Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/ReixoFU1FurEWCd92H2G1X_CPGY.roa
File: ReixoFU1FurEWCd92H2G1X_CPGY.roa (raw, json)
Hash identifier: o2RK/NDOONohEIAagjdVyr3MVnoWvdsQgeunWAvRyTg=
Subject key identifier: 45:E8:B1:A0:55:35:16:EA:C4:58:27:7D:D8:7D:86:D5:7F:C2:3C:66
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 018BAA1AFFC09C2E2B0E4952C8E52D79EE8E
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/ReixoFU1FurEWCd92H2G1X_CPGY.roa
Signing time: Tue 07 Nov 2023 14:06:17 +0000
ROA not before: Tue 07 Nov 2023 14:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 193.134.98.0/24 maxlen: 24
193.134.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Nov 2023 15:14:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:1a:ff:c0:9c:2e:2b:0e:49:52:c8:e5:2d:79:ee:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Nov 7 14:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45e8b1a0553516eac458277dd87d86d57fc23c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:b5:13:b8:96:7f:1c:fb:9c:a3:d4:72:ab:
e8:54:31:aa:e3:29:ef:4c:32:a3:c3:05:6f:e7:e9:
7b:8b:a0:7e:da:48:ef:f3:85:21:18:67:8d:b0:1d:
bc:9a:31:11:d4:37:24:ec:49:19:5d:9a:e3:1f:0d:
4c:34:76:68:70:66:e6:74:35:8a:f6:ca:e2:21:4d:
a3:ab:2a:64:df:32:a0:69:87:b4:07:86:59:db:a8:
d0:f7:06:e7:3d:bd:1e:46:64:65:a8:c6:2f:39:43:
39:e4:de:c9:09:07:d9:2a:00:da:10:6c:a9:97:c1:
5b:db:9f:2e:c8:74:ac:df:45:80:4c:36:dd:77:62:
a2:9d:3a:8c:4f:da:31:5d:1a:6d:f4:6f:7d:18:69:
ec:79:65:49:d4:ca:ba:61:dd:ff:aa:91:23:f3:6f:
5a:5c:50:b4:e0:09:97:c9:96:f7:10:65:52:82:b4:
4e:6c:df:26:e2:d8:64:de:4c:78:99:8a:54:1a:2b:
4d:92:e4:d1:c1:f9:35:bf:13:65:e8:4f:42:24:cc:
03:4d:94:88:1c:26:6e:2b:d3:c8:b7:e3:d7:71:0f:
98:a5:ab:c5:e8:94:4f:58:19:8f:92:91:93:44:78:
08:6d:a9:68:a3:44:09:a9:97:26:e9:82:05:73:b4:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E8:B1:A0:55:35:16:EA:C4:58:27:7D:D8:7D:86:D5:7F:C2:3C:66
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/ReixoFU1FurEWCd92H2G1X_CPGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.96.0/24
193.134.98.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f0:71:b7:77:e1:19:24:a7:5f:b6:ed:3e:ac:f1:24:ba:c9:
26:2a:3e:f8:c3:33:1f:f1:ac:b1:b8:eb:b1:97:4c:04:62:52:
2f:a0:7d:bb:10:9e:d0:5c:04:dd:c5:ec:bd:2d:4e:09:ec:dc:
f7:27:ad:f1:fd:91:7e:81:86:8a:91:33:47:f2:b9:8b:ba:48:
cf:1c:df:6c:c0:73:53:ee:a5:af:1e:5f:89:6a:ba:19:f9:76:
84:4f:a1:a0:20:cf:4f:3e:4d:be:e8:3f:02:9f:39:a6:36:99:
37:e0:fa:04:0b:cd:31:d5:1f:a4:48:22:53:46:68:81:92:bc:
67:7d:a8:a9:b4:7b:27:40:68:89:d1:e7:9c:7e:54:7a:c3:bd:
d2:a2:2d:26:e5:24:5a:fa:c5:09:a5:1c:df:8a:b3:13:30:43:
bd:10:36:06:01:0e:be:57:4b:72:1b:4c:3a:6b:41:a9:e8:7f:
14:f6:48:af:a7:bb:4b:fa:a3:d6:6b:9a:1c:18:a2:c7:28:b6:
af:fe:20:b5:43:d1:c1:a5:00:9d:61:2a:09:69:e8:fb:1d:0d:
29:18:89:ae:7f:b1:a3:5c:be:43:23:6b:ae:a2:5b:41:f3:e0:
48:c6:0c:15:7f:53:13:96:47:33:6e:f0:89:7d:74:d2:60:ee:
bb:19:16:ea
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYuqGv/AnC4rDklSyOUtee6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYzI0NGJlNmIzYWZmYjZkNGU1NDdmMmUxZTNjNWVhYzFi
MjZhYjIwHhcNMjMxMTA3MTQwNjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWU4YjFhMDU1MzUxNmVhYzQ1ODI3N2RkODdkODZkNTdmYzIzYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsW1E7iWfxz7nKPUcqvoVDGq4ynv
TDKjwwVv5+l7i6B+2kjv84UhGGeNsB28mjER1Dck7EkZXZrjHw1MNHZocGbmdDWK
9sriIU2jqypk3zKgaYe0B4ZZ26jQ9wbnPb0eRmRlqMYvOUM55N7JCQfZKgDaEGyp
l8Fb258uyHSs30WATDbdd2KinTqMT9oxXRpt9G99GGnseWVJ1Mq6Yd3/qpEj829a
XFC04AmXyZb3EGVSgrRObN8m4thk3kx4mYpUGitNkuTRwfk1vxNl6E9CJMwDTZSI
HCZuK9PIt+PXcQ+YpavF6JRPWBmPkpGTRHgIbaloo0QJqZcm6YIFc7Qf6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEXosaBVNRbqxFgnfdh9htV/wjxmMB8GA1UdIwQY
MBaAFJPCRL5rOv+21OVH8uHjxerBsmqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81MDFlOGYtYzdlMS00YWE0LTg1ODMt
NjZkNzRlNzNmMjU0LzEvUmVpeG9GVTFGdXJFV0NkOTJIMkcxWF9DUEdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81MDFlOGYtYzdlMS00YWE0LTg1ODMtNjZkNzRlNzNmMjU0
LzEvazhKRXZtczZfN2JVNVVmeTRlUEY2c0d5YXJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwYZgAwQA
wYZiMA0GCSqGSIb3DQEBCwUAA4IBAQAT8HG3d+EZJKdftu0+rPEkuskmKj74wzMf
8ayxuOuxl0wEYlIvoH27EJ7QXATdxey9LU4J7Nz3J63x/ZF+gYaKkTNH8rmLukjP
HN9swHNT7qWvHl+JaroZ+XaET6GgIM9PPk2+6D8CnzmmNpk34PoEC80x1R+kSCJT
RmiBkrxnfaiptHsnQGiJ0eecflR6w73Soi0m5SRa+sUJpRzfirMTMEO9EDYGAQ6+
V0tyG0w6a0Gp6H8U9kivp7tL+qPWa5ocGKLHKLav/iC1Q9HBpQCdYSoJaej7HQ0p
GImuf7GjXL5DI2uuoltB8+BIxgwVf1MTlkczbvCJfXTSYO67GRbq
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:02 2024 by rpki-client on console-ams.rpki-client.org