Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/srdahpAtVq6bfO_gMupXUfk9xjs.roa
File: srdahpAtVq6bfO_gMupXUfk9xjs.roa (raw, json)
Hash identifier: 9XAwJUGSuS6oTCkMSPlZ9dQjsrppXZflFrShMWiRKfM=
Subject key identifier: B2:B7:5A:86:90:2D:56:AE:9B:7C:EF:E0:32:EA:57:51:F9:3D:C6:3B
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018F538C06CA0F102DDA4D213F2DF7A08823
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/srdahpAtVq6bfO_gMupXUfk9xjs.roa
Signing time: Tue 07 May 2024 14:53:56 +0000
ROA not before: Tue 07 May 2024 14:53:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215096
IP address blocks: 193.233.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 11:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:8c:06:ca:0f:10:2d:da:4d:21:3f:2d:f7:a0:88:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: May 7 14:53:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2b75a86902d56ae9b7cefe032ea5751f93dc63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:39:d1:ae:06:72:b5:a3:e6:e2:eb:50:e8:
e6:79:96:e1:8d:8e:22:e3:c5:8c:c8:9f:df:19:54:
c4:4b:9a:ff:1e:ec:88:0d:65:73:f8:7c:71:9b:fe:
a0:8e:75:8c:e6:0b:bb:2b:9b:30:ce:20:55:0a:e3:
10:f3:78:d2:e9:79:56:6c:e4:01:5e:82:6c:8c:59:
a8:dd:18:0e:a8:4e:96:9f:eb:36:8e:0e:9e:5a:6e:
fb:b4:94:dc:1f:ed:e3:50:5a:5b:a3:03:d1:22:6e:
ee:24:03:c6:09:27:e1:c4:62:11:06:b6:d6:81:26:
d9:92:93:e5:a9:af:27:38:1b:bc:97:9f:e0:da:dd:
03:3f:4c:33:9d:82:a5:1b:04:be:5b:be:75:f6:34:
5b:20:47:06:ce:e1:84:91:8f:0f:07:b8:c0:01:5a:
4c:26:f7:0a:3e:24:5f:06:53:f7:f3:8f:08:63:e7:
7e:6b:68:85:b0:f5:d9:0b:69:0e:5f:59:f0:8c:b7:
4b:45:f5:ca:dc:f1:2e:27:25:7a:c3:af:4a:e2:83:
2c:74:71:ea:1e:d0:39:68:4f:b2:be:45:3b:a0:04:
01:7e:87:01:19:c0:8e:38:53:bf:50:e5:0b:c5:97:
c0:c8:a5:40:4c:32:02:c7:b0:d0:d4:73:ef:6e:b4:
7d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B7:5A:86:90:2D:56:AE:9B:7C:EF:E0:32:EA:57:51:F9:3D:C6:3B
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/srdahpAtVq6bfO_gMupXUfk9xjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.237.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f3:27:f0:a5:e6:7f:c0:76:0e:41:f3:e9:e4:c5:29:71:1a:
c5:e5:10:5f:5b:b1:7b:7c:9a:51:87:f5:b4:fe:0a:24:fe:d2:
3a:39:43:85:fd:3f:94:d3:bc:73:16:a0:32:29:cf:3a:5a:ed:
77:8a:5b:03:c7:63:71:8a:43:87:3a:65:f8:db:3f:e0:29:9e:
b8:d7:78:be:61:fd:f5:79:aa:89:79:cd:5c:6a:f5:40:d0:db:
3c:d1:7b:fa:10:94:bd:51:d0:53:09:6a:2f:8e:04:e0:6e:7f:
65:34:da:5a:3d:47:e6:d8:f1:4d:c1:a5:55:38:6c:8f:f7:29:
34:7e:7f:10:50:26:da:64:5d:67:b8:92:ac:48:11:78:c3:a2:
33:d3:d3:fa:57:6f:e9:84:74:7b:32:02:17:7b:cf:af:3a:9f:
91:90:d7:8e:3b:f6:e4:03:67:de:d8:9f:d4:1d:6b:e9:8d:b6:
05:bf:db:a4:65:b2:ec:56:b7:9c:80:4c:2a:90:4a:b4:2d:d7:
b0:d5:fc:55:40:18:54:6e:11:0a:c0:09:12:75:b4:91:f9:0e:
0a:48:d0:46:fe:78:1c:ba:3e:59:09:99:41:d3:1a:23:9b:a3:
84:4b:f9:cd:f1:4d:65:ff:0a:c1:0e:cf:d3:30:2d:f3:7f:e3:
23:ce:1b:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9TjAbKDxAt2k0hPy33oIgjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjQwNTA3MTQ1MzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmI3NWE4NjkwMmQ1NmFlOWI3Y2VmZTAzMmVhNTc1MWY5M2RjNjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjQ50a4GcrWj5uLrUOjmeZbhjY4i
48WMyJ/fGVTES5r/HuyIDWVz+Hxxm/6gjnWM5gu7K5swziBVCuMQ83jS6XlWbOQB
XoJsjFmo3RgOqE6Wn+s2jg6eWm77tJTcH+3jUFpbowPRIm7uJAPGCSfhxGIRBrbW
gSbZkpPlqa8nOBu8l5/g2t0DP0wznYKlGwS+W7519jRbIEcGzuGEkY8PB7jAAVpM
JvcKPiRfBlP3848IY+d+a2iFsPXZC2kOX1nwjLdLRfXK3PEuJyV6w69K4oMsdHHq
HtA5aE+yvkU7oAQBfocBGcCOOFO/UOULxZfAyKVATDICx7DQ1HPvbrR9bQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLK3WoaQLVaum3zv4DLqV1H5PcY7MB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvc3JkYWhwQXRWcTZiZk9fZ011cFhVZms5eGpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwentMA0G
CSqGSIb3DQEBCwUAA4IBAQBy8yfwpeZ/wHYOQfPp5MUpcRrF5RBfW7F7fJpRh/W0
/gok/tI6OUOF/T+U07xzFqAyKc86Wu13ilsDx2NxikOHOmX42z/gKZ6413i+Yf31
eaqJec1cavVA0Ns80Xv6EJS9UdBTCWovjgTgbn9lNNpaPUfm2PFNwaVVOGyP9yk0
fn8QUCbaZF1nuJKsSBF4w6Iz09P6V2/phHR7MgIXe8+vOp+RkNeOO/bkA2fe2J/U
HWvpjbYFv9ukZbLsVrecgEwqkEq0Ldew1fxVQBhUbhEKwAkSdbSR+Q4KSNBG/ngc
uj5ZCZlB0xojm6OES/nN8U1l/wrBDs/TMC3zf+MjzhvA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:39 2024 by rpki-client on console-fra.rpki-client.org