Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tyWTIBsJXnWZEaenNbHz8lFlxUY.roa
File: tyWTIBsJXnWZEaenNbHz8lFlxUY.roa (raw, json)
Hash identifier: Humi5o2tNRKSlpWunuYsowr7kwfIP+VQa4wuZrhTDAU=
Subject key identifier: B7:25:93:20:1B:09:5E:75:99:11:A7:A7:35:B1:F3:F2:51:65:C5:46
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B1EA1181A6AA67028B6F39A003668984D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tyWTIBsJXnWZEaenNbHz8lFlxUY.roa
Signing time: Wed 11 Oct 2023 12:05:55 +0000
ROA not before: Wed 11 Oct 2023 12:05:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 193.222.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:a1:18:1a:6a:a6:70:28:b6:f3:9a:00:36:68:98:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 11 12:05:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b72593201b095e759911a7a735b1f3f25165c546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:77:45:44:b0:b2:39:1a:f8:95:b0:5d:b0:
39:23:9f:8c:92:04:36:ca:a6:99:54:b5:4f:64:94:
b5:3a:f1:4d:21:53:cf:9b:2f:79:fb:5a:2d:82:9c:
b2:ab:ae:74:28:b2:89:e6:7c:a4:22:ef:a1:83:d1:
dc:d8:3e:56:fa:ff:c6:94:27:7f:92:cf:ba:02:b5:
4e:1a:13:35:e2:79:e6:02:1f:75:89:4b:68:8e:97:
2e:15:73:60:d2:e1:55:2b:1f:be:aa:9e:68:15:3e:
9e:ef:25:e3:e8:eb:9f:ac:a3:04:f0:d2:43:0d:84:
37:e3:1e:38:b8:89:9d:c5:3d:cf:84:63:f3:0b:86:
9e:e3:54:b0:de:a6:98:7c:fe:4e:45:b1:36:80:50:
4c:dd:a0:4a:e3:70:5e:31:6c:b9:49:b8:18:80:77:
fa:52:42:31:84:1c:77:57:4f:dc:bb:e1:fe:aa:99:
f0:de:40:a9:c7:cd:fb:d8:2b:28:a5:85:37:e8:f6:
61:f8:76:b7:af:48:c0:59:a1:e9:0d:a2:2f:97:36:
7d:66:37:20:9d:8d:3e:29:4b:33:bd:1c:40:35:fc:
20:19:41:07:bb:52:31:10:30:71:cd:18:07:0b:fb:
6c:93:88:04:10:45:ea:a9:51:e1:5d:2b:73:8b:f7:
72:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:25:93:20:1B:09:5E:75:99:11:A7:A7:35:B1:F3:F2:51:65:C5:46
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tyWTIBsJXnWZEaenNbHz8lFlxUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.98.0/24
Signature Algorithm: sha256WithRSAEncryption
66:39:e3:0f:5c:48:35:4d:ec:6b:72:fc:84:8a:d4:27:9f:a7:
19:be:b4:cd:e5:df:59:15:31:4f:67:30:c3:aa:bb:76:a8:b7:
9f:2a:1b:70:95:4d:c5:31:c0:6b:27:36:c2:68:29:ed:47:41:
67:5c:76:f4:66:23:42:b6:09:e6:35:80:33:79:86:80:59:07:
41:3c:c9:5f:46:61:e0:8f:5f:e3:8b:b3:77:2a:a2:ca:74:3c:
78:e8:9c:a9:3c:bc:e8:67:32:e2:32:61:3f:15:96:f9:12:8f:
32:69:f8:d8:bc:fe:d4:26:d1:80:74:72:a6:f2:b3:d0:12:9c:
35:71:eb:46:56:ce:b0:5b:3f:c2:3b:ea:1c:d9:13:9d:11:d2:
1f:dd:9d:9a:26:89:f3:b0:25:6e:05:35:56:34:b4:e1:3e:ef:
60:8d:b0:ba:74:7c:4c:32:d0:3d:98:25:ba:d8:0a:63:e2:26:
a6:d2:b1:cd:02:34:8d:86:81:fc:a3:f6:b3:a4:d2:5b:27:fc:
d9:7e:2d:b3:62:2f:f4:46:8d:3f:5a:4a:13:13:5b:a7:ea:ab:
b2:9b:4e:2c:a0:f1:6e:22:8c:74:43:81:ab:14:24:1c:b2:0f:
59:51:63:80:46:97:61:f2:c5:18:0c:54:4b:cc:fa:8f:07:54:
d9:ae:1d:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYseoRgaaqZwKLbzmgA2aJhNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMDExMTIwNTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzI1OTMyMDFiMDk1ZTc1OTkxMWE3YTczNWIxZjNmMjUxNjVjNTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjR3RUSwsjka+JWwXbA5I5+MkgQ2
yqaZVLVPZJS1OvFNIVPPmy95+1otgpyyq650KLKJ5nykIu+hg9Hc2D5W+v/GlCd/
ks+6ArVOGhM14nnmAh91iUtojpcuFXNg0uFVKx++qp5oFT6e7yXj6OufrKME8NJD
DYQ34x44uImdxT3PhGPzC4ae41Sw3qaYfP5ORbE2gFBM3aBK43BeMWy5SbgYgHf6
UkIxhBx3V0/cu+H+qpnw3kCpx8372CsopYU36PZh+Ha3r0jAWaHpDaIvlzZ9Zjcg
nY0+KUszvRxANfwgGUEHu1IxEDBxzRgHC/tsk4gEEEXqqVHhXStzi/dymwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLclkyAbCV51mRGnpzWx8/JRZcVGMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdHlXVElCc0pYbldaRWFlbk5iSHo4bEZseFVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd5iMA0G
CSqGSIb3DQEBCwUAA4IBAQBmOeMPXEg1TexrcvyEitQnn6cZvrTN5d9ZFTFPZzDD
qrt2qLefKhtwlU3FMcBrJzbCaCntR0FnXHb0ZiNCtgnmNYAzeYaAWQdBPMlfRmHg
j1/ji7N3KqLKdDx46JypPLzoZzLiMmE/FZb5Eo8yafjYvP7UJtGAdHKm8rPQEpw1
cetGVs6wWz/CO+oc2ROdEdIf3Z2aJonzsCVuBTVWNLThPu9gjbC6dHxMMtA9mCW6
2Apj4iam0rHNAjSNhoH8o/azpNJbJ/zZfi2zYi/0Ro0/WkoTE1un6quym04soPFu
Iox0Q4GrFCQcsg9ZUWOARpdh8sUYDFRLzPqPB1TZrh1l
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:14 2024 by rpki-client on console-ams.rpki-client.org