Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TjWDlgek530D2wsxDldqqcGGw_8.roa
File: TjWDlgek530D2wsxDldqqcGGw_8.roa (raw, json)
Hash identifier: 8MhK089P4R+HIXnRBGYV4zVGQnkJhMFhDB+UjAEM2Hc=
Subject key identifier: 4E:35:83:96:07:A4:E7:7D:03:DB:0B:31:0E:57:6A:A9:C1:86:C3:FF
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7AAF2C0EB4BEA7C66B69715DD29A3
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TjWDlgek530D2wsxDldqqcGGw_8.roa
Signing time: Mon 02 Jan 2023 08:44:51 +0000
ROA not before: Mon 02 Jan 2023 08:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202470
IP address blocks: 193.30.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:aa:f2:c0:eb:4b:ea:7c:66:b6:97:15:dd:29:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e35839607a4e77d03db0b310e576aa9c186c3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b8:24:31:65:f8:c7:fb:05:bb:13:8b:38:61:
2d:62:a9:71:c7:a3:1a:56:47:91:64:0b:d5:c1:13:
48:a9:30:50:a9:1a:16:f0:16:73:ab:d5:7b:13:54:
86:a1:9f:dc:3f:4d:f7:3f:c1:9b:51:b4:4c:b6:e2:
e2:5c:f9:3c:5c:18:3d:36:22:c7:18:e8:01:65:1e:
77:8d:2d:e2:3a:e4:6b:5b:d0:df:f9:31:12:0e:fc:
a7:d3:c5:e7:b6:85:af:c1:fc:83:e0:0b:95:0b:e9:
84:d4:a5:f2:6c:ce:25:74:e2:d3:18:a5:39:63:18:
48:c6:0f:19:f1:36:36:35:cd:cd:ed:03:c4:df:67:
30:72:88:ca:fd:07:f4:10:c3:6c:cc:66:08:35:aa:
e4:8b:e9:66:c6:a9:cb:77:3b:b6:54:66:69:69:2f:
3b:09:4a:8b:58:1b:06:e3:39:9b:3f:5c:e6:e1:c9:
8b:bb:af:b1:e7:eb:32:f9:9f:b6:a3:c7:43:41:ad:
e9:c9:ff:82:ed:56:99:ac:a5:7b:c3:10:4a:8d:23:
dd:91:a9:5c:42:e8:ae:be:9c:8b:8d:e7:e7:03:3a:
af:92:f8:41:30:27:17:11:82:28:a3:fe:f1:f4:69:
36:01:c3:a5:7e:b8:5a:41:6e:1f:6e:a2:69:cc:59:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:35:83:96:07:A4:E7:7D:03:DB:0B:31:0E:57:6A:A9:C1:86:C3:FF
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TjWDlgek530D2wsxDldqqcGGw_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.30.0/24
Signature Algorithm: sha256WithRSAEncryption
51:42:2b:44:5a:68:48:61:be:2d:a2:56:2f:3f:54:4a:bf:c8:
ff:ab:96:d0:bb:14:ba:30:7c:4c:8b:56:76:f0:d4:00:b3:b3:
3a:42:ef:e2:80:54:f6:7f:57:cb:3e:06:74:8f:40:93:c7:84:
e8:57:51:f2:b9:aa:6b:a1:9e:af:78:86:a1:a5:d6:d6:50:42:
3b:75:61:f2:e0:4c:a3:28:ed:8e:82:2e:4c:0c:e8:63:35:96:
f7:b4:87:dd:d7:59:da:c3:3b:52:27:12:0c:29:31:28:35:53:
dc:92:c9:ff:d7:88:0b:a0:c5:25:c9:8d:c6:d4:2c:04:59:ee:
2c:09:3f:a6:d7:cd:74:15:d9:10:8e:32:4c:f4:26:50:40:e8:
c7:66:dd:ca:09:16:74:5f:e4:ff:64:e8:bb:5d:c3:4c:c3:e2:
b8:69:44:80:b0:13:98:cf:dd:3e:23:5c:cd:e0:3e:5b:60:67:
bb:3b:f2:6e:69:11:d6:cf:50:4c:4d:2f:0e:e8:4c:25:70:7b:
09:ef:c3:04:c9:83:03:db:79:2d:46:5a:34:e1:3a:db:2e:cb:
b3:92:4d:34:13:b0:52:25:73:74:9d:8c:6b:1f:d0:18:d6:e9:
cb:03:13:f2:bf:41:0b:f6:0b:73:83:e1:c9:28:ea:a8:f9:3d:
18:e9:81:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxp6rywOtL6nxmtpcV3SmjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMwMTAyMDg0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTM1ODM5NjA3YTRlNzdkMDNkYjBiMzEwZTU3NmFhOWMxODZjM2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrgkMWX4x/sFuxOLOGEtYqlxx6Ma
VkeRZAvVwRNIqTBQqRoW8BZzq9V7E1SGoZ/cP033P8GbUbRMtuLiXPk8XBg9NiLH
GOgBZR53jS3iOuRrW9Df+TESDvyn08XntoWvwfyD4AuVC+mE1KXybM4ldOLTGKU5
YxhIxg8Z8TY2Nc3N7QPE32cwcojK/Qf0EMNszGYINarki+lmxqnLdzu2VGZpaS87
CUqLWBsG4zmbP1zm4cmLu6+x5+sy+Z+2o8dDQa3pyf+C7VaZrKV7wxBKjSPdkalc
QuiuvpyLjefnAzqvkvhBMCcXEYIoo/7x9Gk2AcOlfrhaQW4fbqJpzFnwmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE41g5YHpOd9A9sLMQ5XaqnBhsP/MB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvVGpXRGxnZWs1MzBEMndzeERsZHFxY0dHd184LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR4eMA0G
CSqGSIb3DQEBCwUAA4IBAQBRQitEWmhIYb4tolYvP1RKv8j/q5bQuxS6MHxMi1Z2
8NQAs7M6Qu/igFT2f1fLPgZ0j0CTx4ToV1HyuaproZ6veIahpdbWUEI7dWHy4Eyj
KO2Ogi5MDOhjNZb3tIfd11nawztSJxIMKTEoNVPcksn/14gLoMUlyY3G1CwEWe4s
CT+m1810FdkQjjJM9CZQQOjHZt3KCRZ0X+T/ZOi7XcNMw+K4aUSAsBOYz90+I1zN
4D5bYGe7O/JuaRHWz1BMTS8O6EwlcHsJ78MEyYMD23ktRlo04TrbLsuzkk00E7BS
JXN0nYxrH9AY1unLAxPyv0EL9gtzg+HJKOqo+T0Y6YHi
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:06 2024 by rpki-client on console-ams.rpki-client.org