Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/1-trYKr5hPnj41ieSsy1NUyk3m04.roa
File: 1-trYKr5hPnj41ieSsy1NUyk3m04.roa (raw, json)
Hash identifier: Zyb8serTJmXqZgAw5xhRali3x7x51JLZDgHxd7GKpZI=
Subject key identifier: FA:DA:D8:2A:BE:61:3E:78:F8:D6:27:92:B3:2D:4D:53:29:37:9B:4E
Certificate issuer: /CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Certificate serial: 01856FA6E2626994EE6C0E2B1C7C11AC5530
Authority key identifier: 2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/1-trYKr5hPnj41ieSsy1NUyk3m04.roa
Signing time: Sun 01 Jan 2023 23:24:45 +0000
ROA not before: Sun 01 Jan 2023 23:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196879
IP address blocks: 193.106.108.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:e2:62:69:94:ee:6c:0e:2b:1c:7c:11:ac:55:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Validity
Not Before: Jan 1 23:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fadad82abe613e78f8d62792b32d4d5329379b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:3e:d1:86:b5:cb:f4:41:48:6b:db:40:a2:
92:62:16:32:77:f9:17:6b:8a:43:ec:a7:69:03:af:
2a:63:8b:c5:f7:b5:2e:34:bd:cd:71:8b:b4:86:b1:
66:08:a8:e6:24:bd:61:ec:97:84:96:ef:0f:8d:7d:
ed:a7:db:77:6f:99:03:a2:bf:3e:cb:e7:c5:48:64:
ca:7b:e0:32:25:a2:71:b9:be:95:e3:6c:72:fa:33:
bb:f8:56:03:8e:ce:ae:fd:60:6e:dc:61:08:b7:29:
73:98:15:0c:01:66:7d:30:11:c2:5c:b1:7d:67:30:
9e:77:ee:39:91:71:20:aa:5c:0c:96:00:97:0d:31:
df:ef:8b:b9:f2:b3:71:94:98:e1:fd:96:e3:80:c2:
30:f5:2d:b6:9a:db:51:a1:6c:d2:22:f9:3a:8e:e7:
01:94:84:69:42:71:40:51:84:63:f9:e7:f6:6b:6e:
68:a7:8f:dd:e6:85:d6:1f:55:7d:49:86:67:86:dc:
ca:3e:45:4a:e6:2f:2a:8b:aa:32:09:41:a6:db:8a:
0d:7f:d9:b7:00:9c:98:5e:52:d4:b1:a7:bd:56:1a:
63:08:c8:ea:67:bb:b9:33:99:a5:c1:f9:0d:d1:ed:
a0:d3:4f:7f:d4:d5:d7:ec:f4:19:b0:b4:c1:a1:78:
47:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DA:D8:2A:BE:61:3E:78:F8:D6:27:92:B3:2D:4D:53:29:37:9B:4E
X509v3 Authority Key Identifier:
keyid:2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/1-trYKr5hPnj41ieSsy1NUyk3m04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.108.0/22
Signature Algorithm: sha256WithRSAEncryption
48:81:4b:bd:50:2e:74:e8:ad:b0:13:77:9f:74:dd:22:d8:e4:
67:22:d5:e1:fe:18:95:f9:e7:6f:64:36:94:4b:b9:f4:ae:60:
19:36:22:db:83:72:1d:f6:48:a3:96:90:a1:75:d9:75:b1:2a:
ac:88:c0:b1:2e:ea:91:8f:17:43:51:88:26:9f:eb:45:25:04:
ed:a6:76:27:72:d1:01:8a:b5:0c:cc:ae:bc:de:6f:85:b8:b0:
1a:c2:9d:ee:f3:83:85:e4:6b:cf:ad:85:cf:1b:2f:3c:dc:48:
b3:4a:9b:c7:47:b0:f3:a8:e9:64:21:e5:73:00:69:e9:ac:dd:
75:15:ed:29:49:cd:a7:4b:65:fa:8b:80:ad:50:e6:2c:03:96:
a1:04:95:dc:5f:cb:e3:22:4b:e7:b6:2f:75:f1:d8:7a:98:0d:
e8:b0:d0:9c:70:80:e8:99:86:9d:d5:87:81:08:b0:ea:29:1a:
7d:5d:94:cd:c7:f8:07:ef:f0:a3:83:03:2c:2b:7e:25:4f:6e:
fc:8c:d4:e8:96:66:cd:91:20:0a:91:5d:e6:9c:ab:16:1d:7e:
69:86:9a:73:f9:ce:fa:fb:71:71:f1:bf:35:b2:30:da:30:1b:
88:d9:fc:04:92:2c:ae:9c:fb:52:10:81:b8:17:66:7a:64:23:
d9:43:48:94
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVvpuJiaZTubA4rHHwRrFUwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMjI0NGM4YTNlYjRhM2M2ZDc3NmQwNDZjZTkyYWJmMDFj
NmMyMmYwHhcNMjMwMTAxMjMyNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWRhZDgyYWJlNjEzZTc4ZjhkNjI3OTJiMzJkNGQ1MzI5Mzc5YjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXU+0Ya1y/RBSGvbQKKSYhYyd/kX
a4pD7KdpA68qY4vF97UuNL3NcYu0hrFmCKjmJL1h7JeElu8PjX3tp9t3b5kDor8+
y+fFSGTKe+AyJaJxub6V42xy+jO7+FYDjs6u/WBu3GEItylzmBUMAWZ9MBHCXLF9
ZzCed+45kXEgqlwMlgCXDTHf74u58rNxlJjh/ZbjgMIw9S22mttRoWzSIvk6jucB
lIRpQnFAUYRj+ef2a25op4/d5oXWH1V9SYZnhtzKPkVK5i8qi6oyCUGm24oNf9m3
AJyYXlLUsae9VhpjCMjqZ7u5M5mlwfkN0e2g009/1NXX7PQZsLTBoXhH9QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPra2Cq+YT54+NYnkrMtTVMpN5tOMB8GA1UdIwQY
MBaAFCsiRMij60o8bXdtBGzpKr8BxsIvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3lKRXlLUHJTanh0ZDIwRWJPa3F2d0hHd2k4LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83Y2M3YTctYWVmMS00MDhhLWExYzYt
ZGYxY2NlNGU2OTUwLzEvMS10cllLcjVoUG5qNDFpZVNzeTFOVXlrM20wNC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMjQvN2NjN2E3LWFlZjEtNDA4YS1hMWM2LWRmMWNjZTRlNjk1
MC8xL0t5SkV5S1ByU2p4dGQyMEViT2txdndIR3dpOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsFqbDAN
BgkqhkiG9w0BAQsFAAOCAQEASIFLvVAudOitsBN3n3TdItjkZyLV4f4Ylfnnb2Q2
lEu59K5gGTYi24NyHfZIo5aQoXXZdbEqrIjAsS7qkY8XQ1GIJp/rRSUE7aZ2J3LR
AYq1DMyuvN5vhbiwGsKd7vODheRrz62FzxsvPNxIs0qbx0ew86jpZCHlcwBp6azd
dRXtKUnNp0tl+ouArVDmLAOWoQSV3F/L4yJL57YvdfHYepgN6LDQnHCA6JmGndWH
gQiw6ikafV2Uzcf4B+/wo4MDLCt+JU9u/IzU6JZmzZEgCpFd5pyrFh1+aYaac/nO
+vtxcfG/NbIw2jAbiNn8BJIsrpz7UhCBuBdmemQj2UNIlA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:34 2024 by rpki-client on console-fra.rpki-client.org