Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cAWFbDSMOKZStEx6cUDWaUBWPRM.roa
File: cAWFbDSMOKZStEx6cUDWaUBWPRM.roa (raw, json)
Hash identifier: xrgZlMWn8mdUE9qDC/TQG+JjsZWLQXjB1EfcenmhSYE=
Subject key identifier: 70:05:85:6C:34:8C:38:A6:52:B4:4C:7A:71:40:D6:69:40:56:3D:13
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189798ACE3E7445D6AE6B36B0DF1C6BBFF0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cAWFbDSMOKZStEx6cUDWaUBWPRM.roa
Signing time: Fri 21 Jul 2023 17:41:27 +0000
ROA not before: Fri 21 Jul 2023 17:41:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48207
IP address blocks: 193.124.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:79:8a:ce:3e:74:45:d6:ae:6b:36:b0:df:1c:6b:bf:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 21 17:41:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7005856c348c38a652b44c7a7140d66940563d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:13:23:99:f7:6c:d0:1a:42:dc:e3:38:de:fe:
12:4f:33:d5:4f:f6:82:2e:70:7d:64:5b:54:89:15:
22:07:4e:50:22:15:6e:3d:fb:97:51:7d:c1:6d:26:
57:e9:a5:31:b8:19:9d:32:af:2c:27:e0:99:cf:90:
d0:1e:a2:d0:82:8c:b3:6b:99:e0:be:ed:ba:db:9e:
24:0d:af:69:2c:73:7b:d0:55:99:1d:c2:48:75:36:
f0:c6:ac:90:47:17:1d:d8:5f:98:70:e0:c4:ea:8f:
f4:e8:28:33:61:52:48:44:49:0b:cf:bd:08:b4:d6:
c1:99:68:d3:be:5b:6e:c6:b6:b0:65:61:4a:a8:98:
54:99:db:f8:29:b2:75:a0:b5:1b:97:85:74:c7:9d:
a2:bc:78:51:07:61:50:13:9e:b3:19:38:07:b6:07:
37:1f:10:00:09:f0:65:c4:41:7b:77:52:ae:d0:46:
7c:a9:06:7d:de:0f:db:68:58:95:5b:b7:21:e5:82:
d8:18:62:bc:56:2e:dd:6f:9f:96:c0:ba:a0:ae:52:
55:f9:c0:02:59:8a:58:30:f5:49:cb:74:f0:2b:aa:
c8:6a:f0:20:8a:2e:63:51:c0:49:fa:6a:af:e9:1c:
05:e3:26:ea:11:70:cb:ac:f6:91:c0:3f:d7:a0:f3:
e9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:05:85:6C:34:8C:38:A6:52:B4:4C:7A:71:40:D6:69:40:56:3D:13
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cAWFbDSMOKZStEx6cUDWaUBWPRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.45.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2d:00:46:2e:fe:e5:16:74:3c:aa:ff:1d:a3:fa:2a:82:80:
38:3d:6e:73:4c:61:66:40:07:22:6a:20:62:bb:5a:61:67:51:
ae:96:b2:2f:61:0f:1f:91:6e:f7:b4:cb:34:d7:23:c5:e7:1b:
61:23:72:ce:16:e0:a3:0e:33:68:29:d3:bb:4c:b4:23:cf:b5:
e2:ce:ab:4b:aa:47:68:4b:7e:15:bb:cb:aa:49:eb:48:f3:9e:
0f:e4:cd:79:a7:a4:fd:8d:22:51:3f:d1:42:fc:39:1e:bb:9e:
fc:e4:b9:9c:a7:0c:36:92:e9:8a:4a:d0:e7:3a:b9:09:c5:af:
86:b4:36:cb:94:01:81:97:29:9f:1d:bb:a6:6f:1d:b2:bd:6b:
97:f5:5f:a8:ee:8f:c2:7e:c6:78:dd:dd:91:40:ab:76:ed:c3:
c8:0a:2d:24:d9:33:9d:54:67:5c:64:60:98:88:25:49:98:a8:
3e:80:86:5a:08:a2:d3:d8:6b:08:6b:e6:e5:1d:d7:0f:fc:db:
5f:06:97:f2:9f:0f:f5:8a:66:1d:c2:c0:7c:b1:96:fd:58:82:
1a:26:17:e9:0f:ea:73:fc:55:5f:b8:cb:fa:5c:cb:7a:55:82:
c2:5b:c2:dc:f7:47:13:02:5f:9b:c0:04:fd:f6:89:da:e4:98:
63:4e:cf:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYl5is4+dEXWrms2sN8ca7/wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNzIxMTc0MTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDA1ODU2YzM0OGMzOGE2NTJiNDRjN2E3MTQwZDY2OTQwNTYzZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxMjmfds0BpC3OM43v4STzPVT/aC
LnB9ZFtUiRUiB05QIhVuPfuXUX3BbSZX6aUxuBmdMq8sJ+CZz5DQHqLQgoyza5ng
vu26254kDa9pLHN70FWZHcJIdTbwxqyQRxcd2F+YcODE6o/06CgzYVJIREkLz70I
tNbBmWjTvltuxrawZWFKqJhUmdv4KbJ1oLUbl4V0x52ivHhRB2FQE56zGTgHtgc3
HxAACfBlxEF7d1Ku0EZ8qQZ93g/baFiVW7ch5YLYGGK8Vi7db5+WwLqgrlJV+cAC
WYpYMPVJy3TwK6rIavAgii5jUcBJ+mqv6RwF4ybqEXDLrPaRwD/XoPPpzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHAFhWw0jDimUrRMenFA1mlAVj0TMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvY0FXRmJEU01PS1pTdEV4NmNVRFdhVUJXUFJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwXwtMA0G
CSqGSIb3DQEBCwUAA4IBAQA5LQBGLv7lFnQ8qv8do/oqgoA4PW5zTGFmQAciaiBi
u1phZ1GulrIvYQ8fkW73tMs01yPF5xthI3LOFuCjDjNoKdO7TLQjz7XizqtLqkdo
S34Vu8uqSetI854P5M15p6T9jSJRP9FC/Dkeu5785Lmcpww2kumKStDnOrkJxa+G
tDbLlAGBlymfHbumbx2yvWuX9V+o7o/CfsZ43d2RQKt27cPICi0k2TOdVGdcZGCY
iCVJmKg+gIZaCKLT2GsIa+blHdcP/NtfBpfynw/1imYdwsB8sZb9WIIaJhfpD+pz
/FVfuMv6XMt6VYLCW8Lc90cTAl+bwAT99ona5JhjTs+u
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:21 2024 by rpki-client on console-fra.rpki-client.org