Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/1-8uQBT_50P7lDcl1zb0P8eMYRPc.roa
File: 1-8uQBT_50P7lDcl1zb0P8eMYRPc.roa (raw, json)
Hash identifier: geNwkzzj6l3tCKkr9SJkGR0tN11mFF4leCgT1KN6p+U=
Subject key identifier: FB:CB:90:05:3F:F9:D0:FE:E5:0D:C9:75:CD:BD:0F:F1:E3:18:44:F7
Certificate issuer: /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial: 018C729A07087EDCF1D0929496EACE5AA40C
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/1-8uQBT_50P7lDcl1zb0P8eMYRPc.roa
Signing time: Sat 16 Dec 2023 12:29:06 +0000
ROA not before: Sat 16 Dec 2023 12:29:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34397
IP address blocks: 193.194.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:72:9a:07:08:7e:dc:f1:d0:92:94:96:ea:ce:5a:a4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Validity
Not Before: Dec 16 12:29:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbcb90053ff9d0fee50dc975cdbd0ff1e31844f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:33:41:75:18:c2:69:01:3a:46:ec:bc:a2:f2:
6c:0d:14:5f:d2:e4:4e:63:ce:a5:d9:9a:ba:77:39:
c3:d4:c2:97:bd:b5:8f:cf:95:6e:bc:96:ec:28:07:
f6:aa:fe:7f:58:a5:8b:29:20:91:6d:c7:6e:4f:51:
d0:23:3a:04:d3:06:92:21:d8:aa:c5:cf:da:bd:12:
45:f6:ff:80:1a:6b:ca:42:30:93:7e:c8:df:cf:f2:
23:72:96:89:4a:0d:79:4e:06:bb:b6:73:15:d0:aa:
e2:6a:86:26:4f:e0:15:c5:d7:ee:28:18:0b:2c:73:
50:79:19:51:a3:03:ed:88:ac:3b:97:fb:1b:0d:e6:
2f:15:2e:69:aa:76:53:db:d6:6f:36:ba:fc:87:c7:
e0:81:32:7d:c4:25:3b:ed:5a:90:c2:d8:a3:21:4f:
e6:41:8d:80:78:65:b3:9f:11:02:9d:c9:31:7c:d6:
28:c9:09:0e:af:6b:40:1b:ae:b1:51:17:60:d0:a3:
e3:ce:a6:3b:92:5d:f9:58:7a:2e:22:38:84:45:97:
95:7d:0c:36:61:77:05:9d:c7:38:d9:75:b0:f8:fd:
a0:dc:38:a3:f7:b0:0e:21:75:89:ae:db:0f:f8:f6:
0c:dd:26:ef:b2:3e:d7:08:62:4c:c3:5b:59:e7:d0:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CB:90:05:3F:F9:D0:FE:E5:0D:C9:75:CD:BD:0F:F1:E3:18:44:F7
X509v3 Authority Key Identifier:
keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/1-8uQBT_50P7lDcl1zb0P8eMYRPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.122.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:82:14:cd:6b:ce:79:26:15:41:4a:3f:49:69:d8:c3:75:b2:
17:39:57:c4:87:46:da:4c:e2:2c:f0:64:ee:ad:15:b6:30:09:
0f:39:30:b7:99:a3:68:4d:36:ec:a8:48:ad:6c:c5:71:82:b4:
d0:33:93:e8:43:7e:bb:2d:cc:98:b4:43:c5:a7:a1:d1:80:cb:
a9:e1:53:2e:3e:7e:ff:e1:54:fa:51:f4:34:15:be:43:40:51:
47:72:7b:96:9b:bf:c3:46:4b:79:35:f4:04:2b:3a:97:d4:49:
50:05:7a:8a:82:e2:e2:c8:a5:4d:6c:34:a6:be:30:0c:7c:cb:
47:44:ea:f8:6e:fb:2f:9a:69:9a:91:f5:b4:f2:10:5b:91:d9:
97:c5:b9:97:f0:c5:eb:f2:7e:fa:ae:f7:69:c7:93:d6:97:e1:
cf:87:1f:c7:3b:a8:9d:55:e1:dd:2d:da:10:2e:65:a8:86:22:
bd:43:cd:93:e9:45:70:c0:d5:4b:c8:26:6d:cb:d8:f5:b3:30:
13:77:1e:ea:83:bc:c1:df:eb:75:ed:ab:21:a7:4c:4f:db:6c:
3f:bd:fd:2e:c1:a9:b7:f1:3b:55:41:ff:85:6c:2b:31:25:ef:
32:20:02:c2:41:a6:10:c4:c4:d6:3e:ec:64:9c:43:11:5a:26:
63:83:1d:b3
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYxymgcIftzx0JKUlurOWqQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNmY4ZmZiZTA5ODkyMjA3MWYwYzljM2E2MGY1ZGZkY2Rl
NDZkYTQwHhcNMjMxMjE2MTIyOTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmNiOTAwNTNmZjlkMGZlZTUwZGM5NzVjZGJkMGZmMWUzMTg0NGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjNBdRjCaQE6Ruy8ovJsDRRf0uRO
Y86l2Zq6dznD1MKXvbWPz5VuvJbsKAf2qv5/WKWLKSCRbcduT1HQIzoE0waSIdiq
xc/avRJF9v+AGmvKQjCTfsjfz/IjcpaJSg15Tga7tnMV0KriaoYmT+AVxdfuKBgL
LHNQeRlRowPtiKw7l/sbDeYvFS5pqnZT29ZvNrr8h8fggTJ9xCU77VqQwtijIU/m
QY2AeGWznxECnckxfNYoyQkOr2tAG66xURdg0KPjzqY7kl35WHouIjiERZeVfQw2
YXcFncc42XWw+P2g3Dij97AOIXWJrtsP+PYM3Sbvsj7XCGJMw1tZ59BDjwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPvLkAU/+dD+5Q3Jdc29D/HjGET3MB8GA1UdIwQY
MBaAFCpvj/vgmJIgcfDJw6YPXf3N5G2kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS20tUC0tQ1lraUJ4OE1uRHBnOWRfYzNrYmFRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MzhkODgtNDk1Mi00OTYwLTg3NzQt
YzFjNGQ4Y2JmNDU5LzEvMS04dVFCVF81MFA3bERjbDF6YjBQOGVNWVJQYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTMvNjM4ZDg4LTQ5NTItNDk2MC04Nzc0LWMxYzRkOGNiZjQ1
OS8xL0ttLVAtLUNZa2lCeDhNbkRwZzlkX2Mza2JhUS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHCejAN
BgkqhkiG9w0BAQsFAAOCAQEAHIIUzWvOeSYVQUo/SWnYw3WyFzlXxIdG2kziLPBk
7q0VtjAJDzkwt5mjaE027KhIrWzFcYK00DOT6EN+uy3MmLRDxaeh0YDLqeFTLj5+
/+FU+lH0NBW+Q0BRR3J7lpu/w0ZLeTX0BCs6l9RJUAV6ioLi4silTWw0pr4wDHzL
R0Tq+G77L5ppmpH1tPIQW5HZl8W5l/DF6/J++q73aceT1pfhz4cfxzuonVXh3S3a
EC5lqIYivUPNk+lFcMDVS8gmbcvY9bMwE3ce6oO8wd/rde2rIadMT9tsP739LsGp
t/E7VUH/hWwrMSXvMiACwkGmEMTE1j7sZJxDEVomY4Mdsw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:35 2024 by rpki-client on console-fra.rpki-client.org