Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/MWqPZyrlOZZLzOWuPK5jw9fbdiA.roa
File: MWqPZyrlOZZLzOWuPK5jw9fbdiA.roa (raw, json)
Hash identifier: xvkPUp0z07Motw9Vcf3RcLl7NzwNQz5evydzjHEXY6w=
Subject key identifier: 31:6A:8F:67:2A:E5:39:96:4B:CC:E5:AE:3C:AE:63:C3:D7:DB:76:20
Certificate issuer: /CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Certificate serial: 018C68CC91F36A4C241705FD7388CB7BE6E6
Authority key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/MWqPZyrlOZZLzOWuPK5jw9fbdiA.roa
Signing time: Thu 14 Dec 2023 14:48:06 +0000
ROA not before: Thu 14 Dec 2023 14:48:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210255
IP address blocks: 193.22.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:cc:91:f3:6a:4c:24:17:05:fd:73:88:cb:7b:e6:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Validity
Not Before: Dec 14 14:48:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=316a8f672ae539964bcce5ae3cae63c3d7db7620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:f6:a1:dd:23:82:2d:4f:07:f4:23:90:32:
b0:53:82:a0:f2:b3:cf:8d:25:61:d8:f2:0f:2d:d9:
1d:c8:71:3c:94:dc:7b:a8:b4:70:ef:df:48:8f:94:
86:15:6f:41:35:89:19:fb:04:83:f0:96:e9:d1:0c:
55:21:9b:26:c0:59:44:1b:68:63:0a:f2:72:f2:f2:
bc:1e:4b:cd:8d:c6:05:0c:fa:93:94:ef:9b:4d:c4:
21:f7:e5:9c:cd:95:af:d5:13:98:92:9f:96:b1:2a:
6c:47:0e:16:52:20:2f:da:55:9b:20:76:a2:01:de:
df:fc:a1:bb:45:e9:74:9e:f5:35:a6:cc:e5:df:23:
c1:88:fa:4c:97:09:e7:83:c3:10:2e:5e:26:2b:51:
53:05:eb:e7:e2:d8:a7:80:c9:43:77:f0:63:9b:ca:
f1:4f:df:60:58:85:b4:e2:12:69:31:a8:0b:64:fb:
c8:3b:08:48:cf:73:02:45:ca:b0:d9:eb:c5:e9:68:
05:d8:c9:d9:db:0d:a2:ae:48:91:94:8b:dd:e7:ef:
89:d4:27:04:55:fa:25:70:43:a9:7f:ee:9e:f4:23:
d3:e0:30:7e:59:d3:10:1e:e7:1c:51:1e:4c:0d:66:
1f:48:09:44:f3:11:a4:cd:2e:5c:93:02:71:4e:b1:
34:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6A:8F:67:2A:E5:39:96:4B:CC:E5:AE:3C:AE:63:C3:D7:DB:76:20
X509v3 Authority Key Identifier:
keyid:F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/MWqPZyrlOZZLzOWuPK5jw9fbdiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.224.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:e6:d6:7f:ce:e0:07:f4:bd:2c:83:86:9c:b0:b0:ab:07:b2:
32:08:10:c3:69:b2:77:bb:0c:e3:c9:79:c6:ca:09:0c:47:fb:
1b:af:81:3e:ec:1c:89:ac:ba:d8:e6:94:6a:11:3d:f0:db:c9:
43:50:02:78:3a:4b:1f:af:b7:41:61:69:79:e8:f3:87:2b:73:
4e:e0:04:c3:98:35:60:09:91:0c:3f:59:df:e3:9d:1f:56:28:
88:5f:ee:55:6e:4d:15:3b:9d:52:6f:df:89:95:ed:f0:cb:4a:
7e:fa:35:4b:42:3c:22:36:18:22:3b:90:81:d6:a7:dc:36:b8:
41:ad:96:bd:ca:aa:32:9a:c8:26:77:b9:52:9a:dd:94:32:3b:
ae:ba:c7:d2:6b:f6:c9:ff:77:0b:87:b2:6f:85:27:bc:29:d0:
8a:05:01:ad:c5:1f:bf:ee:17:69:b3:60:8e:e9:d4:bb:82:89:
c5:2b:1a:f1:96:47:e5:ff:b7:88:b1:ed:12:b2:ca:1c:15:2e:
b2:68:5d:9a:e9:74:20:64:23:11:70:59:dc:2d:8a:a0:73:dd:
5c:86:fe:f4:2c:dc:a0:54:58:5f:b8:e3:21:e0:ed:0e:9c:ce:
7e:55:d8:9b:c0:c0:98:db:f5:90:c2:85:79:80:cd:7a:10:70:
9b:45:87:73
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYxozJHzakwkFwX9c4jLe+bmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MDM1ZWM5ZGUyNTcwYzFlN2E3ZGI0MGUyNzJlNDU1NDhj
OTIwMmIwHhcNMjMxMjE0MTQ0ODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTZhOGY2NzJhZTUzOTk2NGJjY2U1YWUzY2FlNjNjM2Q3ZGI3NjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9j2od0jgi1PB/QjkDKwU4Kg8rPP
jSVh2PIPLdkdyHE8lNx7qLRw799Ij5SGFW9BNYkZ+wSD8Jbp0QxVIZsmwFlEG2hj
CvJy8vK8HkvNjcYFDPqTlO+bTcQh9+WczZWv1ROYkp+WsSpsRw4WUiAv2lWbIHai
Ad7f/KG7Rel0nvU1pszl3yPBiPpMlwnng8MQLl4mK1FTBevn4tingMlDd/Bjm8rx
T99gWIW04hJpMagLZPvIOwhIz3MCRcqw2evF6WgF2MnZ2w2irkiRlIvd5++J1CcE
VfolcEOpf+6e9CPT4DB+WdMQHuccUR5MDWYfSAlE8xGkzS5ckwJxTrE0jwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFDFqj2cq5TmWS8zlrjyuY8PX23YgMB8GA1UdIwQY
MBaAFPgDXsneJXDB56fbQOJy5FVIySArMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1BTmV5ZDRsY01IbnA5dEE0bkxrVlVqSklDcy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvMTAxMTI2LTFkMzItNDJhNi04N2Zl
LTkyMjM4NDZmZjMwYi8xL01XcVBaeXJsT1paTHpPV3VQSzVqdzlmYmRpQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDAvMTAxMTI2LTFkMzItNDJhNi04N2ZlLTkyMjM4NDZmZjMw
Yi8xLzEtQU5leWQ0bGNNSG5wOXRBNG5Ma1ZVakpJQ3MuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBFuAw
DQYJKoZIhvcNAQELBQADggEBAAvm1n/O4Af0vSyDhpywsKsHsjIIEMNpsne7DOPJ
ecbKCQxH+xuvgT7sHImsutjmlGoRPfDbyUNQAng6Sx+vt0FhaXno84crc07gBMOY
NWAJkQw/Wd/jnR9WKIhf7lVuTRU7nVJv34mV7fDLSn76NUtCPCI2GCI7kIHWp9w2
uEGtlr3KqjKayCZ3uVKa3ZQyO666x9Jr9sn/dwuHsm+FJ7wp0IoFAa3FH7/uF2mz
YI7p1LuCicUrGvGWR+X/t4ix7RKyyhwVLrJoXZrpdCBkIxFwWdwtiqBz3VyG/vQs
3KBUWF+44yHg7Q6czn5V2JvAwJjb9ZDChXmAzXoQcJtFh3M=
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:11 2024 by rpki-client on console-fra.rpki-client.org