Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/CEtUlSrj1XmPsz9nPBbNx3XbwS0.roa
File: CEtUlSrj1XmPsz9nPBbNx3XbwS0.roa (raw, json)
Hash identifier: JUA96fF3HefXQQqxfD5xkZym2RcbdRQZrUR9JGRHJcU=
Subject key identifier: 08:4B:54:95:2A:E3:D5:79:8F:B3:3F:67:3C:16:CD:C7:75:DB:C1:2D
Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial: 0189546C00C168B08E6F603582C69E8DD91B
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/CEtUlSrj1XmPsz9nPBbNx3XbwS0.roa
Signing time: Fri 14 Jul 2023 12:41:51 +0000
ROA not before: Fri 14 Jul 2023 12:41:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1293
IP address blocks: 195.160.96.0/19 maxlen: 19
195.160.0.0/18 maxlen: 18
195.160.149.0/24 maxlen: 24
195.160.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:54:6c:00:c1:68:b0:8e:6f:60:35:82:c6:9e:8d:d9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
Validity
Not Before: Jul 14 12:41:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=084b54952ae3d5798fb33f673c16cdc775dbc12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7a:76:b4:3b:08:af:4c:f4:e7:5a:90:d1:45:
4b:2a:c0:5a:c8:45:41:8e:9a:9f:84:fd:5b:9b:09:
a0:19:30:c4:ea:e2:55:5b:0b:4c:bb:56:0c:73:0a:
61:87:e7:80:7f:38:c8:f4:25:61:d3:86:3f:73:6e:
d5:5d:eb:74:14:b8:02:50:1f:61:6d:60:0c:a1:c6:
0c:77:fd:c4:33:d5:16:1a:d0:70:f8:66:7c:bc:71:
9b:bc:b2:32:ed:04:b7:fc:e2:16:f5:83:53:10:55:
01:be:34:9c:f2:fa:e1:0f:67:b5:73:55:df:69:91:
f8:c1:a7:34:0d:5e:4a:27:00:be:6e:23:12:92:fe:
6b:16:5a:78:d1:9b:7e:30:5b:c8:97:86:43:19:38:
6e:36:40:e3:c5:43:dd:cd:77:09:1b:de:28:d9:20:
93:c3:2d:c5:57:14:a3:89:68:8e:cd:05:22:c1:65:
79:ee:84:60:57:ef:8d:53:60:3d:b3:21:31:69:e0:
ff:a0:89:49:51:a3:0c:67:d4:a0:07:d8:5b:9b:61:
48:f6:df:70:44:84:a5:ba:74:2b:65:a4:2d:ab:4d:
a4:18:95:a6:eb:24:8e:03:66:b0:61:7b:15:7b:7d:
09:2b:6a:8e:80:28:da:b8:db:4c:51:d3:c4:40:5b:
f8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4B:54:95:2A:E3:D5:79:8F:B3:3F:67:3C:16:CD:C7:75:DB:C1:2D
X509v3 Authority Key Identifier:
keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/CEtUlSrj1XmPsz9nPBbNx3XbwS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.0.0/18
195.160.96.0/19
195.160.148.0/23
Signature Algorithm: sha256WithRSAEncryption
41:a7:51:21:50:51:cd:2c:25:36:ad:38:e8:d7:5c:a8:1e:80:
43:df:78:84:47:aa:14:63:96:e4:78:b1:8a:3b:8d:01:bc:40:
0d:e9:4e:e9:e9:38:a6:ec:ec:b1:67:53:83:24:95:28:7d:e0:
b6:d7:61:8f:bc:fd:89:50:ec:c9:26:8b:c9:79:b3:a6:26:db:
ac:37:e4:5c:d8:df:46:73:14:49:eb:ba:8c:75:a4:0b:8c:9f:
08:b9:95:a4:1f:7d:59:75:b0:16:c6:93:96:40:9b:3a:d3:4c:
85:3f:e9:ab:ba:6a:b7:4d:ce:83:f8:06:dd:4e:21:8f:64:1b:
24:a0:42:d1:74:df:ed:f6:20:6d:f3:c1:8d:5f:b0:25:d5:68:
bc:e3:4c:0a:bb:fd:fa:86:c1:11:b1:e5:e1:f9:d3:c5:28:0d:
df:7c:71:68:24:6d:96:95:21:c9:20:ea:8b:ed:29:72:76:46:
c5:ea:38:e1:7c:d9:85:f2:5a:2b:fd:ab:04:cd:f4:39:b2:9c:
52:f9:11:87:29:c9:62:a6:41:20:48:b8:9b:ed:6f:51:89:f2:
25:55:1f:1d:c7:d6:65:2d:39:e8:e1:5b:2d:c9:9d:aa:ef:a6:
2a:54:ba:04:ce:9d:50:68:ad:e9:74:dd:63:ac:2b:5c:5c:b8:
57:51:52:1a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYlUbADBaLCOb2A1gsaejdkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTE2Nzg4NmRhODE1MjQ0MzFiYmYyZWZiMDU3MjkxNGI2
ODZlYmMwHhcNMjMwNzE0MTI0MTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODRiNTQ5NTJhZTNkNTc5OGZiMzNmNjczYzE2Y2RjNzc1ZGJjMTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHp2tDsIr0z051qQ0UVLKsBayEVB
jpqfhP1bmwmgGTDE6uJVWwtMu1YMcwphh+eAfzjI9CVh04Y/c27VXet0FLgCUB9h
bWAMocYMd/3EM9UWGtBw+GZ8vHGbvLIy7QS3/OIW9YNTEFUBvjSc8vrhD2e1c1Xf
aZH4wac0DV5KJwC+biMSkv5rFlp40Zt+MFvIl4ZDGThuNkDjxUPdzXcJG94o2SCT
wy3FVxSjiWiOzQUiwWV57oRgV++NU2A9syExaeD/oIlJUaMMZ9SgB9hbm2FI9t9w
RISlunQrZaQtq02kGJWm6ySOA2awYXsVe30JK2qOgCjauNtMUdPEQFv4DwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAhLVJUq49V5j7M/ZzwWzcd128EtMB8GA1UdIwQY
MBaAFH4RZ4htqBUkQxu/LvsFcpFLaG68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYt
OWIyODJjNjQzMjU2LzEvQ0V0VWxTcmoxWG1Qc3o5blBCYk54M1hid1MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYtOWIyODJjNjQzMjU2
LzEvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQGw6AAAwQF
w6BgAwQBw6CUMA0GCSqGSIb3DQEBCwUAA4IBAQBBp1EhUFHNLCU2rTjo11yoHoBD
33iER6oUY5bkeLGKO40BvEAN6U7p6Tim7OyxZ1ODJJUofeC212GPvP2JUOzJJovJ
ebOmJtusN+Rc2N9GcxRJ67qMdaQLjJ8IuZWkH31ZdbAWxpOWQJs600yFP+mrumq3
Tc6D+AbdTiGPZBskoELRdN/t9iBt88GNX7Al1Wi840wKu/36hsERseXh+dPFKA3f
fHFoJG2WlSHJIOqL7SlydkbF6jjhfNmF8lor/asEzfQ5spxS+RGHKclipkEgSLib
7W9RifIlVR8dx9ZlLTno4VstyZ2q76YqVLoEzp1QaK3pdN1jrCtcXLhXUVIa
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:49 2024 by rpki-client on console-ams.rpki-client.org