Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_dbJ0G7XXKuZXLuD_oPvfK0AJ5Y.roa
File: _dbJ0G7XXKuZXLuD_oPvfK0AJ5Y.roa (raw, json)
Hash identifier: Od+b1XsGjuW/6SQr4xuu1l+gfYGk3igweGfGCJfh4B4=
Subject key identifier: FD:D6:C9:D0:6E:D7:5C:AB:99:5C:BB:83:FE:83:EF:7C:AD:00:27:96
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14E262D7B7A713B71F1E02D32919F3
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_dbJ0G7XXKuZXLuD_oPvfK0AJ5Y.roa
Signing time: Sun 01 Jan 2023 20:45:17 +0000
ROA not before: Sun 01 Jan 2023 20:45:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3333
IP address blocks: 193.230.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e2:62:d7:b7:a7:13:b7:1f:1e:02:d3:29:19:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdd6c9d06ed75cab995cbb83fe83ef7cad002796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:a9:ab:63:15:6c:48:bc:8c:42:d8:44:ae:
94:4e:ef:bf:f6:a3:56:a4:04:34:d4:ad:e6:e6:80:
89:3a:b2:84:a6:14:87:34:c1:22:6c:9f:cc:9d:06:
b2:4a:16:6b:82:79:78:30:21:07:45:a1:98:9a:d5:
7c:ea:4f:ed:46:79:f4:ec:a4:13:13:6f:80:f3:bb:
1f:c7:40:c4:84:26:74:6b:b2:8a:fe:3f:bf:43:54:
24:8a:ff:2e:00:3f:5b:27:cc:33:b5:d4:37:82:a1:
67:d8:9e:2d:f6:29:a0:ff:3e:6a:b0:2e:58:e0:b6:
c4:8a:fc:46:92:52:7f:69:46:17:12:f1:2d:e4:fa:
e6:ad:24:e4:06:2f:d4:f7:65:2e:73:1e:b8:00:4c:
4c:70:63:95:b7:65:31:41:4b:5d:3d:73:a3:3a:04:
52:e4:12:00:b7:2c:ab:4c:17:82:91:a6:1d:4f:e6:
5b:d8:89:42:c3:4d:37:2c:68:5f:cc:7a:cb:9d:e0:
ea:3a:4b:db:82:a8:6e:b1:40:07:af:fe:19:cd:61:
04:e3:0a:70:a7:94:5e:a7:41:0b:c1:03:71:f2:09:
9b:34:3c:19:63:bd:f7:36:d9:3d:cc:a3:c6:a3:3a:
3c:db:97:63:bb:a7:89:35:94:24:45:d7:ed:1b:44:
91:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D6:C9:D0:6E:D7:5C:AB:99:5C:BB:83:FE:83:EF:7C:AD:00:27:96
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_dbJ0G7XXKuZXLuD_oPvfK0AJ5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.230.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:87:e1:33:8c:42:30:c6:7c:89:09:0d:1c:67:e1:db:28:40:
fd:0e:76:b5:0c:5a:96:e7:2f:d4:55:40:63:a1:da:16:d8:48:
ee:66:83:6c:cf:d2:79:86:10:3a:6b:dc:a3:aa:d6:fc:d5:a4:
42:a3:f7:40:73:38:c3:0d:f5:a7:ba:39:37:a9:5b:bd:75:18:
75:31:3f:a7:26:7c:b7:6d:3b:36:e5:a3:d0:52:03:13:12:be:
1a:d3:14:7c:40:99:ac:71:80:7f:71:76:8d:a1:d6:79:1a:c3:
e4:07:4b:88:e5:a7:df:92:5b:16:d6:2e:5f:f1:ad:96:e5:f3:
31:33:27:87:4a:4c:bc:b2:39:74:76:a9:c5:b1:8f:37:f7:7f:
18:7a:81:77:aa:07:f1:de:4d:f3:66:73:af:e5:24:94:d4:98:
69:5a:71:e9:5e:47:ad:0e:34:73:63:fe:e5:e2:e9:25:3d:c0:
e3:77:ca:5d:d0:56:a7:58:b9:05:be:f8:84:4c:7e:b6:ad:f9:
7d:d0:ae:0e:ae:6d:65:2b:c4:53:b3:20:04:61:3c:43:4d:fc:
b1:05:7e:81:23:0b:33:6c:c7:d0:b7:03:03:e2:cd:92:24:0c:
41:a3:2d:c2:56:81:85:48:ae:15:e9:8c:68:f0:e8:42:09:9e:
a3:19:d8:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvFOJi17enE7cfHgLTKRnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwMTAxMjA0NTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGQ2YzlkMDZlZDc1Y2FiOTk1Y2JiODNmZTgzZWY3Y2FkMDAyNzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7mpq2MVbEi8jELYRK6UTu+/9qNW
pAQ01K3m5oCJOrKEphSHNMEibJ/MnQayShZrgnl4MCEHRaGYmtV86k/tRnn07KQT
E2+A87sfx0DEhCZ0a7KK/j+/Q1Qkiv8uAD9bJ8wztdQ3gqFn2J4t9img/z5qsC5Y
4LbEivxGklJ/aUYXEvEt5PrmrSTkBi/U92Uucx64AExMcGOVt2UxQUtdPXOjOgRS
5BIAtyyrTBeCkaYdT+Zb2IlCw003LGhfzHrLneDqOkvbgqhusUAHr/4ZzWEE4wpw
p5Rep0ELwQNx8gmbNDwZY733Ntk9zKPGozo825dju6eJNZQkRdftG0SRhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP3WydBu11yrmVy7g/6D73ytACeWMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvX2RiSjBHN1hYS3VaWEx1RF9vUHZmSzBBSjVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwebCMA0G
CSqGSIb3DQEBCwUAA4IBAQCOh+EzjEIwxnyJCQ0cZ+HbKED9Dna1DFqW5y/UVUBj
odoW2EjuZoNsz9J5hhA6a9yjqtb81aRCo/dAczjDDfWnujk3qVu9dRh1MT+nJny3
bTs25aPQUgMTEr4a0xR8QJmscYB/cXaNodZ5GsPkB0uI5affklsW1i5f8a2W5fMx
MyeHSky8sjl0dqnFsY83938YeoF3qgfx3k3zZnOv5SSU1JhpWnHpXketDjRzY/7l
4uklPcDjd8pd0FanWLkFvviETH62rfl90K4Orm1lK8RTsyAEYTxDTfyxBX6BIwsz
bMfQtwMD4s2SJAxBoy3CVoGFSK4V6Yxo8OhCCZ6jGdgz
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org