Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F_mmCYtKC5YDIQSR2pvoSyFCVpo.roa
File: F_mmCYtKC5YDIQSR2pvoSyFCVpo.roa (raw, json)
Hash identifier: 8RYaYl/VxZV4qI0Lv/XaiM0ymqKtFTRTF1zRFXng0V0=
Subject key identifier: 17:F9:A6:09:8B:4A:0B:96:03:21:04:91:DA:9B:E8:4B:21:42:56:9A
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01856ED4DA574BF6EDC8EE1092D33CCC99C9
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F_mmCYtKC5YDIQSR2pvoSyFCVpo.roa
Signing time: Sun 01 Jan 2023 19:35:21 +0000
ROA not before: Sun 01 Jan 2023 19:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.93.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:da:57:4b:f6:ed:c8:ee:10:92:d3:3c:cc:99:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 1 19:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17f9a6098b4a0b9603210491da9be84b2142569a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:41:27:f1:00:8f:ac:fb:6a:92:62:01:ed:50:
20:f6:97:b4:c2:cd:c3:ce:50:27:78:99:81:16:4a:
aa:71:ee:ba:37:32:86:d6:b9:89:5b:42:71:fb:34:
2d:7b:5b:02:29:40:5a:01:67:8f:27:a7:23:61:1f:
06:41:d7:1f:7a:61:e2:0c:a4:42:04:52:43:66:f3:
06:19:77:e2:7f:28:3e:cf:e0:c3:26:06:7b:74:a8:
fa:dd:fe:00:d0:16:0a:ef:f7:bf:60:8d:99:47:8e:
d9:9b:ed:63:b8:58:8f:cf:c2:f6:b3:52:fc:0a:0d:
72:f8:3f:0e:71:ff:74:3d:01:88:91:fe:1a:0e:fb:
89:f8:20:9e:41:8b:a4:f3:83:e6:53:64:fb:78:4e:
41:8e:a1:72:82:25:56:15:03:9f:0f:4a:69:5a:88:
dc:2b:8f:1c:1d:16:25:d5:8a:0a:3b:f9:da:31:01:
c2:78:50:37:d1:29:55:c7:88:f7:8d:97:aa:e2:ba:
b9:93:66:8d:5a:23:9b:34:e3:32:5c:03:6f:ab:7b:
18:e5:4d:98:a9:3c:38:56:2f:4e:2b:b9:57:7a:4e:
5d:d1:69:90:d8:4b:1c:f0:17:bf:99:8a:e9:60:24:
8a:f9:e0:e7:37:15:3e:0f:65:52:29:79:4a:83:e8:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F9:A6:09:8B:4A:0B:96:03:21:04:91:DA:9B:E8:4B:21:42:56:9A
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/F_mmCYtKC5YDIQSR2pvoSyFCVpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.53.0/24
Signature Algorithm: sha256WithRSAEncryption
66:08:91:e6:6e:ef:c9:ec:d0:a6:f1:4e:d1:3a:0b:d6:82:9d:
16:b8:37:84:a2:ee:7e:bc:60:95:5d:7a:c6:ef:41:78:7f:1b:
89:b7:dc:ee:7c:bb:08:a6:3a:eb:7b:f8:5f:11:89:07:b4:85:
67:85:ff:36:7f:ca:36:a9:59:5c:e6:8c:cd:3d:11:cd:66:bc:
d2:41:2f:04:ec:9b:97:a5:5a:f1:15:51:41:5a:48:8b:7e:04:
31:53:5e:3c:d9:66:96:72:8a:e1:fc:38:99:85:f9:a4:de:48:
3b:2a:d6:2a:29:d9:09:aa:b3:97:37:94:be:2a:41:9b:61:f6:
b1:95:c4:46:3a:0d:57:69:87:cd:f4:57:cd:0b:d0:a7:4b:05:
28:88:e2:5d:4d:28:ef:f2:f4:39:fa:42:d3:e1:52:07:76:3e:
17:78:ed:d5:96:0a:6f:86:41:b7:39:d0:d8:99:07:7b:c7:41:
55:1c:2c:d2:06:97:4e:20:c7:6d:d2:d0:8d:f9:41:48:49:dc:
5b:99:b7:70:00:15:15:7c:71:cd:84:5f:f6:af:0f:77:75:c9:
de:ef:54:48:d1:fd:c0:9e:bc:a8:76:97:fc:21:54:e6:e3:cf:
4b:52:e5:e8:a8:1e:a5:9a:82:f1:07:7d:4e:ae:83:1e:7c:e0:
35:b8:fe:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1NpXS/btyO4QktM8zJnJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMwMTAxMTkzNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2Y5YTYwOThiNGEwYjk2MDMyMTA0OTFkYTliZTg0YjIxNDI1NjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0En8QCPrPtqkmIB7VAg9pe0ws3D
zlAneJmBFkqqce66NzKG1rmJW0Jx+zQte1sCKUBaAWePJ6cjYR8GQdcfemHiDKRC
BFJDZvMGGXfifyg+z+DDJgZ7dKj63f4A0BYK7/e/YI2ZR47Zm+1juFiPz8L2s1L8
Cg1y+D8Ocf90PQGIkf4aDvuJ+CCeQYuk84PmU2T7eE5BjqFygiVWFQOfD0ppWojc
K48cHRYl1YoKO/naMQHCeFA30SlVx4j3jZeq4rq5k2aNWiObNOMyXANvq3sY5U2Y
qTw4Vi9OK7lXek5d0WmQ2Esc8Be/mYrpYCSK+eDnNxU+D2VSKXlKg+jEkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBf5pgmLSguWAyEEkdqb6EshQlaaMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvRl9tbUNZdEtDNVlESVFTUjJwdm9TeUZDVnBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwV01MA0G
CSqGSIb3DQEBCwUAA4IBAQBmCJHmbu/J7NCm8U7ROgvWgp0WuDeEou5+vGCVXXrG
70F4fxuJt9zufLsIpjrre/hfEYkHtIVnhf82f8o2qVlc5ozNPRHNZrzSQS8E7JuX
pVrxFVFBWkiLfgQxU1482WaWcorh/DiZhfmk3kg7KtYqKdkJqrOXN5S+KkGbYfax
lcRGOg1XaYfN9FfNC9CnSwUoiOJdTSjv8vQ5+kLT4VIHdj4XeO3VlgpvhkG3OdDY
mQd7x0FVHCzSBpdOIMdt0tCN+UFISdxbmbdwABUVfHHNhF/2rw93dcne71RI0f3A
nryodpf8IVTm489LUuXoqB6lmoLxB31OroMefOA1uP48
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:46 2023 by rpki-client on console-ams.rpki-client.org