Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/dhjw0iVApBXnkD6Kbwe6P-ypyWk.roa
File: dhjw0iVApBXnkD6Kbwe6P-ypyWk.roa (raw, json)
Hash identifier: nHF2UANwU8sczxbWA4P0Su4XW8EvJ7+64v5qABvncaA=
Subject key identifier: 76:18:F0:D2:25:40:A4:15:E7:90:3E:8A:6F:07:BA:3F:EC:A9:C9:69
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF83DE82D3F8D2411FE3082D195C7A
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/dhjw0iVApBXnkD6Kbwe6P-ypyWk.roa
Signing time: Sun 01 Jan 2023 15:24:51 +0000
ROA not before: Sun 01 Jan 2023 15:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212422
IP address blocks: 193.59.95.0/24 maxlen: 24
193.59.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Feb 2023 11:14:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:83:de:82:d3:f8:d2:41:1f:e3:08:2d:19:5c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7618f0d22540a415e7903e8a6f07ba3feca9c969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:31:e3:9d:7f:c6:1e:3f:db:4e:db:95:6b:
34:ef:59:2f:be:29:37:92:fc:8a:33:4e:15:6c:6f:
ad:60:22:7a:e0:71:e7:98:ac:8a:13:73:0d:0b:f0:
14:05:47:18:e4:94:cb:86:59:17:ed:9d:62:14:31:
37:61:88:29:65:19:ac:3d:85:bc:1b:e8:64:a4:bb:
a2:d0:d8:f4:fa:f8:14:f3:a2:3b:81:12:5e:4a:9e:
c1:8a:7f:53:6c:0e:dc:b5:72:8c:bd:c5:61:f9:9e:
c6:76:78:aa:18:ca:a1:02:67:63:a5:1f:28:0b:df:
6b:1c:41:4e:a5:3d:91:c8:0b:a7:3e:b7:fb:95:9c:
2d:32:82:a8:86:38:42:83:60:7a:69:8f:a9:f7:bf:
2a:d5:0b:14:53:c9:5e:35:cc:f9:47:6f:4c:99:dd:
99:86:4b:a1:43:63:fb:c4:a9:6e:7a:69:bd:0c:34:
93:db:b5:ff:b6:45:d2:43:92:e7:41:d8:31:76:07:
7b:59:fe:da:42:f6:98:25:56:85:8b:29:3a:8a:93:
a0:c9:05:ca:8a:a0:f3:68:aa:6a:bb:2b:5f:fa:70:
e6:e6:08:5c:53:2c:5c:5d:3a:0f:98:c9:37:1b:84:
2f:1a:8c:11:1e:52:67:84:d3:17:ad:77:85:e7:7d:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:18:F0:D2:25:40:A4:15:E7:90:3E:8A:6F:07:BA:3F:EC:A9:C9:69
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/dhjw0iVApBXnkD6Kbwe6P-ypyWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.94.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:4f:b4:7e:6c:ea:c7:cd:cc:a1:7b:42:81:7b:ae:63:1c:dd:
2c:25:26:32:70:72:30:11:c1:af:59:d3:25:d1:d4:b9:fa:8f:
41:57:bc:35:06:13:31:d0:33:81:36:89:2d:f7:55:c8:f6:ae:
51:fd:ac:8e:2c:a2:ea:7b:44:9f:20:2b:3c:9a:d0:26:c3:e7:
72:e0:06:66:68:b4:cf:59:3d:52:cf:70:7c:94:e9:81:78:71:
86:4c:9d:5b:54:18:62:09:9d:f0:11:70:95:db:0d:7d:8b:d0:
b4:f8:a4:b3:28:d0:2b:3b:cf:d3:1b:61:46:a3:12:a2:bc:ca:
e6:51:af:fa:08:a0:f6:52:55:4e:8d:c6:84:f5:77:7d:92:5b:
f0:93:40:26:cb:a5:36:32:c9:15:9b:bb:ed:ee:f4:bf:f4:37:
3e:10:56:d0:60:16:43:c2:47:33:15:95:b1:ab:24:8d:af:ec:
b0:52:22:11:99:ad:9a:15:97:89:56:f4:8d:7b:52:a5:2e:4f:
8f:bb:3c:f4:f1:75:7f:bf:f8:7b:04:e1:97:af:ba:a6:a4:ca:
67:15:c2:ad:f8:ea:5e:be:4f:84:a3:d4:c7:8e:51:a4:85:d6:
b2:32:24:5d:7f:0e:b7:db:f1:ec:81:69:87:6b:cf:7b:97:d9:
d7:90:06:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVt74PegtP40kEf4wgtGVx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw
MTE4OGYwHhcNMjMwMTAxMTUyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjE4ZjBkMjI1NDBhNDE1ZTc5MDNlOGE2ZjA3YmEzZmVjYTljOTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3Qx451/xh4/207blWs071kvvik3
kvyKM04VbG+tYCJ64HHnmKyKE3MNC/AUBUcY5JTLhlkX7Z1iFDE3YYgpZRmsPYW8
G+hkpLui0Nj0+vgU86I7gRJeSp7Bin9TbA7ctXKMvcVh+Z7GdniqGMqhAmdjpR8o
C99rHEFOpT2RyAunPrf7lZwtMoKohjhCg2B6aY+p978q1QsUU8leNcz5R29Mmd2Z
hkuhQ2P7xKluemm9DDST27X/tkXSQ5LnQdgxdgd7Wf7aQvaYJVaFiyk6ipOgyQXK
iqDzaKpquytf+nDm5ghcUyxcXToPmMk3G4QvGowRHlJnhNMXrXeF531IbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHYY8NIlQKQV55A+im8Huj/sqclpMB8GA1UdIwQY
MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt
YzA2NzFiZjRjZjNlLzEvZGhqdzBpVkFwQlhua0Q2S2J3ZTZQLXlweVdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl
LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwTteMA0G
CSqGSIb3DQEBCwUAA4IBAQA8T7R+bOrHzcyhe0KBe65jHN0sJSYycHIwEcGvWdMl
0dS5+o9BV7w1BhMx0DOBNokt91XI9q5R/ayOLKLqe0SfICs8mtAmw+dy4AZmaLTP
WT1Sz3B8lOmBeHGGTJ1bVBhiCZ3wEXCV2w19i9C0+KSzKNArO8/TG2FGoxKivMrm
Ua/6CKD2UlVOjcaE9Xd9klvwk0Amy6U2MskVm7vt7vS/9Dc+EFbQYBZDwkczFZWx
qySNr+ywUiIRma2aFZeJVvSNe1KlLk+Puzz08XV/v/h7BOGXr7qmpMpnFcKt+Ope
vk+Eo9THjlGkhdayMiRdfw632/HsgWmHa897l9nXkAbP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org