Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/RXL5A6yuTcIoV7UaR51rHT-k7zo.roa
File: RXL5A6yuTcIoV7UaR51rHT-k7zo.roa (raw, json)
Hash identifier: ukyhKlvYnUk4hvNglKKLn/epDwPHRbpui6NGOkGfc8o=
Subject key identifier: 45:72:F9:03:AC:AE:4D:C2:28:57:B5:1A:47:9D:6B:1D:3F:A4:EF:3A
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 01856F300A9CA0D8814576DA7DAF4EE7EEED
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/RXL5A6yuTcIoV7UaR51rHT-k7zo.roa
Signing time: Sun 01 Jan 2023 21:14:57 +0000
ROA not before: Sun 01 Jan 2023 21:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 193.47.99.0/24 maxlen: 24
2001:67c:192c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 Jun 2023 07:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:0a:9c:a0:d8:81:45:76:da:7d:af:4e:e7:ee:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Jan 1 21:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4572f903acae4dc22857b51a479d6b1d3fa4ef3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:89:a2:66:ec:68:d3:85:44:e8:87:64:44:93:
fe:53:63:fe:96:14:95:8e:ad:75:93:8a:75:ac:cf:
79:81:fa:42:ab:d7:4b:cc:06:8f:db:5c:dc:a8:7a:
fe:19:a3:19:e3:70:a7:92:cc:39:43:59:12:76:e7:
44:82:25:10:0a:07:6f:de:b5:8e:4e:b9:e7:a6:27:
e7:9b:05:7a:e6:5f:a4:ca:66:9c:af:bd:63:f4:24:
99:a3:52:05:3b:53:08:e6:2b:11:2c:49:f7:d6:f7:
58:c8:cf:da:a3:4c:48:30:c7:49:08:d7:0a:46:cb:
03:f2:24:20:e9:9a:21:3a:c7:f7:91:24:49:92:a2:
1a:a1:fd:00:b3:e6:95:16:a3:fe:b5:45:7f:4f:02:
b2:fc:f0:a0:66:44:37:d0:1f:83:5a:aa:75:fd:2f:
b8:31:aa:e0:8b:5b:5c:74:16:bd:79:db:f0:7b:cf:
29:fc:2c:41:81:e2:54:d7:36:99:54:0f:7d:b0:10:
29:0e:37:e1:1c:b1:27:8e:c5:f7:ef:cf:2c:8a:fc:
31:68:22:46:18:0c:77:aa:f0:54:77:65:20:1a:06:
42:cc:93:76:26:e4:92:17:2d:95:cf:33:a4:88:4b:
20:f2:47:f5:df:0b:a3:8e:aa:36:e3:69:fd:a6:c1:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:72:F9:03:AC:AE:4D:C2:28:57:B5:1A:47:9D:6B:1D:3F:A4:EF:3A
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/RXL5A6yuTcIoV7UaR51rHT-k7zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.99.0/24
IPv6:
2001:67c:192c::/48
Signature Algorithm: sha256WithRSAEncryption
20:c3:e2:dc:cd:e5:09:d3:27:12:55:ad:9d:73:86:63:40:1d:
47:66:95:ac:7b:5a:4e:43:22:17:15:d8:1b:e7:34:e2:f4:4e:
44:60:23:d0:a8:09:f0:4a:c3:47:44:3f:40:26:83:d7:dc:1a:
83:91:87:1a:39:7d:70:f5:ef:2e:c5:7b:c7:b7:bc:34:db:6f:
80:59:ef:a1:b1:b9:2a:af:a7:b2:b4:56:d8:dd:ef:bc:36:62:
c4:a7:0e:19:b9:51:09:23:ce:0b:da:7e:76:5f:a5:af:2b:3a:
e8:b7:55:47:8f:25:8b:18:54:16:32:0d:a3:5c:78:40:69:4b:
e9:76:bf:c5:79:a5:e3:17:19:8c:33:05:5e:86:1c:02:fa:ef:
bd:04:8b:fe:3a:99:7b:d5:f9:28:48:f1:a1:25:cc:63:27:6f:
7a:30:93:3b:94:ef:16:ed:51:09:c0:b5:8f:93:56:76:e9:fc:
a7:3e:59:2b:5a:dd:e9:b6:fc:da:78:cf:54:57:76:64:ef:a3:
cc:6d:ca:78:23:3c:98:25:e9:8c:52:9e:b8:32:09:e8:2d:88:
40:32:7c:50:46:05:7f:68:2d:42:b5:40:88:63:1d:78:31:f9:
a9:65:87:c9:4d:c5:db:d9:97:d1:30:a7:44:1d:1b:94:7d:51:
65:81:9f:57
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVvMAqcoNiBRXbafa9O5+7tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDZmNTc3MzVhNGU2M2RiZWY4NDhlZTBkOWQxOTllMjE1
ZjgzMDQwHhcNMjMwMTAxMjExNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTcyZjkwM2FjYWU0ZGMyMjg1N2I1MWE0NzlkNmIxZDNmYTRlZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYmiZuxo04VE6IdkRJP+U2P+lhSV
jq11k4p1rM95gfpCq9dLzAaP21zcqHr+GaMZ43Cnksw5Q1kSdudEgiUQCgdv3rWO
TrnnpifnmwV65l+kymacr71j9CSZo1IFO1MI5isRLEn31vdYyM/ao0xIMMdJCNcK
RssD8iQg6ZohOsf3kSRJkqIaof0As+aVFqP+tUV/TwKy/PCgZkQ30B+DWqp1/S+4
Margi1tcdBa9edvwe88p/CxBgeJU1zaZVA99sBApDjfhHLEnjsX3788sivwxaCJG
GAx3qvBUd2UgGgZCzJN2JuSSFy2VzzOkiEsg8kf13wujjqo242n9psEi8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEVy+QOsrk3CKFe1Gkedax0/pO86MB8GA1UdIwQY
MBaAFB9G9Xc1pOY9vvhI7g2dGZ4hX4MEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzIt
YTdjOTg5OGVlY2JjLzEvUlhMNUE2eXVUY0lvVjdVYVI1MXJIVC1rN3pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzItYTdjOTg5OGVlY2Jj
LzEvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwS9jMA8E
AgACMAkDBwAgAQZ8GSwwDQYJKoZIhvcNAQELBQADggEBACDD4tzN5QnTJxJVrZ1z
hmNAHUdmlax7Wk5DIhcV2BvnNOL0TkRgI9CoCfBKw0dEP0Amg9fcGoORhxo5fXD1
7y7Fe8e3vDTbb4BZ76GxuSqvp7K0Vtjd77w2YsSnDhm5UQkjzgvafnZfpa8rOui3
VUePJYsYVBYyDaNceEBpS+l2v8V5peMXGYwzBV6GHAL6770Ei/46mXvV+ShI8aEl
zGMnb3owkzuU7xbtUQnAtY+TVnbp/Kc+WSta3em2/Np4z1RXdmTvo8xtyngjPJgl
6YxSnrgyCegtiEAyfFBGBX9oLUK1QIhjHXgx+allh8lNxdvZl9Ewp0QdG5R9UWWB
n1c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:56 2024 by rpki-client on console-fra.rpki-client.org