Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/bu8XRgw2qNkUH2nQq4NKzu6ffqc.roa
File: bu8XRgw2qNkUH2nQq4NKzu6ffqc.roa (raw, json)
Hash identifier: 44OPRzJhl7u+vxVn2jQMHArDsHvhjFieAf8Koh8zM5c=
Subject key identifier: 6E:EF:17:46:0C:36:A8:D9:14:1F:69:D0:AB:83:4A:CE:EE:9F:7E:A7
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0187BA603D4D1F82EC20035A6CCAC27FDCE9
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/bu8XRgw2qNkUH2nQq4NKzu6ffqc.roa
Signing time: Tue 25 Apr 2023 21:44:41 +0000
ROA not before: Tue 25 Apr 2023 21:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 176.223.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ba:60:3d:4d:1f:82:ec:20:03:5a:6c:ca:c2:7f:dc:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Apr 25 21:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eef17460c36a8d9141f69d0ab834aceee9f7ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b1:61:42:ba:af:a3:98:f2:6b:85:89:4e:eb:
5f:f4:5a:b0:3f:92:23:a5:90:5d:76:7a:92:b7:36:
48:38:62:ab:3f:d0:63:ab:19:d0:9d:e1:33:49:81:
85:10:f5:bf:a2:0c:e7:d2:f9:e9:3c:6e:ea:7a:16:
b7:c4:bd:19:89:d3:8e:8e:e7:1a:52:8b:af:86:27:
ef:ad:80:d3:b2:72:0f:64:7a:06:5b:50:98:10:fe:
20:f2:c3:34:67:b9:60:e1:ca:1f:e2:51:69:c1:9c:
af:ef:e0:8f:ec:52:5e:ae:f0:81:52:98:cd:e0:d9:
3c:69:72:1e:09:32:8a:8e:80:9d:ff:d7:0e:16:f1:
30:4a:b9:9a:38:de:3a:ee:ab:a2:95:3d:ee:91:18:
eb:e2:36:4d:4b:81:f0:3c:ab:c3:df:de:5c:cc:40:
bd:1a:33:88:bc:3b:93:4c:7a:3d:85:4c:19:12:b3:
8c:c6:53:33:e1:95:38:b3:01:c0:44:70:26:3f:b8:
2f:f7:22:69:ce:7a:c8:14:6e:24:a9:26:e2:ad:0e:
b8:30:df:0f:14:43:72:1c:e9:1e:41:ab:42:ab:01:
50:4e:b9:b6:b3:68:30:77:22:de:91:35:67:a7:81:
9a:d5:09:dc:4f:3e:99:f3:0b:77:5f:a5:6c:b1:87:
9c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EF:17:46:0C:36:A8:D9:14:1F:69:D0:AB:83:4A:CE:EE:9F:7E:A7
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/bu8XRgw2qNkUH2nQq4NKzu6ffqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.223.190.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:7e:de:2f:19:fe:15:ee:d3:4c:5b:b8:7e:9c:c3:67:d5:5d:
c6:d5:cd:cc:9a:30:91:8a:09:9e:7c:42:2d:f6:f3:dd:c5:87:
8f:d1:80:3a:30:1b:66:09:49:f8:90:6a:45:0f:7f:0b:26:84:
ad:25:b9:39:8a:bf:76:f8:a0:8a:af:ff:fa:52:bc:c7:08:a5:
3a:a1:d0:fe:8a:2e:f0:55:b8:d0:6b:bf:e5:85:f5:8b:21:0f:
38:f7:0a:f5:14:9b:3a:15:99:d2:00:7c:0a:a5:c2:31:3d:35:
68:2c:0f:71:26:71:ae:ac:ce:ea:67:9d:57:4e:3a:01:fc:51:
a1:41:be:59:e4:f7:1d:29:74:13:d1:4e:2d:fe:bc:69:e2:38:
a1:09:92:b0:e2:7e:45:1c:b4:f4:89:44:dc:cb:8a:49:d4:81:
c3:50:87:13:d4:bb:3c:be:42:e2:24:79:9d:39:05:69:92:0d:
f8:0b:07:0c:c3:8d:e8:6d:32:39:61:1b:1c:4d:6a:b5:e2:d4:
76:50:21:2a:b3:c6:67:01:4f:07:79:d4:30:cd:5a:03:bd:65:
ff:d0:c6:7d:45:ba:19:a7:72:e5:95:01:c2:70:83:49:f3:84:
2a:ca:7a:80:0c:b2:3b:f2:fb:ba:dc:3f:c4:0f:6a:02:4f:1a:
72:c7:8e:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYe6YD1NH4LsIANabMrCf9zpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMwNDI1MjE0NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWVmMTc0NjBjMzZhOGQ5MTQxZjY5ZDBhYjgzNGFjZWVlOWY3ZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7FhQrqvo5jya4WJTutf9FqwP5Ij
pZBddnqStzZIOGKrP9BjqxnQneEzSYGFEPW/ogzn0vnpPG7qeha3xL0ZidOOjuca
UouvhifvrYDTsnIPZHoGW1CYEP4g8sM0Z7lg4cof4lFpwZyv7+CP7FJervCBUpjN
4Nk8aXIeCTKKjoCd/9cOFvEwSrmaON467quilT3ukRjr4jZNS4HwPKvD395czEC9
GjOIvDuTTHo9hUwZErOMxlMz4ZU4swHARHAmP7gv9yJpznrIFG4kqSbirQ64MN8P
FENyHOkeQatCqwFQTrm2s2gwdyLekTVnp4Ga1QncTz6Z8wt3X6VssYecMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG7vF0YMNqjZFB9p0KuDSs7un36nMB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvYnU4WFJndzJxTmtVSDJuUXE0Tkt6dTZmZnFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsN++MA0G
CSqGSIb3DQEBCwUAA4IBAQAbft4vGf4V7tNMW7h+nMNn1V3G1c3MmjCRigmefEIt
9vPdxYeP0YA6MBtmCUn4kGpFD38LJoStJbk5ir92+KCKr//6UrzHCKU6odD+ii7w
VbjQa7/lhfWLIQ849wr1FJs6FZnSAHwKpcIxPTVoLA9xJnGurM7qZ51XTjoB/FGh
Qb5Z5PcdKXQT0U4t/rxp4jihCZKw4n5FHLT0iUTcy4pJ1IHDUIcT1Ls8vkLiJHmd
OQVpkg34CwcMw43obTI5YRscTWq14tR2UCEqs8ZnAU8HedQwzVoDvWX/0MZ9RboZ
p3LllQHCcINJ84QqynqADLI78vu63D/ED2oCTxpyx44j
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org