Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/am0e64sHVIbQ-bV0RJZM0JVCobc.roa
File: am0e64sHVIbQ-bV0RJZM0JVCobc.roa (raw, json)
Hash identifier: 462/kPDwnwJA2udIPcsOigsj1Xr+KUPXsDw7RMUdr3k=
Subject key identifier: 6A:6D:1E:EB:8B:07:54:86:D0:F9:B5:74:44:96:4C:D0:95:42:A1:B7
Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial: 01856F3014FFA82F05A53CAF440C76D6A8BA
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/am0e64sHVIbQ-bV0RJZM0JVCobc.roa
Signing time: Sun 01 Jan 2023 21:15:00 +0000
ROA not before: Sun 01 Jan 2023 21:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197033
IP address blocks: 193.34.35.0/24 maxlen: 24
193.34.32.0/22 maxlen: 22
91.224.230.0/23 maxlen: 23
185.97.204.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:14:ff:a8:2f:05:a5:3c:af:44:0c:76:d6:a8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
Validity
Not Before: Jan 1 21:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a6d1eeb8b075486d0f9b57444964cd09542a1b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:86:62:46:b3:b7:62:32:19:eb:a9:af:4b:
e1:61:b5:a1:e1:e5:66:74:51:02:7e:d2:66:ec:4e:
c2:6a:eb:04:a6:43:28:b8:6c:49:e4:65:78:31:cf:
28:29:3b:0b:cc:69:f4:ae:da:0b:86:42:c9:ad:8a:
d7:1e:1a:eb:43:e1:c7:28:6b:7b:95:7a:1a:6e:f6:
28:99:c2:be:67:37:ea:57:7a:16:30:14:8b:23:31:
03:80:b9:48:bb:97:af:5b:f5:86:a5:8f:25:8f:bf:
1a:d1:6a:64:da:a8:4f:b3:a7:5d:06:f9:fb:41:98:
4f:91:e2:6a:89:e2:52:96:3d:aa:ca:b0:85:5d:52:
a0:c7:05:7f:97:79:3d:7b:43:80:2f:3a:90:fd:25:
6a:59:da:52:dc:7e:b3:4a:8d:84:96:ee:c2:b0:89:
cf:1b:9a:be:22:bc:a3:9a:69:de:cd:c7:ea:de:0a:
e5:1e:5b:f7:6a:00:af:9a:16:a8:4d:66:76:76:b0:
1d:84:5a:39:d3:17:aa:96:0a:36:99:68:3c:3f:6b:
8d:1c:1d:f9:4f:e5:ba:86:70:4b:31:61:0d:8a:35:
24:db:0c:e9:14:3b:2c:94:1f:e3:cf:9d:ac:10:a6:
ff:1e:38:b9:66:de:a0:8a:13:9e:c5:a2:8f:0a:40:
76:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6D:1E:EB:8B:07:54:86:D0:F9:B5:74:44:96:4C:D0:95:42:A1:B7
X509v3 Authority Key Identifier:
keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/am0e64sHVIbQ-bV0RJZM0JVCobc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.230.0/23
185.97.204.0/22
193.34.32.0/22
Signature Algorithm: sha256WithRSAEncryption
67:af:e0:26:f0:89:e3:8d:9c:b4:a3:dd:68:df:a9:05:7c:e8:
72:90:bd:8c:11:c6:85:fa:8c:4e:67:64:c8:c9:b2:a6:c2:91:
63:af:48:96:66:6b:9d:d4:3b:86:c0:d8:fe:d8:b3:a2:84:9c:
ed:38:7a:bd:da:02:b5:08:b6:ff:1e:10:b7:c5:b9:d8:12:2d:
7b:22:59:6b:ca:58:9e:61:58:ee:4b:ef:99:66:20:37:6b:3d:
6a:71:19:a6:38:5d:74:88:30:f2:10:c0:a0:a0:ad:85:91:82:
47:7a:41:6e:2c:94:6f:d0:aa:0c:2b:be:8c:15:de:f4:26:e0:
49:1f:1e:91:35:00:2d:1c:d2:9e:fe:76:db:08:11:59:15:92:
a0:a4:f5:a6:fb:e7:0a:45:62:36:cc:37:5f:48:64:ad:0b:cb:
72:8b:46:2c:0f:44:ce:13:45:79:ec:ac:24:9c:b4:15:2e:df:
2f:6c:0d:66:61:0d:79:e4:3e:4c:05:fe:bf:88:75:e9:24:ee:
37:6f:d0:4a:0e:98:34:1c:a8:eb:20:f4:13:47:2f:d3:b8:69:
3d:b9:42:f2:c9:97:3b:94:11:9f:b6:e0:bc:cf:5b:6d:90:ad:
c6:7f:17:63:a4:e0:dd:97:c0:f8:b6:cf:33:c3:cd:38:b0:1b:
ee:ea:29:3b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVvMBT/qC8FpTyvRAx21qi6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMTUyN2QxODM5YmY4MzAzNjBkNzE1OTAxMzQzNTRlNmQ5
MDQ2OTcwHhcNMjMwMTAxMjExNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTZkMWVlYjhiMDc1NDg2ZDBmOWI1NzQ0NDk2NGNkMDk1NDJhMWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdCGYkazt2IyGeupr0vhYbWh4eVm
dFECftJm7E7CausEpkMouGxJ5GV4Mc8oKTsLzGn0rtoLhkLJrYrXHhrrQ+HHKGt7
lXoabvYomcK+ZzfqV3oWMBSLIzEDgLlIu5evW/WGpY8lj78a0Wpk2qhPs6ddBvn7
QZhPkeJqieJSlj2qyrCFXVKgxwV/l3k9e0OALzqQ/SVqWdpS3H6zSo2Elu7CsInP
G5q+Iryjmmnezcfq3grlHlv3agCvmhaoTWZ2drAdhFo50xeqlgo2mWg8P2uNHB35
T+W6hnBLMWENijUk2wzpFDsslB/jz52sEKb/Hji5Zt6gihOexaKPCkB2VQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGptHuuLB1SG0Pm1dESWTNCVQqG3MB8GA1UdIwQY
MBaAFE0VJ9GDm/gwNg1xWQE0NU5tkEaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zMDlkMzYtYzQyMC00MzIxLTk1NDAt
ZjNkZjY3M2VhNThjLzEvYW0wZTY0c0hWSWJRLWJWMFJKWk0wSlZDb2JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8zMDlkMzYtYzQyMC00MzIxLTk1NDAtZjNkZjY3M2VhNThj
LzEvVFJVbjBZT2ItREEyRFhGWkFUUTFUbTJRUnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW+DmAwQC
uWHMAwQCwSIgMA0GCSqGSIb3DQEBCwUAA4IBAQBnr+Am8InjjZy0o91o36kFfOhy
kL2MEcaF+oxOZ2TIybKmwpFjr0iWZmud1DuGwNj+2LOihJztOHq92gK1CLb/HhC3
xbnYEi17IllrylieYVjuS++ZZiA3az1qcRmmOF10iDDyEMCgoK2FkYJHekFuLJRv
0KoMK76MFd70JuBJHx6RNQAtHNKe/nbbCBFZFZKgpPWm++cKRWI2zDdfSGStC8ty
i0YsD0TOE0V57KwknLQVLt8vbA1mYQ155D5MBf6/iHXpJO43b9BKDpg0HKjrIPQT
Ry/TuGk9uULyyZc7lBGftuC8z1ttkK3GfxdjpODdl8D4ts8zw804sBvu6ik7
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:35 2024 by rpki-client on console-fra.rpki-client.org