Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/PJkTTp-QfzsAYJxQtAs9o6Eo40E.roa
File: PJkTTp-QfzsAYJxQtAs9o6Eo40E.roa (raw, json)
Hash identifier: ko/HGW5fCdr5pcdnsGRZoNwoaKAZnAutf6r6F0jAeeI=
Subject key identifier: 3C:99:13:4E:9F:90:7F:3B:00:60:9C:50:B4:0B:3D:A3:A1:28:E3:41
Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial: 018A6C30D647EC1F44A50535C9758D7211A6
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/PJkTTp-QfzsAYJxQtAs9o6Eo40E.roa
Signing time: Wed 06 Sep 2023 20:30:54 +0000
ROA not before: Wed 06 Sep 2023 20:30:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206564
IP address blocks: 193.104.9.0/24 maxlen: 32
193.109.236.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6c:30:d6:47:ec:1f:44:a5:05:35:c9:75:8d:72:11:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Validity
Not Before: Sep 6 20:30:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c99134e9f907f3b00609c50b40b3da3a128e341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:91:8b:b0:4d:fe:09:6b:df:e9:40:3a:6f:cd:
a9:f9:19:ce:2f:e9:a2:50:e5:df:ec:9f:ff:d5:eb:
9d:8c:f0:55:59:c4:c7:e1:44:e7:10:76:25:18:6a:
3a:77:d9:70:c8:8f:44:fd:55:8b:4e:ea:be:9b:e6:
5c:d9:7d:f2:f2:3a:64:f5:b6:52:ab:c7:b0:b1:50:
11:6f:b0:da:80:3e:d2:fd:a8:d8:9c:9a:c8:bd:90:
6c:cc:2d:ce:65:3d:3d:cb:4c:96:e9:a6:3a:5e:b1:
3b:bb:ef:69:1c:09:04:2f:9f:00:9d:9e:2b:1d:d7:
26:ae:3c:3a:88:88:b2:b2:4f:e4:dd:bf:3e:53:a6:
0b:92:3d:59:b9:cd:f4:91:41:b4:84:b0:2d:9d:2b:
5a:3f:8f:a9:8e:15:c5:3b:82:d4:63:9b:7e:17:1e:
39:f3:da:6b:f9:cc:01:b9:98:a1:98:b7:38:73:ce:
03:c3:77:6c:f7:08:c2:95:b6:76:61:5a:5f:f2:c2:
6f:04:b0:36:ac:6a:23:48:4d:d8:02:0a:b2:3c:af:
80:51:5c:d2:2f:bc:b0:51:1c:46:c9:e3:cf:e7:eb:
30:23:0d:99:4a:15:ac:fe:a9:cf:59:07:13:a7:30:
67:e1:a2:96:45:f7:2e:cf:d2:3c:00:c0:1a:e5:b9:
22:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:99:13:4E:9F:90:7F:3B:00:60:9C:50:B4:0B:3D:A3:A1:28:E3:41
X509v3 Authority Key Identifier:
keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/PJkTTp-QfzsAYJxQtAs9o6Eo40E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.9.0/24
193.109.236.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f6:51:14:2b:aa:44:06:f9:33:dd:4b:1e:13:ea:f6:54:26:
5f:ae:17:32:c1:02:ad:db:9d:7e:ab:16:60:19:50:58:d7:57:
4a:10:31:a9:f8:15:4a:82:cf:ce:f4:08:ae:b7:82:10:71:30:
84:b1:ae:2f:3b:1f:e2:9d:75:83:e6:23:63:78:3c:40:3a:86:
51:05:a5:b9:d5:f6:25:cd:2d:d5:4a:54:fe:14:c1:f3:71:fb:
ab:cc:2d:c7:33:65:52:de:54:26:ba:e9:77:d7:59:8e:95:34:
cb:63:a1:6e:32:16:b9:c7:c9:e3:b9:56:74:49:1c:09:23:6d:
2b:7e:1b:8c:31:cf:47:d2:ae:9d:6b:c6:64:dd:f3:0a:a7:91:
7e:66:a6:92:c5:9c:12:2d:7d:03:64:63:57:5a:31:f5:66:d7:
fc:9e:e2:9f:20:fe:c3:4e:27:59:0a:6a:d5:db:c8:e7:1a:fe:
2b:bb:2a:8f:f4:00:00:c1:09:29:51:41:9e:59:42:f3:d4:da:
33:93:33:2b:0c:76:73:d5:94:69:ba:e7:d9:d3:f3:00:86:6a:
6b:27:4c:a3:9d:3e:47:c6:bc:13:4c:5c:79:c6:78:6b:54:21:
69:71:cf:8a:67:31:d3:4b:3d:af:fb:9e:26:db:81:62:b7:93:
4a:fc:28:fc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYpsMNZH7B9EpQU1yXWNchGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1ZGUzMmJiOWNjOTllMTE1ZGRiYWY2YjdmYTIzMDUxNzg5
ZjJmNjEwHhcNMjMwOTA2MjAzMDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzk5MTM0ZTlmOTA3ZjNiMDA2MDljNTBiNDBiM2RhM2ExMjhlMzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpGLsE3+CWvf6UA6b82p+RnOL+mi
UOXf7J//1eudjPBVWcTH4UTnEHYlGGo6d9lwyI9E/VWLTuq+m+Zc2X3y8jpk9bZS
q8ewsVARb7DagD7S/ajYnJrIvZBszC3OZT09y0yW6aY6XrE7u+9pHAkEL58AnZ4r
Hdcmrjw6iIiysk/k3b8+U6YLkj1Zuc30kUG0hLAtnStaP4+pjhXFO4LUY5t+Fx45
89pr+cwBuZihmLc4c84Dw3ds9wjClbZ2YVpf8sJvBLA2rGojSE3YAgqyPK+AUVzS
L7ywURxGyePP5+swIw2ZShWs/qnPWQcTpzBn4aKWRfcuz9I8AMAa5bkiCQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDyZE06fkH87AGCcULQLPaOhKONBMB8GA1UdIwQY
MBaAFMXeMrucyZ4RXduva3+iMFF4ny9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUt
MDYzNjc1MzY3OWI2LzEvUEprVFRwLVFmenNBWUp4UXRBczlvNkVvNDBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUtMDYzNjc1MzY3OWI2
LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwWgJAwQA
wW3sMA0GCSqGSIb3DQEBCwUAA4IBAQCx9lEUK6pEBvkz3UseE+r2VCZfrhcywQKt
251+qxZgGVBY11dKEDGp+BVKgs/O9Aiut4IQcTCEsa4vOx/inXWD5iNjeDxAOoZR
BaW51fYlzS3VSlT+FMHzcfurzC3HM2VS3lQmuul311mOlTTLY6FuMha5x8njuVZ0
SRwJI20rfhuMMc9H0q6da8Zk3fMKp5F+ZqaSxZwSLX0DZGNXWjH1Ztf8nuKfIP7D
TidZCmrV28jnGv4ruyqP9AAAwQkpUUGeWULz1NozkzMrDHZz1ZRpuufZ0/MAhmpr
J0yjnT5HxrwTTFx5xnhrVCFpcc+KZzHTSz2v+54m24Fit5NK/Cj8
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:22 2024 by rpki-client on console-ams.rpki-client.org