Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/72OuVHWx0USpLYEeIdVtHU1juAY.roa
File: 72OuVHWx0USpLYEeIdVtHU1juAY.roa (raw, json)
Hash identifier: 7UbfPIHhmK5eIKXOyNnU0uhTWV7jl/w4H1wj9Y3eMeE=
Subject key identifier: EF:63:AE:54:75:B1:D1:44:A9:2D:81:1E:21:D5:6D:1D:4D:63:B8:06
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01899BF7A9239BDDC5A1FC9C0325312CF076
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/72OuVHWx0USpLYEeIdVtHU1juAY.roa
Signing time: Fri 28 Jul 2023 10:07:26 +0000
ROA not before: Fri 28 Jul 2023 10:07:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49217
IP address blocks: 193.57.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:f7:a9:23:9b:dd:c5:a1:fc:9c:03:25:31:2c:f0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jul 28 10:07:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef63ae5475b1d144a92d811e21d56d1d4d63b806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:29:a1:47:7d:99:4f:d1:5e:31:6d:74:df:26:
27:df:5a:6c:70:b1:e2:5d:97:80:e2:8f:2f:99:36:
77:53:f9:93:cc:5e:18:52:4d:68:bb:04:80:37:0f:
ed:e3:4e:a1:de:49:96:63:f9:82:b9:fa:4a:7f:d3:
a1:8e:93:48:d6:43:2a:4a:2f:c1:f8:4f:a4:6b:a8:
cd:0c:15:42:3f:88:d5:6d:9f:ea:79:f2:b5:dd:04:
bf:fa:13:6e:aa:68:a3:d5:03:5c:76:3a:13:4b:dd:
d7:fd:38:c0:7c:3c:21:26:ba:d6:2d:01:4a:1e:7e:
9b:3f:b0:4a:7e:65:cd:90:f9:5f:74:65:9c:41:9d:
0c:ff:3d:ea:e8:71:df:f6:bf:67:74:89:46:e6:64:
aa:89:bc:c1:36:49:6e:6f:0e:a4:1a:1e:6d:e5:59:
d1:bc:c0:57:5e:b0:ce:8f:7c:d1:91:af:33:f0:6e:
8b:0a:03:4e:cc:53:26:24:8f:b0:21:79:25:65:13:
7c:87:86:6b:a3:ac:17:59:7e:e1:4f:a9:e6:7e:fb:
81:dd:b2:f0:8f:68:09:42:80:97:9d:51:82:6b:7b:
d5:c1:f6:43:6c:74:70:74:8a:52:cc:fc:cb:d0:26:
79:88:83:96:0c:27:d7:74:3a:cd:ac:e9:11:91:21:
15:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:63:AE:54:75:B1:D1:44:A9:2D:81:1E:21:D5:6D:1D:4D:63:B8:06
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/72OuVHWx0USpLYEeIdVtHU1juAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:99:1b:6d:f1:7f:0c:7a:70:4d:52:31:c4:1e:0a:bf:26:d8:
3e:e5:fa:25:1f:f8:e4:26:94:cc:7d:d4:9f:9f:5f:73:73:a6:
be:df:02:9f:d6:f1:2a:ae:9f:71:f7:7f:87:0f:ac:2e:1c:bf:
99:7a:83:a2:19:62:29:ca:df:7e:f5:cd:1d:90:b5:25:d6:ce:
d1:18:d9:4f:da:4f:e3:f8:4f:56:43:12:79:05:fe:7d:24:78:
4b:5f:97:6f:b2:e9:dc:f2:88:5a:08:6c:7b:c1:47:c0:e1:06:
6a:b6:f8:28:37:44:68:ae:39:c7:f8:0d:3c:9d:4b:ed:2b:f7:
c6:12:82:b6:ac:b1:bc:2f:75:fd:8e:93:6b:ae:f4:78:1c:c9:
fe:eb:41:2e:89:d8:2c:50:ef:22:07:b3:e7:4e:41:a3:28:f2:
b2:bf:47:8f:dd:92:ea:b4:f7:5e:3a:14:8f:10:f8:f1:0d:55:
db:b2:a0:e5:72:a4:27:13:c0:a1:41:b0:49:75:d4:75:28:01:
6a:80:75:4a:c2:45:23:8d:7e:d7:98:42:b4:c2:8d:ba:57:d7:
94:55:c6:d3:fc:e3:15:cb:36:6e:b7:f8:49:db:6f:68:cf:63:
97:fe:8e:6c:c7:6a:ba:36:d6:40:8b:f1:fb:78:e2:65:a9:06:
e5:dd:91:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmb96kjm93FofycAyUxLPB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwNzI4MTAwNzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjYzYWU1NDc1YjFkMTQ0YTkyZDgxMWUyMWQ1NmQxZDRkNjNiODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCmhR32ZT9FeMW103yYn31pscLHi
XZeA4o8vmTZ3U/mTzF4YUk1ouwSANw/t406h3kmWY/mCufpKf9OhjpNI1kMqSi/B
+E+ka6jNDBVCP4jVbZ/qefK13QS/+hNuqmij1QNcdjoTS93X/TjAfDwhJrrWLQFK
Hn6bP7BKfmXNkPlfdGWcQZ0M/z3q6HHf9r9ndIlG5mSqibzBNklubw6kGh5t5VnR
vMBXXrDOj3zRka8z8G6LCgNOzFMmJI+wIXklZRN8h4Zro6wXWX7hT6nmfvuB3bLw
j2gJQoCXnVGCa3vVwfZDbHRwdIpSzPzL0CZ5iIOWDCfXdDrNrOkRkSEVNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO9jrlR1sdFEqS2BHiHVbR1NY7gGMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvNzJPdVZIV3gwVVNwTFlFZUlkVnRIVTFqdUFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTkpMA0G
CSqGSIb3DQEBCwUAA4IBAQAOmRtt8X8MenBNUjHEHgq/Jtg+5folH/jkJpTMfdSf
n19zc6a+3wKf1vEqrp9x93+HD6wuHL+ZeoOiGWIpyt9+9c0dkLUl1s7RGNlP2k/j
+E9WQxJ5Bf59JHhLX5dvsunc8ohaCGx7wUfA4QZqtvgoN0RorjnH+A08nUvtK/fG
EoK2rLG8L3X9jpNrrvR4HMn+60EuidgsUO8iB7PnTkGjKPKyv0eP3ZLqtPdeOhSP
EPjxDVXbsqDlcqQnE8ChQbBJddR1KAFqgHVKwkUjjX7XmEK0wo26V9eUVcbT/OMV
yzZut/hJ229oz2OX/o5sx2q6NtZAi/H7eOJlqQbl3ZFc
-----END CERTIFICATE-----
Generated at Thu Aug 24 08:12:37 2023 by rpki-client on console-ams.rpki-client.org