Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/hXeqa5eIR06bOdG1kgHRcAQJ1Ls.roa
File: hXeqa5eIR06bOdG1kgHRcAQJ1Ls.roa (raw, json)
Hash identifier: zP/DNflf3u0JKNIu6KGGtGPoY5avMTaYld1bo3ikbr8=
Subject key identifier: 85:77:AA:6B:97:88:47:4E:9B:39:D1:B5:92:01:D1:70:04:09:D4:BB
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01856EA682CCC04E819868EF6A8C38CDC7A3
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/hXeqa5eIR06bOdG1kgHRcAQJ1Ls.roa
Signing time: Sun 01 Jan 2023 18:44:44 +0000
ROA not before: Sun 01 Jan 2023 18:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 193.160.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:82:cc:c0:4e:81:98:68:ef:6a:8c:38:cd:c7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 18:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8577aa6b9788474e9b39d1b59201d1700409d4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:ec:7a:d5:cb:2a:b0:d8:e6:17:f3:e3:e1:
8d:e7:2f:c6:a3:66:7c:81:34:ea:73:e9:fd:57:e8:
bf:71:d7:e1:f4:76:56:29:05:9e:e5:4b:85:13:47:
b0:e6:a1:31:a4:36:5b:7f:76:b7:03:2e:03:f8:5e:
f0:14:99:c1:62:e1:eb:54:2d:48:09:8a:4c:bf:6c:
aa:7c:d4:1e:70:a1:30:b4:90:44:fa:69:9d:d7:2b:
68:28:3a:e3:e3:c1:7d:58:28:d7:b9:4c:00:39:0e:
43:53:95:5e:41:b9:b6:d6:26:a1:50:87:12:3f:a9:
d7:31:26:2b:e2:51:74:d3:57:6c:3c:2e:6a:fc:ca:
af:e9:d4:d8:12:5a:db:eb:e7:e4:a8:00:41:69:06:
3e:04:23:88:c5:61:25:3f:c2:e9:10:1d:19:f6:a8:
25:76:6b:5e:17:9a:97:be:31:b3:e5:fc:4f:c2:ee:
8b:f7:61:d5:8d:47:30:0a:e6:e8:7c:86:ca:ba:00:
69:b3:6e:40:17:1f:e1:dd:60:b0:c3:ef:f4:88:d5:
52:67:b4:85:df:88:ce:4a:b1:ae:11:8e:ff:2f:c5:
b6:87:8c:90:fb:cf:a4:32:2c:db:35:b9:df:68:2b:
f3:69:02:29:37:a9:30:c4:c1:cc:95:82:20:94:43:
d1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:77:AA:6B:97:88:47:4E:9B:39:D1:B5:92:01:D1:70:04:09:D4:BB
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/hXeqa5eIR06bOdG1kgHRcAQJ1Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.21.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:c8:fa:8b:bf:85:e3:88:7f:20:87:05:fa:0c:e5:47:42:58:
1a:c9:a2:89:ef:a3:04:9f:90:70:cd:c2:34:de:a0:71:a1:28:
fa:b6:bf:77:fd:94:c2:6b:a6:91:fe:d0:1b:16:fc:28:7c:4f:
c3:f9:88:22:54:27:3a:ce:95:78:12:bd:aa:2a:ab:bf:71:61:
fe:e8:5e:4f:c9:59:fd:37:21:df:74:23:33:d8:cc:6e:56:fe:
5b:1a:2c:b6:d3:94:fe:33:8d:d8:ef:95:df:44:f3:e7:13:5a:
79:62:30:5f:64:35:e0:73:d9:d1:cc:26:99:ce:69:6f:01:bc:
bc:53:9f:c6:26:4a:0c:1d:fa:64:d2:00:70:f6:49:84:ed:8b:
ed:b3:15:d8:5f:61:d6:6d:15:19:35:38:75:00:cd:90:b0:77:
f4:ff:5d:fa:e4:cd:29:1d:1c:57:4a:5b:d7:16:17:35:c6:1c:
49:09:4d:16:ef:23:2d:83:f3:dc:14:54:95:7b:e7:6d:c6:d6:
a7:fa:9b:54:e8:42:0c:8d:eb:74:ca:fd:31:be:ad:ac:06:bb:
2a:2c:74:27:c6:d7:79:17:02:ff:4b:ad:cc:3e:f7:7b:59:a6:
5b:11:a3:b0:57:c0:34:31:95:d4:cf:8b:11:16:57:95:fd:a4:
fb:91:3d:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVupoLMwE6BmGjvaow4zcejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2
OGIxZTEwHhcNMjMwMTAxMTg0NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTc3YWE2Yjk3ODg0NzRlOWIzOWQxYjU5MjAxZDE3MDA0MDlkNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrPsetXLKrDY5hfz4+GN5y/Go2Z8
gTTqc+n9V+i/cdfh9HZWKQWe5UuFE0ew5qExpDZbf3a3Ay4D+F7wFJnBYuHrVC1I
CYpMv2yqfNQecKEwtJBE+mmd1ytoKDrj48F9WCjXuUwAOQ5DU5VeQbm21iahUIcS
P6nXMSYr4lF001dsPC5q/Mqv6dTYElrb6+fkqABBaQY+BCOIxWElP8LpEB0Z9qgl
dmteF5qXvjGz5fxPwu6L92HVjUcwCubofIbKugBps25AFx/h3WCww+/0iNVSZ7SF
34jOSrGuEY7/L8W2h4yQ+8+kMizbNbnfaCvzaQIpN6kwxMHMlYIglEPRcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIV3qmuXiEdOmznRtZIB0XAECdS7MB8GA1UdIwQY
MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut
ZGNlOTQ3ZTI5NGI2LzEvaFhlcWE1ZUlSMDZiT2RHMWtnSFJjQVFKMUxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2
LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaAVMA0G
CSqGSIb3DQEBCwUAA4IBAQDAyPqLv4XjiH8ghwX6DOVHQlgayaKJ76MEn5BwzcI0
3qBxoSj6tr93/ZTCa6aR/tAbFvwofE/D+YgiVCc6zpV4Er2qKqu/cWH+6F5PyVn9
NyHfdCMz2MxuVv5bGiy205T+M43Y75XfRPPnE1p5YjBfZDXgc9nRzCaZzmlvAby8
U5/GJkoMHfpk0gBw9kmE7YvtsxXYX2HWbRUZNTh1AM2QsHf0/1365M0pHRxXSlvX
Fhc1xhxJCU0W7yMtg/PcFFSVe+dtxtan+ptU6EIMjet0yv0xvq2sBrsqLHQnxtd5
FwL/S63MPvd7WaZbEaOwV8A0MZXUz4sRFleV/aT7kT0J
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org