Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/1-JiN_XkMT3qNqcABFLz2Satw6uY.roa
File: 1-JiN_XkMT3qNqcABFLz2Satw6uY.roa (raw, json)
Hash identifier: FEQ3XOwAsuAZsEWDdWQiZujHTSocL2qaA64XZ71gySA=
Subject key identifier: F8:98:8D:FD:79:0C:4F:7A:8D:A9:C0:01:14:BC:F6:49:AB:70:EA:E6
Certificate issuer: /CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Certificate serial: 018570150BDDABD164FDD9E28EC78173F769
Authority key identifier: 65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/1-JiN_XkMT3qNqcABFLz2Satw6uY.roa
Signing time: Mon 02 Jan 2023 01:25:05 +0000
ROA not before: Mon 02 Jan 2023 01:25:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51964
IP address blocks: 193.38.190.0/24 maxlen: 24
193.38.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:0b:dd:ab:d1:64:fd:d9:e2:8e:c7:81:73:f7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659c356633388e9bd897d000a3f38bc1e546ef4a
Validity
Not Before: Jan 2 01:25:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8988dfd790c4f7a8da9c00114bcf649ab70eae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:eb:19:80:fc:12:77:70:dd:2e:4e:77:d6:83:
65:c1:30:e9:9a:b4:a9:8a:66:6e:4f:ae:00:ce:99:
ee:68:64:09:ee:04:ed:1f:47:7c:ff:6d:86:84:28:
a2:7d:7b:5a:48:e1:ed:58:9f:1c:71:ba:99:92:55:
f8:42:2c:3f:e2:1b:0b:ac:13:2e:a6:b0:ea:c4:ef:
f9:c0:40:b1:24:e1:1b:3c:09:1b:5f:fd:ac:1e:09:
bd:48:0f:a7:ea:4b:f9:13:74:e2:f4:af:ba:ab:be:
95:7d:eb:f9:02:e5:7c:de:cc:59:18:38:3e:2a:5d:
78:3e:3e:9d:58:e3:78:9d:b9:90:4d:4a:17:cd:c0:
7a:94:a1:99:9e:af:11:ca:9b:44:44:97:46:17:69:
bd:aa:e3:96:25:11:e1:b4:06:2b:07:5b:c5:88:d3:
db:54:77:ea:51:20:56:72:be:7a:d4:60:48:4c:2b:
52:6a:f0:54:ad:d9:44:6d:7c:c9:06:31:5f:62:fc:
cb:55:ef:42:52:6b:a0:e1:44:66:9b:c3:8e:34:7e:
ba:31:2b:a0:0b:78:69:c2:28:c6:e8:a7:28:9f:83:
5b:19:e0:c0:a1:e7:f7:ea:b6:32:81:d6:77:d3:2f:
9f:e0:87:ac:50:de:f4:db:7b:28:f6:85:9f:0b:37:
17:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:98:8D:FD:79:0C:4F:7A:8D:A9:C0:01:14:BC:F6:49:AB:70:EA:E6
X509v3 Authority Key Identifier:
keyid:65:9C:35:66:33:38:8E:9B:D8:97:D0:00:A3:F3:8B:C1:E5:46:EF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZw1ZjM4jpvYl9AAo_OLweVG70o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/1-JiN_XkMT3qNqcABFLz2Satw6uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/ZZw1ZjM4jpvYl9AAo_OLweVG70o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.190.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:58:39:d3:16:db:d6:f0:a2:30:79:13:e9:c7:5c:84:7a:aa:
88:6b:48:0a:38:ac:a0:dd:c6:c0:ba:30:02:09:c1:4f:5f:b8:
c1:5c:cd:8c:96:d6:02:35:8d:32:31:26:8d:30:14:e4:43:aa:
fa:d8:28:03:f3:89:1f:0c:e2:6d:f5:af:f6:b6:20:5c:3b:58:
88:3f:e4:d2:5c:28:32:a2:cf:61:d3:c3:35:32:f0:65:59:7f:
34:b5:a4:cf:f3:fc:91:07:bb:c6:1d:f7:b3:0e:f8:23:52:e9:
75:30:86:15:2f:ab:17:9d:6d:a2:cf:27:71:81:f0:52:ad:9c:
6d:71:60:cd:6d:f5:70:bc:2a:c9:d1:44:d2:be:22:88:6c:b1:
22:a6:c4:dd:88:0b:bf:a0:ee:9a:22:ce:2f:99:45:62:4a:29:
22:3a:7b:3b:c5:01:ae:c0:ab:2e:09:5e:c4:eb:12:a4:98:1d:
93:a9:7b:c8:60:c4:58:ce:f6:a6:42:3b:6d:79:80:40:d0:25:
ee:9c:c7:c5:4b:a0:f5:23:aa:44:be:07:a2:f2:00:86:6d:89:
40:2f:44:ca:cf:1b:83:09:46:d9:e8:3e:7e:d4:57:d7:3f:67:
6a:20:cd:19:66:3d:b8:eb:59:bc:33:fe:e3:7b:9b:76:f1:5a:
17:80:4c:b4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVwFQvdq9Fk/dnijseBc/dpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWMzNTY2MzMzODhlOWJkODk3ZDAwMGEzZjM4YmMxZTU0
NmVmNGEwHhcNMjMwMTAyMDEyNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODk4OGRmZDc5MGM0ZjdhOGRhOWMwMDExNGJjZjY0OWFiNzBlYWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqusZgPwSd3DdLk531oNlwTDpmrSp
imZuT64AzpnuaGQJ7gTtH0d8/22GhCiifXtaSOHtWJ8ccbqZklX4Qiw/4hsLrBMu
prDqxO/5wECxJOEbPAkbX/2sHgm9SA+n6kv5E3Ti9K+6q76Vfev5AuV83sxZGDg+
Kl14Pj6dWON4nbmQTUoXzcB6lKGZnq8RyptERJdGF2m9quOWJRHhtAYrB1vFiNPb
VHfqUSBWcr561GBITCtSavBUrdlEbXzJBjFfYvzLVe9CUmug4URmm8OONH66MSug
C3hpwijG6Kcon4NbGeDAoef36rYygdZ30y+f4IesUN7023so9oWfCzcXXQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPiYjf15DE96janAARS89kmrcOrmMB8GA1UdIwQY
MBaAFGWcNWYzOI6b2JfQAKPzi8HlRu9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlp3MVpqTTRqcHZZbDlBQW9fT0x3ZVZHNzBvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83Yzc4NTEtNTg1Yi00OWYxLThiZTkt
M2M3ZTRmOTNlNDJiLzEvMS1KaU5fWGtNVDNxTnFjQUJGTHoyU2F0dzZ1WS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDgvN2M3ODUxLTU4NWItNDlmMS04YmU5LTNjN2U0ZjkzZTQy
Yi8xL1padzFaak00anB2WWw5QUFvX09Md2VWRzcwby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcEmvjAN
BgkqhkiG9w0BAQsFAAOCAQEATlg50xbb1vCiMHkT6cdchHqqiGtICjisoN3GwLow
AgnBT1+4wVzNjJbWAjWNMjEmjTAU5EOq+tgoA/OJHwzibfWv9rYgXDtYiD/k0lwo
MqLPYdPDNTLwZVl/NLWkz/P8kQe7xh33sw74I1LpdTCGFS+rF51tos8ncYHwUq2c
bXFgzW31cLwqydFE0r4iiGyxIqbE3YgLv6DumiLOL5lFYkopIjp7O8UBrsCrLgle
xOsSpJgdk6l7yGDEWM72pkI7bXmAQNAl7pzHxUug9SOqRL4HovIAhm2JQC9Eys8b
gwlG2eg+ftRX1z9naiDNGWY9uOtZvDP+43ubdvFaF4BMtA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:58 2024 by rpki-client on console-fra.rpki-client.org