d:e1:95:26:ea:8d:
30:48:ca:1d:8b:e9:cc:fe:95:fe:3f:e6:32:15:dc:97:b1:47:
c6:92:00:a5:33:f4:3e:e0:19:46:8c:fe:77:65:de:33:b7:f4:
48:ea:21:6b:a0:8d:c8:a5:0a:74:88:77:0a:08:e4:84:98:ec:
22:ff:ff:1f:69:2d:58:d1:88:c9:7d:4f:6f:2d:67:35:6c:97:
27:e2:2b:bd:14:f6:c3:df:9a:d2:3a:3e:cd:3b:16:b4:e8:86:
6f:a2:79:5d:c2:7b:26:0f:e0:41:8f:ad:dc:2e:aa:86:22:c5:
2a:63:f9:67:c1:2c:91:20:83:54:c9:2c:53:77:65:e2:dd:7e:
22:a0:77:73:52:5a:c4:10:96:32:db:72:a7:2f:32:7e:f9:28:
dd:9e:b7:d1:74:85:cd:9e:02:1a:a1:f6:60:45:e5:24:c5:c7:
b4:59:09:7e:e7:dd:aa:af:a8:fa:42:cb:c1:1c:62:0e:ba:8a:
ab:85:54:1c:2e:5d:0e:e7:6f:9b:0d:a7:ae:97:ad:4e:68:8d:
6f:27:cd:11:ea:a4:a8:10:4f:08:60:e5:a3:4e:a9:39:10:25:
e8:a5:39:c9:e2:ba:70:dc:1c:79:47:4a:a2:27:95:f9:1c:a4:
6f:ac:37:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxnpK6HWEljhVTR/st/pMkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YTdlNWEzM2Q5YzVhOTY1ZDlmYmZkZWVjZGM4NzFhZjBh
NWQ0ZjgwHhcNMjMwMTAyMDgzNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmI2NjI5ZjZjMjdjMTk1NTc3ZmNmYzc1ZDAwYTRiNDQ4NTgzMGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDvaS7lryDQGYGXr54Vvwr1l9lNo
EMogHn0Z6ko3aY5bellfHr7k370GrcRYdRNOCp/wbHTIzkGhL6PbeZnXNbVoZLCF
YnQEDEM0oMg0x/XyLY6yJvK6qNyCOIsF8cYEHLCVRblrcy2hB07oH3pmHfPwIowG
2VZuII4WvhZzjazG07x5xaZJwvfqPibeQ2T7qVvDaVvTy9LiUPYBy4+md63tkNvn
KkZeUESH96ePBwrOzCsJQgDRr2YJQ2DrgTDsjuXlfXfAuRrikNQwYzjZ436J7T8X
uuSNh8BpdXgx7fv1F/2lv2jA8RN8Zs/51DwyTP1OOqxADdJmcE8i5MRrlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOa2Yp9sJ8GVV3/Px10ApLRIWDDeMB8GA1UdIwQY
MBaAFESn5aM9nFqWXZ+/3uzchxrwpdT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYt
MjFjZjU2Y2JjZTEyLzEvNXJaaW4yd253WlZYZjhfSFhRQ2t0RWhZTU40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYtMjFjZjU2Y2JjZTEy
LzEvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4rdMA0G
CSqGSIb3DQEBCwUAA4IBAQDJAodKrJ/CuA5qvsMN4ZUm6o0wSModi+nM/pX+P+Yy
FdyXsUfGkgClM/Q+4BlGjP53Zd4zt/RI6iFroI3IpQp0iHcKCOSEmOwi//8faS1Y
0YjJfU9vLWc1bJcn4iu9FPbD35rSOj7NOxa06IZvonldwnsmD+BBj63cLqqGIsUq
Y/lnwSyRIINUySxTd2Xi3X4ioHdzUlrEEJYy23KnLzJ++SjdnrfRdIXNngIaofZg
ReUkxce0WQl+592qr6j6QsvBHGIOuoqrhVQcLl0O52+bDaeul61OaI1vJ80R6qSo
EE8IYOWjTqk5ECXopTnJ4rpw3Bx5R0qiJ5X5HKRvrDcY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:02 2024 by rpki-client on console-fra.rpki-client.org