Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/l1K8Rn_wcAscLEuRabF2jXSxznw.roa
File: l1K8Rn_wcAscLEuRabF2jXSxznw.roa (raw, json)
Hash identifier: eBkHWspA5JUnEIX8CuhgSTVUHvRT9g4Qpdf02U1Q+Vw=
Subject key identifier: 97:52:BC:46:7F:F0:70:0B:1C:2C:4B:91:69:B1:76:8D:74:B1:CE:7C
Certificate issuer: /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial: 01926C70E95A153706B12026F0FAE5167608
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/l1K8Rn_wcAscLEuRabF2jXSxznw.roa
Signing time: Tue 08 Oct 2024 14:03:12 +0000
ROA not before: Tue 08 Oct 2024 14:03:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41241
IP address blocks: 193.16.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:70:e9:5a:15:37:06:b1:20:26:f0:fa:e5:16:76:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Validity
Not Before: Oct 8 14:03:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9752bc467ff0700b1c2c4b9169b1768d74b1ce7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:8a:95:9d:c5:96:d6:ee:8e:6b:6a:95:32:
91:74:cb:ca:be:89:df:6c:9f:55:7d:79:4e:9e:f8:
7d:40:72:6c:fa:a3:fe:02:68:33:78:47:40:02:eb:
b1:93:c2:f5:58:60:04:9c:62:4b:97:4a:dd:79:b6:
ba:7f:fb:e8:7a:55:18:82:da:f4:52:7c:43:05:ca:
66:3a:7a:d0:23:14:79:a9:66:7b:ec:dd:ae:8d:86:
dd:e7:9f:8d:a1:d1:66:1e:65:a6:ea:81:45:9c:e4:
78:6c:df:33:75:ad:99:88:90:44:72:eb:79:1b:a9:
e0:a6:25:18:a5:e8:e8:5f:38:85:c2:b2:28:d6:0a:
0e:fb:b7:7d:f4:56:ad:46:ad:4e:2a:3d:eb:5e:ef:
77:1a:29:f4:17:60:4f:5d:cc:8c:4a:f7:2a:55:96:
43:aa:25:57:26:7a:ed:e8:c0:27:70:56:8a:b1:53:
9e:a5:d1:59:4c:2c:89:0a:b0:cf:77:d5:6b:4b:f5:
ca:92:f1:19:08:be:92:e8:e3:4d:35:38:7d:df:a1:
54:d7:3c:9e:d2:d9:fc:0a:ff:01:21:e0:dc:c0:ee:
fe:34:b7:9c:08:fe:f4:2b:49:9f:fc:e4:3a:7f:84:
cb:bf:46:75:db:70:8f:11:c0:d6:6e:54:f4:d5:f2:
87:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:52:BC:46:7F:F0:70:0B:1C:2C:4B:91:69:B1:76:8D:74:B1:CE:7C
X509v3 Authority Key Identifier:
keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/l1K8Rn_wcAscLEuRabF2jXSxznw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.234.0/24
Signature Algorithm: sha256WithRSAEncryption
20:29:53:eb:9b:45:c1:2a:63:9c:51:65:6f:26:ff:c7:6e:7d:
5a:43:ec:f2:b9:ee:ec:34:7c:31:1b:6d:a1:85:29:38:a1:ec:
cb:3b:83:20:6a:39:7e:44:e7:08:6b:6b:ab:3d:f8:62:d5:5b:
24:ab:7c:cc:39:a0:be:c1:d9:bb:2d:eb:37:64:20:a6:7e:2c:
00:6c:84:41:7c:ca:c0:5e:56:e1:ac:ec:ad:fb:54:e2:61:0c:
9f:39:db:bf:1f:ff:60:b6:8d:88:73:8b:45:90:fe:2d:e7:a3:
7e:12:e5:01:51:96:d5:22:79:12:0c:a9:fe:af:15:35:fb:21:
72:e8:5e:a5:76:56:30:39:77:e0:aa:d9:f9:4e:08:6a:32:f1:
f8:c3:f5:3c:ac:6d:c2:d1:06:26:29:67:77:ad:fc:5e:16:17:
e7:48:d3:48:86:5f:7c:7f:7b:63:75:7f:03:df:fb:c4:f9:1a:
b1:54:f7:48:f4:19:a0:8f:5d:89:e2:34:ff:fa:cc:80:bb:7b:
1b:8a:e6:3a:37:67:10:a3:8a:fe:e7:06:26:e4:19:7a:c3:d1:
ce:1b:8d:51:f2:2c:55:b4:e1:77:39:48:ef:48:6d:a1:73:6f:
ef:e0:9f:b0:54:a2:94:19:da:72:fe:aa:09:c3:02:d5:a2:27:
cf:4a:25:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJscOlaFTcGsSAm8PrlFnYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzFiMDgwZDRlYTZmZDA2MTZhNmU3MDFjN2M4MTVkNmZm
ODdjMDAwHhcNMjQxMDA4MTQwMzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzUyYmM0NjdmZjA3MDBiMWMyYzRiOTE2OWIxNzY4ZDc0YjFjZTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUyKlZ3FltbujmtqlTKRdMvKvonf
bJ9VfXlOnvh9QHJs+qP+AmgzeEdAAuuxk8L1WGAEnGJLl0rdeba6f/voelUYgtr0
UnxDBcpmOnrQIxR5qWZ77N2ujYbd55+NodFmHmWm6oFFnOR4bN8zda2ZiJBEcut5
G6ngpiUYpejoXziFwrIo1goO+7d99FatRq1OKj3rXu93Gin0F2BPXcyMSvcqVZZD
qiVXJnrt6MAncFaKsVOepdFZTCyJCrDPd9VrS/XKkvEZCL6S6ONNNTh936FU1zye
0tn8Cv8BIeDcwO7+NLecCP70K0mf/OQ6f4TLv0Z123CPEcDWblT01fKHRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJdSvEZ/8HALHCxLkWmxdo10sc58MB8GA1UdIwQY
MBaAFOYxsIDU6m/QYWpucBx8gV1v+HwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWIt
OTNiM2EzNjk2ZDk2LzEvbDFLOFJuX3djQXNjTEV1UmFiRjJqWFN4em53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWItOTNiM2EzNjk2ZDk2
LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRDqMA0G
CSqGSIb3DQEBCwUAA4IBAQAgKVPrm0XBKmOcUWVvJv/Hbn1aQ+zyue7sNHwxG22h
hSk4oezLO4Mgajl+ROcIa2urPfhi1Vskq3zMOaC+wdm7Les3ZCCmfiwAbIRBfMrA
XlbhrOyt+1TiYQyfOdu/H/9gto2Ic4tFkP4t56N+EuUBUZbVInkSDKn+rxU1+yFy
6F6ldlYwOXfgqtn5TghqMvH4w/U8rG3C0QYmKWd3rfxeFhfnSNNIhl98f3tjdX8D
3/vE+RqxVPdI9Bmgj12J4jT/+syAu3sbiuY6N2cQo4r+5wYm5Bl6w9HOG41R8ixV
tOF3OUjvSG2hc2/v4J+wVKKUGdpy/qoJwwLVoifPSiXE
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:14 2025 by rpki-client