Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BN7UvDJ4ezTmSDQ9tZ2znFy_7Bk.roa
File: BN7UvDJ4ezTmSDQ9tZ2znFy_7Bk.roa (raw, json)
Hash identifier: lvjhXavxNtXf6NlsTncRWnp89LaCvrlr6ixqYyFfrzY=
Subject key identifier: 04:DE:D4:BC:32:78:7B:34:E6:48:34:3D:B5:9D:B3:9C:5C:BF:EC:19
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018571E893AA62CFE5622CBFFA397ADBFB75
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BN7UvDJ4ezTmSDQ9tZ2znFy_7Bk.roa
Signing time: Mon 02 Jan 2023 09:55:45 +0000
ROA not before: Mon 02 Jan 2023 09:55:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210068
IP address blocks: 193.57.42.0/24 maxlen: 24
194.15.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e8:93:aa:62:cf:e5:62:2c:bf:fa:39:7a:db:fb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 09:55:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04ded4bc32787b34e648343db59db39c5cbfec19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a1:dc:9b:f6:6b:df:ea:4b:2b:71:cb:d4:c0:
dc:16:a1:6b:18:c9:2b:59:32:bb:5c:60:b0:6b:77:
59:c6:bf:00:34:3d:3f:ca:66:9b:26:65:a5:24:42:
a7:51:4c:3b:b0:35:d0:e1:b8:dc:5f:ab:6c:15:1a:
2a:82:68:7f:85:9c:fb:e1:e8:e7:58:71:77:fd:2e:
e9:e0:c5:2d:fb:2d:40:35:26:88:00:43:1f:17:6f:
fc:a7:50:8b:f1:5a:0f:e8:90:47:cf:a7:aa:e5:41:
6b:1d:66:cc:f1:4b:06:b1:2d:3a:7f:48:a5:ee:5e:
b8:34:3e:1a:78:b3:92:2e:8a:e0:2b:0a:e2:7e:e5:
15:58:e3:5a:e8:db:4e:f9:d5:89:bd:af:ad:ca:f1:
8e:c0:3d:7d:b7:5f:9d:86:b8:50:53:96:b5:3b:01:
79:49:b1:25:66:08:e7:2a:be:c1:b4:54:83:94:b1:
56:92:b1:75:bf:1f:24:90:1d:94:92:7e:6b:34:81:
21:7e:12:2b:3c:46:9d:55:5e:79:44:b3:07:42:86:
9b:78:56:50:3f:0e:c6:de:f9:69:72:1f:2f:b2:ce:
a8:dc:35:6f:c1:d0:de:11:ba:00:6d:f2:cf:3f:e3:
fb:95:4e:4f:c5:4a:b2:2b:1f:2d:29:5f:c8:96:86:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DE:D4:BC:32:78:7B:34:E6:48:34:3D:B5:9D:B3:9C:5C:BF:EC:19
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BN7UvDJ4ezTmSDQ9tZ2znFy_7Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.42.0/24
194.15.55.0/24
Signature Algorithm: sha256WithRSAEncryption
82:25:23:7b:7a:2d:ff:10:49:1a:a6:8a:2a:84:81:77:e2:35:
e6:7c:1f:75:fb:3d:de:0d:2c:be:4a:a0:aa:7d:dc:4c:1a:d3:
22:55:30:0d:cb:0e:0a:1b:d7:c2:15:31:45:af:f3:f7:76:63:
42:da:41:e5:b1:10:28:b0:49:30:49:92:05:01:d2:4e:37:a3:
b1:34:05:82:2d:f7:50:a2:af:53:c6:70:15:4d:b5:01:97:b8:
b7:21:14:5e:ff:26:65:2d:d2:d6:a4:c5:72:25:aa:d3:68:a4:
6f:c5:17:d2:b6:95:8b:02:3c:a0:e5:fb:7f:53:63:ae:98:9e:
44:94:52:c3:d4:96:fb:fc:bb:6f:3c:76:ef:f9:3c:22:2a:f6:
5c:b0:8d:cc:50:d2:d2:4d:a4:22:bc:02:ef:dc:20:8a:7f:f9:
7d:33:9a:a6:35:f7:de:71:75:5c:81:b0:d8:cb:3b:26:1d:48:
3b:4f:af:70:fe:e0:dc:9b:19:59:c9:70:51:35:30:3e:78:b6:
e0:e1:1a:af:c2:12:e8:0e:1e:e7:de:a5:d8:e3:fd:63:74:7f:
c3:ce:69:8f:ed:3c:ee:7e:3b:ea:35:05:1f:2f:86:55:56:f0:
5b:a7:26:ce:cf:ef:8c:8f:f5:ae:7f:7f:4c:7f:bb:83:a0:c2:
5c:03:a3:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVx6JOqYs/lYiy/+jl62/t1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwMTAyMDk1NTQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGRlZDRiYzMyNzg3YjM0ZTY0ODM0M2RiNTlkYjM5YzVjYmZlYzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36Hcm/Zr3+pLK3HL1MDcFqFrGMkr
WTK7XGCwa3dZxr8AND0/ymabJmWlJEKnUUw7sDXQ4bjcX6tsFRoqgmh/hZz74ejn
WHF3/S7p4MUt+y1ANSaIAEMfF2/8p1CL8VoP6JBHz6eq5UFrHWbM8UsGsS06f0il
7l64ND4aeLOSLorgKwrifuUVWONa6NtO+dWJva+tyvGOwD19t1+dhrhQU5a1OwF5
SbElZgjnKr7BtFSDlLFWkrF1vx8kkB2Ukn5rNIEhfhIrPEadVV55RLMHQoabeFZQ
Pw7G3vlpch8vss6o3DVvwdDeEboAbfLPP+P7lU5PxUqyKx8tKV/IloYldQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFATe1LwyeHs05kg0PbWds5xcv+wZMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvQk43VXZESjRlelRtU0RROXRaMnpuRnlfN0JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwTkqAwQA
wg83MA0GCSqGSIb3DQEBCwUAA4IBAQCCJSN7ei3/EEkapooqhIF34jXmfB91+z3e
DSy+SqCqfdxMGtMiVTANyw4KG9fCFTFFr/P3dmNC2kHlsRAosEkwSZIFAdJON6Ox
NAWCLfdQoq9TxnAVTbUBl7i3IRRe/yZlLdLWpMVyJarTaKRvxRfStpWLAjyg5ft/
U2OumJ5ElFLD1Jb7/LtvPHbv+TwiKvZcsI3MUNLSTaQivALv3CCKf/l9M5qmNffe
cXVcgbDYyzsmHUg7T69w/uDcmxlZyXBRNTA+eLbg4RqvwhLoDh7n3qXY4/1jdH/D
zmmP7TzufjvqNQUfL4ZVVvBbpybOz++Mj/Wuf39Mf7uDoMJcA6PU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org