Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/4DP4EgckMio_sl8LgjFgEYPUPzA.roa
File: 4DP4EgckMio_sl8LgjFgEYPUPzA.roa (raw, json)
Hash identifier: xCnST6tVntj21MphvUmmyezXmKPmiajev0LG3fRHNFA=
Subject key identifier: E0:33:F8:12:07:24:32:2A:3F:B2:5F:0B:82:31:60:11:83:D4:3F:30
Certificate issuer: /CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Certificate serial: 0189F8858A24530AE01315FF8C1FB67E9119
Authority key identifier: 19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/4DP4EgckMio_sl8LgjFgEYPUPzA.roa
Signing time: Tue 15 Aug 2023 09:27:28 +0000
ROA not before: Tue 15 Aug 2023 09:27:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31735
IP address blocks: 193.28.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:85:8a:24:53:0a:e0:13:15:ff:8c:1f:b6:7e:91:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19cbd0a4136294215b1c243b0f0218cfdd565d57
Validity
Not Before: Aug 15 09:27:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e033f8120724322a3fb25f0b8231601183d43f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c7:3c:77:b6:a5:1d:41:a4:19:a1:84:00:31:
f3:a8:76:12:54:48:50:6d:66:01:2e:d3:1b:5f:46:
00:d3:e4:ea:7e:aa:35:d4:df:80:92:eb:48:2f:db:
39:15:ee:0f:8c:a5:a6:69:5a:01:92:e7:7f:b9:e0:
e3:88:f4:bf:c4:16:d4:2d:d6:34:ee:c8:9e:e7:ae:
9b:9b:6b:79:2a:a4:80:93:90:7e:f0:01:1f:15:c1:
e9:31:c0:e3:73:68:66:01:77:14:83:c5:c3:d8:81:
df:f0:6a:2a:81:f4:bc:11:88:ec:19:6e:f3:b4:67:
c3:26:d5:93:93:12:ae:d6:93:a0:44:99:a9:2a:9a:
7d:b2:59:b2:06:6b:19:0d:fd:0a:ec:94:a4:67:54:
32:0f:0b:ce:98:80:d7:2c:f6:c2:4e:33:de:48:08:
77:ee:60:5a:be:4d:44:4e:24:63:ad:31:d5:4c:b3:
32:61:8a:ff:11:d7:6e:c6:eb:8e:dc:44:a2:61:c7:
72:b1:e1:fd:ad:5f:c8:c4:cd:5d:52:ca:ba:04:29:
3b:67:e7:72:9d:1e:27:c0:b1:b0:e1:ca:09:a1:bd:
2f:dd:3a:c0:3b:20:b1:ad:1d:a7:8d:35:e9:24:36:
30:45:db:46:93:12:dd:37:50:d4:f3:46:32:8e:8c:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:33:F8:12:07:24:32:2A:3F:B2:5F:0B:82:31:60:11:83:D4:3F:30
X509v3 Authority Key Identifier:
keyid:19:CB:D0:A4:13:62:94:21:5B:1C:24:3B:0F:02:18:CF:DD:56:5D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GcvQpBNilCFbHCQ7DwIYz91WXVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/4DP4EgckMio_sl8LgjFgEYPUPzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d4eef-7246-460e-b946-ece7826787b4/1/GcvQpBNilCFbHCQ7DwIYz91WXVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.180.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:7b:0f:42:11:61:63:16:61:3f:94:1d:6c:63:b6:b5:16:ad:
61:a2:74:66:cf:d8:d2:cb:0a:52:f0:9e:b6:73:8e:6b:73:34:
4a:20:f4:b0:01:7c:51:67:83:d0:7a:bd:cb:50:f7:bd:59:01:
83:b6:a8:6d:92:59:df:79:7b:d4:f4:1b:46:55:36:16:5a:9c:
a6:76:17:6c:cd:83:7c:59:08:20:0e:36:99:10:52:98:d4:65:
2a:46:c1:ee:8e:00:10:42:93:9d:44:8b:64:0e:21:25:85:ee:
b3:50:68:03:b0:e3:1f:d7:73:31:e8:70:f5:12:cb:f3:39:57:
eb:d7:39:69:5f:6f:e2:ef:17:53:83:ba:c6:12:3b:10:aa:e3:
63:7b:db:50:fb:9b:22:69:05:c6:4d:f4:70:c6:e7:d9:e4:e6:
a9:c7:95:bc:6f:fc:8d:97:e4:00:a9:d4:d2:83:66:0e:8c:82:
a5:db:b8:21:9d:ef:25:63:e6:b9:4b:cb:ca:15:6f:84:b0:49:
da:0c:4f:f5:d2:3a:69:bc:fd:3e:e2:a1:d7:41:36:29:ff:0d:
08:c3:0d:98:28:31:ca:d9:27:25:d0:ae:9e:80:30:10:2d:ca:
95:1f:c3:75:37:a8:d8:b9:00:03:17:bf:ea:65:26:c1:e9:96:
a2:b7:a5:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYn4hYokUwrgExX/jB+2fpEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5Y2JkMGE0MTM2Mjk0MjE1YjFjMjQzYjBmMDIxOGNmZGQ1
NjVkNTcwHhcNMjMwODE1MDkyNzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDMzZjgxMjA3MjQzMjJhM2ZiMjVmMGI4MjMxNjAxMTgzZDQzZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcc8d7alHUGkGaGEADHzqHYSVEhQ
bWYBLtMbX0YA0+Tqfqo11N+AkutIL9s5Fe4PjKWmaVoBkud/ueDjiPS/xBbULdY0
7sie566bm2t5KqSAk5B+8AEfFcHpMcDjc2hmAXcUg8XD2IHf8GoqgfS8EYjsGW7z
tGfDJtWTkxKu1pOgRJmpKpp9slmyBmsZDf0K7JSkZ1QyDwvOmIDXLPbCTjPeSAh3
7mBavk1ETiRjrTHVTLMyYYr/EdduxuuO3ESiYcdyseH9rV/IxM1dUsq6BCk7Z+dy
nR4nwLGw4coJob0v3TrAOyCxrR2njTXpJDYwRdtGkxLdN1DU80Yyjoy3MQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOAz+BIHJDIqP7JfC4IxYBGD1D8wMB8GA1UdIwQY
MBaAFBnL0KQTYpQhWxwkOw8CGM/dVl1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYt
ZWNlNzgyNjc4N2I0LzEvNERQNEVnY2tNaW9fc2w4TGdqRmdFWVBVUHpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80ZDRlZWYtNzI0Ni00NjBlLWI5NDYtZWNlNzgyNjc4N2I0
LzEvR2N2UXBCTmlsQ0ZiSENRN0R3SVl6OTFXWFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRy0MA0G
CSqGSIb3DQEBCwUAA4IBAQBbew9CEWFjFmE/lB1sY7a1Fq1honRmz9jSywpS8J62
c45rczRKIPSwAXxRZ4PQer3LUPe9WQGDtqhtklnfeXvU9BtGVTYWWpymdhdszYN8
WQggDjaZEFKY1GUqRsHujgAQQpOdRItkDiElhe6zUGgDsOMf13Mx6HD1EsvzOVfr
1zlpX2/i7xdTg7rGEjsQquNje9tQ+5siaQXGTfRwxufZ5Oapx5W8b/yNl+QAqdTS
g2YOjIKl27ghne8lY+a5S8vKFW+EsEnaDE/10jppvP0+4qHXQTYp/w0Iww2YKDHK
2Scl0K6egDAQLcqVH8N1N6jYuQADF7/qZSbB6Zait6X4
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:24 2024 by rpki-client on console-ams.rpki-client.org