Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/4LuK1LbVGKWHdQoYvPph1tCpwiM.roa
File: 4LuK1LbVGKWHdQoYvPph1tCpwiM.roa (raw, json)
Hash identifier: Ipbnmp7fsYFFM0wxaGczW4CkI/EeeahXVqluuIAa0nM=
Subject key identifier: E0:BB:8A:D4:B6:D5:18:A5:87:75:0A:18:BC:FA:61:D6:D0:A9:C2:23
Certificate issuer: /CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Certificate serial: 018571DE9275C241D6531354CEA382751DFA
Authority key identifier: 6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/4LuK1LbVGKWHdQoYvPph1tCpwiM.roa
Signing time: Mon 02 Jan 2023 09:44:49 +0000
ROA not before: Mon 02 Jan 2023 09:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3292
IP address blocks: 193.163.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:92:75:c2:41:d6:53:13:54:ce:a3:82:75:1d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa48e96197426e4c5eeb423e0fd9c2e952c4177
Validity
Not Before: Jan 2 09:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0bb8ad4b6d518a587750a18bcfa61d6d0a9c223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:46:6f:88:e0:75:3b:54:29:31:3b:7d:28:
5f:aa:e6:47:45:64:21:74:9f:e1:e5:fb:76:49:47:
af:ff:37:71:21:9e:3b:f6:c2:1b:32:42:55:46:b5:
20:81:f9:1c:15:a3:5d:37:fe:c4:88:d4:e5:bb:17:
41:bd:be:a3:c5:d1:c4:61:b5:b4:b5:b5:ab:71:27:
fd:16:ee:99:41:6a:fb:ee:ba:7f:6c:bf:9a:d2:59:
76:88:a1:34:21:7a:c3:9c:02:a4:7f:b9:ce:8e:22:
6e:0c:00:78:33:97:78:2c:32:82:bf:6c:6e:20:a2:
23:ac:f2:57:aa:74:21:a3:80:f6:f1:c9:97:51:cb:
2c:f6:2a:42:5c:f1:ad:c7:90:6d:00:51:b4:b0:4f:
7e:05:6e:05:92:bd:ad:22:ac:d5:95:07:08:d9:c2:
3b:a1:e3:4c:1f:c1:33:70:63:03:61:26:69:54:58:
b3:b7:01:4d:e4:07:b5:24:f1:a1:4a:f9:06:61:dd:
71:ab:41:33:cb:38:b7:2b:dc:98:4e:70:0d:7b:ba:
47:47:28:10:2d:fe:08:a0:e7:e1:bf:73:40:8d:30:
64:3b:8a:82:1c:4c:84:bd:4c:79:e2:3d:fb:e8:6d:
34:35:9a:70:31:37:68:d3:1a:61:68:71:49:e3:f4:
96:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BB:8A:D4:B6:D5:18:A5:87:75:0A:18:BC:FA:61:D6:D0:A9:C2:23
X509v3 Authority Key Identifier:
keyid:6F:A4:8E:96:19:74:26:E4:C5:EE:B4:23:E0:FD:9C:2E:95:2C:41:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6SOlhl0JuTF7rQj4P2cLpUsQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/4LuK1LbVGKWHdQoYvPph1tCpwiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8c5bc7-55fa-4044-88da-68185fdb9003/1/b6SOlhl0JuTF7rQj4P2cLpUsQXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:af:1a:a0:aa:f4:24:3e:fb:86:be:df:17:d2:cb:73:a5:77:
9e:bb:80:ad:f2:d0:44:e8:17:bb:9c:89:91:7d:17:62:55:ea:
41:8c:2a:bd:88:19:03:6b:10:bb:de:03:dc:3f:70:a5:14:61:
a5:96:4f:99:9f:f8:95:d5:6b:0e:1b:5e:79:b3:2c:b8:1d:d0:
f6:50:56:d2:16:61:de:05:c2:0a:68:f1:4c:4f:70:df:df:e7:
a6:f0:18:1c:e1:dc:14:aa:73:1a:3b:51:86:e7:78:c9:af:55:
a2:0e:24:ac:0b:b2:96:22:6e:e8:08:b8:99:28:3b:de:35:1c:
21:af:7f:a2:f9:7b:fc:96:8e:32:da:f9:ea:0d:c6:d6:9c:8f:
0a:09:eb:35:74:8b:a0:ae:8e:21:b9:78:d3:2e:70:03:37:46:
4b:f1:bd:c4:60:b2:94:02:9d:29:6a:93:0b:be:54:96:06:39:
f9:70:f9:98:12:4e:07:5d:81:6d:ef:6b:c7:33:fa:39:4b:9c:
68:db:d4:38:ea:d8:5b:fd:f4:56:b7:6d:25:59:35:85:30:dc:
65:d6:5d:a4:04:38:64:f6:4a:cb:06:6d:71:bd:0a:db:4b:28:
c3:ab:8a:11:f2:8e:7b:b0:66:b3:c9:e7:68:e0:e5:2c:3e:3e:
32:97:c6:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx3pJ1wkHWUxNUzqOCdR36MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYTQ4ZTk2MTk3NDI2ZTRjNWVlYjQyM2UwZmQ5YzJlOTUy
YzQxNzcwHhcNMjMwMTAyMDk0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGJiOGFkNGI2ZDUxOGE1ODc3NTBhMThiY2ZhNjFkNmQwYTljMjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5xGb4jgdTtUKTE7fShfquZHRWQh
dJ/h5ft2SUev/zdxIZ479sIbMkJVRrUggfkcFaNdN/7EiNTluxdBvb6jxdHEYbW0
tbWrcSf9Fu6ZQWr77rp/bL+a0ll2iKE0IXrDnAKkf7nOjiJuDAB4M5d4LDKCv2xu
IKIjrPJXqnQho4D28cmXUcss9ipCXPGtx5BtAFG0sE9+BW4Fkr2tIqzVlQcI2cI7
oeNMH8EzcGMDYSZpVFiztwFN5Ae1JPGhSvkGYd1xq0Ezyzi3K9yYTnANe7pHRygQ
Lf4IoOfhv3NAjTBkO4qCHEyEvUx54j376G00NZpwMTdo0xphaHFJ4/SWaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOC7itS21Rilh3UKGLz6YdbQqcIjMB8GA1UdIwQY
MBaAFG+kjpYZdCbkxe60I+D9nC6VLEF3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84YzViYzctNTVmYS00MDQ0LTg4ZGEt
NjgxODVmZGI5MDAzLzEvNEx1SzFMYlZHS1dIZFFvWXZQcGgxdENwd2lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84YzViYzctNTVmYS00MDQ0LTg4ZGEtNjgxODVmZGI5MDAz
LzEvYjZTT2xobDBKdVRGN3JRajRQMmNMcFVzUVhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaPcMA0G
CSqGSIb3DQEBCwUAA4IBAQAarxqgqvQkPvuGvt8X0stzpXeeu4Ct8tBE6Be7nImR
fRdiVepBjCq9iBkDaxC73gPcP3ClFGGllk+Zn/iV1WsOG155syy4HdD2UFbSFmHe
BcIKaPFMT3Df3+em8Bgc4dwUqnMaO1GG53jJr1WiDiSsC7KWIm7oCLiZKDveNRwh
r3+i+Xv8lo4y2vnqDcbWnI8KCes1dIugro4huXjTLnADN0ZL8b3EYLKUAp0papML
vlSWBjn5cPmYEk4HXYFt72vHM/o5S5xo29Q46thb/fRWt20lWTWFMNxl1l2kBDhk
9krLBm1xvQrbSyjDq4oR8o57sGazyedo4OUsPj4yl8YI
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org