Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/Tbteig8P4MXYDybeUsMbWvM0Ycc.roa
File: Tbteig8P4MXYDybeUsMbWvM0Ycc.roa (raw, json)
Hash identifier: IezuPXo0ATzg9o5L4+7Uy2DwBcL6H1EBZ5kHKuXUYfw=
Subject key identifier: 4D:BB:5E:8A:0F:0F:E0:C5:D8:0F:26:DE:52:C3:1B:5A:F3:34:61:C7
Certificate issuer: /CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Certificate serial: 01856E6F9CEA58677E90712BF364B637B8ED
Authority key identifier: 6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/Tbteig8P4MXYDybeUsMbWvM0Ycc.roa
Signing time: Sun 01 Jan 2023 17:44:46 +0000
ROA not before: Sun 01 Jan 2023 17:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202803
IP address blocks: 193.138.4.0/23 maxlen: 24
193.138.120.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:6f:9c:ea:58:67:7e:90:71:2b:f3:64:b6:37:b8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aae7bc8d33163cc4b6dda171a387ff98022a0f6
Validity
Not Before: Jan 1 17:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4dbb5e8a0f0fe0c5d80f26de52c31b5af33461c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:59:01:c2:7c:82:04:2b:4a:19:c4:c5:fd:1b:
d2:f2:24:00:b0:ed:be:a9:23:e4:c7:7e:d4:80:d2:
c6:d7:eb:4c:d0:8e:91:18:5c:7d:d3:d6:fe:a7:e9:
62:ca:4e:b4:f3:43:dd:77:2e:b4:bf:bd:ca:bd:df:
30:a0:7b:3b:64:ea:77:71:4c:6e:26:b0:1f:d6:1e:
10:a6:8d:0d:72:af:e5:6b:89:a2:be:f5:0f:41:fb:
fc:08:7a:70:aa:9f:93:6a:99:db:71:81:49:ae:cb:
13:63:ee:be:ff:3c:91:67:17:96:f6:1e:fd:8f:ae:
5f:d4:68:de:c6:40:8c:a0:52:8a:89:52:65:58:74:
f6:1c:b3:93:f5:29:7b:d8:85:43:b9:6d:8f:03:c1:
40:ae:34:f4:a0:ab:39:94:5e:78:cb:30:58:0e:1a:
69:98:d6:f2:5e:79:0c:87:a2:90:a8:8c:ea:0e:40:
ef:4f:13:b0:27:ae:48:6d:59:10:ac:c1:18:23:d9:
5d:64:8e:5a:b7:c3:d7:22:6c:33:a6:b3:ef:da:eb:
30:8a:d0:e4:7e:80:af:09:f9:e7:44:a0:e1:28:14:
69:58:00:87:fa:79:1e:f5:19:83:0e:bf:c6:d6:a3:
a6:e5:d8:20:13:42:a4:f7:c9:e5:11:b9:38:5e:1e:
95:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:BB:5E:8A:0F:0F:E0:C5:D8:0F:26:DE:52:C3:1B:5A:F3:34:61:C7
X509v3 Authority Key Identifier:
keyid:6A:AE:7B:C8:D3:31:63:CC:4B:6D:DA:17:1A:38:7F:F9:80:22:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq57yNMxY8xLbdoXGjh_-YAioPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/Tbteig8P4MXYDybeUsMbWvM0Ycc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e5dbf8-b41d-4acd-96ac-8f59cf016466/1/aq57yNMxY8xLbdoXGjh_-YAioPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.4.0/23
193.138.120.0/23
Signature Algorithm: sha256WithRSAEncryption
28:a9:46:34:42:db:62:d1:6e:5a:85:f3:17:b2:ea:6a:d1:69:
58:51:6f:db:db:ea:10:4c:bf:ab:34:7e:4b:6a:2f:69:93:8d:
5a:f5:cd:3a:97:34:dd:56:6c:b4:22:ee:f1:b9:a5:60:5f:fb:
36:08:38:c5:41:04:15:b6:3d:26:da:64:6f:48:4e:f3:80:39:
fc:82:2f:62:b6:12:c0:b5:e8:1b:f6:ae:f6:74:af:80:7f:94:
fb:ff:2b:f7:1c:65:a3:60:f3:78:c9:0f:9a:8b:c4:77:74:56:
7e:08:72:02:4f:c3:a3:31:b5:ac:9c:ad:30:e0:4d:0f:56:57:
4d:6d:76:b2:3c:25:ac:28:81:61:24:5c:d9:39:5b:db:60:d6:
11:da:dd:0e:3a:05:39:b6:6b:ac:c1:02:f9:e7:c6:85:5c:2a:
e4:a2:f1:58:3a:53:47:d9:e8:cb:34:51:7a:0a:aa:08:d7:56:
b9:ab:09:7f:11:d0:7b:3a:e2:ad:57:84:8b:b1:4b:18:18:b2:
0c:30:43:21:70:b5:cd:f9:fb:97:53:13:8a:5d:98:20:52:db:
4c:98:dd:1d:c7:e8:b0:f3:46:c1:ce:a4:9e:65:96:de:4c:1b:
31:8e:79:41:d4:83:7c:29:e1:0d:c4:94:92:2f:9f:a5:be:fa:
fa:61:79:08
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVub5zqWGd+kHEr82S2N7jtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYWU3YmM4ZDMzMTYzY2M0YjZkZGExNzFhMzg3ZmY5ODAy
MmEwZjYwHhcNMjMwMTAxMTc0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGJiNWU4YTBmMGZlMGM1ZDgwZjI2ZGU1MmMzMWI1YWYzMzQ2MWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFkBwnyCBCtKGcTF/RvS8iQAsO2+
qSPkx37UgNLG1+tM0I6RGFx909b+p+liyk6080Pddy60v73Kvd8woHs7ZOp3cUxu
JrAf1h4Qpo0Ncq/la4mivvUPQfv8CHpwqp+TapnbcYFJrssTY+6+/zyRZxeW9h79
j65f1GjexkCMoFKKiVJlWHT2HLOT9Sl72IVDuW2PA8FArjT0oKs5lF54yzBYDhpp
mNbyXnkMh6KQqIzqDkDvTxOwJ65IbVkQrMEYI9ldZI5at8PXImwzprPv2uswitDk
foCvCfnnRKDhKBRpWACH+nke9RmDDr/G1qOm5dggE0Kk98nlEbk4Xh6VywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE27XooPD+DF2A8m3lLDG1rzNGHHMB8GA1UdIwQY
MBaAFGque8jTMWPMS23aFxo4f/mAIqD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXE1N3lOTXhZOHhMYmRvWEdqaF8tWUFpb1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lNWRiZjgtYjQxZC00YWNkLTk2YWMt
OGY1OWNmMDE2NDY2LzEvVGJ0ZWlnOFA0TVhZRHliZVVzTWJXdk0wWWNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lNWRiZjgtYjQxZC00YWNkLTk2YWMtOGY1OWNmMDE2NDY2
LzEvYXE1N3lOTXhZOHhMYmRvWEdqaF8tWUFpb1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwYoEAwQB
wYp4MA0GCSqGSIb3DQEBCwUAA4IBAQAoqUY0Qtti0W5ahfMXsupq0WlYUW/b2+oQ
TL+rNH5Lai9pk41a9c06lzTdVmy0Iu7xuaVgX/s2CDjFQQQVtj0m2mRvSE7zgDn8
gi9ithLAtegb9q72dK+Af5T7/yv3HGWjYPN4yQ+ai8R3dFZ+CHICT8OjMbWsnK0w
4E0PVldNbXayPCWsKIFhJFzZOVvbYNYR2t0OOgU5tmuswQL558aFXCrkovFYOlNH
2ejLNFF6CqoI11a5qwl/EdB7OuKtV4SLsUsYGLIMMEMhcLXN+fuXUxOKXZggUttM
mN0dx+iw80bBzqSeZZbeTBsxjnlB1IN8KeENxJSSL5+lvvr6YXkI
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:21 2024 by rpki-client on console-fra.rpki-client.org