Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/acrFcdGthCOCXOpqeyl4Wu76oJU.roa
File: acrFcdGthCOCXOpqeyl4Wu76oJU.roa (raw, json)
Hash identifier: buq/xYqruG2Yyx+aXmA6JGCfSJAWsH0zUk0m5JB5wHk=
Subject key identifier: 69:CA:C5:71:D1:AD:84:23:82:5C:EA:6A:7B:29:78:5A:EE:FA:A0:95
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A92B32BE3BB11A01E43F32B4D4840F54B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/acrFcdGthCOCXOpqeyl4Wu76oJU.roa
Signing time: Thu 14 Sep 2023 07:58:50 +0000
ROA not before: Thu 14 Sep 2023 07:58:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205663
IP address blocks: 193.57.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:b3:2b:e3:bb:11:a0:1e:43:f3:2b:4d:48:40:f5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 14 07:58:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69cac571d1ad8423825cea6a7b29785aeefaa095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:97:62:a7:0d:34:e1:af:a0:15:c2:2f:8a:
e9:54:87:7e:bf:d2:9b:1d:de:21:68:6b:bc:39:4a:
65:c0:86:50:5f:3d:9c:b4:2e:02:ad:7d:6c:22:a9:
24:91:05:f4:4e:b7:96:91:1a:83:db:ce:c6:f6:d6:
2b:04:5e:92:63:d4:2f:4f:05:bc:37:e4:cc:e3:5c:
6f:1e:2f:07:02:a5:fd:71:fb:95:f7:77:1a:c3:b3:
82:4f:2c:32:c8:ab:d6:69:94:9f:27:34:59:bb:e0:
2d:c8:5d:68:bc:54:d4:a8:f8:f9:17:7f:91:bb:cf:
d1:c0:ef:4b:5a:cc:2b:01:b7:a1:22:58:e5:ed:04:
c7:21:73:75:86:37:dd:51:b8:3e:c5:25:3d:90:9a:
12:04:82:86:a6:c2:af:4f:a7:50:23:c8:fa:13:36:
04:fd:8a:fd:7f:42:51:25:a5:dd:18:a8:08:81:be:
64:69:f3:fc:9a:cb:d4:9c:72:ff:2a:97:21:19:84:
cb:29:04:07:9c:1f:9a:a0:35:d6:4e:33:43:7b:8a:
32:a7:f5:ab:34:1b:f5:f5:32:f0:72:c8:ea:9e:cc:
50:c2:bb:e2:54:97:27:a3:70:02:bd:4b:75:47:ab:
95:df:ec:79:5d:fe:a3:f6:74:be:b3:8c:82:56:25:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CA:C5:71:D1:AD:84:23:82:5C:EA:6A:7B:29:78:5A:EE:FA:A0:95
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/acrFcdGthCOCXOpqeyl4Wu76oJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.41.0/24
Signature Algorithm: sha256WithRSAEncryption
31:91:54:98:0c:b6:52:74:de:b6:29:a7:79:12:04:f6:05:c7:
6f:e2:20:6a:f5:41:b6:2a:3a:dc:cd:0f:fa:ac:5d:69:f5:2b:
0d:c6:ac:57:e5:61:cf:8e:ab:1c:5a:a6:2e:78:f9:db:17:62:
31:76:2b:c1:bc:31:6b:d8:f0:cc:c0:c7:fc:cc:f8:d7:86:c3:
15:74:05:e2:97:be:e1:50:62:a6:28:7f:7a:1f:a6:7b:27:75:
df:2d:16:f0:31:18:1b:31:cb:ce:d7:8e:13:8f:c2:71:8c:52:
01:64:37:c5:59:9c:0f:fd:a1:6c:20:9d:4e:ac:8f:f3:fd:a3:
9b:68:09:b0:85:2e:86:80:fb:02:8d:f9:4f:3c:0e:bd:61:97:
4d:1a:f7:6f:f2:cb:22:ea:a5:d6:b4:87:1f:fd:73:db:b4:a3:
8f:48:ae:6d:49:03:89:12:84:4a:c5:1d:18:e8:b4:82:b0:c5:
47:e8:08:a1:ab:cf:a1:c7:63:1f:3c:ee:47:57:a7:9d:22:f2:
d3:08:e3:21:63:27:b2:ad:f5:bb:df:d5:7c:2d:7d:00:14:2f:
7b:ff:20:75:a9:6d:f2:15:e3:5d:e8:bb:7e:4a:9f:9f:0a:25:
a9:e6:ba:5b:84:e7:9c:77:83:13:d2:a6:43:fa:87:3f:70:56:
29:48:bc:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqSsyvjuxGgHkPzK01IQPVLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwOTE0MDc1ODUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWNhYzU3MWQxYWQ4NDIzODI1Y2VhNmE3YjI5Nzg1YWVlZmFhMDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsiXYqcNNOGvoBXCL4rpVId+v9Kb
Hd4haGu8OUplwIZQXz2ctC4CrX1sIqkkkQX0TreWkRqD287G9tYrBF6SY9QvTwW8
N+TM41xvHi8HAqX9cfuV93caw7OCTywyyKvWaZSfJzRZu+AtyF1ovFTUqPj5F3+R
u8/RwO9LWswrAbehIljl7QTHIXN1hjfdUbg+xSU9kJoSBIKGpsKvT6dQI8j6EzYE
/Yr9f0JRJaXdGKgIgb5kafP8msvUnHL/KpchGYTLKQQHnB+aoDXWTjNDe4oyp/Wr
NBv19TLwcsjqnsxQwrviVJcno3ACvUt1R6uV3+x5Xf6j9nS+s4yCViVxqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGnKxXHRrYQjglzqanspeFru+qCVMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvYWNyRmNkR3RoQ09DWE9wcWV5bDRXdTc2b0pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTkpMA0G
CSqGSIb3DQEBCwUAA4IBAQAxkVSYDLZSdN62Kad5EgT2Bcdv4iBq9UG2KjrczQ/6
rF1p9SsNxqxX5WHPjqscWqYuePnbF2IxdivBvDFr2PDMwMf8zPjXhsMVdAXil77h
UGKmKH96H6Z7J3XfLRbwMRgbMcvO144Tj8JxjFIBZDfFWZwP/aFsIJ1OrI/z/aOb
aAmwhS6GgPsCjflPPA69YZdNGvdv8ssi6qXWtIcf/XPbtKOPSK5tSQOJEoRKxR0Y
6LSCsMVH6Aihq8+hx2MfPO5HV6edIvLTCOMhYyeyrfW739V8LX0AFC97/yB1qW3y
FeNd6Lt+Sp+fCiWp5rpbhOecd4MT0qZD+oc/cFYpSLzs
-----END CERTIFICATE-----
Generated at Tue Sep 26 08:35:15 2023 by rpki-client on console-fra.rpki-client.org