Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/hLxOAZF0J5skL2r5r6je8ySva7c.roa
File: hLxOAZF0J5skL2r5r6je8ySva7c.roa (raw, json)
Hash identifier: xObbybc0439Qt9fvM/BWxkpZTjJTMRi9gHrO3E6MJww=
Subject key identifier: 84:BC:4E:01:91:74:27:9B:24:2F:6A:F9:AF:A8:DE:F3:24:AF:6B:B7
Certificate issuer: /CN=bc70474792f5083e625f24d6d57aab72d657229e
Certificate serial: 01857102FF0F0FEB8073DF98D1B0C8366FA6
Authority key identifier: BC:70:47:47:92:F5:08:3E:62:5F:24:D6:D5:7A:AB:72:D6:57:22:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/hLxOAZF0J5skL2r5r6je8ySva7c.roa
Signing time: Mon 02 Jan 2023 05:44:59 +0000
ROA not before: Mon 02 Jan 2023 05:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 194.56.182.0/24 maxlen: 24
2a11:3a00::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:ff:0f:0f:eb:80:73:df:98:d1:b0:c8:36:6f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc70474792f5083e625f24d6d57aab72d657229e
Validity
Not Before: Jan 2 05:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84bc4e019174279b242f6af9afa8def324af6bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:84:88:da:34:dc:73:c1:b7:e5:80:0f:9a:
06:68:0c:0f:dd:c4:ab:9d:03:bf:86:89:98:4d:df:
18:8d:c6:68:d1:a2:89:04:44:31:ed:90:5e:02:a7:
f0:4b:8f:7c:ef:34:36:38:bf:52:e1:c3:53:f2:a3:
97:b6:3b:c0:88:fc:55:5a:96:14:de:ac:84:cd:c9:
c1:6d:82:28:46:06:a0:29:13:6e:37:82:13:08:9c:
85:a5:09:e2:bc:f1:00:33:ef:0c:0b:ad:42:2a:a8:
01:5a:15:58:ee:61:b2:a0:d6:a4:19:7c:30:87:e7:
f3:b6:1a:0a:93:ca:94:c9:9a:d1:b0:c2:c4:ba:ab:
eb:fb:fd:1e:7b:30:a3:89:28:b9:75:48:e0:53:81:
e6:bb:5d:64:fa:16:b4:f8:32:0a:4f:1d:d0:2f:48:
86:f4:18:71:92:48:58:5d:2a:b3:f8:2f:dd:48:5b:
9b:a7:71:ec:2e:37:d4:cd:06:5e:33:40:15:7b:99:
a2:be:50:09:e8:98:73:40:d7:5f:80:8e:2f:5f:fa:
84:bc:5a:ac:39:07:9d:ae:de:dd:6c:1b:76:4c:8d:
f6:a5:8b:88:80:c9:98:c8:09:1a:86:33:49:21:cc:
d1:83:be:e2:24:69:90:81:78:50:dd:67:10:3d:e6:
67:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BC:4E:01:91:74:27:9B:24:2F:6A:F9:AF:A8:DE:F3:24:AF:6B:B7
X509v3 Authority Key Identifier:
keyid:BC:70:47:47:92:F5:08:3E:62:5F:24:D6:D5:7A:AB:72:D6:57:22:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHBHR5L1CD5iXyTW1XqrctZXIp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/hLxOAZF0J5skL2r5r6je8ySva7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2b6a6c-c87e-4c6d-bb0a-bbc8027f0a3a/1/vHBHR5L1CD5iXyTW1XqrctZXIp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.182.0/24
IPv6:
2a11:3a00::/48
Signature Algorithm: sha256WithRSAEncryption
2e:56:5e:f9:22:0b:da:bc:f1:bd:78:c4:ac:76:ee:0f:5c:a8:
fb:35:27:5d:74:b2:fd:81:20:4b:03:62:47:6e:96:9a:41:2e:
ab:43:06:ce:d9:c8:f1:8c:c7:1b:d6:9a:9b:7d:12:ce:ab:f0:
52:ba:98:3f:cb:55:25:32:e2:9c:aa:2e:6e:6b:a8:a5:03:81:
c3:8a:dd:bb:99:cb:45:f7:42:d0:12:8c:6a:1e:06:a1:91:35:
39:c1:82:dd:fd:33:ba:08:f8:51:aa:23:2e:6d:3e:57:ca:09:
5d:93:7b:ff:60:31:d1:e9:59:fa:1a:f2:3c:44:95:e1:43:6a:
16:de:7e:a2:b9:d9:d4:f9:7a:53:b0:1d:71:4d:3f:d0:18:6b:
fb:3d:58:a7:bf:e2:f6:5b:31:e8:c1:a2:16:84:93:93:83:82:
1a:86:47:dc:4c:bf:2d:34:db:ae:9b:c7:ca:91:a1:0f:1b:97:
d2:d6:48:2c:8b:2d:91:e2:38:1b:c4:3b:31:e9:ca:c3:da:22:
da:e2:31:70:4a:4a:f9:58:10:11:e0:46:48:d2:53:03:4b:dc:
03:29:a6:04:f6:82:71:c2:75:f3:66:a3:a5:e7:82:63:a7:22:
cc:a6:8b:40:37:06:3d:c2:20:8a:6b:80:e4:8e:7e:b4:72:8c:
92:fc:cc:be
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVxAv8PD+uAc9+Y0bDINm+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNzA0NzQ3OTJmNTA4M2U2MjVmMjRkNmQ1N2FhYjcyZDY1
NzIyOWUwHhcNMjMwMTAyMDU0NDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGJjNGUwMTkxNzQyNzliMjQyZjZhZjlhZmE4ZGVmMzI0YWY2YmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/mEiNo03HPBt+WAD5oGaAwP3cSr
nQO/homYTd8YjcZo0aKJBEQx7ZBeAqfwS4987zQ2OL9S4cNT8qOXtjvAiPxVWpYU
3qyEzcnBbYIoRgagKRNuN4ITCJyFpQnivPEAM+8MC61CKqgBWhVY7mGyoNakGXww
h+fzthoKk8qUyZrRsMLEuqvr+/0eezCjiSi5dUjgU4Hmu11k+ha0+DIKTx3QL0iG
9BhxkkhYXSqz+C/dSFubp3HsLjfUzQZeM0AVe5mivlAJ6JhzQNdfgI4vX/qEvFqs
OQedrt7dbBt2TI32pYuIgMmYyAkahjNJIczRg77iJGmQgXhQ3WcQPeZnJQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIS8TgGRdCebJC9q+a+o3vMkr2u3MB8GA1UdIwQY
MBaAFLxwR0eS9Qg+Yl8k1tV6q3LWVyKeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkhCSFI1TDFDRDVpWHlUVzFYcXJjdFpYSXA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yYjZhNmMtYzg3ZS00YzZkLWJiMGEt
YmJjODAyN2YwYTNhLzEvaEx4T0FaRjBKNXNrTDJyNXI2amU4eVN2YTdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yYjZhNmMtYzg3ZS00YzZkLWJiMGEtYmJjODAyN2YwYTNh
LzEvdkhCSFI1TDFDRDVpWHlUVzFYcXJjdFpYSXA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwji2MA8E
AgACMAkDBwAqEToAAAAwDQYJKoZIhvcNAQELBQADggEBAC5WXvkiC9q88b14xKx2
7g9cqPs1J110sv2BIEsDYkdulppBLqtDBs7ZyPGMxxvWmpt9Es6r8FK6mD/LVSUy
4pyqLm5rqKUDgcOK3buZy0X3QtASjGoeBqGRNTnBgt39M7oI+FGqIy5tPlfKCV2T
e/9gMdHpWfoa8jxEleFDahbefqK52dT5elOwHXFNP9AYa/s9WKe/4vZbMejBohaE
k5ODghqGR9xMvy00266bx8qRoQ8bl9LWSCyLLZHiOBvEOzHpysPaItriMXBKSvlY
EBHgRkjSUwNL3AMppgT2gnHCdfNmo6XngmOnIsymi0A3Bj3CIIprgOSOfrRyjJL8
zL4=
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:25 2024 by rpki-client on console-fra.rpki-client.org