Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/XxSvSWvlt5VXiiTP_nhKGhwEjGA.roa
File: XxSvSWvlt5VXiiTP_nhKGhwEjGA.roa (raw, json)
Hash identifier: x1xH6dKdJsMUIahWKtx9k9rC6TR8QjM+i3rqKHxfRI0=
Subject key identifier: 5F:14:AF:49:6B:E5:B7:95:57:8A:24:CF:FE:78:4A:1A:1C:04:8C:60
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01868405727A827059CA1108CC72BA2F549A
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/XxSvSWvlt5VXiiTP_nhKGhwEjGA.roa
Signing time: Fri 24 Feb 2023 15:23:14 +0000
ROA not before: Fri 24 Feb 2023 15:23:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61302
IP address blocks: 193.32.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:84:05:72:7a:82:70:59:ca:11:08:cc:72:ba:2f:54:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Feb 24 15:23:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f14af496be5b795578a24cffe784a1a1c048c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:43:18:d4:7f:e3:40:bc:56:18:38:d7:9e:4c:
f4:9f:b4:64:75:81:ec:d7:82:72:68:e4:f7:fd:c9:
dc:e5:f8:69:35:d2:a2:e5:ac:d8:c0:5b:6c:eb:b5:
fd:16:96:a5:23:14:28:86:66:94:e2:63:7a:d0:2a:
1d:c8:30:5c:03:7c:1e:de:50:f9:63:39:7f:6d:62:
46:11:71:aa:d4:4f:8f:a6:1b:ae:07:8b:9e:b8:f3:
fc:6d:76:9e:08:d2:f1:91:65:4c:cd:63:f0:57:2c:
73:53:ac:97:c3:e3:61:3f:9a:9c:f6:71:0c:96:7f:
04:22:70:24:98:56:18:62:d4:88:06:9c:da:3a:8f:
66:cd:80:da:8b:e0:13:ec:75:88:db:b8:a2:35:9b:
d6:15:ac:54:db:3b:2c:14:1b:f6:b1:ea:3f:49:82:
ee:2e:d7:31:2b:c0:bb:03:1f:86:b4:44:03:56:f5:
82:f7:e1:de:26:55:58:ff:79:bb:39:c9:70:e3:e2:
1e:f6:e6:35:73:36:47:bf:48:4b:af:bf:e0:b4:70:
ae:7f:c3:b4:b5:55:3f:ec:85:dd:38:62:83:2e:e7:
27:8c:04:a1:f3:43:0a:b1:92:64:a7:ba:a8:2e:f5:
7e:6c:35:2e:8d:da:8a:6d:6a:81:9a:1b:97:aa:1f:
d0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:14:AF:49:6B:E5:B7:95:57:8A:24:CF:FE:78:4A:1A:1C:04:8C:60
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/XxSvSWvlt5VXiiTP_nhKGhwEjGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.188.0/24
Signature Algorithm: sha256WithRSAEncryption
02:87:44:9d:94:15:1e:de:ed:90:e9:9d:6e:a3:d4:14:9b:2c:
87:d7:c6:74:07:ae:f6:be:25:c9:d6:78:4d:28:18:5f:48:ac:
9f:03:5a:58:19:87:f0:cd:b6:a2:65:11:3e:3a:1a:93:ad:a7:
0d:b1:09:0f:e3:df:74:ab:49:f3:51:26:7c:6a:08:a1:e0:d1:
eb:00:36:ef:a0:99:91:08:36:22:ba:6e:d3:a5:dd:3f:33:19:
8f:1b:9c:d3:4b:25:8f:27:02:1d:8e:5b:45:6a:e1:ec:3a:4b:
f6:62:d9:15:43:4f:be:58:46:ef:17:48:b4:62:1a:2b:7a:65:
df:d5:2e:e6:78:0a:27:34:ff:90:8e:75:05:94:d8:1c:2d:49:
d0:17:ae:d0:9b:97:3b:3c:17:88:80:c5:5d:72:45:e9:c5:b8:
80:06:95:fe:e7:5a:af:58:79:ca:0a:4d:0e:9b:5e:5b:9b:b5:
81:18:28:94:96:bd:a0:dc:5e:ce:54:f0:b3:fe:b0:d6:8c:b4:
59:e9:53:51:e7:53:3a:60:53:ba:c3:99:bd:00:97:bd:16:2a:
a8:cb:1b:f1:7f:eb:c6:17:da:3c:f3:1c:4b:82:5f:39:2f:f6:
f1:12:34:fb:04:ac:27:90:63:b0:8b:af:ee:6c:46:b0:59:e3:
35:13:03:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaEBXJ6gnBZyhEIzHK6L1SaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjMwMjI0MTUyMzE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjE0YWY0OTZiZTViNzk1NTc4YTI0Y2ZmZTc4NGExYTFjMDQ4YzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUMY1H/jQLxWGDjXnkz0n7RkdYHs
14JyaOT3/cnc5fhpNdKi5azYwFts67X9FpalIxQohmaU4mN60CodyDBcA3we3lD5
Yzl/bWJGEXGq1E+PphuuB4ueuPP8bXaeCNLxkWVMzWPwVyxzU6yXw+NhP5qc9nEM
ln8EInAkmFYYYtSIBpzaOo9mzYDai+AT7HWI27iiNZvWFaxU2zssFBv2seo/SYLu
LtcxK8C7Ax+GtEQDVvWC9+HeJlVY/3m7Oclw4+Ie9uY1czZHv0hLr7/gtHCuf8O0
tVU/7IXdOGKDLucnjASh80MKsZJkp7qoLvV+bDUujdqKbWqBmhuXqh/Q/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF8Ur0lr5beVV4okz/54ShocBIxgMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvWHhTdlNXdmx0NVZYaWlUUF9uaEtHaHdFakdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSC8MA0G
CSqGSIb3DQEBCwUAA4IBAQACh0SdlBUe3u2Q6Z1uo9QUmyyH18Z0B672viXJ1nhN
KBhfSKyfA1pYGYfwzbaiZRE+OhqTracNsQkP4990q0nzUSZ8agih4NHrADbvoJmR
CDYium7Tpd0/MxmPG5zTSyWPJwIdjltFauHsOkv2YtkVQ0++WEbvF0i0YhoremXf
1S7meAonNP+QjnUFlNgcLUnQF67Qm5c7PBeIgMVdckXpxbiABpX+51qvWHnKCk0O
m15bm7WBGCiUlr2g3F7OVPCz/rDWjLRZ6VNR51M6YFO6w5m9AJe9Fiqoyxvxf+vG
F9o88xxLgl85L/bxEjT7BKwnkGOwi6/ubEawWeM1EwMR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org