Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/w1R4EQlVkQAwyd6DOAfOuO7UnHw.roa
File: w1R4EQlVkQAwyd6DOAfOuO7UnHw.roa (raw, json)
Hash identifier: pEgeWlaiF8JrM7z8JZ+I2YNTc/mYC4no/Ut/dUqoh6M=
Subject key identifier: C3:54:78:11:09:55:91:00:30:C9:DE:83:38:07:CE:B8:EE:D4:9C:7C
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0189B14EC51BAB933722C60759D5673D35D4
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/w1R4EQlVkQAwyd6DOAfOuO7UnHw.roa
Signing time: Tue 01 Aug 2023 13:34:36 +0000
ROA not before: Tue 01 Aug 2023 13:34:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 195.114.200.0/24 maxlen: 24
194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.222.0/24 maxlen: 24
194.143.223.0/24 maxlen: 24
45.155.242.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:4e:c5:1b:ab:93:37:22:c6:07:59:d5:67:3d:35:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Aug 1 13:34:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c35478110955910030c9de833807ceb8eed49c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:bc:24:07:0e:fb:70:fe:fa:ba:d3:e6:52:
85:b9:d3:fb:77:d5:d1:e3:2e:48:96:4d:f9:01:f7:
3f:d3:c1:80:e2:ce:66:91:d9:e1:56:53:7c:0c:ba:
85:47:a8:e5:b2:5f:66:4b:88:c9:e9:79:96:66:f4:
a8:69:37:dd:7b:b8:d9:1c:c1:21:64:fe:2c:20:c8:
e3:af:aa:ed:17:17:d6:b8:e4:a5:a4:88:d3:48:cb:
d2:7a:f3:99:c2:b8:67:43:99:e8:81:40:6b:e7:98:
f3:0e:eb:f0:67:c1:f4:4d:22:2b:65:78:bc:cf:51:
32:eb:10:d2:42:5e:17:aa:91:27:43:c3:24:16:93:
d0:f2:fc:1a:bf:48:61:db:e4:de:26:cc:73:61:ae:
78:a3:b6:93:30:8a:36:02:73:db:80:aa:a6:91:ae:
31:01:b0:9a:5f:b2:f3:93:96:2b:a9:48:76:17:97:
2f:4e:c7:74:e5:56:61:6d:f9:ed:6d:6d:5b:a1:cf:
16:8f:81:fb:47:eb:79:21:99:3c:51:78:e7:c9:7a:
29:7d:93:92:b4:49:43:08:26:a9:9d:c7:e4:ba:d9:
d1:cc:dc:3e:f8:a1:4b:40:c0:af:35:da:4d:9d:58:
8b:16:ef:04:22:6f:31:bd:78:cc:5f:65:19:9b:a1:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:54:78:11:09:55:91:00:30:C9:DE:83:38:07:CE:B8:EE:D4:9C:7C
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/w1R4EQlVkQAwyd6DOAfOuO7UnHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/23
194.143.217.0-194.143.218.255
194.143.222.0/23
195.114.200.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d5:47:62:f4:fb:98:2b:e1:f2:5c:f6:a9:62:b8:e4:00:a4:
cf:dd:81:32:ea:67:13:40:e8:84:23:aa:cf:f7:25:dc:ea:99:
cb:6e:cb:32:48:2b:d8:d4:fc:0d:5a:47:67:88:e1:a5:39:13:
33:79:fc:ec:bc:1c:f5:d6:50:f2:b3:f2:cf:e1:b9:77:47:f8:
53:dd:88:86:a7:36:1c:a7:de:3c:85:43:52:64:60:d3:57:c9:
1a:4f:0d:11:c4:4a:d5:18:60:7e:bd:c3:e6:3a:c2:3f:71:67:
ac:bd:b2:a2:e2:89:c2:6b:5a:b8:dc:ac:db:88:9e:81:62:5e:
27:f9:da:ef:91:6d:3d:05:59:48:d5:0a:6e:f8:94:2d:36:c3:
5b:41:f2:c6:d2:fe:51:d8:94:e9:6e:5d:3e:d8:ba:0f:ac:8f:
f4:d3:86:bc:f6:61:ab:44:c6:d7:88:c7:68:0f:c6:30:c7:a5:
61:b2:25:9b:69:ec:86:6c:0c:4e:b4:a6:b5:2f:d9:04:5c:7e:
c4:31:5a:f0:e7:89:55:2e:7c:94:af:6a:bd:89:37:e6:84:9c:
bb:61:30:f4:c9:61:94:ed:07:6d:a3:fb:41:75:ee:37:4e:2c:
f2:34:79:59:42:52:05:24:e3:95:95:0d:f2:7f:59:22:52:c3:
67:87:6d:5d
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYmxTsUbq5M3IsYHWdVnPTXUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjMwODAxMTMzNDM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzU0NzgxMTA5NTU5MTAwMzBjOWRlODMzODA3Y2ViOGVlZDQ5YzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTa8JAcO+3D++rrT5lKFudP7d9XR
4y5Ilk35Afc/08GA4s5mkdnhVlN8DLqFR6jlsl9mS4jJ6XmWZvSoaTfde7jZHMEh
ZP4sIMjjr6rtFxfWuOSlpIjTSMvSevOZwrhnQ5nogUBr55jzDuvwZ8H0TSIrZXi8
z1Ey6xDSQl4XqpEnQ8MkFpPQ8vwav0hh2+TeJsxzYa54o7aTMIo2AnPbgKqmka4x
AbCaX7Lzk5YrqUh2F5cvTsd05VZhbfntbW1boc8Wj4H7R+t5IZk8UXjnyXopfZOS
tElDCCapncfkutnRzNw++KFLQMCvNdpNnViLFu8EIm8xvXjMX2UZm6HjcQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFMNUeBEJVZEAMMnegzgHzrju1Jx8MB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvdzFSNEVRbFZrUUF3eWQ2RE9BZk91TzdVbkh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBLZvyMAwD
BADCj9kDBADCj9oDBAHCj94DBADDcsgwDQYJKoZIhvcNAQELBQADggEBABrVR2L0
+5gr4fJc9qliuOQApM/dgTLqZxNA6IQjqs/3JdzqmctuyzJIK9jU/A1aR2eI4aU5
EzN5/Oy8HPXWUPKz8s/huXdH+FPdiIanNhyn3jyFQ1JkYNNXyRpPDRHEStUYYH69
w+Y6wj9xZ6y9sqLiicJrWrjcrNuInoFiXif52u+RbT0FWUjVCm74lC02w1tB8sbS
/lHYlOluXT7Yug+sj/TThrz2YatExteIx2gPxjDHpWGyJZtp7IZsDE60prUv2QRc
fsQxWvDniVUufJSvar2JN+aEnLthMPTJYZTtB22j+0F17jdOLPI0eVlCUgUk45WV
DfJ/WSJSw2eHbV0=
Generated at Mon Aug 7 09:37:12 2023 by rpki-client on console-ams.rpki-client.org