Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/tpBDimjt4t6wVLVt0BWS3ubRflw.roa
File: tpBDimjt4t6wVLVt0BWS3ubRflw.roa (raw, json)
Hash identifier: RO79Bso+beJ73v0zXzOvzPFMhp9BeuV2+M4gAmG6n5I=
Subject key identifier: B6:90:43:8A:68:ED:E2:DE:B0:54:B5:6D:D0:15:92:DE:E6:D1:7E:5C
Certificate issuer: /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial: 018570399C30F76717EC544CF9CBAFA893C1
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/tpBDimjt4t6wVLVt0BWS3ubRflw.roa
Signing time: Mon 02 Jan 2023 02:05:01 +0000
ROA not before: Mon 02 Jan 2023 02:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48038
IP address blocks: 193.73.208.0/24 maxlen: 24
2001:67c:4f0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Jul 2023 10:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:9c:30:f7:67:17:ec:54:4c:f9:cb:af:a8:93:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Validity
Not Before: Jan 2 02:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b690438a68ede2deb054b56dd01592dee6d17e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:15:f4:fe:21:68:dc:78:8a:83:a6:95:c2:72:
f3:31:65:8c:e4:6a:ae:fb:db:ec:e4:b0:a4:ec:05:
83:ad:15:6e:69:87:26:ac:5d:35:72:b8:99:4b:d6:
6c:a1:2e:6b:35:de:20:6d:0c:0a:f5:03:74:22:88:
48:43:a6:32:d6:c7:41:b5:a7:f5:24:0e:c0:20:4c:
61:21:23:f1:b0:32:03:04:c3:7e:9c:2c:57:43:fb:
fd:a9:d4:6c:0e:45:4f:67:a0:46:3e:75:38:fe:74:
b7:7b:aa:5a:7a:9f:4c:51:a7:8a:35:77:e5:1f:0b:
e6:ae:96:ad:f8:fe:9c:65:db:4f:c6:eb:c0:4f:6a:
83:fd:cf:94:32:5c:b7:d0:b2:b5:4a:e3:26:e1:32:
ac:fe:a2:e1:13:9c:34:79:ed:88:d6:e9:cb:25:6b:
5e:9c:e7:1b:36:bc:8b:fa:68:9e:b0:6d:a1:d7:f0:
c3:c4:ca:20:8e:2b:76:d0:15:8e:ac:58:a3:08:cf:
1b:cd:9b:5c:89:1c:8c:69:00:46:5a:ef:b8:80:04:
ca:0f:d6:d1:c2:34:4f:ed:ac:c2:7c:77:d5:55:ed:
14:f8:74:86:80:b4:68:fc:41:49:2d:29:f4:d9:fa:
40:12:e6:51:cc:1f:24:05:12:65:e6:d4:0b:ec:64:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:90:43:8A:68:ED:E2:DE:B0:54:B5:6D:D0:15:92:DE:E6:D1:7E:5C
X509v3 Authority Key Identifier:
keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/tpBDimjt4t6wVLVt0BWS3ubRflw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.208.0/24
IPv6:
2001:67c:4f0::/48
Signature Algorithm: sha256WithRSAEncryption
96:f0:51:0e:92:95:c6:ef:c5:9b:82:fd:d1:73:5e:c1:88:89:
71:21:36:d3:22:ad:29:4c:89:4f:89:21:3a:dd:2e:73:85:16:
70:a2:eb:5e:4f:d8:61:7f:26:df:fe:d1:77:5e:d3:e5:af:de:
27:fa:b9:17:fe:6e:ce:19:fd:37:e2:25:70:9b:55:a9:f8:92:
e7:22:e7:b6:7c:9c:01:fc:82:04:da:47:b1:31:4a:de:17:73:
d7:fe:cc:0d:24:d2:ed:3a:94:ff:03:59:00:4f:e4:32:1b:34:
70:e0:1a:69:13:cc:98:b8:7e:44:4e:b7:70:b2:7d:b6:43:06:
fa:14:2f:f9:e3:12:f9:61:58:97:a2:4e:b8:15:6f:43:0f:24:
73:06:63:9f:47:70:ba:42:ae:4c:a7:d6:e5:aa:31:e0:22:d9:
1a:e9:25:ef:8c:f5:92:de:f7:55:55:49:0a:4d:87:58:6e:7e:
02:6a:9e:11:ed:d2:41:d2:ed:ce:5b:9b:14:2d:d5:1b:f4:0b:
88:c7:58:af:78:d1:94:c4:ac:6d:d4:5b:c2:6a:83:8b:3f:3e:
46:64:da:c1:de:7f:d1:b3:9e:40:f1:8d:c2:c5:25:4c:1a:3d:
4d:21:ba:61:a8:b8:f8:60:95:7a:b6:8c:6b:e6:76:a9:95:d9:
c3:65:8c:7a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVwOZww92cX7FRM+cuvqJPBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NzcyNmQzOGZjZjJhN2ZiYmI3YmZjMjhkNjNmZTM1Nzll
ZDIxMWQwHhcNMjMwMTAyMDIwNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjkwNDM4YTY4ZWRlMmRlYjA1NGI1NmRkMDE1OTJkZWU2ZDE3ZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxX0/iFo3HiKg6aVwnLzMWWM5Gqu
+9vs5LCk7AWDrRVuaYcmrF01criZS9ZsoS5rNd4gbQwK9QN0IohIQ6Yy1sdBtaf1
JA7AIExhISPxsDIDBMN+nCxXQ/v9qdRsDkVPZ6BGPnU4/nS3e6paep9MUaeKNXfl
Hwvmrpat+P6cZdtPxuvAT2qD/c+UMly30LK1SuMm4TKs/qLhE5w0ee2I1unLJWte
nOcbNryL+miesG2h1/DDxMogjit20BWOrFijCM8bzZtciRyMaQBGWu+4gATKD9bR
wjRP7azCfHfVVe0U+HSGgLRo/EFJLSn02fpAEuZRzB8kBRJl5tQL7GTfJQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLaQQ4po7eLesFS1bdAVkt7m0X5cMB8GA1UdIwQY
MBaAFGh3JtOPzyp/u7e/wo1j/jV57SEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNzFlMjctYzY4Ny00ZmQ3LTgxODAt
NGIyZGExOTdhN2U2LzEvdHBCRGltanQ0dDZ3VkxWdDBCV1MzdWJSZmx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9lNzFlMjctYzY4Ny00ZmQ3LTgxODAtNGIyZGExOTdhN2U2
LzEvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwUnQMA8E
AgACMAkDBwAgAQZ8BPAwDQYJKoZIhvcNAQELBQADggEBAJbwUQ6SlcbvxZuC/dFz
XsGIiXEhNtMirSlMiU+JITrdLnOFFnCi615P2GF/Jt/+0Xde0+Wv3if6uRf+bs4Z
/TfiJXCbVan4kuci57Z8nAH8ggTaR7ExSt4Xc9f+zA0k0u06lP8DWQBP5DIbNHDg
GmkTzJi4fkROt3CyfbZDBvoUL/njEvlhWJeiTrgVb0MPJHMGY59HcLpCrkyn1uWq
MeAi2RrpJe+M9ZLe91VVSQpNh1hufgJqnhHt0kHS7c5bmxQt1Rv0C4jHWK940ZTE
rG3UW8Jqg4s/PkZk2sHef9GznkDxjcLFJUwaPU0humGouPhglXq2jGvmdqmV2cNl
jHo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:43 2024 by rpki-client on console-fra.rpki-client.org