Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/S9zGNdVBj_zbslB7LRKyQnjy-_k.roa
File: S9zGNdVBj_zbslB7LRKyQnjy-_k.roa (raw, json)
Hash identifier: dNsViAdTwuV/fa/WDBX+asiBXG4EaGkyUYXszam9CeY=
Subject key identifier: 4B:DC:C6:35:D5:41:8F:FC:DB:B2:50:7B:2D:12:B2:42:78:F2:FB:F9
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018776D93E54C89B734F7F384CF25EF5444D
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/S9zGNdVBj_zbslB7LRKyQnjy-_k.roa
Signing time: Wed 12 Apr 2023 19:02:41 +0000
ROA not before: Wed 12 Apr 2023 19:02:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.239.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:76:d9:3e:54:c8:9b:73:4f:7f:38:4c:f2:5e:f5:44:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Apr 12 19:02:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bdcc635d5418ffcdbb2507b2d12b24278f2fbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:62:7e:71:e5:9b:36:aa:43:05:5f:06:e2:99:
a9:b5:70:19:3f:3c:08:02:06:d1:fb:55:e0:0d:54:
76:b7:2d:fd:9f:c8:db:66:b6:8f:10:51:76:dd:f3:
6b:9b:84:7c:43:05:0c:b7:a3:c4:ee:18:49:c4:41:
60:ca:a0:15:e4:ca:c1:aa:2a:b4:64:7a:22:18:5c:
0c:70:60:7f:03:84:02:b6:74:1e:10:f8:ed:e0:54:
a4:49:cf:bd:89:32:56:45:66:fb:4f:5f:3e:8b:9a:
c3:81:92:43:ad:84:8d:97:7d:ff:2c:9e:3f:ee:4a:
84:93:e1:b1:ef:2e:8c:63:6e:b9:77:b7:cb:ad:93:
7c:b6:db:25:06:e7:c7:e0:dc:8e:71:44:0b:b3:d2:
a4:b6:f9:52:81:06:d1:a3:06:7d:00:e8:12:7e:d2:
c3:4c:85:8a:8f:c7:62:32:e4:62:a1:6e:d8:10:05:
04:7e:ab:4f:27:c8:3a:c0:04:a9:cf:a7:6c:d7:2c:
49:68:b6:4b:f4:55:56:d4:b3:e1:d5:e8:a3:06:fc:
be:3d:f2:33:98:be:c1:5e:71:a5:86:75:23:bb:e0:
c4:c5:1c:da:22:b1:42:a9:b3:b2:4d:fe:ed:9f:2e:
2d:6c:88:1b:18:12:e5:88:34:6e:a1:89:ff:c0:d0:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DC:C6:35:D5:41:8F:FC:DB:B2:50:7B:2D:12:B2:42:78:F2:FB:F9
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/S9zGNdVBj_zbslB7LRKyQnjy-_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.237.0/24
Signature Algorithm: sha256WithRSAEncryption
18:44:2f:58:fd:c5:a9:3e:85:a4:b8:9e:2e:aa:c9:04:e3:64:
cf:6e:0e:d7:6b:86:44:b1:b9:75:9a:fb:96:bc:c0:4e:23:76:
68:04:b3:02:e9:76:f8:1d:bc:a5:5a:f4:02:31:86:92:97:52:
42:6e:10:a6:15:9e:c5:0f:f9:46:f3:56:38:fa:50:0f:c0:3d:
c8:52:9c:9a:62:dd:b3:51:da:21:d5:ec:38:73:84:13:b8:d3:
83:11:09:fb:03:3f:3f:4d:16:65:b3:23:d8:c7:7c:37:d2:bc:
c3:9b:a0:57:30:00:72:69:89:b4:44:28:db:e1:39:ba:98:9a:
4c:cd:81:d3:2a:be:41:65:bb:f1:68:63:c9:18:fd:e4:df:cf:
d3:01:71:cc:ea:41:f4:f5:b7:fa:2a:6b:22:6a:d2:82:05:dd:
ba:b2:4c:cd:3f:70:c1:1f:8c:38:f0:ae:86:f4:81:fa:04:eb:
3b:fe:34:4b:52:4e:f1:34:43:33:f2:72:7b:27:49:8f:6b:e4:
9b:10:c9:0d:5f:91:35:9e:21:b5:9e:4b:a2:2a:67:8b:11:f2:
f1:9c:aa:6c:ee:b7:31:b3:1b:c5:e4:5e:09:5d:9e:fa:4b:9d:
b7:6c:69:0a:19:de:4d:22:19:51:80:68:59:32:4c:c7:5d:7b:
81:23:96:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd22T5UyJtzT384TPJe9URNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjMwNDEyMTkwMjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmRjYzYzNWQ1NDE4ZmZjZGJiMjUwN2IyZDEyYjI0Mjc4ZjJmYmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWJ+ceWbNqpDBV8G4pmptXAZPzwI
AgbR+1XgDVR2ty39n8jbZraPEFF23fNrm4R8QwUMt6PE7hhJxEFgyqAV5MrBqiq0
ZHoiGFwMcGB/A4QCtnQeEPjt4FSkSc+9iTJWRWb7T18+i5rDgZJDrYSNl33/LJ4/
7kqEk+Gx7y6MY265d7fLrZN8ttslBufH4NyOcUQLs9KktvlSgQbRowZ9AOgSftLD
TIWKj8diMuRioW7YEAUEfqtPJ8g6wASpz6ds1yxJaLZL9FVW1LPh1eijBvy+PfIz
mL7BXnGlhnUju+DExRzaIrFCqbOyTf7tny4tbIgbGBLliDRuoYn/wNBG6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEvcxjXVQY/827JQey0SskJ48vv5MB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvUzl6R05kVkJqX3pic2xCN0xSS3lRbmp5LV9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwe/tMA0G
CSqGSIb3DQEBCwUAA4IBAQAYRC9Y/cWpPoWkuJ4uqskE42TPbg7Xa4ZEsbl1mvuW
vMBOI3ZoBLMC6Xb4HbylWvQCMYaSl1JCbhCmFZ7FD/lG81Y4+lAPwD3IUpyaYt2z
Udoh1ew4c4QTuNODEQn7Az8/TRZlsyPYx3w30rzDm6BXMAByaYm0RCjb4Tm6mJpM
zYHTKr5BZbvxaGPJGP3k38/TAXHM6kH09bf6KmsiatKCBd26skzNP3DBH4w48K6G
9IH6BOs7/jRLUk7xNEMz8nJ7J0mPa+SbEMkNX5E1niG1nkuiKmeLEfLxnKps7rcx
sxvF5F4JXZ76S523bGkKGd5NIhlRgGhZMkzHXXuBI5aX
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:27 2023 by rpki-client on console-fra.rpki-client.org