Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/uXsUFvi3YIU7HOtJebnPgCUfmpQ.roa
File: uXsUFvi3YIU7HOtJebnPgCUfmpQ.roa (raw, json)
Hash identifier: Wl+ieakhsM2+W6DXEzx8B9cf2HJ83WUvSTK6/Y56lQ4=
Subject key identifier: B9:7B:14:16:F8:B7:60:85:3B:1C:EB:49:79:B9:CF:80:25:1F:9A:94
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 01873598BBF24BB30961FF1012E1E229E695
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/uXsUFvi3YIU7HOtJebnPgCUfmpQ.roa
Signing time: Fri 31 Mar 2023 02:56:54 +0000
ROA not before: Fri 31 Mar 2023 02:56:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59796
IP address blocks: 188.0.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:35:98:bb:f2:4b:b3:09:61:ff:10:12:e1:e2:29:e6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Mar 31 02:56:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b97b1416f8b760853b1ceb4979b9cf80251f9a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:07:f0:0a:92:33:3c:e1:70:c8:69:57:b4:
ee:2c:ff:99:4d:78:bb:9d:72:ee:58:92:23:c7:ea:
79:52:ad:a3:68:4a:8b:63:66:a4:6d:79:b3:91:5b:
1f:3d:de:55:be:18:d5:71:44:71:87:fc:5b:8b:d9:
53:a1:ee:18:fa:9b:67:4c:6d:c8:e9:c5:22:31:45:
71:5a:65:08:fe:11:b5:0c:95:80:b5:5c:d4:a6:4f:
3b:fc:ce:13:74:2f:91:2d:e3:4f:68:b5:50:f9:48:
02:30:d6:fd:01:18:44:17:b4:46:31:92:14:29:8d:
0e:c7:63:93:8e:ca:50:21:6d:92:2c:68:36:24:3a:
92:18:ab:1c:14:06:29:5b:ab:6c:4d:e5:58:d0:e9:
b9:4e:ab:ae:d6:5d:93:8e:95:31:19:97:f3:e4:31:
f1:47:42:11:ee:f9:09:d6:ad:ed:0b:33:52:6f:df:
dd:b5:4b:74:1b:3f:79:db:e9:d8:4e:fc:df:f2:9f:
f0:5a:98:0a:ea:ef:16:15:ac:fc:65:10:0f:60:96:
3c:d5:42:5b:28:95:34:13:83:8f:a3:17:62:2a:eb:
a3:eb:60:65:e1:47:32:12:26:fa:e0:55:c8:95:98:
4b:64:7c:4c:10:50:11:4e:31:f1:fc:e7:13:37:b2:
e9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7B:14:16:F8:B7:60:85:3B:1C:EB:49:79:B9:CF:80:25:1F:9A:94
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/uXsUFvi3YIU7HOtJebnPgCUfmpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.0.150.0/24
Signature Algorithm: sha256WithRSAEncryption
19:90:b7:db:4d:99:44:83:5e:1f:7c:05:36:f1:9d:95:82:a5:
76:b3:40:5c:93:68:49:88:24:bd:a5:ab:e0:6b:95:09:78:e3:
b3:0b:19:3d:46:5b:87:19:d3:01:94:43:d0:33:20:27:44:10:
db:80:bf:f2:9d:51:09:82:1a:5e:80:d8:68:ba:66:61:fb:17:
c5:72:d4:c9:68:a0:21:d1:23:17:c7:21:42:da:66:e6:f2:1a:
4a:83:89:f6:ce:23:ee:37:30:a6:bd:ad:ce:4d:68:c7:22:d6:
f3:21:d5:d3:b9:08:6d:b0:a8:0d:3d:f7:ce:a4:0a:14:bb:36:
68:09:e7:38:74:9e:55:ff:a4:2b:cf:81:de:e5:c2:68:6d:69:
83:8d:48:02:d1:89:5b:4f:73:2b:40:5a:53:42:45:b4:93:1c:
02:46:5c:66:82:6a:31:f3:91:b0:7f:a5:3c:69:d8:e6:79:ae:
9c:b4:f4:9f:1f:c9:1d:49:6e:87:bb:df:6e:a8:40:c6:5f:4c:
f5:66:99:f1:a7:71:7b:2d:c8:77:32:1f:5c:76:e2:1e:fe:b0:
0c:3b:7a:5c:17:03:19:c1:4b:46:eb:18:87:70:c7:42:d0:94:
c6:fb:9f:71:18:1b:90:4c:fa:fa:0f:f6:dc:7a:13:b6:68:b8:
b8:ba:be:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYc1mLvyS7MJYf8QEuHiKeaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjEwZjIyNTkwOTNhYWY0NTI4NTkyMmE1ODhlOWE2NjFh
YmE5ZmEwHhcNMjMwMzMxMDI1NjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTdiMTQxNmY4Yjc2MDg1M2IxY2ViNDk3OWI5Y2Y4MDI1MWY5YTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAregH8AqSMzzhcMhpV7TuLP+ZTXi7
nXLuWJIjx+p5Uq2jaEqLY2akbXmzkVsfPd5VvhjVcURxh/xbi9lToe4Y+ptnTG3I
6cUiMUVxWmUI/hG1DJWAtVzUpk87/M4TdC+RLeNPaLVQ+UgCMNb9ARhEF7RGMZIU
KY0Ox2OTjspQIW2SLGg2JDqSGKscFAYpW6tsTeVY0Om5Tquu1l2TjpUxGZfz5DHx
R0IR7vkJ1q3tCzNSb9/dtUt0Gz952+nYTvzf8p/wWpgK6u8WFaz8ZRAPYJY81UJb
KJU0E4OPoxdiKuuj62Bl4UcyEib64FXIlZhLZHxMEFARTjHx/OcTN7LpewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLl7FBb4t2CFOxzrSXm5z4AlH5qUMB8GA1UdIwQY
MBaAFJ0hDyJZCTqvRShZIqWI6aZhq6n6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQt
NDM4NDNjMmU5NDNiLzEvdVhzVUZ2aTNZSVU3SE90SmViblBnQ1VmbXBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS85MzY4NmQtMTFmNS00ZTNlLWI1YzQtNDM4NDNjMmU5NDNi
LzEvblNFUElsa0pPcTlGS0ZraXBZanBwbUdycWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvACWMA0G
CSqGSIb3DQEBCwUAA4IBAQAZkLfbTZlEg14ffAU28Z2VgqV2s0Bck2hJiCS9pavg
a5UJeOOzCxk9RluHGdMBlEPQMyAnRBDbgL/ynVEJghpegNhoumZh+xfFctTJaKAh
0SMXxyFC2mbm8hpKg4n2ziPuNzCmva3OTWjHItbzIdXTuQhtsKgNPffOpAoUuzZo
Cec4dJ5V/6Qrz4He5cJobWmDjUgC0YlbT3MrQFpTQkW0kxwCRlxmgmox85Gwf6U8
adjmea6ctPSfH8kdSW6Hu99uqEDGX0z1Zpnxp3F7Lch3Mh9cduIe/rAMO3pcFwMZ
wUtG6xiHcMdC0JTG+59xGBuQTPr6D/bcehO2aLi4ur5q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:17 2024 by rpki-client on console-fra.rpki-client.org