Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/o7Dd0r9WwI5n5uIUzgLCpuEMFqk.roa
File: o7Dd0r9WwI5n5uIUzgLCpuEMFqk.roa (raw, json)
Hash identifier: 5zUXlRI+tpu5qfur0QnJbWctdRAP0lY7AhKy9Sx+4mw=
Subject key identifier: A3:B0:DD:D2:BF:56:C0:8E:67:E6:E2:14:CE:02:C2:A6:E1:0C:16:A9
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 0186B7678771DBD3881D362A4055B6351D82
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/o7Dd0r9WwI5n5uIUzgLCpuEMFqk.roa
Signing time: Mon 06 Mar 2023 14:51:00 +0000
ROA not before: Mon 06 Mar 2023 14:51:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 193.178.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b7:67:87:71:db:d3:88:1d:36:2a:40:55:b6:35:1d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Mar 6 14:51:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3b0ddd2bf56c08e67e6e214ce02c2a6e10c16a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e2:c8:dd:27:05:a9:0e:a2:52:9e:e6:97:b8:
16:f7:3f:47:2e:ea:70:f4:ca:b6:b9:32:7c:83:f1:
90:de:95:88:5e:4b:40:e4:ba:07:aa:b0:b8:70:03:
09:2b:e0:cc:13:64:8b:de:f7:36:40:8f:74:21:d9:
21:2e:d4:24:48:7e:fb:8f:a6:6c:8d:ad:47:d3:52:
eb:30:3b:f3:41:93:05:91:5b:c2:00:0b:77:ed:37:
f6:d9:6a:a3:41:72:d6:60:60:f6:56:eb:0d:61:0a:
f4:fe:51:a1:4d:b3:ac:88:9d:00:3a:75:8d:b2:a7:
39:e9:54:40:dd:73:35:9f:4a:2c:3e:d7:42:f2:c4:
28:c3:43:ad:ba:fc:71:8b:9d:8f:fb:67:0b:96:f6:
ab:d9:58:73:cf:c4:d5:5d:5b:21:79:6f:1f:8d:bb:
46:63:ae:4c:3a:f0:3d:17:a6:01:55:59:aa:0d:78:
90:d4:b3:87:1d:05:06:34:d2:50:84:39:58:13:45:
76:7b:6f:2a:a1:32:0a:c9:7a:e1:8c:f6:bb:ed:87:
2d:c5:8f:23:41:46:33:9b:b0:dc:d6:96:28:00:e7:
de:63:4c:c6:93:85:da:0e:f7:d4:5d:ab:36:ef:b5:
63:cc:34:72:76:1f:a3:8a:0d:7d:98:cb:ee:fd:23:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B0:DD:D2:BF:56:C0:8E:67:E6:E2:14:CE:02:C2:A6:E1:0C:16:A9
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/o7Dd0r9WwI5n5uIUzgLCpuEMFqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.166.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:3f:7e:8e:15:bc:87:6b:5e:84:45:a4:82:97:69:c5:00:eb:
42:45:25:f8:75:a6:28:ee:15:df:d9:c1:ec:8d:09:31:c9:e8:
04:87:d6:b5:80:e2:c9:08:6b:52:9d:69:2c:e4:b4:52:4d:c8:
8c:2e:db:81:35:21:cc:8d:04:35:37:5a:8e:79:a8:88:f4:cd:
20:89:45:fc:76:cb:51:77:41:8e:49:c9:e9:3f:a0:5a:da:ef:
dc:48:39:f3:bf:e3:0a:35:d9:07:6a:46:4b:0a:f9:6b:45:a7:
1a:06:94:c4:d4:49:e0:a3:ec:ac:02:4a:a9:d8:75:ad:34:70:
3f:e4:09:c0:da:3b:97:e3:c2:7c:49:45:37:18:fb:17:88:fc:
67:71:5b:c5:82:93:65:73:0c:78:71:f2:c8:08:2b:3e:0b:db:
3b:da:13:91:8a:7d:0f:7b:e4:70:1e:0f:5e:15:79:19:9b:4b:
07:b0:b4:04:c8:2b:12:db:68:83:ce:ec:4b:4f:67:2c:b3:ce:
b6:08:a2:c5:df:fe:df:f6:e6:57:be:cf:56:cc:79:b4:9d:29:
7b:a6:de:7d:9c:98:04:ab:1f:4b:62:ea:9a:f0:4d:a7:28:04:
ce:10:c4:ee:8c:8e:2d:d6:4e:0e:b6:23:f8:b6:d9:79:69:35:
bb:90:ca:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYa3Z4dx29OIHTYqQFW2NR2CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZGE1ODhmNWU5YTFjMmFmNTZiZTA4ZjdlNmEyYzk5ODFh
YjYwMjYwHhcNMjMwMzA2MTQ1MTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2IwZGRkMmJmNTZjMDhlNjdlNmUyMTRjZTAyYzJhNmUxMGMxNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheLI3ScFqQ6iUp7ml7gW9z9HLupw
9Mq2uTJ8g/GQ3pWIXktA5LoHqrC4cAMJK+DME2SL3vc2QI90IdkhLtQkSH77j6Zs
ja1H01LrMDvzQZMFkVvCAAt37Tf22WqjQXLWYGD2VusNYQr0/lGhTbOsiJ0AOnWN
sqc56VRA3XM1n0osPtdC8sQow0Otuvxxi52P+2cLlvar2Vhzz8TVXVsheW8fjbtG
Y65MOvA9F6YBVVmqDXiQ1LOHHQUGNNJQhDlYE0V2e28qoTIKyXrhjPa77YctxY8j
QUYzm7Dc1pYoAOfeY0zGk4XaDvfUXas277VjzDRydh+jig19mMvu/SMFAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKOw3dK/VsCOZ+biFM4CwqbhDBapMB8GA1UdIwQY
MBaAFFDaWI9emhwq9Wvgj35qLJmBq2AmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83MzFiNGMtOGNhOC00OTdiLThhMmIt
NDNjMWM2MWQwMmViLzEvbzdEZDByOVd3STVuNXVJVXpnTENwdUVNRnFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy83MzFiNGMtOGNhOC00OTdiLThhMmItNDNjMWM2MWQwMmVi
LzEvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbKmMA0G
CSqGSIb3DQEBCwUAA4IBAQA9P36OFbyHa16ERaSCl2nFAOtCRSX4daYo7hXf2cHs
jQkxyegEh9a1gOLJCGtSnWks5LRSTciMLtuBNSHMjQQ1N1qOeaiI9M0giUX8dstR
d0GOScnpP6Ba2u/cSDnzv+MKNdkHakZLCvlrRacaBpTE1Engo+ysAkqp2HWtNHA/
5AnA2juX48J8SUU3GPsXiPxncVvFgpNlcwx4cfLICCs+C9s72hORin0Pe+RwHg9e
FXkZm0sHsLQEyCsS22iDzuxLT2css862CKLF3/7f9uZXvs9WzHm0nSl7pt59nJgE
qx9LYuqa8E2nKATOEMTujI4t1k4OtiP4ttl5aTW7kMrY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:03 2024 by rpki-client on console-fra.rpki-client.org