Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/Tpl-kvvchiT27nNH1SRp3IITf6I.roa
File: Tpl-kvvchiT27nNH1SRp3IITf6I.roa (raw, json)
Hash identifier: 7KaVZRG/6+UWddLSJmyGtymaFXiwVo0/o7QkOJR7BTQ=
Subject key identifier: 4E:99:7E:92:FB:DC:86:24:F6:EE:73:47:D5:24:69:DC:82:13:7F:A2
Certificate issuer: /CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Certificate serial: 01856F3019FF03BBB053A525E2F9693DAF1A
Authority key identifier: E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/Tpl-kvvchiT27nNH1SRp3IITf6I.roa
Signing time: Sun 01 Jan 2023 21:15:01 +0000
ROA not before: Sun 01 Jan 2023 21:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39311
IP address blocks: 87.237.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:19:ff:03:bb:b0:53:a5:25:e2:f9:69:3d:af:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e93f3a41e6be524115c6c2b558bc280043a0224e
Validity
Not Before: Jan 1 21:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e997e92fbdc8624f6ee7347d52469dc82137fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:c1:8f:99:92:d9:66:42:41:6b:a0:1e:44:
b3:14:e5:fe:2b:ac:7e:39:49:02:66:2c:56:cb:42:
88:7e:34:21:82:52:b4:50:e6:a2:42:a4:56:75:91:
26:2e:37:5c:5c:35:bd:83:ba:05:9d:d3:d8:80:2a:
20:10:8b:91:8b:37:5e:11:7a:4c:fc:2e:28:19:44:
ab:d1:54:ff:ed:4f:65:ee:11:e5:1f:b8:e8:1e:ed:
db:32:b8:5c:ef:2a:3d:cd:10:50:2e:6a:aa:d2:04:
e8:fd:d0:ff:a2:f7:4e:92:6d:94:9f:47:54:c6:e9:
81:ca:70:b6:06:37:71:77:6e:45:b4:c6:f8:b1:8d:
1d:ec:98:a2:b9:57:5d:dc:bd:44:69:84:aa:e5:da:
a9:d2:82:d2:e4:41:6a:0b:6f:ff:4b:73:d4:30:86:
4b:b1:06:5b:4a:3e:b5:c8:39:eb:fe:49:ac:2a:16:
ad:8a:93:96:7e:af:20:74:ce:18:eb:ef:5b:d7:92:
ad:8d:bd:ed:26:08:64:2b:c3:9f:bd:3a:49:b8:35:
3e:26:25:9d:19:db:84:c4:21:c8:84:ef:ab:64:5e:
82:e4:ae:91:28:86:ba:64:51:d8:c7:35:e6:84:05:
47:8f:4c:1e:18:3c:cf:3b:dc:a1:b5:bc:37:51:ae:
cd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:99:7E:92:FB:DC:86:24:F6:EE:73:47:D5:24:69:DC:82:13:7F:A2
X509v3 Authority Key Identifier:
keyid:E9:3F:3A:41:E6:BE:52:41:15:C6:C2:B5:58:BC:28:00:43:A0:22:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T86Qea-UkEVxsK1WLwoAEOgIk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/Tpl-kvvchiT27nNH1SRp3IITf6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a1740e-8404-42d2-af5c-10e24625a4d4/1/6T86Qea-UkEVxsK1WLwoAEOgIk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.200.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:5b:02:4f:e0:37:fb:20:eb:99:c6:4d:be:5a:61:53:7a:7b:
c7:ae:80:a1:95:cb:28:1a:58:5d:f9:3e:ea:58:fb:54:76:24:
d8:44:ac:e4:10:fe:95:86:d4:83:d9:0e:5b:7e:61:b0:9f:44:
da:5b:b2:ff:49:91:a1:65:96:42:8f:f6:c9:78:65:5b:be:e4:
27:0a:e7:0f:08:3d:d8:fc:76:fa:d2:8b:0e:f0:35:3b:eb:43:
df:8e:64:30:03:b3:33:8e:33:2b:9b:3e:e0:94:a4:46:e1:e3:
cc:e8:1a:12:2e:a6:f6:60:dc:23:01:aa:82:08:82:5d:8b:6c:
31:bd:29:dd:10:5a:49:25:63:2f:6a:7d:a1:16:8e:db:ba:04:
dd:b2:a8:5c:7c:8a:6e:f7:1d:b0:c4:9b:aa:78:5c:6f:5e:15:
33:30:34:18:e4:7d:61:bf:a4:59:36:b5:0f:fd:1e:d5:f7:06:
96:c9:e3:5e:1f:31:bd:a4:c7:6e:0e:db:38:0f:5d:4d:00:77:
93:97:f3:86:7e:f7:bd:b1:9e:e8:3d:05:85:02:11:85:9f:c7:
a3:74:62:64:1f:a5:6e:0a:1f:a7:00:19:92:17:ac:5b:d4:be:
a4:0f:65:55:fb:6b:d9:07:d9:53:31:e6:ef:ad:dc:3a:9a:22:
72:94:21:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvMBn/A7uwU6Ul4vlpPa8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5M2YzYTQxZTZiZTUyNDExNWM2YzJiNTU4YmMyODAwNDNh
MDIyNGUwHhcNMjMwMTAxMjExNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTk5N2U5MmZiZGM4NjI0ZjZlZTczNDdkNTI0NjlkYzgyMTM3ZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5TBj5mS2WZCQWugHkSzFOX+K6x+
OUkCZixWy0KIfjQhglK0UOaiQqRWdZEmLjdcXDW9g7oFndPYgCogEIuRizdeEXpM
/C4oGUSr0VT/7U9l7hHlH7joHu3bMrhc7yo9zRBQLmqq0gTo/dD/ovdOkm2Un0dU
xumBynC2Bjdxd25FtMb4sY0d7JiiuVdd3L1EaYSq5dqp0oLS5EFqC2//S3PUMIZL
sQZbSj61yDnr/kmsKhatipOWfq8gdM4Y6+9b15Ktjb3tJghkK8OfvTpJuDU+JiWd
GduExCHIhO+rZF6C5K6RKIa6ZFHYxzXmhAVHj0weGDzPO9yhtbw3Ua7NsQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE6ZfpL73IYk9u5zR9UkadyCE3+iMB8GA1UdIwQY
MBaAFOk/OkHmvlJBFcbCtVi8KABDoCJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlQ4NlFlYS1Va0VWeHNLMVdMd29BRU9nSWs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hMTc0MGUtODQwNC00MmQyLWFmNWMt
MTBlMjQ2MjVhNGQ0LzEvVHBsLWt2dmNoaVQyN25OSDFTUnAzSUlUZjZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hMTc0MGUtODQwNC00MmQyLWFmNWMtMTBlMjQ2MjVhNGQ0
LzEvNlQ4NlFlYS1Va0VWeHNLMVdMd29BRU9nSWs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+3IMA0G
CSqGSIb3DQEBCwUAA4IBAQBfWwJP4Df7IOuZxk2+WmFTenvHroChlcsoGlhd+T7q
WPtUdiTYRKzkEP6VhtSD2Q5bfmGwn0TaW7L/SZGhZZZCj/bJeGVbvuQnCucPCD3Y
/Hb60osO8DU760PfjmQwA7MzjjMrmz7glKRG4ePM6BoSLqb2YNwjAaqCCIJdi2wx
vSndEFpJJWMvan2hFo7bugTdsqhcfIpu9x2wxJuqeFxvXhUzMDQY5H1hv6RZNrUP
/R7V9waWyeNeHzG9pMduDts4D11NAHeTl/OGfve9sZ7oPQWFAhGFn8ejdGJkH6Vu
Ch+nABmSF6xb1L6kD2VV+2vZB9lTMebvrdw6miJylCEx
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:22 2024 by rpki-client on console-fra.rpki-client.org