Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3zmll9txvOXlo5_B_1YpKWbrfHc.roa
File: 3zmll9txvOXlo5_B_1YpKWbrfHc.roa (raw, json)
Hash identifier: hSAOWTxQ0plxjeuHI7TsbiPe9+M+RQ4UenZkSgGNj+w=
Subject key identifier: DF:39:A5:97:DB:71:BC:E5:E5:A3:9F:C1:FF:56:29:29:66:EB:7C:77
Certificate issuer: /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial: 01856F4B6B25DF4A4DE024FB719569A9C566
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3zmll9txvOXlo5_B_1YpKWbrfHc.roa
Signing time: Sun 01 Jan 2023 21:44:51 +0000
ROA not before: Sun 01 Jan 2023 21:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8937
IP address blocks: 193.141.183.0/24 maxlen: 24
193.141.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:6b:25:df:4a:4d:e0:24:fb:71:95:69:a9:c5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Validity
Not Before: Jan 1 21:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df39a597db71bce5e5a39fc1ff56292966eb7c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c0:57:e9:40:b1:65:85:1c:bd:75:bb:8a:19:
e6:4b:31:03:82:4f:1b:9a:22:e2:24:a9:49:11:3c:
39:40:ea:64:db:38:22:75:72:b0:e3:60:3a:f2:aa:
6e:b3:ac:b3:cf:ff:09:80:2a:5f:11:2c:4f:40:e4:
e8:85:ae:ff:d6:eb:eb:05:13:69:e1:6e:1d:79:a6:
27:12:d3:f9:6a:6c:23:dd:9d:d8:0d:97:02:9a:36:
98:94:90:6d:b6:29:9c:a3:58:dc:da:fe:fb:9e:47:
7d:37:b9:d2:c1:a7:82:f8:34:fc:e7:94:0f:b0:64:
fa:03:46:ce:74:c9:20:8a:f1:cd:ac:f1:4f:7b:ca:
f9:22:69:67:e8:94:87:4b:32:90:64:d5:9f:f6:36:
e0:25:bf:93:b0:0f:dc:66:eb:56:27:e8:cc:af:50:
b4:7f:70:47:8e:56:d7:cf:28:d3:b8:a2:d3:13:29:
46:72:2e:9f:15:64:28:04:68:df:1e:d1:f2:97:dc:
52:01:37:b1:7b:d3:74:55:9c:20:b9:7f:6c:16:6f:
37:79:35:31:8b:bb:a2:00:c0:27:f6:a8:fb:18:f3:
3c:7a:d3:00:1b:ed:a2:95:99:c2:81:da:1b:7a:3c:
dd:68:ff:b6:1f:18:e3:bd:9d:3f:7b:6c:57:1b:10:
54:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:39:A5:97:DB:71:BC:E5:E5:A3:9F:C1:FF:56:29:29:66:EB:7C:77
X509v3 Authority Key Identifier:
keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3zmll9txvOXlo5_B_1YpKWbrfHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.183.0/24
193.141.188.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e8:6b:29:9f:4e:0d:e5:fe:27:c5:ba:7f:4a:1a:85:49:79:
2c:8c:21:20:95:29:c3:ff:9f:64:00:82:97:36:58:25:a8:d8:
c6:7f:31:71:43:b8:6c:85:0d:b0:fe:61:08:5d:16:3b:62:49:
d6:2b:ed:33:60:fd:ca:5a:6b:e7:27:d3:74:bc:3e:9a:51:6c:
52:94:db:aa:1c:53:f8:b4:8f:c7:d9:6c:1f:09:7f:13:34:af:
40:ba:02:59:23:86:75:e4:be:a4:ad:d9:39:df:c7:d9:63:71:
5a:21:e9:0b:82:a3:ad:2e:61:40:41:04:ab:0b:57:5c:c9:68:
da:ef:35:39:b8:ee:d3:a9:07:f0:e0:9f:61:8f:76:4b:f3:07:
d6:42:a3:de:7f:ab:ac:f8:c3:b0:fe:b7:81:26:92:47:f8:3b:
17:43:d4:35:31:81:7c:25:9f:37:d4:33:7c:c3:7a:67:f1:1b:
ca:55:1a:e5:c2:36:76:d4:fc:fa:5b:42:c2:da:b3:90:8b:2b:
a5:2d:22:6c:55:10:07:98:30:16:6e:ab:19:fb:fc:bf:f4:d3:
73:55:9c:5b:cb:ed:ff:80:a2:5a:3e:c0:da:15:56:50:9a:83:
5a:47:49:50:e5:49:cc:9e:03:8b:f6:6d:ff:0d:e9:d8:6c:e8:
e1:7d:4a:2f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvS2sl30pN4CT7cZVpqcVmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNWY3MmYwZmFjZjUyNzA1NzI3YzAzOWJkYzFmYmI3Y2M5
N2Q0MjgwHhcNMjMwMTAxMjE0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjM5YTU5N2RiNzFiY2U1ZTVhMzlmYzFmZjU2MjkyOTY2ZWI3Yzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8BX6UCxZYUcvXW7ihnmSzEDgk8b
miLiJKlJETw5QOpk2zgidXKw42A68qpus6yzz/8JgCpfESxPQOToha7/1uvrBRNp
4W4deaYnEtP5amwj3Z3YDZcCmjaYlJBttimco1jc2v77nkd9N7nSwaeC+DT855QP
sGT6A0bOdMkgivHNrPFPe8r5Imln6JSHSzKQZNWf9jbgJb+TsA/cZutWJ+jMr1C0
f3BHjlbXzyjTuKLTEylGci6fFWQoBGjfHtHyl9xSATexe9N0VZwguX9sFm83eTUx
i7uiAMAn9qj7GPM8etMAG+2ilZnCgdobejzdaP+2HxjjvZ0/e2xXGxBUOwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN85pZfbcbzl5aOfwf9WKSlm63x3MB8GA1UdIwQY
MBaAFN1fcvD6z1JwVyfAOb3B+7fMl9QoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yZjMzZWUtNTU5MC00YTIyLWI4ZTIt
Mjg4MDYxMjcwNWVlLzEvM3ptbGw5dHh2T1hsbzVfQl8xWXBLV2JyZkhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yZjMzZWUtNTU5MC00YTIyLWI4ZTItMjg4MDYxMjcwNWVl
LzEvM1Y5eThQclBVbkJYSjhBNXZjSDd0OHlYMUNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwY23AwQA
wY28MA0GCSqGSIb3DQEBCwUAA4IBAQA66Gspn04N5f4nxbp/ShqFSXksjCEglSnD
/59kAIKXNlglqNjGfzFxQ7hshQ2w/mEIXRY7YknWK+0zYP3KWmvnJ9N0vD6aUWxS
lNuqHFP4tI/H2WwfCX8TNK9AugJZI4Z15L6krdk538fZY3FaIekLgqOtLmFAQQSr
C1dcyWja7zU5uO7TqQfw4J9hj3ZL8wfWQqPef6us+MOw/reBJpJH+DsXQ9Q1MYF8
JZ831DN8w3pn8RvKVRrlwjZ21Pz6W0LC2rOQiyulLSJsVRAHmDAWbqsZ+/y/9NNz
VZxby+3/gKJaPsDaFVZQmoNaR0lQ5UnMngOL9m3/DenYbOjhfUov
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:42 2024 by rpki-client on console-ams.rpki-client.org