Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/bmSYj5FT3n8yocURRORtJYazOOo.roa
File: bmSYj5FT3n8yocURRORtJYazOOo.roa (raw, json)
Hash identifier: NYPCBgrD4j/zkwKm8S//0Rh0JKTxB97Rdyp1Y7fBt2I=
Subject key identifier: 6E:64:98:8F:91:53:DE:7F:32:A1:C5:11:44:E4:6D:25:86:B3:38:EA
Certificate issuer: /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial: 01856FE71B351EE4F2F68721D2B42FD07DA8
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/bmSYj5FT3n8yocURRORtJYazOOo.roa
Signing time: Mon 02 Jan 2023 00:34:54 +0000
ROA not before: Mon 02 Jan 2023 00:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32787
IP address blocks: 193.103.199.0/24 maxlen: 24
193.103.193.0/24 maxlen: 24
193.103.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:1b:35:1e:e4:f2:f6:87:21:d2:b4:2f:d0:7d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Validity
Not Before: Jan 2 00:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6e64988f9153de7f32a1c51144e46d2586b338ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:9f:82:55:5a:4e:e0:dc:36:b4:00:63:d6:
71:48:c8:e2:01:87:2d:48:08:49:e4:63:d9:93:3a:
db:cd:d7:29:cd:3c:46:b0:41:ec:30:29:02:5c:08:
4c:21:cc:79:16:2b:bf:0a:85:2f:d1:be:0a:e9:06:
26:6a:2b:6d:1c:10:18:e8:7d:f0:b4:8f:1d:e6:dd:
e7:53:66:16:86:3b:b8:59:ac:27:2a:b7:81:64:5e:
7c:ea:7a:b3:55:ad:c2:f5:e2:b8:37:64:1d:1a:53:
94:4f:48:73:1f:9d:30:cb:03:fc:d7:51:17:a3:02:
b4:03:00:be:b3:6b:1c:e6:8e:09:06:81:d3:e7:60:
0b:75:a7:78:e1:62:80:86:64:be:18:4c:d6:f4:21:
f3:9c:98:2a:bf:84:5f:7d:29:42:c0:a7:4a:db:4e:
ed:3d:df:c1:bb:93:70:3b:30:71:96:cf:76:e4:de:
35:5c:ad:68:59:c7:ff:2e:7c:e6:d6:65:51:a5:98:
11:6a:73:6c:7f:66:a3:d6:0f:ff:66:0c:2a:a9:04:
12:77:9e:65:8e:ba:3d:9e:f7:e7:1c:cd:2d:d2:86:
f3:31:09:ac:a4:e7:09:df:bd:38:ca:19:f0:0c:b6:
bf:5e:61:30:76:82:fe:e9:f7:7b:9d:85:12:3f:21:
1d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:64:98:8F:91:53:DE:7F:32:A1:C5:11:44:E4:6D:25:86:B3:38:EA
X509v3 Authority Key Identifier:
keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/bmSYj5FT3n8yocURRORtJYazOOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.103.193.0-193.103.194.255
193.103.199.0/24
Signature Algorithm: sha256WithRSAEncryption
26:f2:19:1a:d6:24:20:2a:24:5b:94:6d:22:3f:c5:de:32:59:
7b:b7:40:91:a3:e7:2d:87:9c:a2:e0:4c:bc:32:11:7b:e8:dd:
9b:04:1c:6f:80:29:44:0a:24:e7:99:84:50:c0:4c:b9:5b:a6:
ca:c4:29:8e:fb:f0:88:c7:cc:7d:fd:70:80:47:e9:7e:e2:09:
ae:29:50:51:7a:51:54:ab:0e:17:04:74:59:fe:88:1e:e9:ca:
46:d0:14:db:07:1f:0f:bf:e9:ca:f8:4e:ad:14:50:9b:42:01:
65:35:6c:71:2f:1e:36:71:41:9b:f7:a9:77:1e:64:49:ed:b5:
27:66:86:b8:ba:83:4a:df:ce:83:84:2b:e6:66:81:0e:0d:99:
54:9d:46:85:bf:7e:ed:78:09:0b:bf:a4:7a:c5:49:f7:67:51:
19:06:24:bc:de:2e:54:e9:ce:0e:58:27:bb:7a:72:9c:a0:de:
29:5a:41:4b:5f:02:da:56:05:cf:ee:07:6d:99:18:54:76:dc:
fc:26:f2:f2:0c:b6:8b:98:c2:7e:29:99:64:6a:91:fa:da:6b:
1e:bb:c4:53:00:29:86:10:89:9e:9a:b0:b2:45:16:90:d4:24:
78:5e:2b:f1:41:4c:e1:99:c8:3c:0f:75:f8:8f:61:a6:0b:b6:
8f:68:3b:71
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVv5xs1HuTy9och0rQv0H2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNjY0YjkyNGU0ZWEwMjdjMWMzYTA3NzBkZjFmZjgwYjFk
NTY4ZmEwHhcNMjMwMTAyMDAzNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTY0OTg4ZjkxNTNkZTdmMzJhMWM1MTE0NGU0NmQyNTg2YjMzOGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDOfglVaTuDcNrQAY9ZxSMjiAYct
SAhJ5GPZkzrbzdcpzTxGsEHsMCkCXAhMIcx5Fiu/CoUv0b4K6QYmaittHBAY6H3w
tI8d5t3nU2YWhju4WawnKreBZF586nqzVa3C9eK4N2QdGlOUT0hzH50wywP811EX
owK0AwC+s2sc5o4JBoHT52ALdad44WKAhmS+GEzW9CHznJgqv4RffSlCwKdK207t
Pd/Bu5NwOzBxls925N41XK1oWcf/Lnzm1mVRpZgRanNsf2aj1g//ZgwqqQQSd55l
jro9nvfnHM0t0obzMQmspOcJ3704yhnwDLa/XmEwdoL+6fd7nYUSPyEdrQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFG5kmI+RU95/MqHFEUTkbSWGszjqMB8GA1UdIwQY
MBaAFK5mS5JOTqAnwcOgdw3x/4Cx1Wj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9lMmY4NDYtODU4Mi00MDkzLWFlOTMt
MDRjNTM5N2ZlNWY4LzEvYm1TWWo1RlQzbjh5b2NVUlJPUnRKWWF6T09vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9lMmY4NDYtODU4Mi00MDkzLWFlOTMtMDRjNTM5N2ZlNWY4
LzEvcm1aTGtrNU9vQ2ZCdzZCM0RmSF9nTEhWYVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADBZ8ED
BADBZ8IDBADBZ8cwDQYJKoZIhvcNAQELBQADggEBACbyGRrWJCAqJFuUbSI/xd4y
WXu3QJGj5y2HnKLgTLwyEXvo3ZsEHG+AKUQKJOeZhFDATLlbpsrEKY778IjHzH39
cIBH6X7iCa4pUFF6UVSrDhcEdFn+iB7pykbQFNsHHw+/6cr4Tq0UUJtCAWU1bHEv
HjZxQZv3qXceZEnttSdmhri6g0rfzoOEK+ZmgQ4NmVSdRoW/fu14CQu/pHrFSfdn
URkGJLzeLlTpzg5YJ7t6cpyg3ilaQUtfAtpWBc/uB22ZGFR23Pwm8vIMtouYwn4p
mWRqkfraax67xFMAKYYQiZ6asLJFFpDUJHheK/FBTOGZyDwPdfiPYaYLto9oO3E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:27 2024 by rpki-client on console-ams.rpki-client.org