Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/oMgznRdJ4W26ETUaEZAne6eWbO8.roa
File: oMgznRdJ4W26ETUaEZAne6eWbO8.roa (raw, json)
Hash identifier: VurPO2evuK0IPMNbhLSayGULccaeAAOO2kQExFQuXuE=
Subject key identifier: A0:C8:33:9D:17:49:E1:6D:BA:11:35:1A:11:90:27:7B:A7:96:6C:EF
Certificate issuer: /CN=846af54e6558cfc86252946e4692ab92777c0e10
Certificate serial: 0185701EE21B8D3A6E7FD89E16963B72E800
Authority key identifier: 84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/oMgznRdJ4W26ETUaEZAne6eWbO8.roa
Signing time: Mon 02 Jan 2023 01:35:50 +0000
ROA not before: Mon 02 Jan 2023 01:35:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.24.42.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:e2:1b:8d:3a:6e:7f:d8:9e:16:96:3b:72:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846af54e6558cfc86252946e4692ab92777c0e10
Validity
Not Before: Jan 2 01:35:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0c8339d1749e16dba11351a1190277ba7966cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:08:cd:b2:5f:69:6b:5c:ad:fd:50:14:58:
fc:bb:23:47:e0:ef:56:cc:cc:7e:67:ed:eb:06:92:
29:3b:27:12:13:39:80:57:1b:21:e7:e2:05:53:9a:
de:d2:d4:26:41:f4:48:d6:86:86:20:e5:92:b1:c6:
e6:42:c7:d9:9f:db:3a:e7:a8:15:64:7d:e2:d0:81:
5d:98:86:0d:bc:9e:56:d8:90:7b:ec:40:ca:c3:3d:
db:b3:cd:8a:88:09:e1:76:69:cf:98:f3:df:33:e4:
1b:f3:ff:89:ee:87:ea:d7:c6:58:e6:ff:9c:22:ab:
fe:43:f1:b0:82:8a:0f:04:67:30:81:38:68:b5:f5:
68:5a:23:2b:85:50:6d:06:dc:ec:fd:c9:bd:10:03:
f3:44:fb:ff:59:e9:a5:39:0e:0a:32:9a:38:83:06:
6c:3b:26:3d:1c:13:72:35:c9:a4:69:c7:6c:09:cf:
c4:bc:f6:e1:6d:74:11:ee:92:b9:f4:c3:02:2a:8d:
91:9c:df:b0:16:c7:5d:16:2a:45:2c:bd:2d:90:54:
50:e2:94:f5:7d:4c:37:f1:b7:b6:a6:9d:08:8a:0e:
41:36:6e:ba:a0:f4:4e:c9:8b:99:4a:eb:ca:b3:a0:
8a:69:d8:bd:19:04:31:c7:12:5c:42:b7:a4:c0:06:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C8:33:9D:17:49:E1:6D:BA:11:35:1A:11:90:27:7B:A7:96:6C:EF
X509v3 Authority Key Identifier:
keyid:84:6A:F5:4E:65:58:CF:C8:62:52:94:6E:46:92:AB:92:77:7C:0E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGr1TmVYz8hiUpRuRpKrknd8DhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/oMgznRdJ4W26ETUaEZAne6eWbO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/283fee-2c36-4e70-bbe4-07e36efc5e42/1/hGr1TmVYz8hiUpRuRpKrknd8DhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.42.0/23
Signature Algorithm: sha256WithRSAEncryption
71:8b:85:fb:c9:52:e1:fc:31:87:f7:34:6b:0c:68:f7:c4:26:
40:39:b3:25:a9:60:6f:d6:3a:d8:5a:eb:bc:53:b9:57:80:d3:
e1:74:6e:88:5e:40:8a:22:f3:bb:8b:79:3b:7d:9d:72:01:67:
87:d9:83:69:8e:6c:8a:cd:1f:a8:58:46:a9:5e:d8:eb:68:a5:
10:90:05:0b:3a:3a:07:4b:22:8c:93:33:73:78:d0:c7:22:4f:
6d:4d:05:92:f3:00:b4:e7:6d:c5:d2:55:e4:fa:16:66:2d:62:
04:71:75:0d:5e:4f:d4:57:fa:68:ca:25:33:ba:2a:ca:37:9d:
0a:39:f1:aa:33:b4:66:11:3a:ed:83:ea:3c:50:8a:e8:49:bc:
24:49:ec:d5:62:6b:7c:88:dc:c8:f6:4c:29:0a:1d:79:7c:a9:
a4:83:23:15:91:1b:57:67:5e:81:e0:ba:90:8e:13:a0:63:d7:
c4:93:b7:14:cd:87:80:6f:f4:2b:33:7e:68:9f:f7:c6:1d:81:
0a:2f:16:d6:96:5d:9b:55:79:77:b9:09:21:67:8f:fc:71:24:
7b:31:f9:a9:ef:1f:1d:c0:4f:84:b6:42:9d:29:39:d6:a4:41:
10:d3:bd:73:77:13:00:bd:37:58:f3:4f:01:a8:0e:50:95:1d:
c3:50:75:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwHuIbjTpuf9ieFpY7cugAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NmFmNTRlNjU1OGNmYzg2MjUyOTQ2ZTQ2OTJhYjkyNzc3
YzBlMTAwHhcNMjMwMTAyMDEzNTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGM4MzM5ZDE3NDllMTZkYmExMTM1MWExMTkwMjc3YmE3OTY2Y2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr94IzbJfaWtcrf1QFFj8uyNH4O9W
zMx+Z+3rBpIpOycSEzmAVxsh5+IFU5re0tQmQfRI1oaGIOWSscbmQsfZn9s656gV
ZH3i0IFdmIYNvJ5W2JB77EDKwz3bs82KiAnhdmnPmPPfM+Qb8/+J7ofq18ZY5v+c
Iqv+Q/GwgooPBGcwgThotfVoWiMrhVBtBtzs/cm9EAPzRPv/WemlOQ4KMpo4gwZs
OyY9HBNyNcmkacdsCc/EvPbhbXQR7pK59MMCKo2RnN+wFsddFipFLL0tkFRQ4pT1
fUw38be2pp0Iig5BNm66oPROyYuZSuvKs6CKadi9GQQxxxJcQrekwAZehQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKDIM50XSeFtuhE1GhGQJ3unlmzvMB8GA1UdIwQY
MBaAFIRq9U5lWM/IYlKUbkaSq5J3fA4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQt
MDdlMzZlZmM1ZTQyLzEvb01nem5SZEo0VzI2RVRVYUVaQW5lNmVXYk84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yODNmZWUtMmMzNi00ZTcwLWJiZTQtMDdlMzZlZmM1ZTQy
LzEvaEdyMVRtVll6OGhpVXBSdVJwS3JrbmQ4RGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwRgqMA0G
CSqGSIb3DQEBCwUAA4IBAQBxi4X7yVLh/DGH9zRrDGj3xCZAObMlqWBv1jrYWuu8
U7lXgNPhdG6IXkCKIvO7i3k7fZ1yAWeH2YNpjmyKzR+oWEapXtjraKUQkAULOjoH
SyKMkzNzeNDHIk9tTQWS8wC0523F0lXk+hZmLWIEcXUNXk/UV/poyiUzuirKN50K
OfGqM7RmETrtg+o8UIroSbwkSezVYmt8iNzI9kwpCh15fKmkgyMVkRtXZ16B4LqQ
jhOgY9fEk7cUzYeAb/QrM35on/fGHYEKLxbWll2bVXl3uQkhZ4/8cSR7Mfmp7x8d
wE+EtkKdKTnWpEEQ071zdxMAvTdY808BqA5QlR3DUHUq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:32 2024 by rpki-client on console-fra.rpki-client.org