Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/thJi4jgr-_IaptJlnt1-xt1lklo.roa
File: thJi4jgr-_IaptJlnt1-xt1lklo.roa (raw, json)
Hash identifier: B1wVTgw+Wu3TcJNY9yKKjELWKb17h6Nr2r74t5z6XfE=
Subject key identifier: B6:12:62:E2:38:2B:FB:F2:1A:A6:D2:65:9E:DD:7E:C6:DD:65:92:5A
Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial: 0185701507ECED4FDAB783073EECF4C924BF
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/thJi4jgr-_IaptJlnt1-xt1lklo.roa
Signing time: Mon 02 Jan 2023 01:25:04 +0000
ROA not before: Mon 02 Jan 2023 01:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50198
IP address blocks: 193.202.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:07:ec:ed:4f:da:b7:83:07:3e:ec:f4:c9:24:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
Validity
Not Before: Jan 2 01:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b61262e2382bfbf21aa6d2659edd7ec6dd65925a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:4c:fc:24:38:6e:f7:70:7d:d7:73:02:45:
5e:5a:35:62:b7:8f:fc:93:d1:c6:2a:05:94:28:9a:
28:5e:bd:36:b7:17:4c:3e:e5:24:cd:8a:cc:54:03:
0d:93:60:30:33:1e:b9:3a:8a:99:a2:27:76:8c:17:
33:e8:22:50:6f:5a:a4:16:c2:95:c6:7e:24:28:a5:
45:ea:3b:ae:04:ce:ec:9c:76:60:e2:09:bd:3c:ed:
3f:dc:bd:8a:3f:98:da:78:70:0d:b4:38:a8:8c:8c:
63:fc:75:87:71:1c:d1:73:66:79:c7:97:2e:9d:40:
d7:c4:a4:07:47:e3:95:ab:ac:e9:9c:08:90:5d:c0:
74:1f:5e:d4:78:11:d0:68:cb:61:e8:39:75:17:8c:
0d:60:fe:6a:00:4c:55:f6:3c:c3:25:07:14:08:77:
f0:6d:0b:da:42:66:63:c2:15:4f:0f:f4:4b:90:4e:
dc:70:59:89:28:a1:b4:dd:50:8c:05:9a:6b:96:b6:
c8:ec:05:40:f1:dd:dd:c7:bd:32:43:f7:9b:ce:df:
9d:2b:15:15:2a:5a:7d:29:ad:96:9d:5e:90:c0:99:
f6:bd:29:e4:2d:1e:82:70:13:6e:ef:b4:f0:0d:cc:
46:9a:a8:13:f9:a7:ba:fd:0e:1b:f8:04:f0:13:02:
01:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:12:62:E2:38:2B:FB:F2:1A:A6:D2:65:9E:DD:7E:C6:DD:65:92:5A
X509v3 Authority Key Identifier:
keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/thJi4jgr-_IaptJlnt1-xt1lklo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ca:7c:56:c1:7e:b0:f9:4b:cf:df:71:4b:76:e9:49:91:0e:
07:c9:5d:7c:76:b8:37:74:d6:12:da:7a:d6:4a:82:79:5d:c9:
8c:a1:21:4b:61:6f:b0:9e:4f:39:c3:f7:80:4e:3a:f1:8a:24:
57:53:fd:87:8c:52:3f:ca:3d:b9:14:83:e4:07:48:e6:62:21:
04:34:c3:b2:37:7c:f7:6e:72:35:c5:92:37:02:7f:92:be:0f:
e7:5c:88:c3:38:98:50:20:9b:ce:4b:e8:5c:ff:c0:04:cd:eb:
01:3f:57:b2:13:f6:5f:6a:21:38:47:7c:c8:03:72:8c:60:e7:
bd:6f:30:c1:5c:ad:5a:82:e9:cc:e1:76:07:c5:0a:4a:c5:c5:
a4:fe:b9:74:c3:73:ab:ea:63:a0:8c:c0:5e:28:9d:46:50:50:
a1:e6:bb:ac:0c:c0:bd:96:44:c0:53:16:e4:c3:9a:98:bd:52:
46:62:91:e7:8e:d4:0e:f9:d6:05:d8:47:6b:fe:ba:6d:21:8c:
9b:28:16:b7:86:8a:b1:fe:fb:60:03:59:6e:db:6b:28:b1:bb:
9c:05:06:f2:ba:4d:c4:98:2d:aa:c0:e0:df:e2:c0:e7:a0:dc:
0f:8e:db:64:11:30:d3:ce:1b:57:ae:98:c9:cf:ee:2e:38:22:
65:49:04:5e
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVwFQfs7U/at4MHPuz0ySS/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTU1ODhlZjgwNTQ2ODkyOGM2M2RhYjA4NjMwMDg1ZTVk
MDhmNjUwHhcNMjMwMTAyMDEyNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjEyNjJlMjM4MmJmYmYyMWFhNmQyNjU5ZWRkN2VjNmRkNjU5MjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4pM/CQ4bvdwfddzAkVeWjVit4/8
k9HGKgWUKJooXr02txdMPuUkzYrMVAMNk2AwMx65OoqZoid2jBcz6CJQb1qkFsKV
xn4kKKVF6juuBM7snHZg4gm9PO0/3L2KP5jaeHANtDiojIxj/HWHcRzRc2Z5x5cu
nUDXxKQHR+OVq6zpnAiQXcB0H17UeBHQaMth6Dl1F4wNYP5qAExV9jzDJQcUCHfw
bQvaQmZjwhVPD/RLkE7ccFmJKKG03VCMBZprlrbI7AVA8d3dx70yQ/ebzt+dKxUV
Klp9Ka2WnV6QwJn2vSnkLR6CcBNu77TwDcxGmqgT+ae6/Q4b+ATwEwIBZwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLYSYuI4K/vyGqbSZZ7dfsbdZZJaMB8GA1UdIwQY
MBaAFPkVWI74BUaJKMY9qwhjAIXl0I9lMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SVllqdmdGUm9rb3hqMnJDR01BaGVYUWoyVS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvN2I5MjI0LWFiZjEtNGNhMy1iMDAx
LWJjODI3N2U3NWUwYy8xL3RoSmk0amdyLV9JYXB0SmxudDEteHQxbGtsby5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjQvN2I5MjI0LWFiZjEtNGNhMy1iMDAxLWJjODI3N2U3NWUw
Yy8xLzEtUlZZanZnRlJva294ajJyQ0dNQWhlWFFqMlUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADByn8w
DQYJKoZIhvcNAQELBQADggEBADzKfFbBfrD5S8/fcUt26UmRDgfJXXx2uDd01hLa
etZKgnldyYyhIUthb7CeTznD94BOOvGKJFdT/YeMUj/KPbkUg+QHSOZiIQQ0w7I3
fPducjXFkjcCf5K+D+dciMM4mFAgm85L6Fz/wATN6wE/V7IT9l9qIThHfMgDcoxg
571vMMFcrVqC6czhdgfFCkrFxaT+uXTDc6vqY6CMwF4onUZQUKHmu6wMwL2WRMBT
FuTDmpi9UkZikeeO1A751gXYR2v+um0hjJsoFreGirH++2ADWW7bayixu5wFBvK6
TcSYLarA4N/iwOeg3A+O22QRMNPOG1eumMnP7i44ImVJBF4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:25 2024 by rpki-client on console-ams.rpki-client.org