Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gJwyvRwlyi1AU-pt1_NPd5QRfTE.roa
File: gJwyvRwlyi1AU-pt1_NPd5QRfTE.roa (raw, json)
Hash identifier: FKtJ7H8Sc+EayVCt3h7y8u0VX7djHo0x96mUobbl2Q8=
Subject key identifier: 80:9C:32:BD:1C:25:CA:2D:40:53:EA:6D:D7:F3:4F:77:94:11:7D:31
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F15007530F1600EA216889C71D8A657
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gJwyvRwlyi1AU-pt1_NPd5QRfTE.roa
Signing time: Sun 01 Jan 2023 20:45:25 +0000
ROA not before: Sun 01 Jan 2023 20:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50252
IP address blocks: 193.226.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:15:00:75:30:f1:60:0e:a2:16:88:9c:71:d8:a6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=809c32bd1c25ca2d4053ea6dd7f34f7794117d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:95:a3:e7:81:59:15:c2:e9:cf:5d:24:e2:
82:29:37:ab:bb:ed:b5:b5:7b:9e:62:7b:00:de:c7:
33:cc:e1:3a:32:ba:d9:26:11:0d:cb:9b:fc:ae:6a:
60:2e:92:1a:e0:c0:9b:e3:0e:1a:80:1d:ad:5b:f8:
c1:1f:81:99:8e:45:01:4f:da:69:db:82:9e:16:d9:
79:fa:2a:2d:2d:83:f5:ac:2b:d3:24:d5:59:a6:8d:
c8:29:93:e4:46:b6:cd:d5:3b:f0:77:5c:2b:a1:d9:
28:bc:de:ea:00:70:42:c0:2b:82:99:e3:0c:ad:21:
9a:d1:b8:5a:3f:b1:dd:bb:f1:dd:6c:a4:18:1f:48:
9a:07:70:61:fb:a3:be:72:ab:bb:50:c4:38:57:c3:
f8:19:65:30:6a:f5:ab:93:47:de:87:ff:e5:48:35:
6d:8c:d5:9d:ae:e7:bf:15:8d:fc:0f:53:08:0e:ed:
1e:f7:ab:0b:8e:78:d2:80:6e:6c:50:df:e4:bc:af:
5b:fa:4d:13:55:99:83:b3:c4:bd:07:63:e2:89:91:
05:42:53:84:45:ee:e5:cb:30:13:b9:9c:0a:b1:ef:
37:5c:d7:bd:fe:6e:7f:bf:b7:1a:ab:ce:f7:6a:81:
85:5a:a3:22:2c:e6:9d:99:2d:1f:4a:bf:d8:49:6b:
df:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9C:32:BD:1C:25:CA:2D:40:53:EA:6D:D7:F3:4F:77:94:11:7D:31
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/gJwyvRwlyi1AU-pt1_NPd5QRfTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.226.121.0/24
Signature Algorithm: sha256WithRSAEncryption
50:57:be:65:56:04:27:75:1f:b8:d7:1e:57:f3:75:58:8c:41:
e9:54:09:44:6b:a5:66:99:1d:f4:74:99:93:e1:a4:0b:eb:6f:
38:fc:f8:c2:08:7a:bc:11:81:6d:54:85:08:75:d2:3d:c5:36:
6f:9e:67:b6:5b:9d:18:45:8e:46:b0:5f:b2:21:96:58:b3:d9:
50:2b:60:ab:2d:c8:f8:b3:5d:9b:10:d9:cc:f0:5d:75:73:66:
39:f7:34:4f:ea:84:f4:d4:65:c9:ca:14:31:1d:ca:b7:5e:76:
6c:c5:51:f5:51:7a:b0:75:02:9f:41:4d:2b:c9:aa:ac:ac:23:
8d:96:0d:21:10:95:88:ac:4b:fd:1e:db:e3:65:ee:f3:96:7f:
0d:8c:fa:3a:90:84:4e:63:d8:c6:10:ba:54:8c:61:b1:da:62:
16:b2:b2:9a:64:72:88:cd:44:d6:b0:c6:21:d0:28:98:70:01:
d9:2e:7f:62:6e:5b:01:36:67:05:0b:a0:96:78:ad:9b:f0:0f:
b5:fe:82:ff:27:d1:88:65:5a:32:4b:db:6f:b4:da:24:6d:cd:
5f:47:d8:37:c1:2a:32:ba:7d:66:c3:e1:64:98:c1:10:4a:44:
77:cc:44:ae:7f:ed:ed:2d:4d:8c:3f:55:63:ba:33:7e:b3:80:
73:d4:8a:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvFQB1MPFgDqIWiJxx2KZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwMTAxMjA0NTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDljMzJiZDFjMjVjYTJkNDA1M2VhNmRkN2YzNGY3Nzk0MTE3ZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi2Vo+eBWRXC6c9dJOKCKTeru+21
tXueYnsA3sczzOE6MrrZJhENy5v8rmpgLpIa4MCb4w4agB2tW/jBH4GZjkUBT9pp
24KeFtl5+iotLYP1rCvTJNVZpo3IKZPkRrbN1Tvwd1wrodkovN7qAHBCwCuCmeMM
rSGa0bhaP7Hdu/HdbKQYH0iaB3Bh+6O+cqu7UMQ4V8P4GWUwavWrk0feh//lSDVt
jNWdrue/FY38D1MIDu0e96sLjnjSgG5sUN/kvK9b+k0TVZmDs8S9B2PiiZEFQlOE
Re7lyzATuZwKse83XNe9/m5/v7caq873aoGFWqMiLOadmS0fSr/YSWvf1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFICcMr0cJcotQFPqbdfzT3eUEX0xMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvZ0p3eXZSd2x5aTFBVS1wdDFfTlBkNVFSZlRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweJ5MA0G
CSqGSIb3DQEBCwUAA4IBAQBQV75lVgQndR+41x5X83VYjEHpVAlEa6VmmR30dJmT
4aQL6284/PjCCHq8EYFtVIUIddI9xTZvnme2W50YRY5GsF+yIZZYs9lQK2CrLcj4
s12bENnM8F11c2Y59zRP6oT01GXJyhQxHcq3XnZsxVH1UXqwdQKfQU0ryaqsrCON
lg0hEJWIrEv9HtvjZe7zln8NjPo6kIROY9jGELpUjGGx2mIWsrKaZHKIzUTWsMYh
0CiYcAHZLn9iblsBNmcFC6CWeK2b8A+1/oL/J9GIZVoyS9tvtNokbc1fR9g3wSoy
un1mw+FkmMEQSkR3zESuf+3tLU2MP1VjujN+s4Bz1Iom
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:06 2024 by rpki-client on console-fra.rpki-client.org