Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9F9oZidQNc3niAl38Eye_pRO-fQ.roa
File: 9F9oZidQNc3niAl38Eye_pRO-fQ.roa (raw, json)
Hash identifier: P/+NFI8fDR3dQPKbHa0GNP/xRx57fm8plSy3UEPZtSM=
Subject key identifier: F4:5F:68:66:27:50:35:CD:E7:88:09:77:F0:4C:9E:FE:94:4E:F9:F4
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB83E80B627822F03A43B6A34D414D5
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9F9oZidQNc3niAl38Eye_pRO-fQ.roa
Signing time: Sun 01 Jan 2023 09:44:51 +0000
ROA not before: Sun 01 Jan 2023 09:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15436
IP address blocks: 193.251.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:3e:80:b6:27:82:2f:03:a4:3b:6a:34:d4:14:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f45f6866275035cde7880977f04c9efe944ef9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:e5:90:f1:75:f7:07:47:6d:e1:cf:2e:3e:
6f:f0:fb:07:3e:2b:99:1d:29:43:bb:d7:82:d1:6d:
21:ac:1b:3d:a1:89:0f:7d:13:bc:8e:2d:09:ab:07:
2a:61:47:e2:82:1e:90:9d:09:36:e5:e1:99:8e:a4:
32:29:48:4f:12:3a:f8:84:79:1f:32:24:ac:70:01:
82:f0:2b:ef:ec:e0:03:c2:7f:bc:43:2a:d0:66:ef:
27:d6:cb:d2:f7:f6:c4:ac:31:4f:90:ea:f8:36:d2:
a9:51:93:c8:2f:06:81:f3:c3:56:c4:55:b7:22:5b:
99:92:a0:0f:79:87:33:49:5e:77:1d:f2:9c:d8:65:
6a:de:80:e7:23:3b:54:f9:41:c1:be:65:b0:b4:1a:
b1:ce:98:0d:66:c9:df:a0:4d:0d:71:ab:1b:b6:26:
19:53:6d:74:99:90:3a:3d:8a:7c:bd:cc:a6:84:84:
5a:cc:c6:54:44:47:e6:22:af:b5:5d:b5:ad:34:21:
fb:bc:f0:d4:98:01:94:38:58:09:88:ed:e7:ed:ef:
b5:de:1c:52:ea:93:d2:3e:9b:e7:5f:42:8b:af:09:
d8:b5:d7:71:35:1f:28:ed:e9:3d:69:cd:1d:db:19:
d8:32:82:53:73:67:d7:e6:5b:be:36:71:63:c1:ac:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5F:68:66:27:50:35:CD:E7:88:09:77:F0:4C:9E:FE:94:4E:F9:F4
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/9F9oZidQNc3niAl38Eye_pRO-fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.251.229.0/24
Signature Algorithm: sha256WithRSAEncryption
82:8c:fd:32:b0:8d:22:e0:1f:36:7c:81:d7:80:e8:26:77:ce:
f7:b2:94:df:be:6a:1f:d5:eb:b5:69:36:9c:63:a0:4a:92:de:
48:95:83:a5:7d:be:14:a3:91:1c:1f:56:99:61:93:e9:46:f6:
84:f7:2c:2c:8c:ca:88:f9:4c:20:7d:aa:13:4c:51:be:67:81:
a8:dc:e9:05:3f:cf:77:12:04:39:5e:c7:c6:f1:26:b8:0b:6a:
9d:a8:8d:9c:af:6b:b4:d1:fe:b6:d2:1f:f9:de:48:62:83:b2:
c9:48:83:37:e0:52:e0:49:65:d9:59:9c:32:a4:c3:d7:a0:c7:
37:7e:04:bf:c9:12:a6:ab:bf:61:a7:db:66:0c:28:d5:a4:2b:
43:04:8d:f7:71:f4:6a:2d:71:03:e8:78:87:d5:2d:99:55:27:
0e:11:27:e6:f2:f8:5f:77:bd:81:f9:80:82:ef:f4:11:1a:df:
d1:12:ce:29:eb:88:11:a4:57:62:59:f6:84:b2:8e:52:69:4d:
b3:98:db:9d:a9:53:30:7d:e8:ef:a2:5f:21:e8:1e:44:6d:00:
cf:e5:31:4e:5d:9c:4d:3b:0c:c8:18:d7:58:14:12:4b:d2:44:
80:65:e3:63:e2:65:6a:cf:fb:e3:43:07:d9:03:58:20:d0:c2:
01:9b:00:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsuD6AtieCLwOkO2o01BTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh
MTA1MTEwHhcNMjMwMTAxMDk0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDVmNjg2NjI3NTAzNWNkZTc4ODA5NzdmMDRjOWVmZTk0NGVmOWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3HlkPF19wdHbeHPLj5v8PsHPiuZ
HSlDu9eC0W0hrBs9oYkPfRO8ji0JqwcqYUfigh6QnQk25eGZjqQyKUhPEjr4hHkf
MiSscAGC8Cvv7OADwn+8QyrQZu8n1svS9/bErDFPkOr4NtKpUZPILwaB88NWxFW3
IluZkqAPeYczSV53HfKc2GVq3oDnIztU+UHBvmWwtBqxzpgNZsnfoE0NcasbtiYZ
U210mZA6PYp8vcymhIRazMZUREfmIq+1XbWtNCH7vPDUmAGUOFgJiO3n7e+13hxS
6pPSPpvnX0KLrwnYtddxNR8o7ek9ac0d2xnYMoJTc2fX5lu+NnFjwayu0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPRfaGYnUDXN54gJd/BMnv6UTvn0MB8GA1UdIwQY
MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt
NDU5MzVmNTA2YTEyLzEvOUY5b1ppZFFOYzNuaUFsMzhFeWVfcFJPLWZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy
LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfvlMA0G
CSqGSIb3DQEBCwUAA4IBAQCCjP0ysI0i4B82fIHXgOgmd873spTfvmof1eu1aTac
Y6BKkt5IlYOlfb4Uo5EcH1aZYZPpRvaE9ywsjMqI+UwgfaoTTFG+Z4Go3OkFP893
EgQ5XsfG8Sa4C2qdqI2cr2u00f620h/53khig7LJSIM34FLgSWXZWZwypMPXoMc3
fgS/yRKmq79hp9tmDCjVpCtDBI33cfRqLXED6HiH1S2ZVScOESfm8vhfd72B+YCC
7/QRGt/REs4p64gRpFdiWfaEso5SaU2zmNudqVMwfejvol8h6B5EbQDP5TFOXZxN
OwzIGNdYFBJL0kSAZeNj4mVqz/vjQwfZA1gg0MIBmwBm
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org