Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/CE5DKaIRdw0tkbw06DNgkJISsrk.roa
File: CE5DKaIRdw0tkbw06DNgkJISsrk.roa (raw, json)
Hash identifier: H+fQU7JPKZvn7b8zz5V4XtvHk8cUY1oAqbzrejQdwH0=
Subject key identifier: 08:4E:43:29:A2:11:77:0D:2D:91:BC:34:E8:33:60:90:92:12:B2:B9
Certificate issuer: /CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Certificate serial: 01856D01AB4DFF3C45DE2B952697A49B22F2
Authority key identifier: 99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/CE5DKaIRdw0tkbw06DNgkJISsrk.roa
Signing time: Sun 01 Jan 2023 11:05:04 +0000
ROA not before: Sun 01 Jan 2023 11:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29241
IP address blocks: 194.30.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:ab:4d:ff:3c:45:de:2b:95:26:97:a4:9b:22:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9955c5a7137eb5d47ea24e17d27fa92d0b42fbd8
Validity
Not Before: Jan 1 11:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=084e4329a211770d2d91bc34e83360909212b2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:d4:19:d7:6c:6a:38:26:3c:db:de:84:d6:
f8:f8:3b:8a:2c:8d:cd:db:1d:76:ea:e0:7d:22:57:
64:42:8f:3a:64:fa:ba:8c:20:0a:8a:80:ec:99:01:
dd:1f:9e:c7:d8:28:c2:24:55:5f:39:7d:64:33:af:
e3:77:77:44:b9:16:a1:48:c8:cb:90:19:d2:97:00:
59:c7:0e:04:2c:82:57:b6:a1:76:4f:5c:60:bd:59:
16:e2:58:dc:41:1e:70:a7:d5:c4:cf:ba:29:d9:5e:
0e:94:1b:99:98:c4:db:f6:4e:a9:6f:a5:e3:f8:98:
ce:bd:d0:29:eb:78:9a:ed:6b:dc:1c:c3:e3:3c:d7:
a7:e1:44:fd:d4:31:30:0c:03:14:93:19:f5:59:68:
42:45:9e:cb:5c:65:b6:95:d4:c7:8a:1e:00:90:b6:
6d:62:4f:b1:74:29:69:aa:8c:b7:8f:d7:92:ee:ed:
8a:bb:c8:6b:05:5f:e5:68:c1:e6:53:66:2a:83:b5:
04:e7:f7:08:db:fb:e3:de:01:dd:f1:02:ea:9d:17:
53:29:94:ea:14:f2:dc:89:bd:38:41:68:b5:29:20:
97:4b:dc:a6:29:58:5b:be:2a:76:59:16:97:3b:42:
80:b9:ee:93:3a:91:12:e9:6a:95:a4:c0:3f:fe:ae:
bb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4E:43:29:A2:11:77:0D:2D:91:BC:34:E8:33:60:90:92:12:B2:B9
X509v3 Authority Key Identifier:
keyid:99:55:C5:A7:13:7E:B5:D4:7E:A2:4E:17:D2:7F:A9:2D:0B:42:FB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVXFpxN-tdR-ok4X0n-pLQtC-9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/CE5DKaIRdw0tkbw06DNgkJISsrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9453a0-e655-480e-b6a9-e39524e7a6ed/1/mVXFpxN-tdR-ok4X0n-pLQtC-9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.224.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:64:0c:7b:07:30:0b:09:17:03:95:39:fb:b9:6d:a1:b3:bc:
46:5c:3b:71:37:04:59:a9:2f:6d:a4:92:a4:0a:b7:e0:d8:e6:
41:40:85:8f:a8:20:9b:3b:c5:49:50:a3:27:5c:42:01:11:05:
68:74:c7:66:b7:53:32:c2:7c:ec:d5:f2:8c:f9:88:27:98:cf:
6b:cb:3b:b3:44:84:7c:2e:e2:ac:8e:05:a0:b2:da:1e:c6:af:
98:3e:ac:c7:cf:27:cb:e0:d8:52:f7:4b:aa:4e:a3:cb:02:fe:
aa:3d:df:79:02:7c:81:b9:f1:be:bb:aa:95:ec:24:df:eb:22:
7b:87:9d:8c:05:68:57:5b:f7:f4:2b:42:42:f7:98:e9:c6:a1:
c6:50:98:12:4d:79:3a:c7:ad:26:47:de:71:85:a3:de:0b:a5:
32:81:f4:cc:f8:34:0b:ba:9d:00:0d:cd:42:0e:85:13:d5:21:
0d:aa:2d:ed:1f:0e:82:a6:99:b1:27:f1:1b:d7:96:6b:41:39:
ba:ac:45:1a:a6:38:e2:8a:82:4a:ea:77:49:70:41:1b:67:1e:
d2:19:e6:73:7b:93:88:e8:ed:b8:6b:b4:84:ea:76:3b:77:ab:
c9:7c:74:a5:67:33:42:99:d1:b2:92:bb:2c:3e:a2:1f:7b:45:
ef:9a:fb:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtAatN/zxF3iuVJpekmyLyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NTVjNWE3MTM3ZWI1ZDQ3ZWEyNGUxN2QyN2ZhOTJkMGI0
MmZiZDgwHhcNMjMwMTAxMTEwNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODRlNDMyOWEyMTE3NzBkMmQ5MWJjMzRlODMzNjA5MDkyMTJiMmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYzUGddsajgmPNvehNb4+DuKLI3N
2x126uB9IldkQo86ZPq6jCAKioDsmQHdH57H2CjCJFVfOX1kM6/jd3dEuRahSMjL
kBnSlwBZxw4ELIJXtqF2T1xgvVkW4ljcQR5wp9XEz7op2V4OlBuZmMTb9k6pb6Xj
+JjOvdAp63ia7WvcHMPjPNen4UT91DEwDAMUkxn1WWhCRZ7LXGW2ldTHih4AkLZt
Yk+xdClpqoy3j9eS7u2Ku8hrBV/laMHmU2Yqg7UE5/cI2/vj3gHd8QLqnRdTKZTq
FPLcib04QWi1KSCXS9ymKVhbvip2WRaXO0KAue6TOpES6WqVpMA//q67yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAhOQymiEXcNLZG8NOgzYJCSErK5MB8GA1UdIwQY
MBaAFJlVxacTfrXUfqJOF9J/qS0LQvvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85NDUzYTAtZTY1NS00ODBlLWI2YTkt
ZTM5NTI0ZTdhNmVkLzEvQ0U1REthSVJkdzB0a2J3MDZETmdrSklTc3JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy85NDUzYTAtZTY1NS00ODBlLWI2YTktZTM5NTI0ZTdhNmVk
LzEvbVZYRnB4Ti10ZFItb2s0WDBuLXBMUXRDLTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh7gMA0G
CSqGSIb3DQEBCwUAA4IBAQCOZAx7BzALCRcDlTn7uW2hs7xGXDtxNwRZqS9tpJKk
Crfg2OZBQIWPqCCbO8VJUKMnXEIBEQVodMdmt1Mywnzs1fKM+YgnmM9ryzuzRIR8
LuKsjgWgstoexq+YPqzHzyfL4NhS90uqTqPLAv6qPd95AnyBufG+u6qV7CTf6yJ7
h52MBWhXW/f0K0JC95jpxqHGUJgSTXk6x60mR95xhaPeC6UygfTM+DQLup0ADc1C
DoUT1SENqi3tHw6CppmxJ/Eb15ZrQTm6rEUapjjiioJK6ndJcEEbZx7SGeZze5OI
6O24a7SE6nY7d6vJfHSlZzNCmdGykrssPqIfe0XvmvtH
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:45 2024 by rpki-client on console.sobornost.net