Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/_0NAsHi_qZGCjqcJkKyROxrXVh0.roa
File: _0NAsHi_qZGCjqcJkKyROxrXVh0.roa (raw, json)
Hash identifier: xy4k1oftp26kLhOEpw5pRQUwNEjP7+cTFB0pDsPsnZ8=
Subject key identifier: FF:43:40:B0:78:BF:A9:91:82:8E:A7:09:90:AC:91:3B:1A:D7:56:1D
Certificate issuer: /CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Certificate serial: 01856DE67D74D1CABCE4948C7DEB64ABFA9C
Authority key identifier: CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/_0NAsHi_qZGCjqcJkKyROxrXVh0.roa
Signing time: Sun 01 Jan 2023 15:14:59 +0000
ROA not before: Sun 01 Jan 2023 15:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.47.187.0/24 maxlen: 24
193.200.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:7d:74:d1:ca:bc:e4:94:8c:7d:eb:64:ab:fa:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd35790830ce7469a94c59b2e2ccbbf5e36d13f
Validity
Not Before: Jan 1 15:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff4340b078bfa991828ea70990ac913b1ad7561d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:dd:08:89:97:c5:87:bd:8d:80:8c:46:fa:
16:15:46:bf:71:05:9f:1a:f3:eb:78:17:aa:08:63:
80:e0:d0:52:16:7d:b6:c6:38:6c:66:f4:f3:da:a1:
37:d6:78:3c:e0:6f:b4:68:a8:c6:59:0b:31:e0:5b:
4f:e7:0d:4f:3e:f8:2e:d0:32:48:9e:a9:87:fd:cb:
2a:7a:8c:ec:f1:d6:0a:29:3e:4a:49:3f:12:85:b0:
bc:89:2f:28:ac:5d:cf:68:a8:21:d5:98:6a:65:b8:
25:82:fa:8c:e9:92:d6:8f:77:2b:2e:94:f4:d4:76:
b5:d8:84:00:b2:53:9e:c9:d0:b0:75:a7:a8:3f:a6:
e7:e6:8b:4f:50:44:74:51:ec:10:4f:cc:b0:a9:22:
f6:9c:82:4c:ad:78:a8:7d:08:f0:eb:5b:31:88:ca:
32:88:e3:5d:a3:2b:b5:34:55:3e:74:62:2e:e6:45:
c0:04:77:29:36:aa:1d:0e:96:28:92:6d:1f:f0:63:
85:f6:10:92:6f:75:f9:89:41:9f:17:9d:3b:15:14:
9d:3e:dc:0b:e6:91:d9:c0:20:e2:f8:86:52:29:87:
8e:58:22:a6:cd:f6:43:87:63:b5:32:ff:d0:b2:62:
96:99:ae:49:cb:39:d3:10:5b:41:f6:c1:a5:9c:8c:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:43:40:B0:78:BF:A9:91:82:8E:A7:09:90:AC:91:3B:1A:D7:56:1D
X509v3 Authority Key Identifier:
keyid:CC:D3:57:90:83:0C:E7:46:9A:94:C5:9B:2E:2C:CB:BF:5E:36:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNNXkIMM50aalMWbLizLv1420T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/_0NAsHi_qZGCjqcJkKyROxrXVh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1fcb59-405e-40c3-a630-c5d13e88e4de/1/zNNXkIMM50aalMWbLizLv1420T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.187.0/24
193.200.156.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:24:04:37:1d:85:74:0f:99:b3:90:95:97:3c:05:4f:9e:72:
48:f1:67:ec:a0:c4:92:55:5b:aa:43:06:9d:fa:30:d1:af:68:
13:22:b0:d4:11:94:b3:2f:bc:5d:39:78:98:0a:88:65:77:3b:
62:ac:85:91:74:d9:8a:7d:96:19:4e:f7:0a:5f:94:c2:98:29:
cf:22:be:03:00:e6:8b:89:38:64:91:a1:51:38:d5:fc:ce:db:
ac:f0:c2:a8:ec:f6:11:78:0c:34:e5:cc:a3:a6:66:c1:5d:bc:
54:40:17:85:93:27:73:37:e9:a5:28:92:7c:6d:f9:e3:1f:7d:
27:69:82:38:0d:be:e7:a4:35:27:ed:73:6e:da:dc:24:22:4d:
ec:a8:57:c4:b9:3f:c1:e3:04:b5:d9:9c:5c:9e:e6:7c:ac:84:
5e:a2:f0:32:e2:97:18:a3:ca:cb:4a:60:fb:8f:76:61:82:e0:
86:ec:c3:d8:72:f2:6f:73:6d:17:bc:13:52:93:36:15:44:3a:
b3:0d:c4:f8:41:e0:c0:62:71:51:01:38:bc:cc:7f:c2:cf:05:
82:a2:12:1e:bf:a8:47:f9:52:61:01:fd:34:35:c3:07:08:c5:
95:9f:dd:02:3b:15:34:c3:70:a9:d5:a6:29:ce:10:de:ae:23:
91:35:eb:62
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVt5n100cq85JSMfetkq/qcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDM1NzkwODMwY2U3NDY5YTk0YzU5YjJlMmNjYmJmNWUz
NmQxM2YwHhcNMjMwMTAxMTUxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjQzNDBiMDc4YmZhOTkxODI4ZWE3MDk5MGFjOTEzYjFhZDc1NjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtzdCImXxYe9jYCMRvoWFUa/cQWf
GvPreBeqCGOA4NBSFn22xjhsZvTz2qE31ng84G+0aKjGWQsx4FtP5w1PPvgu0DJI
nqmH/csqeozs8dYKKT5KST8ShbC8iS8orF3PaKgh1ZhqZbglgvqM6ZLWj3crLpT0
1Ha12IQAslOeydCwdaeoP6bn5otPUER0UewQT8ywqSL2nIJMrXiofQjw61sxiMoy
iONdoyu1NFU+dGIu5kXABHcpNqodDpYokm0f8GOF9hCSb3X5iUGfF507FRSdPtwL
5pHZwCDi+IZSKYeOWCKmzfZDh2O1Mv/QsmKWma5JyznTEFtB9sGlnIwDTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP9DQLB4v6mRgo6nCZCskTsa11YdMB8GA1UdIwQY
MBaAFMzTV5CDDOdGmpTFmy4sy79eNtE/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAt
YzVkMTNlODhlNGRlLzEvXzBOQXNIaV9xWkdDanFjSmtLeVJPeHJYVmgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xZmNiNTktNDA1ZS00MGMzLWE2MzAtYzVkMTNlODhlNGRl
LzEvek5OWGtJTU01MGFhbE1XYkxpekx2MTQyMFQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwS+7AwQA
wcicMA0GCSqGSIb3DQEBCwUAA4IBAQBrJAQ3HYV0D5mzkJWXPAVPnnJI8WfsoMSS
VVuqQwad+jDRr2gTIrDUEZSzL7xdOXiYCohldztirIWRdNmKfZYZTvcKX5TCmCnP
Ir4DAOaLiThkkaFRONX8ztus8MKo7PYReAw05cyjpmbBXbxUQBeFkydzN+mlKJJ8
bfnjH30naYI4Db7npDUn7XNu2twkIk3sqFfEuT/B4wS12ZxcnuZ8rIReovAy4pcY
o8rLSmD7j3ZhguCG7MPYcvJvc20XvBNSkzYVRDqzDcT4QeDAYnFRATi8zH/CzwWC
ohIev6hH+VJhAf00NcMHCMWVn90COxU0w3Cp1aYpzhDeriORNeti
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:42 2024 by rpki-client on console-fra.rpki-client.org