Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/WrJ11RlPEOCHZ0pvTKCxjMWssNQ.roa
File: WrJ11RlPEOCHZ0pvTKCxjMWssNQ.roa (raw, json)
Hash identifier: l/olpGM88BwMOM5RTW8tcvkE7yc5fqf12hwpUSSG35c=
Subject key identifier: 5A:B2:75:D5:19:4F:10:E0:87:67:4A:6F:4C:A0:B1:8C:C5:AC:B0:D4
Certificate issuer: /CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Certificate serial: 01856D0A8A24A90BFC416A705E1446C6B299
Authority key identifier: 2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/WrJ11RlPEOCHZ0pvTKCxjMWssNQ.roa
Signing time: Sun 01 Jan 2023 11:14:45 +0000
ROA not before: Sun 01 Jan 2023 11:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211304
IP address blocks: 193.84.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:8a:24:a9:0b:fc:41:6a:70:5e:14:46:c6:b2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6bed70db5e673c81f12e7365a36c4f3da27b71
Validity
Not Before: Jan 1 11:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ab275d5194f10e087674a6f4ca0b18cc5acb0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:15:14:b8:34:02:98:21:12:b4:7f:a9:e6:
41:e9:4e:2f:0c:76:d5:27:df:6e:a2:25:75:40:52:
d2:00:37:6b:39:01:18:47:a5:c7:4f:98:f9:ba:df:
37:f0:d4:30:d1:09:e4:c4:12:b9:a2:3c:eb:94:aa:
17:04:30:59:c4:37:0c:d2:6a:e3:63:ee:ca:14:e0:
56:1e:d5:ca:a5:85:bb:b9:ec:0e:b8:7d:ca:79:ed:
92:1e:17:97:97:d4:f9:71:03:d4:da:fa:93:90:d3:
b5:d2:73:ac:1a:d0:c7:08:c7:67:f3:ce:0e:cc:66:
74:b0:86:45:3e:58:42:d1:a9:59:37:4c:c4:f8:a5:
91:81:6d:4c:78:60:45:26:e5:7d:7e:e8:a8:fc:c1:
e3:33:43:e4:78:aa:61:3a:77:2d:47:24:03:11:3c:
00:16:d3:de:c5:f7:07:45:91:1f:74:b0:93:59:c7:
00:61:8b:80:07:97:94:7d:70:6f:95:00:d8:28:5f:
82:0f:38:a3:ec:1a:06:5c:4f:79:6b:cc:6e:e1:f2:
90:31:24:d3:31:2e:e9:41:a7:e4:13:05:e2:81:1f:
85:01:59:5d:01:85:8e:53:40:33:86:2b:7d:68:c8:
b8:c2:b4:31:73:f1:06:dd:cc:a8:7e:99:63:da:91:
5e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B2:75:D5:19:4F:10:E0:87:67:4A:6F:4C:A0:B1:8C:C5:AC:B0:D4
X509v3 Authority Key Identifier:
keyid:2E:6B:ED:70:DB:5E:67:3C:81:F1:2E:73:65:A3:6C:4F:3D:A2:7B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmvtcNteZzyB8S5zZaNsTz2ie3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/WrJ11RlPEOCHZ0pvTKCxjMWssNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/415748-323e-4fff-a527-62315644b3ce/1/LmvtcNteZzyB8S5zZaNsTz2ie3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.110.0/24
Signature Algorithm: sha256WithRSAEncryption
29:8d:6b:86:21:b7:77:f4:8c:a5:57:16:96:92:ff:24:99:0b:
61:f4:75:f5:ee:ea:5c:0a:e1:82:06:1a:38:9d:9d:84:10:1e:
a5:64:a1:3c:e9:99:97:aa:64:5d:c4:38:59:e9:c2:6e:88:ae:
12:ed:2d:0d:94:36:64:1a:f4:d3:3a:57:67:ed:de:ea:b3:7c:
76:56:fe:a3:91:de:1e:a8:07:a1:aa:28:8f:b5:2c:b2:33:ee:
36:dd:4e:3a:84:8d:19:4c:fc:20:1a:ed:d5:e1:ce:b1:1a:72:
1f:95:6b:8f:0f:b1:a7:3a:00:4a:cc:22:97:88:e6:a2:30:b3:
85:dc:21:47:56:26:0e:f1:e6:37:17:5c:bb:6a:3c:60:22:ce:
79:5e:54:4e:0d:8d:eb:cf:4b:93:73:c2:40:e6:41:9b:01:3f:
ae:09:21:54:c2:45:cd:01:93:c0:ff:60:4f:fe:8f:90:f6:79:
b2:62:74:42:2e:b0:cf:b4:1e:0f:5d:56:9d:2c:18:69:55:60:
75:97:b8:d1:a7:a0:44:27:3c:7e:ab:81:bb:b6:1b:88:2c:0b:
22:51:15:d0:01:3b:24:87:95:5b:ed:7a:7a:55:9e:f6:6f:81:
ee:ba:0a:cd:00:85:eb:97:7c:48:74:72:d0:03:01:f8:50:02:
ac:ee:43:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtCookqQv8QWpwXhRGxrKZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmJlZDcwZGI1ZTY3M2M4MWYxMmU3MzY1YTM2YzRmM2Rh
MjdiNzEwHhcNMjMwMTAxMTExNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWIyNzVkNTE5NGYxMGUwODc2NzRhNmY0Y2EwYjE4Y2M1YWNiMGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkIVFLg0ApghErR/qeZB6U4vDHbV
J99uoiV1QFLSADdrOQEYR6XHT5j5ut838NQw0QnkxBK5ojzrlKoXBDBZxDcM0mrj
Y+7KFOBWHtXKpYW7uewOuH3Kee2SHheXl9T5cQPU2vqTkNO10nOsGtDHCMdn884O
zGZ0sIZFPlhC0alZN0zE+KWRgW1MeGBFJuV9fuio/MHjM0PkeKphOnctRyQDETwA
FtPexfcHRZEfdLCTWccAYYuAB5eUfXBvlQDYKF+CDzij7BoGXE95a8xu4fKQMSTT
MS7pQafkEwXigR+FAVldAYWOU0Azhit9aMi4wrQxc/EG3cyofplj2pFeBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFqyddUZTxDgh2dKb0ygsYzFrLDUMB8GA1UdIwQY
MBaAFC5r7XDbXmc8gfEuc2WjbE89ontxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG12dGNOdGVaenlCOFM1elphTnNUejJpZTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MTU3NDgtMzIzZS00ZmZmLWE1Mjct
NjIzMTU2NDRiM2NlLzEvV3JKMTFSbFBFT0NIWjBwdlRLQ3hqTVdzc05RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MTU3NDgtMzIzZS00ZmZmLWE1MjctNjIzMTU2NDRiM2Nl
LzEvTG12dGNOdGVaenlCOFM1elphTnNUejJpZTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwVRuMA0G
CSqGSIb3DQEBCwUAA4IBAQApjWuGIbd39IylVxaWkv8kmQth9HX17upcCuGCBho4
nZ2EEB6lZKE86ZmXqmRdxDhZ6cJuiK4S7S0NlDZkGvTTOldn7d7qs3x2Vv6jkd4e
qAehqiiPtSyyM+423U46hI0ZTPwgGu3V4c6xGnIflWuPD7GnOgBKzCKXiOaiMLOF
3CFHViYO8eY3F1y7ajxgIs55XlRODY3rz0uTc8JA5kGbAT+uCSFUwkXNAZPA/2BP
/o+Q9nmyYnRCLrDPtB4PXVadLBhpVWB1l7jRp6BEJzx+q4G7thuILAsiURXQATsk
h5Vb7Xp6VZ72b4HuugrNAIXrl3xIdHLQAwH4UAKs7kM5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:03 2024 by rpki-client on console-fra.rpki-client.org