Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/alyO5tzp_1u3m0Q280Qukxd336I.roa
File: alyO5tzp_1u3m0Q280Qukxd336I.roa (raw, json)
Hash identifier: bGvBDPbIyhhgW10dZ+WxX241NNNUjuNSHM5QJIoMwcg=
Subject key identifier: 6A:5C:8E:E6:DC:E9:FF:5B:B7:9B:44:36:F3:44:2E:93:17:77:DF:A2
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 0186226E75DA9FBE6026A0D0CB295C88048F
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/alyO5tzp_1u3m0Q280Qukxd336I.roa
Signing time: Sun 05 Feb 2023 16:35:09 +0000
ROA not before: Sun 05 Feb 2023 16:35:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 193.187.255.0/24 maxlen: 24
2a12:3e80:300::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 03 May 2023 13:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:22:6e:75:da:9f:be:60:26:a0:d0:cb:29:5c:88:04:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Feb 5 16:35:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a5c8ee6dce9ff5bb79b4436f3442e931777dfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:35:31:c0:18:51:b5:bb:c9:7f:62:da:97:
c5:17:ef:eb:be:90:86:a1:a9:9a:3b:fa:cb:a3:eb:
ed:83:43:93:47:08:de:a1:2e:76:09:2e:76:41:45:
44:88:bc:7f:f4:fe:cb:61:9f:5d:eb:75:70:ba:5a:
58:b3:00:7f:f4:87:98:78:4e:b5:02:6d:e5:fc:72:
16:f2:92:df:da:8e:e5:0e:5d:df:d8:1c:31:8e:82:
34:6f:33:8d:7d:87:53:96:24:3f:1b:2d:ab:5b:ae:
f1:5a:3f:1d:37:bd:4e:b3:80:d1:e2:39:91:9e:33:
ed:d3:51:1e:71:b6:01:96:79:b3:5d:50:a1:6c:c7:
2b:f3:85:3e:e0:4b:1c:d1:55:21:c1:56:75:9e:c0:
ae:07:34:e7:66:24:68:fb:7f:56:18:ac:83:ff:32:
54:52:80:36:4b:e9:24:c3:0d:fa:68:76:78:c5:ed:
77:db:3b:e6:66:df:a4:ad:28:7e:c6:14:9c:95:f1:
d0:4a:51:4c:dc:15:06:d1:c7:cc:ee:cb:a7:73:77:
56:5d:5a:6b:42:29:3a:99:26:86:f5:07:10:46:29:
96:95:06:4b:f9:50:14:94:a2:9b:19:4e:96:9d:d5:
a7:ff:89:d4:11:31:d0:3d:c9:2b:5d:3f:ec:b1:f5:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5C:8E:E6:DC:E9:FF:5B:B7:9B:44:36:F3:44:2E:93:17:77:DF:A2
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/alyO5tzp_1u3m0Q280Qukxd336I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.255.0/24
IPv6:
2a12:3e80:300::/40
Signature Algorithm: sha256WithRSAEncryption
56:78:18:26:e4:d9:10:78:40:9b:83:46:cd:62:48:d5:40:74:
6f:d0:ef:98:83:01:38:5a:2d:b4:28:7b:e4:fb:45:cd:60:4e:
8c:16:38:5e:e2:ac:87:dd:d0:6e:7a:2c:b7:30:c2:b3:52:79:
49:60:34:71:3c:d9:5f:bf:6c:c2:b9:91:c5:02:01:40:03:2f:
5c:0b:4e:36:c3:a6:e1:fd:af:44:fa:0a:df:da:6a:ce:ac:64:
bd:72:11:47:ec:b5:3c:e8:bf:27:27:86:dc:5d:a1:13:e0:78:
7f:ec:ab:3f:12:0b:eb:dd:68:7e:2c:08:c2:7d:63:f6:4e:86:
5e:2c:cd:3b:cd:a8:04:71:ad:a2:ec:3e:98:94:a5:e0:5c:21:
85:8a:50:85:0e:ce:5e:4e:8a:8c:e1:f7:99:3c:52:be:a3:a7:
4e:00:e9:46:5e:00:46:df:97:fd:cc:29:5b:2f:bc:60:3a:2f:
16:1e:19:ab:4e:1f:fc:a8:47:e0:84:d7:82:4c:cf:be:b5:d3:
5c:11:1b:d2:08:e5:f9:ee:8e:81:23:a4:26:d6:f2:f1:e8:6a:
8b:11:88:27:57:99:3e:7f:4a:ad:15:72:e4:af:70:72:80:32:
03:c2:c2:35:4b:a8:f0:66:bd:80:f6:bd:34:d2:90:35:6e:16:
ca:c0:33:cc
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYYibnXan75gJqDQyylciASPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YWY0MzM5NzRkZjM3M2I3MGFiZDc2YjEzZTFjNzBjNzc1
ZjU1NGIwHhcNMjMwMjA1MTYzNTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTVjOGVlNmRjZTlmZjViYjc5YjQ0MzZmMzQ0MmU5MzE3NzdkZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk341McAYUbW7yX9i2pfFF+/rvpCG
oamaO/rLo+vtg0OTRwjeoS52CS52QUVEiLx/9P7LYZ9d63VwulpYswB/9IeYeE61
Am3l/HIW8pLf2o7lDl3f2BwxjoI0bzONfYdTliQ/Gy2rW67xWj8dN71Os4DR4jmR
njPt01EecbYBlnmzXVChbMcr84U+4Esc0VUhwVZ1nsCuBzTnZiRo+39WGKyD/zJU
UoA2S+kkww36aHZ4xe132zvmZt+krSh+xhSclfHQSlFM3BUG0cfM7sunc3dWXVpr
Qik6mSaG9QcQRimWlQZL+VAUlKKbGU6WndWn/4nUETHQPckrXT/ssfWg9wIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFGpcjubc6f9bt5tENvNELpMXd9+iMB8GA1UdIwQY
MBaAFPavQzl03zc7cKvXaxPhxwx3X1VLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2It
YTI2YmM2NTNiMDZiLzEvYWx5TzV0enBfMXUzbTBRMjgwUXVreGQzMzZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2ItYTI2YmM2NTNiMDZi
LzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAwbv/MA4E
AgACMAgDBgAqEj6AAzANBgkqhkiG9w0BAQsFAAOCAQEAVngYJuTZEHhAm4NGzWJI
1UB0b9DvmIMBOFottCh75PtFzWBOjBY4XuKsh93QbnostzDCs1J5SWA0cTzZX79s
wrmRxQIBQAMvXAtONsOm4f2vRPoK39pqzqxkvXIRR+y1POi/JyeG3F2hE+B4f+yr
PxIL691ofiwIwn1j9k6GXizNO82oBHGtouw+mJSl4FwhhYpQhQ7OXk6KjOH3mTxS
vqOnTgDpRl4ARt+X/cwpWy+8YDovFh4Zq04f/KhH4ITXgkzPvrXTXBEb0gjl+e6O
gSOkJtby8ehqixGIJ1eZPn9KrRVy5K9wcoAyA8LCNUuo8Ga9gPa9NNKQNW4WysAz
zA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:31 2024 by rpki-client on console-fra.rpki-client.org