Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/ru1hFqrRr4T-W7KA7yAzoZulTd8.roa
File: ru1hFqrRr4T-W7KA7yAzoZulTd8.roa (raw, json)
Hash identifier: e9Ix7DSNEz69+zcm3eMDdGpDZ4m4+kw4ZF4mJu5s7jY=
Subject key identifier: AE:ED:61:16:AA:D1:AF:84:FE:5B:B2:80:EF:20:33:A1:9B:A5:4D:DF
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 0189F3D01E9AEACA203AD08EA755800884C2
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/ru1hFqrRr4T-W7KA7yAzoZulTd8.roa
Signing time: Mon 14 Aug 2023 11:30:50 +0000
ROA not before: Mon 14 Aug 2023 11:30:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.218.204.0/24 maxlen: 24
193.219.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 12:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:d0:1e:9a:ea:ca:20:3a:d0:8e:a7:55:80:08:84:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Aug 14 11:30:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aeed6116aad1af84fe5bb280ef2033a19ba54ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:02:e6:b9:37:6b:9c:c3:73:47:7b:95:cd:3c:
84:5b:36:22:44:b8:af:25:3d:a2:a8:86:75:49:a8:
97:c2:7a:67:7a:10:3e:5d:f8:7c:0d:c9:26:77:ee:
3c:72:51:9e:b4:6e:ca:19:96:7d:a8:9b:90:30:9b:
fc:fe:80:1a:ad:c7:a3:8f:3c:c8:36:72:36:60:59:
6c:83:96:43:45:0c:ea:24:c1:37:e0:7b:b4:58:f6:
cf:8e:0a:a0:bf:56:1d:85:54:1f:39:02:44:4d:3d:
18:ce:18:df:c4:c8:3c:9b:03:5c:c4:57:90:5a:51:
80:12:7a:fc:3f:7f:13:dc:59:61:54:0c:9f:91:6f:
e1:f2:03:42:39:31:c8:b5:73:2f:e2:c5:7a:7d:8b:
f4:f9:92:46:02:17:9d:fd:2d:13:c5:51:36:23:c7:
e4:18:73:4e:90:42:b7:5c:78:9e:7c:32:b0:a6:27:
2e:f3:8b:e7:79:eb:8b:a2:dc:b1:af:25:d5:3b:0b:
d8:4e:53:61:72:de:06:de:b0:4c:01:d2:20:3c:0c:
a4:51:79:21:d5:30:6d:1c:49:be:93:19:dc:77:4c:
54:57:3f:59:60:60:0d:2e:01:2f:4d:6d:fc:38:ad:
e8:66:e2:c5:37:44:5e:3e:5c:fc:84:1a:71:22:04:
b6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:ED:61:16:AA:D1:AF:84:FE:5B:B2:80:EF:20:33:A1:9B:A5:4D:DF
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/ru1hFqrRr4T-W7KA7yAzoZulTd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.204.0/24
193.219.0.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ea:59:68:2e:37:17:4d:b1:77:5c:85:4e:7e:f7:59:b9:09:
25:11:e2:e5:70:a4:95:22:09:c2:75:da:03:27:d5:7c:ae:2f:
3a:bd:f3:20:97:fd:4b:70:bd:3a:68:13:7b:40:3b:67:96:07:
b2:36:a9:13:0f:56:e2:53:9d:a9:66:81:b6:5a:d8:d2:1f:2b:
76:9c:bb:05:19:51:b0:4c:b6:51:79:88:f6:82:69:bb:8b:2e:
cd:14:e7:a3:3d:a3:b7:5c:22:5a:b0:48:aa:4b:27:39:14:fb:
1d:f2:5a:d3:35:6c:0b:cd:76:87:65:4a:b6:25:cb:57:6c:09:
6f:18:ae:bd:53:b4:58:d7:1a:2b:11:cb:6b:d6:4d:a5:76:61:
6a:44:cc:8b:c4:96:8c:a2:4d:2b:cb:dc:49:8a:dd:98:0e:46:
bf:be:71:d4:bd:a2:58:47:3e:b9:5f:17:4c:ad:f7:c8:1f:49:
37:b4:2c:09:57:08:20:c2:dd:bd:5a:a2:06:65:dc:2d:fb:18:
af:ee:86:b9:e9:0e:fd:5e:65:4d:44:5b:a8:86:5f:46:de:5a:
76:b4:f8:64:0d:67:92:94:ee:34:83:37:53:77:ea:08:69:87:
df:2c:c5:0e:69:dc:f9:2e:9c:22:c5:3b:3c:b6:66:bc:60:9b:
92:fd:9c:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYnz0B6a6sogOtCOp1WACITCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzY3YzZiZTM2N2FiOWU5NDFkMTQyN2QwNTA0NDk0NDdi
ODg2NWMwHhcNMjMwODE0MTEzMDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWVkNjExNmFhZDFhZjg0ZmU1YmIyODBlZjIwMzNhMTliYTU0ZGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQLmuTdrnMNzR3uVzTyEWzYiRLiv
JT2iqIZ1SaiXwnpnehA+Xfh8Dckmd+48clGetG7KGZZ9qJuQMJv8/oAarcejjzzI
NnI2YFlsg5ZDRQzqJME34Hu0WPbPjgqgv1YdhVQfOQJETT0YzhjfxMg8mwNcxFeQ
WlGAEnr8P38T3FlhVAyfkW/h8gNCOTHItXMv4sV6fYv0+ZJGAhed/S0TxVE2I8fk
GHNOkEK3XHiefDKwpicu84vneeuLotyxryXVOwvYTlNhct4G3rBMAdIgPAykUXkh
1TBtHEm+kxncd0xUVz9ZYGANLgEvTW38OK3oZuLFN0RePlz8hBpxIgS2yQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK7tYRaq0a+E/luygO8gM6GbpU3fMB8GA1UdIwQY
MBaAFF3GfGvjZ6uelB0UJ9BQRJRHuIZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2It
ODk3OTlkZWFkYzQ3LzEvcnUxaEZxclJyNFQtVzdLQTd5QXpvWnVsVGQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2ItODk3OTlkZWFkYzQ3
LzEvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwdrMAwQA
wdsAMA0GCSqGSIb3DQEBCwUAA4IBAQAJ6lloLjcXTbF3XIVOfvdZuQklEeLlcKSV
IgnCddoDJ9V8ri86vfMgl/1LcL06aBN7QDtnlgeyNqkTD1biU52pZoG2WtjSHyt2
nLsFGVGwTLZReYj2gmm7iy7NFOejPaO3XCJasEiqSyc5FPsd8lrTNWwLzXaHZUq2
JctXbAlvGK69U7RY1xorEctr1k2ldmFqRMyLxJaMok0ry9xJit2YDka/vnHUvaJY
Rz65XxdMrffIH0k3tCwJVwggwt29WqIGZdwt+xiv7oa56Q79XmVNRFuohl9G3lp2
tPhkDWeSlO40gzdTd+oIaYffLMUOadz5LpwixTs8tma8YJuS/ZzU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:32 2024 by rpki-client on console-fra.rpki-client.org