Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b8QI1jvJf3HZxmcxr7ogyp2mbPs.roa
File: b8QI1jvJf3HZxmcxr7ogyp2mbPs.roa (raw, json)
Hash identifier: Gq1uvEFVAWOoVTj5UBYzdqURrfN72r6WtL+EHzCMY7c=
Subject key identifier: 6F:C4:08:D6:3B:C9:7F:71:D9:C6:67:31:AF:BA:20:CA:9D:A6:6C:FB
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018C434E025AA23631190C52935E24E5340B
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b8QI1jvJf3HZxmcxr7ogyp2mbPs.roa
Signing time: Thu 07 Dec 2023 08:03:55 +0000
ROA not before: Thu 07 Dec 2023 08:03:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59948
IP address blocks: 193.59.12.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:4e:02:5a:a2:36:31:19:0c:52:93:5e:24:e5:34:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Dec 7 08:03:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fc408d63bc97f71d9c66731afba20ca9da66cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1c:6a:0c:a5:b4:84:4d:9f:04:c4:bb:99:fb:
51:8d:0b:04:79:e9:66:cc:1c:a8:90:e8:43:04:59:
c8:ab:b1:29:7f:e5:ec:0f:a6:1b:ff:ee:a3:cb:e8:
dd:ce:d3:75:91:d5:b3:0a:e4:e5:20:44:8b:67:7b:
48:3a:39:c7:2e:1c:47:cb:df:bb:f3:15:40:81:6e:
97:5b:d3:db:09:47:7b:ee:05:d2:d8:10:f9:9a:5d:
74:04:8a:97:ae:53:28:5f:61:37:81:a1:73:02:2e:
81:b0:6b:47:aa:b2:de:44:a5:35:76:a4:1d:1c:71:
c8:5e:63:b2:d7:f2:32:df:df:d7:19:c5:bf:08:49:
5e:4e:1a:49:78:e5:d1:c7:1a:31:bd:78:de:28:6c:
1b:b1:dd:be:99:be:75:14:e4:dd:e7:e7:98:de:ea:
4a:c9:19:b1:f2:36:6a:a4:4b:82:e4:5a:31:50:e9:
ac:ac:41:c7:d8:b9:9a:70:7b:3d:89:0e:4d:7e:0f:
e3:95:39:4a:f1:9e:b1:d7:24:3a:6c:f1:56:4a:c6:
a3:88:fb:ae:1e:5a:98:f9:da:ee:ba:df:a8:3d:02:
0a:57:f7:7d:73:fa:b9:da:84:a6:70:fa:fc:b2:30:
9f:13:27:bc:20:76:38:27:ae:fc:18:a0:be:b0:18:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C4:08:D6:3B:C9:7F:71:D9:C6:67:31:AF:BA:20:CA:9D:A6:6C:FB
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b8QI1jvJf3HZxmcxr7ogyp2mbPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.12.0/23
Signature Algorithm: sha256WithRSAEncryption
18:4d:28:ee:c9:65:75:aa:c1:db:94:ee:86:53:a2:f7:20:9a:
fd:be:4a:29:ed:e4:66:82:8c:2d:6c:3c:b2:21:49:f4:80:0c:
6b:56:52:77:b0:04:6d:1f:11:d6:17:84:3c:7c:47:df:d5:18:
5a:9d:b3:5f:4a:6c:12:eb:96:70:80:de:16:a8:f9:a2:95:d0:
a1:7e:00:47:c1:19:a2:d8:24:73:53:b2:1f:05:dc:2d:e0:c7:
46:08:38:f4:d6:c9:6d:a3:ce:87:05:c4:73:1a:28:30:60:c8:
2f:36:89:d0:f9:14:b0:28:aa:87:0b:f0:f6:6b:f9:70:b1:ec:
52:1d:99:76:f5:31:4b:bb:45:34:3e:d2:12:15:b0:5d:7f:6a:
c6:57:ee:9c:ce:78:4c:f8:66:8a:0a:9c:13:44:23:24:7b:45:
2e:0e:b9:2e:0d:60:d8:d8:90:05:01:6f:7c:ec:23:9c:8d:23:
e9:be:0d:90:3f:d2:ec:31:ad:c5:65:94:44:df:e7:22:f7:4b:
8e:21:1e:da:81:cf:31:7f:1c:5a:18:6a:4b:4e:a0:a4:5f:6b:
59:5e:13:61:01:e8:0f:f9:35:40:83:96:79:e9:93:48:38:f6:
1c:1e:f4:47:de:90:2e:46:52:ad:c6:7e:5e:60:ad:47:d4:b5:
48:48:a6:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxDTgJaojYxGQxSk14k5TQLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw
MTE4OGYwHhcNMjMxMjA3MDgwMzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmM0MDhkNjNiYzk3ZjcxZDljNjY3MzFhZmJhMjBjYTlkYTY2Y2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BxqDKW0hE2fBMS7mftRjQsEeelm
zByokOhDBFnIq7Epf+XsD6Yb/+6jy+jdztN1kdWzCuTlIESLZ3tIOjnHLhxHy9+7
8xVAgW6XW9PbCUd77gXS2BD5ml10BIqXrlMoX2E3gaFzAi6BsGtHqrLeRKU1dqQd
HHHIXmOy1/Iy39/XGcW/CEleThpJeOXRxxoxvXjeKGwbsd2+mb51FOTd5+eY3upK
yRmx8jZqpEuC5FoxUOmsrEHH2LmacHs9iQ5Nfg/jlTlK8Z6x1yQ6bPFWSsajiPuu
HlqY+druut+oPQIKV/d9c/q52oSmcPr8sjCfEye8IHY4J678GKC+sBgpcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG/ECNY7yX9x2cZnMa+6IMqdpmz7MB8GA1UdIwQY
MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt
YzA2NzFiZjRjZjNlLzEvYjhRSTFqdkpmM0haeG1jeHI3b2d5cDJtYlBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl
LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwTsMMA0G
CSqGSIb3DQEBCwUAA4IBAQAYTSjuyWV1qsHblO6GU6L3IJr9vkop7eRmgowtbDyy
IUn0gAxrVlJ3sARtHxHWF4Q8fEff1RhanbNfSmwS65ZwgN4WqPmildChfgBHwRmi
2CRzU7IfBdwt4MdGCDj01slto86HBcRzGigwYMgvNonQ+RSwKKqHC/D2a/lwsexS
HZl29TFLu0U0PtISFbBdf2rGV+6cznhM+GaKCpwTRCMke0UuDrkuDWDY2JAFAW98
7COcjSPpvg2QP9LsMa3FZZRE3+ci90uOIR7agc8xfxxaGGpLTqCkX2tZXhNhAegP
+TVAg5Z56ZNIOPYcHvRH3pAuRlKtxn5eYK1H1LVISKbT
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:10 2024 by rpki-client on console-fra.rpki-client.org