Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/qTLdks2mYWn22cUlKbEYm5V_dw4.roa
File: qTLdks2mYWn22cUlKbEYm5V_dw4.roa (raw, json)
Hash identifier: Ry53WpicNb3/tVR+Gu3Byy7QZm9X72O+mI7ge2spJKU=
Subject key identifier: A9:32:DD:92:CD:A6:61:69:F6:D9:C5:25:29:B1:18:9B:95:7F:77:0E
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0191C3414DE2CA009BC5333B02BE890D9A2F
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/qTLdks2mYWn22cUlKbEYm5V_dw4.roa
Signing time: Thu 05 Sep 2024 17:35:22 +0000
ROA not before: Thu 05 Sep 2024 17:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.239.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 21:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c3:41:4d:e2:ca:00:9b:c5:33:3b:02:be:89:0d:9a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Sep 5 17:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a932dd92cda66169f6d9c52529b1189b957f770e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f5:9a:85:4d:cb:3b:88:44:a8:77:5f:2a:fd:
a7:06:af:a9:b1:46:ed:6f:9d:fd:e9:1f:5f:e6:1d:
a7:01:fe:4f:2a:cb:fc:6e:4f:52:f3:a2:bb:91:ef:
a8:84:8d:ec:24:68:a6:7f:5f:dc:77:48:2e:82:68:
75:9e:49:3e:58:e2:6a:14:05:76:b2:89:7b:2e:6c:
4e:ba:fb:fb:e6:a9:8e:71:58:a4:ff:8b:d6:ef:e4:
bc:f5:12:1a:ed:85:08:cb:14:69:30:d9:75:7a:cc:
38:7b:50:59:bb:fe:76:8b:47:9b:41:33:5c:5a:73:
e7:28:48:51:de:9c:49:b6:2e:da:d9:20:ca:2f:c6:
65:2f:1e:f8:fa:42:c3:d6:49:6a:8e:ac:59:b1:5e:
36:be:2f:84:0b:b4:7e:a9:70:5a:54:d6:b0:bd:d7:
db:65:c3:27:c3:7e:11:7a:e1:b5:f3:33:52:43:25:
cc:95:ec:e6:7a:8d:80:09:f4:53:9e:92:76:dc:4d:
12:fa:e6:ed:9a:f8:8d:e6:d3:44:ce:3e:d7:7a:9a:
96:f8:c7:ae:63:37:13:71:33:c0:f9:f8:39:aa:25:
67:fb:44:91:dd:49:89:ee:11:71:ec:a8:60:e6:86:
c3:35:06:c6:b9:28:ea:7e:5f:a4:10:b0:0d:61:a4:
dc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:32:DD:92:CD:A6:61:69:F6:D9:C5:25:29:B1:18:9B:95:7F:77:0E
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/qTLdks2mYWn22cUlKbEYm5V_dw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.196.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ea:40:fd:b3:b1:1e:76:04:cb:27:ef:87:f2:02:61:6a:94:
3c:dc:6a:3e:3d:3d:01:32:5b:71:0c:62:db:ee:74:8d:0a:a8:
18:e3:63:19:2e:06:e2:ec:4e:6e:6a:1b:52:c9:33:d2:ae:dc:
2f:1d:a6:f4:20:5b:51:e2:a2:bf:df:bd:38:eb:8c:87:70:34:
9e:60:67:59:95:40:06:4a:ee:55:be:e8:39:b0:df:8a:45:ac:
d2:47:14:13:74:37:06:ef:ba:a4:3e:e8:20:af:65:93:60:ad:
1f:bc:d5:64:34:5c:96:82:cc:c6:4f:68:db:cd:da:b3:d0:7f:
cb:99:e8:be:88:4a:8d:b7:80:20:d6:1a:a6:48:9e:d8:4b:01:
e3:83:34:6a:1c:7d:ef:b3:8d:70:a3:22:07:2e:cb:ca:43:14:
e7:45:40:6a:78:2d:fb:9c:c8:52:db:ee:9b:c4:38:7d:91:55:
80:e6:51:31:8d:19:2f:cf:58:69:84:56:75:47:20:bf:06:ea:
c8:33:e7:23:6d:2a:ef:41:22:bb:fb:a1:a0:37:1a:e6:f1:42:
89:1d:3b:e3:6f:db:af:c5:e2:57:fa:f8:16:74:9a:d8:4b:e7:
67:c5:91:9b:9e:0a:8a:d5:f8:23:03:9c:bf:6f:df:a4:d9:52:
f8:15:ff:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHDQU3iygCbxTM7Ar6JDZovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjQwOTA1MTczNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTMyZGQ5MmNkYTY2MTY5ZjZkOWM1MjUyOWIxMTg5Yjk1N2Y3NzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvWahU3LO4hEqHdfKv2nBq+psUbt
b5396R9f5h2nAf5PKsv8bk9S86K7ke+ohI3sJGimf1/cd0gugmh1nkk+WOJqFAV2
sol7LmxOuvv75qmOcVik/4vW7+S89RIa7YUIyxRpMNl1esw4e1BZu/52i0ebQTNc
WnPnKEhR3pxJti7a2SDKL8ZlLx74+kLD1klqjqxZsV42vi+EC7R+qXBaVNawvdfb
ZcMnw34ReuG18zNSQyXMlezmeo2ACfRTnpJ23E0S+ubtmviN5tNEzj7XepqW+Meu
YzcTcTPA+fg5qiVn+0SR3UmJ7hFx7Khg5obDNQbGuSjqfl+kELANYaTcZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKky3ZLNpmFp9tnFJSmxGJuVf3cOMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvcVRMZGtzMm1ZV24yMmNVbEtiRVltNVZfZHc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwe/EMA0G
CSqGSIb3DQEBCwUAA4IBAQCY6kD9s7EedgTLJ++H8gJhapQ83Go+PT0BMltxDGLb
7nSNCqgY42MZLgbi7E5uahtSyTPSrtwvHab0IFtR4qK/370464yHcDSeYGdZlUAG
Su5Vvug5sN+KRazSRxQTdDcG77qkPuggr2WTYK0fvNVkNFyWgszGT2jbzdqz0H/L
mei+iEqNt4Ag1hqmSJ7YSwHjgzRqHH3vs41woyIHLsvKQxTnRUBqeC37nMhS2+6b
xDh9kVWA5lExjRkvz1hphFZ1RyC/BurIM+cjbSrvQSK7+6GgNxrm8UKJHTvjb9uv
xeJX+vgWdJrYS+dnxZGbngqK1fgjA5y/b9+k2VL4Ff9H
-----END CERTIFICATE-----
Generated at Fri Sep 13 23:38:01 2024 by rpki-client on console-fra.rpki-client.org