Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/AnIxeyTx1sD52e9n52ILcTVlyY4.roa
File: AnIxeyTx1sD52e9n52ILcTVlyY4.roa (raw, json)
Hash identifier: Y4j4iFQcx+REXj57L7mScUTbPrdO+einUnKXJCarvnQ=
Subject key identifier: 02:72:31:7B:24:F1:D6:C0:F9:D9:EF:67:E7:62:0B:71:35:65:C9:8E
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018570676709DB858686F09DBAD8193B3BD1
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/AnIxeyTx1sD52e9n52ILcTVlyY4.roa
Signing time: Mon 02 Jan 2023 02:55:02 +0000
ROA not before: Mon 02 Jan 2023 02:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 193.56.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Mar 2023 10:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:67:09:db:85:86:86:f0:9d:ba:d8:19:3b:3b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 2 02:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0272317b24f1d6c0f9d9ef67e7620b713565c98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:06:b5:6a:e7:1f:5b:8c:47:00:5e:c9:c2:
e0:62:48:c6:a3:3a:5f:87:bf:ed:a1:8c:a0:48:d2:
bb:45:1c:d5:ea:65:33:41:86:18:60:dd:0d:ec:88:
3b:33:fd:56:9b:ce:1b:d3:a1:9b:dc:37:50:46:0a:
45:eb:fd:b3:e2:b6:0f:e7:ab:4e:de:6c:79:16:ce:
3c:91:0f:3e:ba:e7:81:0d:3c:d4:c5:c9:ce:93:55:
64:77:dd:2f:a3:49:b6:4f:d2:c4:c0:19:e7:90:6f:
f8:3f:5a:0b:8b:ba:ef:52:a9:0c:c3:46:45:00:bd:
b7:ea:5f:2f:bd:bd:44:58:c4:34:b2:ff:86:94:97:
0c:37:ed:b4:17:62:43:53:25:76:91:8f:bc:60:1f:
54:38:a0:d7:2b:42:5e:02:5a:eb:2d:a6:61:4a:48:
ed:7d:10:41:b6:79:a5:59:dc:ad:ae:77:c9:72:6e:
26:9e:ba:1a:2d:93:dd:44:e6:01:b4:d8:31:30:b4:
8b:fa:82:9b:32:c8:dc:82:e4:61:a7:7c:f5:74:33:
19:26:7a:0a:56:07:45:e2:96:bc:b1:5e:ad:f6:3d:
e1:3d:55:64:b5:ec:7c:68:3b:01:0a:ac:fa:34:ab:
f8:51:79:c8:4e:ea:fe:0f:18:bb:2f:ae:99:5e:89:
1a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:72:31:7B:24:F1:D6:C0:F9:D9:EF:67:E7:62:0B:71:35:65:C9:8E
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/AnIxeyTx1sD52e9n52ILcTVlyY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.239.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f2:a1:f7:b1:ff:0b:5e:0f:a0:9c:40:e2:88:bd:a7:b2:39:
69:c1:1b:48:4c:c4:6d:ef:db:3c:d2:34:9a:7c:ff:dd:2a:cc:
a8:12:71:fc:0f:7f:f9:4c:ec:00:23:1b:f3:71:a4:63:e4:cd:
0d:fa:40:af:30:46:57:ae:89:10:19:d8:61:ed:56:9a:44:14:
a9:dc:15:97:f3:d0:35:0d:a1:e7:8e:5d:73:1b:7a:50:fc:68:
63:6d:e6:65:c6:60:12:96:6c:f6:4a:6c:92:89:67:a5:d9:c3:
d7:6a:be:9c:e6:f7:27:cf:e9:16:a4:e9:2c:a3:1a:e9:5c:26:
a0:24:b8:25:11:b6:a0:b6:3a:30:74:23:bb:23:60:95:f7:51:
a8:65:74:c6:f0:8d:d9:32:13:06:ae:bf:73:3a:ea:20:f3:40:
18:3a:57:dd:c5:f7:da:00:29:65:ed:1e:d1:b0:72:97:93:82:
f0:3b:0a:7c:4a:be:a0:31:a2:2a:97:22:f7:ed:f6:42:7e:e7:
4d:a3:e2:fe:19:1d:a9:6b:81:5f:fc:b5:df:21:a0:df:ab:9b:
3d:e0:7a:72:82:17:7c:f9:f5:c6:b7:8d:51:fd:98:72:ea:d3:
e0:cd:d2:8d:56:3a:0e:9a:cb:44:2a:30:0a:10:dd:70:5e:36:
6d:1f:df:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZ2cJ24WGhvCdutgZOzvRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjMwMTAyMDI1NTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjcyMzE3YjI0ZjFkNmMwZjlkOWVmNjdlNzYyMGI3MTM1NjVjOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCAGtWrnH1uMRwBeycLgYkjGozpf
h7/toYygSNK7RRzV6mUzQYYYYN0N7Ig7M/1Wm84b06Gb3DdQRgpF6/2z4rYP56tO
3mx5Fs48kQ8+uueBDTzUxcnOk1Vkd90vo0m2T9LEwBnnkG/4P1oLi7rvUqkMw0ZF
AL236l8vvb1EWMQ0sv+GlJcMN+20F2JDUyV2kY+8YB9UOKDXK0JeAlrrLaZhSkjt
fRBBtnmlWdytrnfJcm4mnroaLZPdROYBtNgxMLSL+oKbMsjcguRhp3z1dDMZJnoK
VgdF4pa8sV6t9j3hPVVktex8aDsBCqz6NKv4UXnITur+Dxi7L66ZXokadwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAJyMXsk8dbA+dnvZ+diC3E1ZcmOMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvQW5JeGV5VHgxc0Q1MmU5bjUySUxjVFZseVk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTjvMA0G
CSqGSIb3DQEBCwUAA4IBAQA38qH3sf8LXg+gnEDiiL2nsjlpwRtITMRt79s80jSa
fP/dKsyoEnH8D3/5TOwAIxvzcaRj5M0N+kCvMEZXrokQGdhh7VaaRBSp3BWX89A1
DaHnjl1zG3pQ/GhjbeZlxmASlmz2SmySiWel2cPXar6c5vcnz+kWpOksoxrpXCag
JLglEbagtjowdCO7I2CV91GoZXTG8I3ZMhMGrr9zOuog80AYOlfdxffaACll7R7R
sHKXk4LwOwp8Sr6gMaIqlyL37fZCfudNo+L+GR2pa4Ff/LXfIaDfq5s94Hpyghd8
+fXGt41R/Zhy6tPgzdKNVjoOmstEKjAKEN1wXjZtH9/w
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org