Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/U01DoC467w-0D3B8GVujS-M-26A.roa
File: U01DoC467w-0D3B8GVujS-M-26A.roa (raw, json)
Hash identifier: ljLUJQOWSUVe5n3wZFDqMspPwPoHQbAKpKQ0MgHLVKo=
Subject key identifier: 53:4D:43:A0:2E:3A:EF:0F:B4:0F:70:7C:19:5B:A3:4B:E3:3E:DB:A0
Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial: 018EC2D21862D1A5CFB066D7E5CF1791742C
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/U01DoC467w-0D3B8GVujS-M-26A.roa
Signing time: Tue 09 Apr 2024 12:25:32 +0000
ROA not before: Tue 09 Apr 2024 12:25:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34425
IP address blocks: 188.93.198.0/24 maxlen: 24
188.93.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 10:58:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:d2:18:62:d1:a5:cf:b0:66:d7:e5:cf:17:91:74:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Validity
Not Before: Apr 9 12:25:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=534d43a02e3aef0fb40f707c195ba34be33edba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5b:9f:80:d9:b6:8d:0b:41:fd:6e:ad:34:f2:
8d:99:54:78:ee:50:ae:14:29:33:b9:9a:bd:0a:5f:
c1:dd:f6:f3:92:06:ab:8b:e8:b3:8f:a0:72:fc:83:
9d:74:6c:79:68:ec:1d:3a:50:ad:dc:aa:cc:0f:f2:
76:c1:ea:25:b5:22:21:66:14:29:7f:9b:ea:c9:50:
fd:49:87:c0:fe:f5:eb:a4:29:b5:82:64:b0:09:25:
26:50:c5:a9:6b:76:f8:4c:d2:f7:ec:5b:f3:7f:1f:
7f:82:19:78:ef:4a:32:cd:25:79:b0:8a:b1:7b:ff:
33:9e:0f:fd:33:c3:6e:c8:37:42:b0:d7:93:e1:14:
d2:6e:b7:39:44:7f:de:2a:76:6c:d6:c7:96:6a:86:
bc:6a:c8:c2:cb:35:e0:f8:c4:d1:f4:d8:6d:85:55:
3e:b2:21:d4:7b:7f:88:40:68:46:35:79:69:db:47:
f5:3c:fd:27:4c:22:d3:0f:5e:a5:fe:0d:9e:06:c4:
bf:84:24:d2:cd:57:06:2a:42:c3:3c:c0:b3:9a:80:
ff:b5:cc:82:52:cf:80:4f:9f:6d:71:b6:50:0b:29:
7b:a6:3f:f8:52:39:34:5f:f9:3f:6e:20:1f:32:fa:
0b:7d:c7:38:87:8d:1a:b4:c6:3e:6f:db:01:cd:ac:
26:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4D:43:A0:2E:3A:EF:0F:B4:0F:70:7C:19:5B:A3:4B:E3:3E:DB:A0
X509v3 Authority Key Identifier:
keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/U01DoC467w-0D3B8GVujS-M-26A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.198.0/23
Signature Algorithm: sha256WithRSAEncryption
87:21:d1:e0:9f:54:fe:5b:02:cf:a6:78:93:db:2f:1b:9b:cd:
1d:7b:2b:10:11:29:e7:aa:b0:1c:87:2c:5e:bc:05:f2:f4:57:
16:28:f9:e9:2e:43:ee:77:e1:74:18:4b:27:ee:13:e6:73:7a:
d7:3e:25:b0:4f:33:4e:b0:4b:b7:d7:88:8c:ec:16:c0:15:6c:
dd:13:61:aa:de:c8:13:98:ae:6e:8b:20:e2:eb:05:77:08:66:
78:1d:12:b1:cd:52:b5:9a:cc:4e:0c:79:99:1a:40:d5:42:ed:
b2:fb:3f:0e:bb:f4:5d:ee:92:53:0e:93:58:4c:4b:93:4c:46:
11:e4:4c:63:d5:a6:b1:8a:84:8e:02:d6:fe:cc:e6:64:eb:e4:
35:7b:c1:2e:6f:b9:e4:b3:09:6a:b4:13:52:20:9c:22:9c:5b:
cd:49:33:a2:bf:90:1f:7f:18:fd:05:23:31:9a:1d:5b:08:0e:
97:d6:69:2a:e3:6f:82:dc:e1:fe:3b:45:5d:d9:f1:6b:a6:a0:
06:b1:7f:ee:68:15:6d:49:d9:21:5d:9e:2e:d7:d1:68:96:69:
8c:db:cc:7d:98:73:ac:a8:22:6b:49:a4:ba:48:07:68:52:c6:
db:2a:7b:81:5d:d4:92:55:39:32:1c:e4:4a:e2:1f:18:9d:61:
c5:16:ad:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7C0hhi0aXPsGbX5c8XkXQsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi
NjMwYmYwHhcNMjQwNDA5MTIyNTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzRkNDNhMDJlM2FlZjBmYjQwZjcwN2MxOTViYTM0YmUzM2VkYmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilufgNm2jQtB/W6tNPKNmVR47lCu
FCkzuZq9Cl/B3fbzkgari+izj6By/IOddGx5aOwdOlCt3KrMD/J2weoltSIhZhQp
f5vqyVD9SYfA/vXrpCm1gmSwCSUmUMWpa3b4TNL37Fvzfx9/ghl470oyzSV5sIqx
e/8zng/9M8NuyDdCsNeT4RTSbrc5RH/eKnZs1seWaoa8asjCyzXg+MTR9NhthVU+
siHUe3+IQGhGNXlp20f1PP0nTCLTD16l/g2eBsS/hCTSzVcGKkLDPMCzmoD/tcyC
Us+AT59tcbZQCyl7pj/4Ujk0X/k/biAfMvoLfcc4h40atMY+b9sBzawm0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFNNQ6AuOu8PtA9wfBlbo0vjPtugMB8GA1UdIwQY
MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt
MTQ3MGFjMzY0ZGQyLzEvVTAxRG9DNDY3dy0wRDNCOEdWdWpTLU0tMjZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy
LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvF3GMA0G
CSqGSIb3DQEBCwUAA4IBAQCHIdHgn1T+WwLPpniT2y8bm80deysQESnnqrAchyxe
vAXy9FcWKPnpLkPud+F0GEsn7hPmc3rXPiWwTzNOsEu314iM7BbAFWzdE2Gq3sgT
mK5uiyDi6wV3CGZ4HRKxzVK1msxODHmZGkDVQu2y+z8Ou/Rd7pJTDpNYTEuTTEYR
5Exj1aaxioSOAtb+zOZk6+Q1e8Eub7nkswlqtBNSIJwinFvNSTOiv5Affxj9BSMx
mh1bCA6X1mkq42+C3OH+O0Vd2fFrpqAGsX/uaBVtSdkhXZ4u19FolmmM28x9mHOs
qCJrSaS6SAdoUsbbKnuBXdSSVTkyHORK4h8YnWHFFq1k
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:18 2024 by rpki-client on console-ams.rpki-client.org