Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/s1NULWCMYnzkqwYmnCVZCN2gsxg.roa
File: s1NULWCMYnzkqwYmnCVZCN2gsxg.roa (raw, json)
Hash identifier: PvJnNsNLtj7FJV9YMgM2gr39fqC/OAI8GnCa5hwHSvc=
Subject key identifier: B3:53:54:2D:60:8C:62:7C:E4:AB:06:26:9C:25:59:08:DD:A0:B3:18
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018BB8D129ACFBCEF6008918CFE115C575EB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/s1NULWCMYnzkqwYmnCVZCN2gsxg.roa
Signing time: Fri 10 Nov 2023 10:39:57 +0000
ROA not before: Fri 10 Nov 2023 10:39:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49384
IP address blocks: 193.230.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:d1:29:ac:fb:ce:f6:00:89:18:cf:e1:15:c5:75:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Nov 10 10:39:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b353542d608c627ce4ab06269c255908dda0b318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f4:60:a3:5f:5a:17:f3:65:03:0b:ef:93:5a:
f0:72:11:cb:cf:0b:76:4b:f1:df:1c:1a:42:f2:65:
5f:cc:ee:8d:46:e0:f3:fd:b4:8b:e3:ce:e1:a9:59:
51:1b:63:80:ee:20:9b:c6:f4:e5:30:de:e0:f0:fa:
35:96:43:d2:4c:8f:27:2e:e0:f8:1b:ed:c0:a4:ea:
e5:d5:f3:cc:c6:65:d3:4c:49:bd:02:5a:8e:0d:2f:
63:01:1f:66:e5:7a:91:4c:e0:3e:97:df:94:c2:fa:
43:c5:51:ff:31:0b:b5:7a:5b:68:31:5e:27:00:98:
bc:eb:b9:3b:a2:e4:ec:9f:60:66:dc:6f:36:43:85:
21:88:c4:2d:a5:bc:ab:7d:c6:c9:75:c3:97:96:39:
4d:40:ed:eb:70:ba:fc:bd:3a:e9:02:1e:4b:5e:70:
65:52:c2:32:f3:2e:e6:87:68:ba:14:ab:c8:9d:87:
49:74:eb:3f:d9:ee:9e:bd:24:ad:ea:17:d0:05:e3:
b1:e9:0e:60:dd:27:1a:7b:c6:07:e5:ff:11:55:27:
a4:18:0d:b4:1d:4e:32:27:6f:63:31:9e:f5:11:0d:
5c:be:a2:66:e8:68:dc:97:80:2e:a3:b1:33:6c:ea:
93:1f:db:d8:82:32:32:70:0a:ce:34:68:3e:9b:25:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:53:54:2D:60:8C:62:7C:E4:AB:06:26:9C:25:59:08:DD:A0:B3:18
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/s1NULWCMYnzkqwYmnCVZCN2gsxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.230.231.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:7c:72:db:dc:dd:17:72:8e:0b:2c:9f:59:a8:8b:c0:62:30:
b1:f1:98:51:09:d7:a5:2c:ee:81:e4:da:79:01:3a:50:52:06:
75:40:d2:0a:d6:e0:0a:18:d2:af:72:c7:eb:2f:44:59:a1:9e:
a8:d1:56:3d:48:2d:18:09:d1:b7:47:d2:97:06:6e:95:ad:f9:
d6:0f:2e:95:76:de:42:23:c0:93:9d:0a:e9:e2:b5:ec:13:89:
ea:f7:24:8b:83:76:86:d6:ae:f4:8e:ef:a7:73:4f:f7:25:11:
8a:db:22:f1:53:ef:fc:94:a2:18:d6:92:08:00:3e:dc:46:b6:
b3:eb:d7:80:6d:fd:f9:91:a5:cb:f2:10:8a:62:c3:41:60:19:
14:f7:63:b5:2c:03:b0:c6:78:b6:c4:59:a8:e2:f7:b3:c7:1f:
cc:ff:d1:16:1b:1d:10:a1:86:12:3d:51:a1:38:4f:31:c4:8d:
bc:9e:73:78:18:87:e5:40:7f:9f:5d:dd:77:1c:5d:5b:89:d7:
e1:ad:73:0e:96:e6:ba:b7:cc:6d:b4:76:6c:0d:a4:d2:dd:5a:
59:15:ed:4d:1b:0b:42:a8:e6:2a:70:bd:c1:10:41:39:4e:e5:
99:44:4f:e3:1c:05:71:18:b0:7e:fd:74:c9:d9:90:73:22:b8:
e2:22:83:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYu40Sms+872AIkYz+EVxXXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMxMTEwMTAzOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzUzNTQyZDYwOGM2MjdjZTRhYjA2MjY5YzI1NTkwOGRkYTBiMzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPRgo19aF/NlAwvvk1rwchHLzwt2
S/HfHBpC8mVfzO6NRuDz/bSL487hqVlRG2OA7iCbxvTlMN7g8Po1lkPSTI8nLuD4
G+3ApOrl1fPMxmXTTEm9AlqODS9jAR9m5XqRTOA+l9+UwvpDxVH/MQu1eltoMV4n
AJi867k7ouTsn2Bm3G82Q4UhiMQtpbyrfcbJdcOXljlNQO3rcLr8vTrpAh5LXnBl
UsIy8y7mh2i6FKvInYdJdOs/2e6evSSt6hfQBeOx6Q5g3Scae8YH5f8RVSekGA20
HU4yJ29jMZ71EQ1cvqJm6Gjcl4Auo7EzbOqTH9vYgjIycArONGg+myVA6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLNTVC1gjGJ85KsGJpwlWQjdoLMYMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvczFOVUxXQ01ZbnprcXdZbW5DVlpDTjJnc3hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwebnMA0G
CSqGSIb3DQEBCwUAA4IBAQBdfHLb3N0Xco4LLJ9ZqIvAYjCx8ZhRCdelLO6B5Np5
ATpQUgZ1QNIK1uAKGNKvcsfrL0RZoZ6o0VY9SC0YCdG3R9KXBm6VrfnWDy6Vdt5C
I8CTnQrp4rXsE4nq9ySLg3aG1q70ju+nc0/3JRGK2yLxU+/8lKIY1pIIAD7cRraz
69eAbf35kaXL8hCKYsNBYBkU92O1LAOwxni2xFmo4vezxx/M/9EWGx0QoYYSPVGh
OE8xxI28nnN4GIflQH+fXd13HF1bidfhrXMOlua6t8xttHZsDaTS3VpZFe1NGwtC
qOYqcL3BEEE5TuWZRE/jHAVxGLB+/XTJ2ZBzIrjiIoOt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org