Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/weQQCA08jjNDkiwnblotjRSfT5U.roa
File: weQQCA08jjNDkiwnblotjRSfT5U.roa (raw, json)
Hash identifier: Iw5cqlT8nMhHBByzKLeZ3p/tboVnZLjGYhWFbyB8A+c=
Subject key identifier: C1:E4:10:08:0D:3C:8E:33:43:92:2C:27:6E:5A:2D:8D:14:9F:4F:95
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018FCE9DA04C844E3809E335CAAC327AC72E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/weQQCA08jjNDkiwnblotjRSfT5U.roa
Signing time: Fri 31 May 2024 12:26:27 +0000
ROA not before: Fri 31 May 2024 12:26:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210837
IP address blocks: 193.30.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 14:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ce:9d:a0:4c:84:4e:38:09:e3:35:ca:ac:32:7a:c7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 31 12:26:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1e410080d3c8e3343922c276e5a2d8d149f4f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:a2:aa:d2:4e:04:db:00:b1:0f:c5:7c:61:
d2:89:d7:9b:d4:ac:df:e9:2b:00:ea:b8:c0:9f:50:
db:5f:8e:6c:dc:54:45:15:b4:0d:37:d7:b0:58:13:
91:53:7e:4c:70:51:94:6d:b8:23:c9:31:f3:b4:c0:
bb:0f:45:b8:60:2c:07:19:9b:46:e0:8c:a9:42:bf:
1c:e4:5c:1a:b8:25:ae:73:aa:8b:44:41:84:cf:9c:
68:33:89:5f:87:3a:6c:11:5b:60:5c:2b:d0:a8:9c:
d3:3e:36:45:82:9b:04:ef:0f:bd:08:e7:a6:bc:2a:
11:57:ef:e4:ba:45:c7:a3:eb:f5:b8:77:cb:32:66:
7c:9e:04:9a:df:9a:c9:b1:ce:ca:bd:53:26:8a:ac:
7f:f8:e9:6b:91:a3:02:3a:9c:83:3b:99:f1:e2:0e:
d6:1b:9e:c3:75:20:51:86:2a:f4:ae:67:ee:64:a9:
c9:f3:f7:df:a9:89:68:1a:c9:81:7c:e1:7b:74:13:
62:f7:a7:8a:a7:78:d0:f9:8e:0b:10:bd:8c:c1:e0:
7e:c2:4d:e2:65:53:8a:8b:9c:de:6c:4d:93:02:f4:
9c:54:2f:37:69:97:df:54:7d:fe:1b:37:fc:62:4a:
50:db:f3:a9:3a:cc:9d:ee:eb:da:25:f4:5e:b8:07:
a4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E4:10:08:0D:3C:8E:33:43:92:2C:27:6E:5A:2D:8D:14:9F:4F:95
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/weQQCA08jjNDkiwnblotjRSfT5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.241.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:27:47:d0:e4:38:fd:39:c1:6d:39:16:00:42:25:89:30:36:
46:b7:dc:d4:21:96:ff:53:3f:22:4d:93:9b:ea:20:66:e6:43:
f4:0c:18:28:3f:48:aa:df:76:b2:39:fa:24:53:34:f9:a1:7b:
92:ff:45:1f:b0:91:26:a2:b0:9d:63:97:b2:29:11:10:9b:3a:
68:97:7f:2a:c3:b9:ef:1b:85:c2:80:1c:02:b1:c0:f3:72:49:
d8:4d:b4:61:e2:41:08:f8:5b:99:5b:dc:b5:ba:d8:64:38:d7:
cc:21:cb:7e:6c:06:a5:12:40:ad:04:de:2b:77:06:7c:c1:ee:
70:75:d0:5d:4d:15:a7:de:4a:a6:e2:62:08:68:a9:9a:29:02:
36:6c:1e:ad:a0:04:af:c3:90:9e:24:92:ea:03:7a:37:77:56:
b2:de:33:8c:33:0d:0a:02:a3:af:51:57:7f:1a:95:1b:11:aa:
55:e8:ab:f9:5e:90:da:6d:72:b8:e6:8c:50:bb:35:47:2e:91:
33:17:6c:bf:a5:33:10:cc:c1:bc:06:df:61:40:32:9f:ca:1e:
13:6c:2d:b7:7d:a2:53:ea:80:ea:95:05:be:b7:60:fb:38:04:
a0:00:3d:b5:fa:f4:9d:65:a0:e1:c6:d0:bf:9b:1f:ec:ea:6d:
e5:1c:0e:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/OnaBMhE44CeM1yqwyescuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwNTMxMTIyNjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWU0MTAwODBkM2M4ZTMzNDM5MjJjMjc2ZTVhMmQ4ZDE0OWY0Zjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+6iqtJOBNsAsQ/FfGHSideb1Kzf
6SsA6rjAn1DbX45s3FRFFbQNN9ewWBORU35McFGUbbgjyTHztMC7D0W4YCwHGZtG
4IypQr8c5FwauCWuc6qLREGEz5xoM4lfhzpsEVtgXCvQqJzTPjZFgpsE7w+9COem
vCoRV+/kukXHo+v1uHfLMmZ8ngSa35rJsc7KvVMmiqx/+OlrkaMCOpyDO5nx4g7W
G57DdSBRhir0rmfuZKnJ8/ffqYloGsmBfOF7dBNi96eKp3jQ+Y4LEL2MweB+wk3i
ZVOKi5zebE2TAvScVC83aZffVH3+Gzf8YkpQ2/OpOsyd7uvaJfReuAekYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMHkEAgNPI4zQ5IsJ25aLY0Un0+VMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvd2VRUUNBMDhqak5Ea2l3bmJsb3RqUlNmVDVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR7xMA0G
CSqGSIb3DQEBCwUAA4IBAQCmJ0fQ5Dj9OcFtORYAQiWJMDZGt9zUIZb/Uz8iTZOb
6iBm5kP0DBgoP0iq33ayOfokUzT5oXuS/0UfsJEmorCdY5eyKREQmzpol38qw7nv
G4XCgBwCscDzcknYTbRh4kEI+FuZW9y1uthkONfMIct+bAalEkCtBN4rdwZ8we5w
ddBdTRWn3kqm4mIIaKmaKQI2bB6toASvw5CeJJLqA3o3d1ay3jOMMw0KAqOvUVd/
GpUbEapV6Kv5XpDabXK45oxQuzVHLpEzF2y/pTMQzMG8Bt9hQDKfyh4TbC23faJT
6oDqlQW+t2D7OASgAD21+vSdZaDhxtC/mx/s6m3lHA5q
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org