Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/v_DwgUHA_CT43pYD03NYtuJKHzg.roa
File: v_DwgUHA_CT43pYD03NYtuJKHzg.roa (raw, json)
Hash identifier: JdgWS6gFeBJ6RXdICnKpISQ9wMDzmYhoC/2p7GBgXsA=
Subject key identifier: BF:F0:F0:81:41:C0:FC:24:F8:DE:96:03:D3:73:58:B6:E2:4A:1F:38
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 01856D0AA5CF4329B5216E515A599EA8F50D
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/v_DwgUHA_CT43pYD03NYtuJKHzg.roa
Signing time: Sun 01 Jan 2023 11:14:52 +0000
ROA not before: Sun 01 Jan 2023 11:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60881
IP address blocks: 193.140.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:a5:cf:43:29:b5:21:6e:51:5a:59:9e:a8:f5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 11:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bff0f08141c0fc24f8de9603d37358b6e24a1f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:65:94:68:0b:cf:f5:3d:74:40:09:02:3a:75:
75:24:2b:91:34:46:59:93:64:f7:a0:9a:2f:52:bf:
16:ae:c2:b4:b3:6e:30:d3:fe:de:c0:da:e0:1e:95:
51:13:eb:2a:c5:6a:87:35:d4:64:2d:c5:e4:df:af:
7c:04:e1:f7:68:9a:18:fd:74:fa:94:3d:44:f1:aa:
a3:ee:63:b6:0e:25:cc:c1:c1:78:4a:cf:5a:5e:05:
8e:8b:89:df:d8:d0:9e:7c:fc:50:aa:8d:12:b7:14:
cb:ae:1f:d1:01:5e:3b:d7:13:9a:20:dd:76:2b:dd:
5c:87:71:49:96:6e:9b:aa:ad:aa:27:58:40:b9:6e:
65:d4:09:a9:01:86:b4:68:dd:6d:ff:3a:a0:cb:82:
cb:53:3b:34:57:b3:c9:b8:2a:f9:4c:be:c8:82:fa:
f9:97:b0:9a:b0:b0:89:66:6e:a8:eb:86:ed:52:e1:
8e:ce:14:d7:93:a0:4a:06:72:87:6f:14:16:e2:d9:
f6:17:a3:a8:04:c9:63:38:58:8c:1b:6e:a9:e7:9a:
3b:b2:8b:a7:da:a0:5d:b0:42:c3:73:84:ca:84:a8:
01:63:5a:1b:73:2b:e7:ef:9b:4a:58:3c:07:36:77:
4a:20:d8:3c:59:d3:6c:ec:19:3b:fa:f5:96:ce:de:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F0:F0:81:41:C0:FC:24:F8:DE:96:03:D3:73:58:B6:E2:4A:1F:38
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/v_DwgUHA_CT43pYD03NYtuJKHzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.140.127.0/24
Signature Algorithm: sha256WithRSAEncryption
89:2b:89:52:26:87:d4:a9:93:b7:39:f5:c5:4d:89:7f:cc:ee:
49:23:52:6d:a3:5a:48:9e:17:2a:7f:92:48:2d:fb:9d:b5:16:
a7:25:dc:0b:71:19:e2:b4:21:a2:2b:1f:a5:32:ce:4d:fa:4b:
e1:e9:4e:77:6f:3b:03:18:53:40:64:59:46:99:f7:67:fb:66:
f8:79:33:3f:f5:3e:89:47:e6:70:39:36:9b:79:9c:4d:89:9a:
e5:e7:fb:38:59:a0:16:9e:cd:6c:a8:15:cb:7f:24:c3:3e:50:
b7:38:a1:ab:63:d3:7f:49:d0:88:8a:98:e2:36:a9:05:eb:fe:
c3:27:c1:f5:50:b4:44:6c:38:62:53:e9:a5:71:2a:01:7e:b9:
95:65:40:64:be:cf:f6:f1:85:50:a3:58:3a:6f:52:d1:06:29:
a4:d5:b8:82:8d:de:b0:02:80:69:69:0c:3e:02:93:2c:42:0b:
40:77:c7:b9:68:60:94:13:36:f9:ef:1e:56:84:81:c7:e4:fa:
7b:21:00:25:93:f9:48:25:d7:6e:d9:96:af:c4:8d:ac:f7:0a:
c2:dc:87:01:d8:30:17:dd:f7:0d:69:50:40:29:78:6a:16:b9:
57:84:b3:85:56:f8:c7:31:de:47:ce:54:a6:61:cf:25:77:52:
1d:af:11:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtCqXPQym1IW5RWlmeqPUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh
YWI5MDcwHhcNMjMwMTAxMTExNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmYwZjA4MTQxYzBmYzI0ZjhkZTk2MDNkMzczNThiNmUyNGExZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWWUaAvP9T10QAkCOnV1JCuRNEZZ
k2T3oJovUr8WrsK0s24w0/7ewNrgHpVRE+sqxWqHNdRkLcXk3698BOH3aJoY/XT6
lD1E8aqj7mO2DiXMwcF4Ss9aXgWOi4nf2NCefPxQqo0StxTLrh/RAV471xOaIN12
K91ch3FJlm6bqq2qJ1hAuW5l1AmpAYa0aN1t/zqgy4LLUzs0V7PJuCr5TL7Igvr5
l7CasLCJZm6o64btUuGOzhTXk6BKBnKHbxQW4tn2F6OoBMljOFiMG26p55o7soun
2qBdsELDc4TKhKgBY1obcyvn75tKWDwHNndKINg8WdNs7Bk7+vWWzt6MQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL/w8IFBwPwk+N6WA9NzWLbiSh84MB8GA1UdIwQY
MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt
NTk2NzE5MjBmYjYwLzEvdl9Ed2dVSEFfQ1Q0M3BZRDAzTll0dUpLSHpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw
LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYx/MA0G
CSqGSIb3DQEBCwUAA4IBAQCJK4lSJofUqZO3OfXFTYl/zO5JI1Jto1pInhcqf5JI
LfudtRanJdwLcRnitCGiKx+lMs5N+kvh6U53bzsDGFNAZFlGmfdn+2b4eTM/9T6J
R+ZwOTabeZxNiZrl5/s4WaAWns1sqBXLfyTDPlC3OKGrY9N/SdCIipjiNqkF6/7D
J8H1ULREbDhiU+mlcSoBfrmVZUBkvs/28YVQo1g6b1LRBimk1biCjd6wAoBpaQw+
ApMsQgtAd8e5aGCUEzb57x5WhIHH5Pp7IQAlk/lIJddu2ZavxI2s9wrC3IcB2DAX
3fcNaVBAKXhqFrlXhLOFVvjHMd5HzlSmYc8ld1IdrxEk
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:01 2024 by rpki-client on console-ams.rpki-client.org