Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/hMnQsqE8I9RZa6DFda6fdwwzTUY.roa
File: hMnQsqE8I9RZa6DFda6fdwwzTUY.roa (raw, json)
Hash identifier: AUcKaVr1wDMU9GX8wBhTwJh3qxFd6NcfTlvachmzKY0=
Subject key identifier: 84:C9:D0:B2:A1:3C:23:D4:59:6B:A0:C5:75:AE:9F:77:0C:33:4D:46
Certificate issuer: /CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
Certificate serial: 0186F16EB2A14250F14A15DB15380A4E7EA1
Authority key identifier: 81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/hMnQsqE8I9RZa6DFda6fdwwzTUY.roa
Signing time: Fri 17 Mar 2023 21:16:49 +0000
ROA not before: Fri 17 Mar 2023 21:16:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45027
IP address blocks: 193.27.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 12:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f1:6e:b2:a1:42:50:f1:4a:15:db:15:38:0a:4e:7e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81d11c9d402e12ea94aea8d13d5360caf7c43b21
Validity
Not Before: Mar 17 21:16:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84c9d0b2a13c23d4596ba0c575ae9f770c334d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dd:35:04:63:cd:89:9f:1b:a8:f0:2a:02:27:
e6:30:cd:ca:d9:b9:4a:87:b1:ea:ac:db:28:09:10:
5e:da:82:48:a7:ef:4f:f8:5f:07:3e:40:05:66:ff:
f4:87:e7:80:21:ed:17:04:9c:96:d9:17:a6:86:02:
13:ff:40:8b:41:b8:0f:9f:45:60:67:4a:72:75:53:
68:4e:59:a0:f9:43:2f:0d:34:48:73:ec:eb:23:0c:
27:bb:0c:b2:b3:5b:93:8b:a3:af:43:bf:e8:d9:03:
c7:40:94:0b:6a:8f:a9:0f:db:4e:54:58:05:e4:b5:
e4:58:6a:7b:f5:ad:d5:6c:0c:e9:b1:c0:99:53:90:
a6:e6:de:e5:9c:64:d2:10:18:42:69:44:fd:09:1b:
90:12:67:0c:4f:88:9a:6d:97:bb:47:52:ca:9c:fd:
f6:cf:f2:a4:9a:a8:3f:4e:09:32:f6:88:ef:c6:c8:
c0:1d:5d:12:76:f9:60:84:d0:38:bd:df:bf:ae:ac:
c3:7e:cc:60:a6:4e:82:30:9d:5c:75:ab:15:f6:8e:
d5:46:38:34:88:fe:dc:a7:86:8e:4f:35:ee:af:24:
82:ea:9d:04:e8:2c:06:26:6d:18:39:45:a1:d2:e4:
61:78:a7:ae:95:eb:ae:0e:7c:62:b2:c6:6a:05:cd:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C9:D0:B2:A1:3C:23:D4:59:6B:A0:C5:75:AE:9F:77:0C:33:4D:46
X509v3 Authority Key Identifier:
keyid:81:D1:1C:9D:40:2E:12:EA:94:AE:A8:D1:3D:53:60:CA:F7:C4:3B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gdEcnUAuEuqUrqjRPVNgyvfEOyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/hMnQsqE8I9RZa6DFda6fdwwzTUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2d2c57-0fa5-43e6-b7b1-f99c33d6a60f/1/gdEcnUAuEuqUrqjRPVNgyvfEOyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.90.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:61:4f:79:2a:bf:28:68:fd:c3:d0:7f:17:48:bb:cc:93:17:
21:3e:10:b3:83:23:46:9e:93:bc:de:bc:77:e2:0f:0e:e3:58:
d3:c5:2d:de:40:7e:5f:2b:2a:a1:a6:c5:38:bc:23:83:88:2a:
03:4c:bb:48:13:b0:86:b4:9e:be:50:e9:66:60:45:65:3f:e6:
49:1f:d5:ff:26:17:ae:53:96:8c:97:64:d9:40:08:fb:62:43:
da:8f:83:e6:6c:f2:f1:85:42:2b:1a:64:0a:bc:01:fb:fd:f0:
0e:9b:25:d7:c1:ae:18:a4:08:f9:43:24:35:81:6a:8a:cf:93:
f4:fc:78:22:b4:ae:a7:fc:98:9d:d2:f0:f7:18:9e:ca:95:56:
4c:d1:5a:19:ed:aa:2b:0f:76:55:1e:2f:75:91:cc:6f:7a:6b:
1a:64:29:e6:31:d8:c0:88:89:fb:c5:32:90:61:9e:13:44:a7:
4a:3f:f7:0b:9d:c1:d7:69:39:e1:e3:d2:d8:2f:cf:89:ef:21:
3e:f6:f1:83:b5:4d:5b:09:7c:6f:65:8f:67:21:e9:24:d2:1a:
dd:37:14:94:7a:87:3d:df:ef:fe:2c:71:4e:2f:79:12:2c:81:
bc:de:e2:f3:3a:0e:f1:d1:01:77:ba:1f:b6:59:2a:b6:b5:c9:
6c:86:8d:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbxbrKhQlDxShXbFTgKTn6hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZDExYzlkNDAyZTEyZWE5NGFlYThkMTNkNTM2MGNhZjdj
NDNiMjEwHhcNMjMwMzE3MjExNjQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGM5ZDBiMmExM2MyM2Q0NTk2YmEwYzU3NWFlOWY3NzBjMzM0ZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN01BGPNiZ8bqPAqAifmMM3K2blK
h7HqrNsoCRBe2oJIp+9P+F8HPkAFZv/0h+eAIe0XBJyW2RemhgIT/0CLQbgPn0Vg
Z0pydVNoTlmg+UMvDTRIc+zrIwwnuwyys1uTi6OvQ7/o2QPHQJQLao+pD9tOVFgF
5LXkWGp79a3VbAzpscCZU5Cm5t7lnGTSEBhCaUT9CRuQEmcMT4iabZe7R1LKnP32
z/Kkmqg/Tgky9ojvxsjAHV0SdvlghNA4vd+/rqzDfsxgpk6CMJ1cdasV9o7VRjg0
iP7cp4aOTzXurySC6p0E6CwGJm0YOUWh0uRheKeuleuuDnxissZqBc2PVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFITJ0LKhPCPUWWugxXWun3cMM01GMB8GA1UdIwQY
MBaAFIHRHJ1ALhLqlK6o0T1TYMr3xDshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2RFY25VQXVFdXFVcnFqUlBWTmd5dmZFT3lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yZDJjNTctMGZhNS00M2U2LWI3YjEt
Zjk5YzMzZDZhNjBmLzEvaE1uUXNxRThJOVJaYTZERmRhNmZkd3d6VFVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yZDJjNTctMGZhNS00M2U2LWI3YjEtZjk5YzMzZDZhNjBm
LzEvZ2RFY25VQXVFdXFVcnFqUlBWTmd5dmZFT3lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRtaMA0G
CSqGSIb3DQEBCwUAA4IBAQCPYU95Kr8oaP3D0H8XSLvMkxchPhCzgyNGnpO83rx3
4g8O41jTxS3eQH5fKyqhpsU4vCODiCoDTLtIE7CGtJ6+UOlmYEVlP+ZJH9X/Jheu
U5aMl2TZQAj7YkPaj4PmbPLxhUIrGmQKvAH7/fAOmyXXwa4YpAj5QyQ1gWqKz5P0
/HgitK6n/Jid0vD3GJ7KlVZM0VoZ7aorD3ZVHi91kcxvemsaZCnmMdjAiIn7xTKQ
YZ4TRKdKP/cLncHXaTnh49LYL8+J7yE+9vGDtU1bCXxvZY9nIekk0hrdNxSUeoc9
3+/+LHFOL3kSLIG83uLzOg7x0QF3uh+2WSq2tclsho1K
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:56 2024 by rpki-client on console-ams.rpki-client.org