Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/POzkAXZ7iUOPpTXXs0EYLu6mh1Q.roa
File: POzkAXZ7iUOPpTXXs0EYLu6mh1Q.roa (raw, json)
Hash identifier: Oei6a/ZWw3DWuvgQgCZVsHRoHhD9G68sfzyzVOwmZmw=
Subject key identifier: 3C:EC:E4:01:76:7B:89:43:8F:A5:35:D7:B3:41:18:2E:EE:A6:87:54
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 018EF0DB9479C1AAAFA938E5ABEA74F99CFD
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/POzkAXZ7iUOPpTXXs0EYLu6mh1Q.roa
Signing time: Thu 18 Apr 2024 10:58:25 +0000
ROA not before: Thu 18 Apr 2024 10:58:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6424
IP address blocks: 188.93.192.0/21 maxlen: 24
188.93.196.0/24 maxlen: 24
2001:b18::/32 maxlen: 48
2001:b18:1031::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 12 May 2024 08:21:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f0:db:94:79:c1:aa:af:a9:38:e5:ab:ea:74:f9:9c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Apr 18 10:58:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cece401767b89438fa535d7b341182eeea68754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:66:7e:5b:8f:55:fe:bb:80:50:a6:37:0f:
e4:f2:d7:0c:55:fd:29:09:3f:d4:43:33:65:14:3c:
24:76:ac:d0:e5:7b:60:ab:41:09:b5:62:cc:a0:45:
28:00:03:74:df:d6:5d:fc:01:85:16:d0:2b:1f:6d:
f2:df:e5:75:a7:c8:63:36:45:7f:af:cf:f8:18:d6:
43:20:57:bd:b5:ab:17:15:af:68:fc:c3:24:c3:7b:
93:58:2c:0c:a7:8f:9c:db:d5:0a:ac:e1:df:be:d0:
62:ef:0b:c1:f3:3b:77:f2:bf:52:6b:37:ca:c3:f0:
68:bc:72:0a:6c:e6:9f:06:14:fa:17:e2:1a:57:56:
1e:06:ec:71:82:b0:5a:e0:7c:8c:91:54:de:75:b7:
85:56:27:40:f0:4b:59:0f:a5:54:63:56:1d:22:f5:
17:96:6f:84:f8:0e:4a:d3:ac:29:af:d6:38:7e:22:
63:2f:01:82:60:92:4c:0e:89:05:bf:af:f5:25:fb:
93:dd:e1:2e:b1:2d:de:d5:e4:b8:b2:09:69:41:e7:
55:90:da:3f:8d:cf:67:67:9d:fe:61:bc:fb:8b:c3:
bd:ae:e4:2a:66:a8:be:a3:8c:d4:de:b3:73:b6:f2:
85:52:87:b9:d8:00:7b:89:f6:93:b1:f8:81:d2:48:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EC:E4:01:76:7B:89:43:8F:A5:35:D7:B3:41:18:2E:EE:A6:87:54
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/POzkAXZ7iUOPpTXXs0EYLu6mh1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.192.0/21
IPv6:
2001:b18::/32
Signature Algorithm: sha256WithRSAEncryption
b1:a3:c4:a8:1c:cd:bb:0f:c4:bf:67:3f:1e:3e:1d:c5:93:dc:
78:c5:f3:06:13:7c:9e:1d:26:80:c1:49:6e:c5:97:21:42:ff:
a3:de:37:1b:9a:14:2d:0d:71:bd:d2:f5:93:c7:7f:73:3b:0c:
ae:65:c2:23:27:93:e5:48:29:ac:fe:7b:00:42:60:5c:fc:3d:
fb:24:f8:18:a6:4d:8c:4e:a3:c0:c1:0b:51:28:04:67:4a:f6:
72:e1:87:5c:d1:0f:9f:48:0e:6d:33:89:4c:04:e7:8a:19:9d:
af:35:3f:3e:ee:b0:f4:6c:8b:84:1d:b0:50:7c:31:6b:e0:d8:
67:92:ef:76:ac:74:de:a6:a8:6a:d2:97:43:f5:8e:1e:9a:6d:
dd:14:21:06:3e:6e:bf:9e:55:25:49:e0:dc:c0:dc:c3:70:d8:
50:4b:8d:7a:ae:be:7c:f5:70:3c:b7:93:cf:9f:0b:31:c6:58:
5f:0e:44:f4:90:c2:6c:21:50:47:37:d3:f1:01:14:6c:02:88:
58:f0:1c:f8:4c:55:16:93:89:f6:78:21:1b:6e:62:9b:35:02:
f0:26:6a:0b:e3:3a:c4:43:d2:67:f8:41:2f:fd:e7:36:e9:1c:
a5:3b:58:a8:d7:c9:67:84:17:83:dc:75:b8:7b:c8:db:21:e6:
dc:42:94:c7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY7w25R5waqvqTjlq+p0+Zz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi
NjMwYmYwHhcNMjQwNDE4MTA1ODI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2VjZTQwMTc2N2I4OTQzOGZhNTM1ZDdiMzQxMTgyZWVlYTY4NzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18RmfluPVf67gFCmNw/k8tcMVf0p
CT/UQzNlFDwkdqzQ5Xtgq0EJtWLMoEUoAAN039Zd/AGFFtArH23y3+V1p8hjNkV/
r8/4GNZDIFe9tasXFa9o/MMkw3uTWCwMp4+c29UKrOHfvtBi7wvB8zt38r9SazfK
w/BovHIKbOafBhT6F+IaV1YeBuxxgrBa4HyMkVTedbeFVidA8EtZD6VUY1YdIvUX
lm+E+A5K06wpr9Y4fiJjLwGCYJJMDokFv6/1JfuT3eEusS3e1eS4sglpQedVkNo/
jc9nZ53+Ybz7i8O9ruQqZqi+o4zU3rNztvKFUoe52AB7ifaTsfiB0khrwQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDzs5AF2e4lDj6U117NBGC7upodUMB8GA1UdIwQY
MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt
MTQ3MGFjMzY0ZGQyLzEvUE96a0FYWjdpVU9QcFRYWHMwRVlMdTZtaDFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy
LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDvF3AMA0E
AgACMAcDBQAgAQsYMA0GCSqGSIb3DQEBCwUAA4IBAQCxo8SoHM27D8S/Zz8ePh3F
k9x4xfMGE3yeHSaAwUluxZchQv+j3jcbmhQtDXG90vWTx39zOwyuZcIjJ5PlSCms
/nsAQmBc/D37JPgYpk2MTqPAwQtRKARnSvZy4Ydc0Q+fSA5tM4lMBOeKGZ2vNT8+
7rD0bIuEHbBQfDFr4Nhnku92rHTepqhq0pdD9Y4emm3dFCEGPm6/nlUlSeDcwNzD
cNhQS416rr589XA8t5PPnwsxxlhfDkT0kMJsIVBHN9PxARRsAohY8Bz4TFUWk4n2
eCEbbmKbNQLwJmoL4zrEQ9Jn+EEv/ec26RylO1io18lnhBeD3HW4e8jbIebcQpTH
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:18 2024 by rpki-client on console-ams.rpki-client.org