Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/27EFxypq5sYCYbZxVem8Ve346eI.roa
File: 27EFxypq5sYCYbZxVem8Ve346eI.roa (raw, json)
Hash identifier: mnIIhj2WKFabsthVdAJiui5i+up358M1NifvLKKNn7s=
Subject key identifier: DB:B1:05:C7:2A:6A:E6:C6:02:61:B6:71:55:E9:BC:55:ED:F8:E9:E2
Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial: 01856B255FFA60A952F6A2516F9A51E28DAB
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/27EFxypq5sYCYbZxVem8Ve346eI.roa
Signing time: Sun 01 Jan 2023 02:24:49 +0000
ROA not before: Sun 01 Jan 2023 02:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2852
IP address blocks: 193.84.116.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:25:5f:fa:60:a9:52:f6:a2:51:6f:9a:51:e2:8d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Validity
Not Before: Jan 1 02:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbb105c72a6ae6c60261b67155e9bc55edf8e9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:6d:67:8c:99:a2:a6:df:66:89:59:53:ce:
34:ec:18:d2:54:21:4f:62:3f:30:c3:31:26:02:cb:
21:35:56:e9:1e:c2:3e:aa:a3:fd:94:75:47:80:55:
5c:a0:d2:f1:9c:ce:5a:e6:aa:21:81:47:02:df:d8:
31:db:9b:59:67:3b:ea:a4:c4:74:24:8b:cf:57:39:
7a:50:47:da:42:fc:7c:fe:13:69:d5:de:f2:ad:5e:
71:e2:ec:bd:58:28:a5:bd:48:6a:20:85:12:42:d9:
23:5d:b4:e8:13:9d:a1:ce:19:89:64:e1:4c:ee:21:
19:a2:06:d8:e8:75:f0:27:1f:ae:dd:0b:f0:32:dd:
2c:b6:a6:32:3f:f7:2c:6f:d7:a9:33:26:48:98:75:
9f:7f:34:99:db:13:a2:a2:c3:a6:f1:05:1f:01:80:
ee:6b:b5:36:b5:53:7c:6f:ce:3d:56:1e:16:07:13:
37:21:59:aa:86:d6:5d:b3:55:fd:25:1d:ed:02:c4:
9b:e6:55:dd:7e:4d:d9:62:34:02:74:7d:9d:f3:d1:
e4:c3:24:dc:21:41:f3:b0:4a:18:92:2e:d5:b9:d8:
ac:c2:81:b1:a7:79:1a:cd:6c:f3:51:35:48:c8:96:
21:13:5b:3c:1c:54:61:28:b8:7d:19:e4:d2:17:50:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B1:05:C7:2A:6A:E6:C6:02:61:B6:71:55:E9:BC:55:ED:F8:E9:E2
X509v3 Authority Key Identifier:
keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/27EFxypq5sYCYbZxVem8Ve346eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.116.0/23
Signature Algorithm: sha256WithRSAEncryption
59:2b:1d:bd:43:f1:83:89:0e:de:70:d2:c6:be:75:5f:d7:60:
e1:3b:6f:d5:45:ea:6d:a1:8c:ef:4b:db:67:c3:a4:3b:51:38:
fe:15:e7:2d:b6:4f:14:48:86:ed:7c:64:99:c3:19:f4:fd:b4:
ec:3d:9e:7b:a2:07:45:d7:5d:08:bc:bd:c7:36:56:38:5b:be:
98:73:b0:a0:08:cc:35:5a:bc:6a:c4:4d:0f:48:2d:47:04:d7:
ab:5a:cd:d8:fa:25:ba:d5:c6:3e:69:4b:f5:57:1f:b3:90:b5:
91:14:e0:41:0f:7c:2d:8c:4f:31:c9:a8:ad:3c:8b:24:f2:b7:
c2:4f:18:15:c6:2e:20:78:7a:60:94:9a:e4:ba:a3:ab:8f:91:
13:31:39:de:d4:9b:77:47:f0:29:c4:52:76:33:9f:bd:72:d7:
62:6d:dc:34:f9:3e:00:89:0a:22:fe:3b:e3:a8:72:54:62:73:
67:0a:71:b7:a0:d0:36:22:9c:2c:94:f2:e4:da:e0:b0:17:cb:
4b:28:34:25:18:bc:4b:b7:0e:46:ab:10:50:f1:6c:d3:a4:02:
5f:ae:44:91:91:0e:cc:72:35:85:ca:7b:86:ea:9a:21:04:c4:
5a:b0:51:0d:7c:c8:6e:b0:b3:4a:bb:68:78:b9:b3:25:72:b9:
09:c6:20:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrJV/6YKlS9qJRb5pR4o2rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzQxMzViYjA3YzY1NDBjZDMwN2JkYTA4Y2EwNjc0YmM4
NGM5MzkwHhcNMjMwMTAxMDIyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmIxMDVjNzJhNmFlNmM2MDI2MWI2NzE1NWU5YmM1NWVkZjhlOWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlttZ4yZoqbfZolZU8407BjSVCFP
Yj8wwzEmAsshNVbpHsI+qqP9lHVHgFVcoNLxnM5a5qohgUcC39gx25tZZzvqpMR0
JIvPVzl6UEfaQvx8/hNp1d7yrV5x4uy9WCilvUhqIIUSQtkjXbToE52hzhmJZOFM
7iEZogbY6HXwJx+u3QvwMt0stqYyP/csb9epMyZImHWffzSZ2xOiosOm8QUfAYDu
a7U2tVN8b849Vh4WBxM3IVmqhtZds1X9JR3tAsSb5lXdfk3ZYjQCdH2d89HkwyTc
IUHzsEoYki7VudiswoGxp3kazWzzUTVIyJYhE1s8HFRhKLh9GeTSF1CEoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNuxBccqaubGAmG2cVXpvFXt+OniMB8GA1UdIwQY
MBaAFJ50E1uwfGVAzTB72gjKBnS8hMk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQt
NWRjODBmYWVkMmRjLzEvMjdFRnh5cHE1c1lDWWJaeFZlbThWZTM0NmVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQtNWRjODBmYWVkMmRj
LzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwVR0MA0G
CSqGSIb3DQEBCwUAA4IBAQBZKx29Q/GDiQ7ecNLGvnVf12DhO2/VReptoYzvS9tn
w6Q7UTj+Fecttk8USIbtfGSZwxn0/bTsPZ57ogdF110IvL3HNlY4W76Yc7CgCMw1
WrxqxE0PSC1HBNerWs3Y+iW61cY+aUv1Vx+zkLWRFOBBD3wtjE8xyaitPIsk8rfC
TxgVxi4geHpglJrkuqOrj5ETMTne1Jt3R/ApxFJ2M5+9ctdibdw0+T4AiQoi/jvj
qHJUYnNnCnG3oNA2IpwslPLk2uCwF8tLKDQlGLxLtw5GqxBQ8WzTpAJfrkSRkQ7M
cjWFynuG6pohBMRasFENfMhusLNKu2h4ubMlcrkJxiBY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:45 2024 by rpki-client on console-ams.rpki-client.org