Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ke1nLujI-FpzQADKLJpp07MGj7w.roa
File: ke1nLujI-FpzQADKLJpp07MGj7w.roa (raw, json)
Hash identifier: iwD9pR36VTbwKk2F7SmiHUAz3UX0x9uPwaIrBaSaLZE=
Subject key identifier: 91:ED:67:2E:E8:C8:F8:5A:73:40:00:CA:2C:9A:69:D3:B3:06:8F:BC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81E8CB319667796DD362808FE38DAD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ke1nLujI-FpzQADKLJpp07MGj7w.roa
Signing time: Sun 01 Jan 2023 13:25:08 +0000
ROA not before: Sun 01 Jan 2023 13:25:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43068
IP address blocks: 93.123.48.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:e8:cb:31:96:67:79:6d:d3:62:80:8f:e3:8d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91ed672ee8c8f85a734000ca2c9a69d3b3068fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2f:7f:1b:7b:d7:b5:cf:40:4b:65:5c:34:43:
b1:b0:bd:fc:80:45:76:14:b9:c1:0c:26:bb:2b:14:
04:b4:df:ff:70:c6:60:9f:91:e9:5c:c1:cf:1f:b0:
85:85:31:78:25:ca:49:16:fa:ea:f0:7b:e4:7c:01:
43:21:96:ee:b9:85:25:c8:73:a9:86:04:39:11:15:
eb:fd:bc:bd:e7:3c:79:50:60:2a:04:74:eb:c9:63:
45:ff:f5:19:21:37:9d:59:89:82:4f:86:27:e4:b5:
2c:22:8e:f4:97:86:dd:ce:66:ec:9b:ac:ea:c3:18:
84:34:4f:13:5e:f2:83:d0:eb:d4:34:e8:ff:91:0b:
6f:03:27:5f:47:86:d0:7a:3c:47:6b:45:13:90:b3:
85:dd:d4:1f:c0:73:a5:b0:65:84:6f:94:6c:84:d8:
49:a3:78:f1:c8:ed:20:60:39:fa:97:91:8e:f0:03:
2c:a4:f1:b6:22:75:b0:05:1c:ff:0b:af:c5:f4:d8:
69:59:20:61:89:e2:cc:36:8b:03:f4:9a:83:78:db:
b9:17:c9:48:38:01:a2:6d:3b:f8:a9:da:a3:62:e3:
72:f9:06:b4:4d:91:85:63:f6:f2:dc:cd:37:d0:73:
b0:cf:20:8f:e8:d1:fd:5b:20:b3:19:69:4b:be:ad:
9d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:ED:67:2E:E8:C8:F8:5A:73:40:00:CA:2C:9A:69:D3:B3:06:8F:BC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ke1nLujI-FpzQADKLJpp07MGj7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.48.0/20
Signature Algorithm: sha256WithRSAEncryption
51:41:29:94:b8:e2:06:e1:19:cb:d1:df:77:20:f2:f6:75:26:
6b:5a:57:e3:fb:33:16:86:3c:f3:7e:ce:c6:9d:08:70:20:3b:
2c:92:a9:be:eb:79:bd:52:2f:f3:fd:76:d8:7b:dd:c2:5c:02:
20:32:33:89:7e:11:a3:6a:f2:50:66:5f:82:80:50:db:cf:f7:
bb:a3:fb:97:de:e7:1f:66:f6:cf:8d:ce:d1:7a:f3:3a:05:d5:
b1:8b:7d:6d:54:17:7d:75:a6:57:69:91:f6:70:b1:fb:e1:5c:
5b:21:64:a1:29:08:1b:14:47:ff:00:8d:09:27:ec:0a:3d:91:
d1:cb:78:da:d4:17:75:06:ad:69:ee:78:a2:83:fd:55:9f:b6:
66:d0:0d:6e:a0:a7:89:5d:2b:58:74:dd:c1:a6:28:d2:9c:51:
35:ad:3d:a8:d9:14:72:20:59:78:fe:f6:0e:a1:99:5c:5f:a2:
01:29:5d:9b:23:16:dc:43:ab:b1:10:17:a0:99:39:57:2f:fe:
4d:ed:c0:e6:93:37:3a:e5:d0:14:28:06:ea:da:ea:6c:1e:a5:
c0:e9:4c:76:56:22:35:6b:f9:a2:dc:2c:03:d8:7a:a3:da:fe:
f2:5a:1f:70:be:4d:17:3c:51:b5:80:b1:9c:89:14:80:47:27:
f3:5c:59:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtgejLMZZneW3TYoCP442tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWVkNjcyZWU4YzhmODVhNzM0MDAwY2EyYzlhNjlkM2IzMDY4ZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC9/G3vXtc9AS2VcNEOxsL38gEV2
FLnBDCa7KxQEtN//cMZgn5HpXMHPH7CFhTF4JcpJFvrq8HvkfAFDIZbuuYUlyHOp
hgQ5ERXr/by95zx5UGAqBHTryWNF//UZITedWYmCT4Yn5LUsIo70l4bdzmbsm6zq
wxiENE8TXvKD0OvUNOj/kQtvAydfR4bQejxHa0UTkLOF3dQfwHOlsGWEb5RshNhJ
o3jxyO0gYDn6l5GO8AMspPG2InWwBRz/C6/F9NhpWSBhieLMNosD9JqDeNu5F8lI
OAGibTv4qdqjYuNy+Qa0TZGFY/by3M030HOwzyCP6NH9WyCzGWlLvq2dswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJHtZy7oyPhac0AAyiyaadOzBo+8MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEva2Uxbkx1akktRnB6UUFES0xKcHAwN01Hajd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXXswMA0G
CSqGSIb3DQEBCwUAA4IBAQBRQSmUuOIG4RnL0d93IPL2dSZrWlfj+zMWhjzzfs7G
nQhwIDsskqm+63m9Ui/z/XbYe93CXAIgMjOJfhGjavJQZl+CgFDbz/e7o/uX3ucf
ZvbPjc7RevM6BdWxi31tVBd9daZXaZH2cLH74VxbIWShKQgbFEf/AI0JJ+wKPZHR
y3ja1Bd1Bq1p7niig/1Vn7Zm0A1uoKeJXStYdN3BpijSnFE1rT2o2RRyIFl4/vYO
oZlcX6IBKV2bIxbcQ6uxEBegmTlXL/5N7cDmkzc65dAUKAbq2upsHqXA6Ux2ViI1
a/mi3CwD2Hqj2v7yWh9wvk0XPFG1gLGciRSARyfzXFnf
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:42 2024 by rpki-client on console-ams.rpki-client.org