Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/1qyHyToVsO3lv0Bwy7qsSHt4OhE.roa
File: 1qyHyToVsO3lv0Bwy7qsSHt4OhE.roa (raw, json)
Hash identifier: 32f0FWGcbE2TqJBFfDPBpYuPnHfKJMg12DHXfxR6kzI=
Subject key identifier: D6:AC:87:C9:3A:15:B0:ED:E5:BF:40:70:CB:BA:AC:48:7B:78:3A:11
Certificate issuer: /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial: 01856B933908E7F305418B65A4583A8B4E15
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/1qyHyToVsO3lv0Bwy7qsSHt4OhE.roa
Signing time: Sun 01 Jan 2023 04:24:48 +0000
ROA not before: Sun 01 Jan 2023 04:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28839
IP address blocks: 193.138.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:39:08:e7:f3:05:41:8b:65:a4:58:3a:8b:4e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
Validity
Not Before: Jan 1 04:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6ac87c93a15b0ede5bf4070cbbaac487b783a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:5c:5c:e3:9f:23:17:6d:9e:4b:d5:18:ca:
8f:b6:a3:50:cf:9e:3e:f9:72:af:a9:57:cf:9d:65:
19:ba:0f:62:2e:ef:ce:96:b4:6c:89:c4:cf:dc:27:
06:af:84:f0:52:2d:77:de:17:c4:4a:e6:4c:95:56:
76:ba:b4:92:33:a5:f4:fd:79:c0:22:b4:71:1d:d8:
3c:7e:ec:39:4e:73:1d:0f:dd:da:9c:fe:73:9e:22:
68:ee:4c:61:43:9b:41:ad:49:3d:54:3c:55:15:8e:
98:c9:2a:f1:72:6c:ec:45:c8:1e:17:87:88:44:53:
10:c7:5a:b5:06:78:8d:1e:91:06:6f:c3:98:58:31:
f9:db:7c:7c:e0:38:00:88:b6:d6:ac:75:fa:c3:35:
28:e0:82:c6:b7:d3:41:ec:84:10:7b:d3:e8:f2:f4:
08:d9:4a:20:f4:04:df:33:53:95:9f:56:90:26:83:
71:9c:12:42:3c:01:c8:2a:c3:84:e3:68:05:87:19:
25:c6:01:4b:a3:6d:e3:29:3c:1f:d1:45:73:e0:a1:
17:bd:fa:56:cd:5b:e1:c3:48:3e:3e:b9:b5:64:e8:
0f:8f:a3:ce:b6:3a:7c:52:c2:53:7e:e5:00:d4:82:
82:63:48:25:30:bc:29:93:a5:9b:44:1e:3c:88:35:
5a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AC:87:C9:3A:15:B0:ED:E5:BF:40:70:CB:BA:AC:48:7B:78:3A:11
X509v3 Authority Key Identifier:
keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/1qyHyToVsO3lv0Bwy7qsSHt4OhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.94.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:65:fb:d2:81:33:46:e5:ae:df:6e:07:08:49:91:4f:83:22:
d7:84:b4:ef:33:c4:72:18:14:58:a3:d1:32:bf:b1:63:89:93:
8c:d1:01:f0:49:1d:35:72:0b:2d:57:93:03:5d:e8:ef:ed:ce:
07:36:b2:30:fa:7c:26:0d:01:53:ed:35:e2:e5:b3:26:26:fc:
b0:92:95:49:e5:8c:51:1e:e1:eb:2b:22:cf:49:5c:13:22:e4:
3c:53:ff:09:74:74:f8:55:e5:f5:0d:2b:a0:60:0c:7c:60:51:
47:25:fa:a0:2e:b4:ea:73:3a:d3:3e:ff:12:d7:d5:f9:ac:f6:
4d:69:b4:c7:f5:f9:1a:50:10:02:9b:2d:6d:28:fb:b9:c3:ae:
a1:fb:3c:3c:f0:9d:a2:65:cd:c8:88:a4:75:2c:7e:fa:91:5c:
de:cf:f7:e9:6c:f8:d6:4f:45:fe:2c:55:8d:62:24:64:f7:10:
46:83:f8:11:a6:84:86:79:e0:69:8d:b0:da:a7:03:14:df:5e:
15:c7:97:33:54:c0:14:7f:63:97:6f:11:a1:4f:cd:e4:29:2a:
fc:dd:f0:b0:5d:65:4b:53:44:f1:59:c0:c4:c4:3e:fd:47:16:
5e:e9:94:a0:38:28:f9:65:60:68:5f:f0:33:2a:19:a7:cb:41:
50:5d:39:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrkzkI5/MFQYtlpFg6i04VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZTQ5MjU4ZGM3NjU0NmRjNTk1MDg0ZDI1OTNlMTgxY2Q0
Nzk4M2YwHhcNMjMwMTAxMDQyNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmFjODdjOTNhMTViMGVkZTViZjQwNzBjYmJhYWM0ODdiNzgzYTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHtcXOOfIxdtnkvVGMqPtqNQz54+
+XKvqVfPnWUZug9iLu/OlrRsicTP3CcGr4TwUi133hfESuZMlVZ2urSSM6X0/XnA
IrRxHdg8fuw5TnMdD93anP5zniJo7kxhQ5tBrUk9VDxVFY6YySrxcmzsRcgeF4eI
RFMQx1q1BniNHpEGb8OYWDH523x84DgAiLbWrHX6wzUo4ILGt9NB7IQQe9Po8vQI
2Uog9ATfM1OVn1aQJoNxnBJCPAHIKsOE42gFhxklxgFLo23jKTwf0UVz4KEXvfpW
zVvhw0g+Prm1ZOgPj6POtjp8UsJTfuUA1IKCY0glMLwpk6WbRB48iDVavwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNash8k6FbDt5b9AcMu6rEh7eDoRMB8GA1UdIwQY
MBaAFBbkkljcdlRtxZUITSWT4YHNR5g/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnVTU1dOeDJWRzNGbFFoTkpaUGhnYzFIbUQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wZjE2ZjctMTQ1NS00M2RiLWFjYjQt
ODMyN2E5NTJiMmI4LzEvMXF5SHlUb1ZzTzNsdjBCd3k3cXNTSHQ0T2hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wZjE2ZjctMTQ1NS00M2RiLWFjYjQtODMyN2E5NTJiMmI4
LzEvRnVTU1dOeDJWRzNGbFFoTkpaUGhnYzFIbUQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYpeMA0G
CSqGSIb3DQEBCwUAA4IBAQBNZfvSgTNG5a7fbgcISZFPgyLXhLTvM8RyGBRYo9Ey
v7FjiZOM0QHwSR01cgstV5MDXejv7c4HNrIw+nwmDQFT7TXi5bMmJvywkpVJ5YxR
HuHrKyLPSVwTIuQ8U/8JdHT4VeX1DSugYAx8YFFHJfqgLrTqczrTPv8S19X5rPZN
abTH9fkaUBACmy1tKPu5w66h+zw88J2iZc3IiKR1LH76kVzez/fpbPjWT0X+LFWN
YiRk9xBGg/gRpoSGeeBpjbDapwMU314Vx5czVMAUf2OXbxGhT83kKSr83fCwXWVL
U0TxWcDExD79RxZe6ZSgOCj5ZWBoX/AzKhmny0FQXTkE
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:17 2024 by rpki-client on console-ams.rpki-client.org