Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/OqdYLDLdOrLXwJU0t2CzEh6QId8.roa
File: OqdYLDLdOrLXwJU0t2CzEh6QId8.roa (raw, json)
Hash identifier: +WqNsp7gmkv1O4IMX5lqX3fIh50c61ihOu565bgc+nE=
Subject key identifier: 3A:A7:58:2C:32:DD:3A:B2:D7:C0:95:34:B7:60:B3:12:1E:90:21:DF
Certificate issuer: /CN=01292e03a731796e1d7b148b1dd235d144352f5d
Certificate serial: 01856CF88609FA0519EA3032F449560D0E39
Authority key identifier: 01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/OqdYLDLdOrLXwJU0t2CzEh6QId8.roa
Signing time: Sun 01 Jan 2023 10:55:04 +0000
ROA not before: Sun 01 Jan 2023 10:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42337
IP address blocks: 195.96.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:86:09:fa:05:19:ea:30:32:f4:49:56:0d:0e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01292e03a731796e1d7b148b1dd235d144352f5d
Validity
Not Before: Jan 1 10:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3aa7582c32dd3ab2d7c09534b760b3121e9021df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d6:b0:82:9a:40:25:a0:89:f0:3a:84:d9:4c:
73:0b:69:de:4a:89:db:21:3d:21:79:20:3f:8b:15:
c4:a6:9b:94:48:d4:23:34:2e:88:71:49:1a:5f:67:
fe:07:69:d2:35:e5:b5:18:7e:c8:b7:3e:f9:73:61:
6b:0e:53:72:ee:f0:94:c8:b3:db:38:4d:6a:c0:fa:
b4:f5:37:06:5c:21:9e:f9:c1:03:65:f1:9a:87:d4:
ca:c8:f4:78:c5:78:54:d4:b3:2e:10:d5:d4:43:9e:
19:b5:97:60:7e:3e:9b:00:d6:95:fa:b1:09:56:4c:
32:09:06:d9:47:c7:1c:66:08:1a:5a:83:e8:ef:33:
23:e9:f7:47:85:a0:95:88:df:25:7f:64:92:72:79:
4b:2a:63:4e:ec:42:75:03:e7:63:e6:bd:23:35:46:
8e:6d:f0:11:9b:66:1e:ff:e3:ed:59:e0:13:ea:fe:
29:7d:35:a9:8c:81:c8:3c:52:77:ef:b7:27:b5:62:
72:e1:db:3c:bf:4d:ee:00:7e:75:b6:20:37:87:ce:
91:3e:bf:79:25:91:e2:d3:92:c4:02:79:5d:fa:9d:
27:af:75:3d:82:67:20:97:65:87:c4:e5:ab:c6:6f:
d3:dc:5e:04:a1:d4:34:ef:42:f6:be:e9:d0:9f:4c:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A7:58:2C:32:DD:3A:B2:D7:C0:95:34:B7:60:B3:12:1E:90:21:DF
X509v3 Authority Key Identifier:
keyid:01:29:2E:03:A7:31:79:6E:1D:7B:14:8B:1D:D2:35:D1:44:35:2F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASkuA6cxeW4dexSLHdI10UQ1L10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/OqdYLDLdOrLXwJU0t2CzEh6QId8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3aa0f5-eae5-49a3-8ee9-0df7df4d5b01/1/ASkuA6cxeW4dexSLHdI10UQ1L10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.96.153.0/24
Signature Algorithm: sha256WithRSAEncryption
73:67:4e:4f:c8:ac:ba:41:13:78:4d:3d:53:a0:45:9d:bd:a0:
b0:c6:51:8a:ef:44:b3:01:34:f6:43:da:0c:ae:46:f6:2e:18:
f9:94:59:38:5c:7e:17:c2:2d:5e:9c:bd:3e:a2:4b:4c:c2:4f:
e9:aa:83:9c:23:ac:69:da:df:25:97:41:9e:6f:06:32:23:42:
31:81:7d:92:fe:0c:ae:2e:98:2d:4f:2f:36:cc:bb:21:b0:61:
08:7e:1c:9f:6e:6c:45:76:da:ad:15:7b:fb:54:11:cc:5c:72:
ba:f4:7d:c5:d9:6a:c9:b4:ee:24:e9:c5:c0:90:0f:4a:ba:5e:
e8:73:63:ff:d5:18:c2:1d:90:4f:a0:eb:35:92:68:26:51:e0:
85:a1:be:00:2a:c2:cd:97:65:84:95:43:a5:20:2a:e0:9b:f3:
e2:bb:cb:96:dd:e4:7a:a8:b2:06:4f:fc:25:99:25:e8:e5:eb:
6d:37:63:91:55:5d:71:a2:2a:5d:94:86:f2:5b:ac:a5:aa:c0:
d1:71:19:2a:83:22:0d:f3:42:6a:82:7e:20:1b:db:e7:f9:64:
dd:a3:72:03:05:cb:38:76:ff:46:48:d3:37:39:6d:b8:c9:db:
60:69:b4:0d:76:2d:15:96:fd:f4:e0:0b:38:9e:f1:dd:59:09:
25:a0:e6:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVs+IYJ+gUZ6jAy9ElWDQ45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMjkyZTAzYTczMTc5NmUxZDdiMTQ4YjFkZDIzNWQxNDQz
NTJmNWQwHhcNMjMwMTAxMTA1NTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWE3NTgyYzMyZGQzYWIyZDdjMDk1MzRiNzYwYjMxMjFlOTAyMWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9awgppAJaCJ8DqE2UxzC2neSonb
IT0heSA/ixXEppuUSNQjNC6IcUkaX2f+B2nSNeW1GH7Itz75c2FrDlNy7vCUyLPb
OE1qwPq09TcGXCGe+cEDZfGah9TKyPR4xXhU1LMuENXUQ54ZtZdgfj6bANaV+rEJ
VkwyCQbZR8ccZggaWoPo7zMj6fdHhaCViN8lf2SScnlLKmNO7EJ1A+dj5r0jNUaO
bfARm2Ye/+PtWeAT6v4pfTWpjIHIPFJ377cntWJy4ds8v03uAH51tiA3h86RPr95
JZHi05LEAnld+p0nr3U9gmcgl2WHxOWrxm/T3F4EodQ070L2vunQn0y1oQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDqnWCwy3Tqy18CVNLdgsxIekCHfMB8GA1UdIwQY
MBaAFAEpLgOnMXluHXsUix3SNdFENS9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTkt
MGRmN2RmNGQ1YjAxLzEvT3FkWUxETGRPckxYd0pVMHQyQ3pFaDZRSWQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8zYWEwZjUtZWFlNS00OWEzLThlZTktMGRmN2RmNGQ1YjAx
LzEvQVNrdUE2Y3hlVzRkZXhTTEhkSTEwVVExTDEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw2CZMA0G
CSqGSIb3DQEBCwUAA4IBAQBzZ05PyKy6QRN4TT1ToEWdvaCwxlGK70SzATT2Q9oM
rkb2Lhj5lFk4XH4Xwi1enL0+oktMwk/pqoOcI6xp2t8ll0GebwYyI0IxgX2S/gyu
LpgtTy82zLshsGEIfhyfbmxFdtqtFXv7VBHMXHK69H3F2WrJtO4k6cXAkA9Kul7o
c2P/1RjCHZBPoOs1kmgmUeCFob4AKsLNl2WElUOlICrgm/Piu8uW3eR6qLIGT/wl
mSXo5ettN2ORVV1xoipdlIbyW6ylqsDRcRkqgyIN80Jqgn4gG9vn+WTdo3IDBcs4
dv9GSNM3OW24ydtgabQNdi0Vlv304As4nvHdWQkloOb6
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:58 2024 by rpki-client on console-fra.rpki-client.org