Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/XoDld0NM-IYnhM_EHW82IS7W3qM.roa
File: XoDld0NM-IYnhM_EHW82IS7W3qM.roa (raw, json)
Hash identifier: 72uH3ttT/zE6Vw3uNmQgJ3id8shNNZgYFJdeCyjVewU=
Subject key identifier: 5E:80:E5:77:43:4C:F8:86:27:84:CF:C4:1D:6F:36:21:2E:D6:DE:A3
Certificate issuer: /CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Certificate serial: 0188B49944B04CA278B1CF6E355DE4C65B4F
Authority key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/XoDld0NM-IYnhM_EHW82IS7W3qM.roa
Signing time: Tue 13 Jun 2023 11:52:03 +0000
ROA not before: Tue 13 Jun 2023 11:52:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 93.189.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 14 Jun 2023 13:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:99:44:b0:4c:a2:78:b1:cf:6e:35:5d:e4:c6:5b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Validity
Not Before: Jun 13 11:52:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e80e577434cf8862784cfc41d6f36212ed6dea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e0:44:61:b5:25:1b:7a:99:35:99:76:ba:ec:
1b:41:fd:1f:85:6d:89:35:f1:89:80:81:51:34:34:
b9:18:a7:c3:f2:05:e0:b4:3a:e5:27:f1:79:63:ef:
03:b7:e4:af:23:f6:53:d2:73:05:33:20:6e:ab:d2:
ed:0b:48:a3:16:4f:da:71:b2:2f:6c:eb:e3:bb:3f:
4d:0d:d9:41:6d:c4:73:6a:62:12:28:51:67:07:f2:
a6:1c:3c:93:97:b1:18:48:fa:7b:11:5a:e8:30:f8:
f0:53:5a:73:84:f4:70:87:7d:5f:99:91:f2:31:8c:
77:df:f9:6d:f1:78:de:2e:94:17:b2:4a:57:8a:5e:
45:23:3a:37:8b:0d:4b:76:e7:b3:65:9f:80:64:23:
6c:6e:d6:61:15:d2:ea:b4:60:1b:e4:03:63:2f:9a:
9c:b6:21:ad:8f:71:26:da:a5:55:29:4d:0f:eb:08:
46:27:fb:50:68:44:6b:42:da:bd:80:e0:a1:db:20:
49:99:5a:8c:a2:99:71:87:f3:86:67:f0:17:f5:6b:
37:c2:b6:64:19:27:e7:92:a1:1b:30:4b:e7:4a:f7:
b3:37:51:28:db:51:0a:a6:ed:dc:0b:a1:f9:d6:e8:
61:5c:9d:44:fd:5f:6d:63:93:33:12:64:94:02:6b:
4e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:80:E5:77:43:4C:F8:86:27:84:CF:C4:1D:6F:36:21:2E:D6:DE:A3
X509v3 Authority Key Identifier:
keyid:08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/XoDld0NM-IYnhM_EHW82IS7W3qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.228.0/22
Signature Algorithm: sha256WithRSAEncryption
08:d4:49:e8:3f:50:cc:28:a1:03:8e:5a:5a:d8:42:3a:cd:d5:
b6:0f:dd:7e:0e:5e:7c:b6:1e:32:7d:41:75:63:36:de:07:db:
8d:d0:1d:b6:37:55:84:c5:c5:86:72:9b:96:a6:ff:b8:9c:b7:
64:4b:0c:ab:e4:58:47:48:0e:4f:b7:96:51:37:57:3d:44:27:
2e:2c:94:f9:20:78:e9:7e:64:f1:54:59:b2:95:15:2d:94:3c:
cc:b4:e4:f7:91:f2:de:f4:82:fb:10:08:c2:c7:1b:6c:ae:00:
78:b9:4a:48:b5:2d:70:d7:08:60:4e:ab:74:fb:5c:41:6e:c2:
99:a4:ac:85:08:07:26:33:b4:94:7e:a8:4b:a5:e5:dc:00:33:
8e:41:c0:d6:77:27:48:47:54:3e:ef:cd:6b:bb:47:65:14:a3:
98:a2:7d:31:2a:e8:b7:f2:fb:ba:46:40:8e:48:1a:3f:7e:bd:
5c:16:e7:13:19:3a:6c:22:7a:19:4f:c1:6c:35:5d:18:ba:af:
7c:88:39:0c:bf:83:d1:5b:ca:b4:64:cf:82:b9:62:2b:64:2a:
6f:b9:bf:27:26:1a:b4:74:6d:b1:e7:81:76:21:91:6a:06:55:
a6:ff:ee:06:68:7d:0b:e0:69:d5:60:5e:8a:fa:33:e9:cb:8f:
32:68:9e:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYi0mUSwTKJ4sc9uNV3kxltPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZTdkN2IzYmM0YzA3OTFjMGNmZmUzZjE1NTVhYjc3M2Uz
ZWQxNmUwHhcNMjMwNjEzMTE1MjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTgwZTU3NzQzNGNmODg2Mjc4NGNmYzQxZDZmMzYyMTJlZDZkZWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuBEYbUlG3qZNZl2uuwbQf0fhW2J
NfGJgIFRNDS5GKfD8gXgtDrlJ/F5Y+8Dt+SvI/ZT0nMFMyBuq9LtC0ijFk/acbIv
bOvjuz9NDdlBbcRzamISKFFnB/KmHDyTl7EYSPp7EVroMPjwU1pzhPRwh31fmZHy
MYx33/lt8XjeLpQXskpXil5FIzo3iw1LduezZZ+AZCNsbtZhFdLqtGAb5ANjL5qc
tiGtj3Em2qVVKU0P6whGJ/tQaERrQtq9gOCh2yBJmVqMoplxh/OGZ/AX9Ws3wrZk
GSfnkqEbMEvnSvezN1Eo21EKpu3cC6H51uhhXJ1E/V9tY5MzEmSUAmtOeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF6A5XdDTPiGJ4TPxB1vNiEu1t6jMB8GA1UdIwQY
MBaAFAjn17O8TAeRwM/+PxVVq3c+PtFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ09mWHM3eE1CNUhBel80X0ZWV3JkejQtMFc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8xYjkwZGUtMmI3Ni00ZDBiLTkwOTMt
MmZjMzVjZDFhYzJhLzEvWG9EbGQwTk0tSVluaE1fRUhXODJJUzdXM3FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8xYjkwZGUtMmI3Ni00ZDBiLTkwOTMtMmZjMzVjZDFhYzJh
LzEvQ09mWHM3eE1CNUhBel80X0ZWV3JkejQtMFc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXb3kMA0G
CSqGSIb3DQEBCwUAA4IBAQAI1EnoP1DMKKEDjlpa2EI6zdW2D91+Dl58th4yfUF1
YzbeB9uN0B22N1WExcWGcpuWpv+4nLdkSwyr5FhHSA5Pt5ZRN1c9RCcuLJT5IHjp
fmTxVFmylRUtlDzMtOT3kfLe9IL7EAjCxxtsrgB4uUpItS1w1whgTqt0+1xBbsKZ
pKyFCAcmM7SUfqhLpeXcADOOQcDWdydIR1Q+781ru0dlFKOYon0xKui38vu6RkCO
SBo/fr1cFucTGTpsInoZT8FsNV0Yuq98iDkMv4PRW8q0ZM+CuWIrZCpvub8nJhq0
dG2x54F2IZFqBlWm/+4GaH0L4GnVYF6K+jPpy48yaJ4U
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:01 2024 by rpki-client on console-ams.rpki-client.org