Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/TAJHtcXPe_Xt7fJPb8-EqCnowLw.roa
File: TAJHtcXPe_Xt7fJPb8-EqCnowLw.roa (raw, json)
Hash identifier: y+7tsP2oDaRqvAMzPx4rpTW4vludUb30NUN9PgRIboY=
Subject key identifier: 4C:02:47:B5:C5:CF:7B:F5:ED:ED:F2:4F:6F:CF:84:A8:29:E8:C0:BC
Certificate issuer: /CN=5b2c470db2443482e19523953a78c1ef0a169479
Certificate serial: 01857079731C9CB7F607FBA5E4DAA349A462
Authority key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/TAJHtcXPe_Xt7fJPb8-EqCnowLw.roa
Signing time: Mon 02 Jan 2023 03:14:45 +0000
ROA not before: Mon 02 Jan 2023 03:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209719
IP address blocks: 193.107.67.0/24 maxlen: 24
2001:67c:940::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:73:1c:9c:b7:f6:07:fb:a5:e4:da:a3:49:a4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2c470db2443482e19523953a78c1ef0a169479
Validity
Not Before: Jan 2 03:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c0247b5c5cf7bf5ededf24f6fcf84a829e8c0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c6:a7:7e:6a:ec:98:31:96:22:5b:ca:77:ed:
e6:6b:50:b0:7c:b9:ce:75:53:e7:33:be:d2:5a:a4:
95:3c:c8:22:95:87:69:4b:22:30:d3:d0:ba:65:bb:
d9:19:52:4b:29:6d:b1:e9:50:99:1a:a6:b7:39:07:
1a:98:7b:01:21:a0:00:d9:12:08:d2:b0:82:9f:17:
b1:3f:c6:a2:63:7b:d9:a4:6a:27:d7:02:c9:e9:82:
a5:b1:11:f8:6a:2e:1e:85:af:a5:7b:6a:79:79:e9:
48:46:c8:31:cc:d1:8a:c4:eb:7f:a0:b5:2b:a2:dd:
f7:65:1d:be:52:f3:15:ff:b2:ec:4c:88:15:57:65:
15:3e:35:54:44:2f:b6:34:b2:25:c5:df:e0:01:aa:
62:64:fa:12:16:1c:88:8d:a3:7b:4a:84:e4:07:01:
5d:26:32:b7:47:bb:35:fa:85:bb:8b:34:c9:cb:74:
3a:40:bd:83:b5:12:25:0a:54:21:78:44:6f:bf:08:
e0:52:01:78:dd:3c:23:33:dd:2a:ae:e8:a8:72:8c:
08:66:d7:be:3a:17:b0:d1:82:dc:23:59:56:f2:ec:
9b:12:4b:0a:35:3e:62:98:be:0e:4a:ad:bd:20:9e:
71:b0:84:fd:ba:09:45:ca:3a:8e:b5:5a:86:26:bf:
be:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:02:47:B5:C5:CF:7B:F5:ED:ED:F2:4F:6F:CF:84:A8:29:E8:C0:BC
X509v3 Authority Key Identifier:
keyid:5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/TAJHtcXPe_Xt7fJPb8-EqCnowLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.67.0/24
IPv6:
2001:67c:940::/48
Signature Algorithm: sha256WithRSAEncryption
97:82:48:b2:6b:1d:23:21:a8:67:30:5d:2c:00:9c:68:f2:8e:
c1:0a:8b:e2:55:58:60:b0:19:ba:bb:31:10:d9:e9:b5:37:1a:
ff:e5:e9:fc:c1:8e:ec:58:df:b5:77:57:35:a8:2c:38:ef:ea:
bb:4e:89:27:52:66:b9:62:24:39:62:ed:30:79:f2:d8:32:7e:
5c:32:e4:34:2c:84:f7:21:fd:b7:fd:f3:96:b9:5b:e0:49:ea:
04:b6:4a:db:ed:da:aa:bc:c4:09:6f:20:9e:96:aa:df:b6:b1:
71:f4:64:89:2c:52:79:b8:c3:45:34:c3:81:9d:62:d5:7a:13:
5b:92:7f:37:57:10:53:2c:49:0e:c8:34:4a:6d:ac:f5:25:1c:
d0:b5:4a:47:f1:34:67:08:60:bd:6f:c1:be:65:55:ec:49:55:
34:9b:af:40:28:d5:02:75:d1:b8:41:c6:5d:6e:f2:21:35:09:
6d:c8:bb:8a:ab:d8:ee:c7:5e:45:c6:3d:73:ee:74:4b:93:22:
9b:92:2a:a5:36:d1:6c:4f:65:5c:a3:37:b9:03:6c:43:31:0a:
b8:f4:6c:91:d1:d2:f9:22:72:89:58:1f:39:f8:2f:bc:49:39:
de:7c:e6:b1:c6:26:6a:0b:3d:33:08:8c:76:4b:07:37:cb:d1:
95:01:2e:ac
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVweXMcnLf2B/ul5NqjSaRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMmM0NzBkYjI0NDM0ODJlMTk1MjM5NTNhNzhjMWVmMGEx
Njk0NzkwHhcNMjMwMTAyMDMxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzAyNDdiNWM1Y2Y3YmY1ZWRlZGYyNGY2ZmNmODRhODI5ZThjMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsanfmrsmDGWIlvKd+3ma1CwfLnO
dVPnM77SWqSVPMgilYdpSyIw09C6ZbvZGVJLKW2x6VCZGqa3OQcamHsBIaAA2RII
0rCCnxexP8aiY3vZpGon1wLJ6YKlsRH4ai4eha+le2p5eelIRsgxzNGKxOt/oLUr
ot33ZR2+UvMV/7LsTIgVV2UVPjVURC+2NLIlxd/gAapiZPoSFhyIjaN7SoTkBwFd
JjK3R7s1+oW7izTJy3Q6QL2DtRIlClQheERvvwjgUgF43TwjM90qruiocowIZte+
Ohew0YLcI1lW8uybEksKNT5imL4OSq29IJ5xsIT9uglFyjqOtVqGJr++QQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEwCR7XFz3v17e3yT2/PhKgp6MC8MB8GA1UdIwQY
MBaAFFssRw2yRDSC4ZUjlTp4we8KFpR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3l4SERiSkVOSUxobFNPVk9uakI3d29XbEhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xNDdhZTQtNzc1Yi00YzQ4LWIwZGEt
YzM3OWY4YzIzZmMxLzEvVEFKSHRjWFBlX1h0N2ZKUGI4LUVxQ25vd0x3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xNDdhZTQtNzc1Yi00YzQ4LWIwZGEtYzM3OWY4YzIzZmMx
LzEvV3l4SERiSkVOSUxobFNPVk9uakI3d29XbEhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwWtDMA8E
AgACMAkDBwAgAQZ8CUAwDQYJKoZIhvcNAQELBQADggEBAJeCSLJrHSMhqGcwXSwA
nGjyjsEKi+JVWGCwGbq7MRDZ6bU3Gv/l6fzBjuxY37V3VzWoLDjv6rtOiSdSZrli
JDli7TB58tgyflwy5DQshPch/bf985a5W+BJ6gS2Stvt2qq8xAlvIJ6Wqt+2sXH0
ZIksUnm4w0U0w4GdYtV6E1uSfzdXEFMsSQ7INEptrPUlHNC1SkfxNGcIYL1vwb5l
VexJVTSbr0Ao1QJ10bhBxl1u8iE1CW3Iu4qr2O7HXkXGPXPudEuTIpuSKqU20WxP
ZVyjN7kDbEMxCrj0bJHR0vkicolYHzn4L7xJOd585rHGJmoLPTMIjHZLBzfL0ZUB
Lqw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:13 2024 by rpki-client on console-ams.rpki-client.org