Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/IrKG6HZkeizRzxh9g72_p7kFJb0.roa
File: IrKG6HZkeizRzxh9g72_p7kFJb0.roa (raw, json)
Hash identifier: Y6DpEqNvqhxxzS8ed4Zh/gSmIellVaTjDL2QfzbNSCE=
Subject key identifier: 22:B2:86:E8:76:64:7A:2C:D1:CF:18:7D:83:BD:BF:A7:B9:05:25:BD
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEED0CAB0DCA45AF143CB3DBF430400
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/IrKG6HZkeizRzxh9g72_p7kFJb0.roa
Signing time: Sun 01 Jan 2023 06:04:51 +0000
ROA not before: Sun 01 Jan 2023 06:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202133
IP address blocks: 193.192.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:d0:ca:b0:dc:a4:5a:f1:43:cb:3d:bf:43:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22b286e876647a2cd1cf187d83bdbfa7b90525bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a9:8a:af:9b:a3:34:68:9a:70:a6:d1:57:ee:
91:d0:9b:35:81:fa:f1:a4:9b:37:e4:40:ae:aa:ae:
c8:cb:6d:27:ca:f6:23:45:4d:60:70:7a:7c:8b:76:
a7:c1:9d:45:43:46:30:a7:f6:1b:7f:25:f8:e1:b0:
8c:7c:60:21:9d:0b:20:ae:3c:7a:35:ce:ab:b1:60:
c9:9b:aa:3c:96:7a:45:3d:4b:3b:e4:ec:a2:92:00:
26:64:2d:f1:f7:92:a3:d1:27:ee:7f:34:7c:8d:d8:
d2:ab:32:70:a6:fa:1d:a9:cb:0d:f6:b8:91:e5:71:
ee:57:97:05:a3:a0:39:24:95:db:fa:4e:43:ed:6b:
74:4a:2e:f0:82:ac:eb:dc:09:c4:43:13:00:b2:f7:
02:c6:b5:3e:ec:26:68:3e:79:fc:df:47:1c:d2:30:
87:c4:b3:b1:41:13:01:3a:a8:73:52:19:16:1b:ac:
f5:a0:07:74:64:fa:c3:86:99:b1:59:e4:f9:1e:e1:
11:f9:14:86:ff:a1:2d:30:f9:81:e2:84:a7:03:cd:
83:36:25:5e:f4:26:0a:5b:f7:a4:13:ed:12:73:b3:
44:83:6a:83:14:5b:85:f4:8d:ed:11:7f:97:37:cd:
e9:fa:cb:65:fc:f5:46:e8:2e:68:36:47:78:07:2a:
85:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B2:86:E8:76:64:7A:2C:D1:CF:18:7D:83:BD:BF:A7:B9:05:25:BD
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/IrKG6HZkeizRzxh9g72_p7kFJb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:fc:54:24:d8:25:9c:3b:b4:c8:dc:28:b8:bb:b6:e8:cc:56:
d9:62:71:14:96:ce:db:28:4e:b8:93:7a:e8:23:14:c1:24:9e:
94:f0:f9:08:ae:74:34:7d:e1:54:69:1e:78:51:03:bd:2a:a1:
a0:22:95:1e:e3:a6:9c:2b:c2:40:40:85:0d:19:46:9b:e6:fb:
6f:f8:ed:18:4b:fa:67:44:b7:63:2d:66:8e:c2:ae:ae:b6:e5:
68:9c:77:90:85:4f:67:59:f5:7f:b0:07:9f:b5:95:35:7c:14:
21:d4:f5:37:36:f4:ff:3c:95:41:23:dd:54:bb:72:e0:d1:a8:
15:c4:11:2a:9b:7a:35:b3:2b:df:84:13:9d:95:c2:b0:67:11:
92:94:65:19:de:3d:a6:96:ac:b3:7d:ee:ce:39:c1:ee:7c:db:
05:dc:42:70:b8:21:1b:28:ec:9d:b5:d1:77:2a:84:4a:47:2a:
be:80:02:cd:c2:f7:31:e5:06:15:65:d0:35:09:cc:8e:2b:7f:
c8:3a:ae:8c:49:95:e7:3e:7c:95:84:8e:6d:50:ed:e7:e4:75:
ce:0b:61:24:5c:69:36:e1:17:08:6c:d7:41:46:db:c8:1c:55:
d9:00:54:fa:e4:80:66:37:dc:9a:1e:1a:71:31:89:c8:24:45:
3f:2c:10:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr7tDKsNykWvFDyz2/QwQAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjMwMTAxMDYwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmIyODZlODc2NjQ3YTJjZDFjZjE4N2Q4M2JkYmZhN2I5MDUyNWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqmKr5ujNGiacKbRV+6R0Js1gfrx
pJs35ECuqq7Iy20nyvYjRU1gcHp8i3anwZ1FQ0Ywp/YbfyX44bCMfGAhnQsgrjx6
Nc6rsWDJm6o8lnpFPUs75OyikgAmZC3x95Kj0SfufzR8jdjSqzJwpvodqcsN9riR
5XHuV5cFo6A5JJXb+k5D7Wt0Si7wgqzr3AnEQxMAsvcCxrU+7CZoPnn830cc0jCH
xLOxQRMBOqhzUhkWG6z1oAd0ZPrDhpmxWeT5HuER+RSG/6EtMPmB4oSnA82DNiVe
9CYKW/ekE+0Sc7NEg2qDFFuF9I3tEX+XN83p+stl/PVG6C5oNkd4ByqF6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCKyhuh2ZHos0c8YfYO9v6e5BSW9MB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvSXJLRzZIWmtlaXpSenhoOWc3Ml9wN2tGSmIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcCrMA0G
CSqGSIb3DQEBCwUAA4IBAQBL/FQk2CWcO7TI3Ci4u7bozFbZYnEUls7bKE64k3ro
IxTBJJ6U8PkIrnQ0feFUaR54UQO9KqGgIpUe46acK8JAQIUNGUab5vtv+O0YS/pn
RLdjLWaOwq6utuVonHeQhU9nWfV/sAeftZU1fBQh1PU3NvT/PJVBI91Uu3Lg0agV
xBEqm3o1syvfhBOdlcKwZxGSlGUZ3j2mlqyzfe7OOcHufNsF3EJwuCEbKOydtdF3
KoRKRyq+gALNwvcx5QYVZdA1CcyOK3/IOq6MSZXnPnyVhI5tUO3n5HXOC2EkXGk2
4RcIbNdBRtvIHFXZAFT65IBmN9yaHhpxMYnIJEU/LBBj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org