Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/_Y30h7Ns1BGRM25kfMTRMB_9TFg.roa
File: _Y30h7Ns1BGRM25kfMTRMB_9TFg.roa (raw, json)
Hash identifier: ocQ1Tp0/ScIjuFIJI41/WON37d6frztRMdlkSa+qL8o=
Subject key identifier: FD:8D:F4:87:B3:6C:D4:11:91:33:6E:64:7C:C4:D1:30:1F:FD:4C:58
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEECFF7E5F95F38AE70426ADA0B74E2
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/_Y30h7Ns1BGRM25kfMTRMB_9TFg.roa
Signing time: Sun 01 Jan 2023 06:04:50 +0000
ROA not before: Sun 01 Jan 2023 06:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202050
IP address blocks: 193.192.178.0/23 maxlen: 24
193.192.176.0/23 maxlen: 24
193.192.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jan 2023 08:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:cf:f7:e5:f9:5f:38:ae:70:42:6a:da:0b:74:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd8df487b36cd41191336e647cc4d1301ffd4c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:11:2e:15:60:10:7d:04:e7:24:bb:fa:4b:b2:
33:ef:da:e6:28:55:e0:6a:87:84:bb:e7:eb:69:46:
63:11:a0:3f:35:0b:c7:cc:da:76:0e:2e:60:01:93:
d0:b3:c9:30:c4:98:86:86:81:f7:57:cd:a5:e3:4a:
80:d6:56:32:40:6d:44:f4:8f:16:ed:de:89:09:12:
b1:aa:42:2a:f7:b6:73:24:03:0e:79:11:02:e0:b7:
0d:b1:6d:67:c3:6e:62:02:57:bf:1f:bf:80:ae:0c:
29:1c:06:e9:cd:b1:50:bf:96:e4:ca:78:4d:09:40:
5d:f5:d5:08:f2:bb:30:24:c5:9d:eb:e8:fe:b7:06:
f4:eb:f6:35:9c:87:47:fc:b3:bb:18:92:ae:60:d9:
52:c0:be:6f:b4:5f:f2:a3:19:af:6c:72:be:62:f1:
97:f1:0e:bb:7c:b2:c2:29:be:21:d1:83:b3:2b:b5:
42:5c:ed:d9:58:20:5a:c4:d6:a6:09:44:18:98:5a:
2e:ae:7c:4e:b6:d1:25:8b:3b:74:2a:01:dd:e1:46:
3a:6d:bc:ca:f7:cd:3b:fa:c4:9a:1c:96:3c:bd:00:
cf:af:3a:53:1e:74:2d:19:b3:c1:97:32:f9:08:26:
79:82:26:84:fb:b1:cd:d6:a9:4f:39:b0:25:65:89:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8D:F4:87:B3:6C:D4:11:91:33:6E:64:7C:C4:D1:30:1F:FD:4C:58
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/_Y30h7Ns1BGRM25kfMTRMB_9TFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.176.0-193.192.180.255
Signature Algorithm: sha256WithRSAEncryption
5c:4e:b1:5f:d0:9c:d3:91:f2:3e:40:2b:b2:51:98:b6:98:9d:
df:04:ef:93:c8:d0:d5:9a:aa:6b:dc:b1:34:94:8d:99:01:0f:
74:ed:ac:35:a2:ad:b8:60:5d:92:4c:b3:57:84:33:3a:31:48:
56:b4:41:c1:c8:bb:7f:1b:0b:1e:42:99:35:ba:ee:8e:a8:49:
f0:c0:1d:2e:03:ac:35:4f:d1:ad:1f:d4:85:2b:11:56:8b:22:
af:1a:71:88:92:cf:ca:0d:84:fc:4b:9f:73:8d:a9:e8:d8:6d:
07:f5:b6:12:dd:01:73:96:c1:65:88:43:53:6f:c1:13:46:60:
6b:46:e7:df:59:f3:24:e3:a6:d7:2e:7b:e2:04:b9:18:e4:07:
18:ac:59:71:fc:3b:99:66:ee:36:ac:d5:03:fd:95:8a:a2:d8:
0d:cd:23:8f:4c:9b:ea:92:7a:02:01:cc:81:36:1b:8a:06:d5:
9b:38:b3:96:1d:5b:d8:2b:92:82:8c:0b:ec:d9:5b:ce:cb:00:
04:da:8f:ab:f8:d5:6f:ab:22:09:0a:f6:2c:d2:db:d2:f1:d5:
f0:e6:47:0c:5f:83:d5:ec:65:71:4b:2f:ed:b7:7a:63:be:f4:
33:f1:f1:cb:98:28:e1:11:56:91:80:e5:1e:07:25:9e:47:05:
41:49:e6:f5
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVr7s/35flfOK5wQmraC3TiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjMwMTAxMDYwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDhkZjQ4N2IzNmNkNDExOTEzMzZlNjQ3Y2M0ZDEzMDFmZmQ0YzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjREuFWAQfQTnJLv6S7Iz79rmKFXg
aoeEu+fraUZjEaA/NQvHzNp2Di5gAZPQs8kwxJiGhoH3V82l40qA1lYyQG1E9I8W
7d6JCRKxqkIq97ZzJAMOeREC4LcNsW1nw25iAle/H7+ArgwpHAbpzbFQv5bkynhN
CUBd9dUI8rswJMWd6+j+twb06/Y1nIdH/LO7GJKuYNlSwL5vtF/yoxmvbHK+YvGX
8Q67fLLCKb4h0YOzK7VCXO3ZWCBaxNamCUQYmFournxOttElizt0KgHd4UY6bbzK
9807+sSaHJY8vQDPrzpTHnQtGbPBlzL5CCZ5giaE+7HN1qlPObAlZYmm+QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFP2N9IezbNQRkTNuZHzE0TAf/UxYMB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvX1kzMGg3TnMxQkdSTTI1a2ZNVFJNQl85VEZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATBwLAD
BADBwLQwDQYJKoZIhvcNAQELBQADggEBAFxOsV/QnNOR8j5AK7JRmLaYnd8E75PI
0NWaqmvcsTSUjZkBD3TtrDWirbhgXZJMs1eEMzoxSFa0QcHIu38bCx5CmTW67o6o
SfDAHS4DrDVP0a0f1IUrEVaLIq8acYiSz8oNhPxLn3ONqejYbQf1thLdAXOWwWWI
Q1NvwRNGYGtG599Z8yTjptcue+IEuRjkBxisWXH8O5lm7jas1QP9lYqi2A3NI49M
m+qSegIBzIE2G4oG1Zs4s5YdW9grkoKMC+zZW87LAATaj6v41W+rIgkK9izS29Lx
1fDmRwxfg9XsZXFLL+23emO+9DPx8cuYKOERVpGA5R4HJZ5HBUFJ5vU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org