Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/IrM-SH7G2OmYgaIvaGIKLgt0pig.roa
File: IrM-SH7G2OmYgaIvaGIKLgt0pig.roa (raw, json)
Hash identifier: 1YvBGWcipCX9lGP5SWgsSC+CeR8Rvs4ImWrsrcWMbzo=
Subject key identifier: 22:B3:3E:48:7E:C6:D8:E9:98:81:A2:2F:68:62:0A:2E:0B:74:A6:28
Certificate issuer: /CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Certificate serial: 018572713B9B0467ADC58D385ABFF1A207FE
Authority key identifier: 98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/IrM-SH7G2OmYgaIvaGIKLgt0pig.roa
Signing time: Mon 02 Jan 2023 12:25:01 +0000
ROA not before: Mon 02 Jan 2023 12:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31192
IP address blocks: 193.26.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:3b:9b:04:67:ad:c5:8d:38:5a:bf:f1:a2:07:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9826d90deb1016289dc0ef8c44b534e9fb271b5b
Validity
Not Before: Jan 2 12:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22b33e487ec6d8e99881a22f68620a2e0b74a628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:e0:cd:e3:52:b7:bf:83:72:df:7a:8c:71:
25:91:6a:e6:dd:ef:c2:fc:26:2c:29:77:c7:02:39:
20:85:b1:da:eb:44:30:37:c0:20:46:7d:98:5b:4e:
78:68:da:39:42:36:e5:2f:a4:b7:b2:01:bc:31:0a:
1a:e9:c2:69:0a:21:70:51:9e:04:e6:29:26:61:82:
6e:d4:4e:2b:19:8d:56:4e:2a:47:7d:69:62:82:3c:
6e:6a:e2:88:d2:42:ba:44:e2:a9:d1:82:ae:df:bd:
52:0f:13:4e:70:d9:8c:95:bc:ce:aa:04:53:74:4f:
5d:e5:50:0c:54:b4:ff:13:4c:01:6d:89:9f:08:f7:
29:5f:7b:81:ec:e9:d6:61:ea:55:06:b1:4c:3f:da:
65:a0:c7:2a:ce:af:20:16:35:87:de:57:b8:71:f0:
61:7b:dc:17:cb:6a:8a:c1:b0:be:d8:a3:62:48:4d:
35:e6:a7:b5:3e:44:27:06:54:53:1d:49:b5:ce:4c:
d0:c8:02:3c:bc:b0:3a:77:28:6c:62:48:31:7c:a7:
01:19:dc:78:ef:c5:19:52:9a:71:44:38:98:08:da:
33:45:b8:dd:cd:af:81:a8:a8:59:90:5d:8d:27:10:
51:63:09:82:81:51:46:4d:4c:d5:fc:e9:f2:53:9f:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B3:3E:48:7E:C6:D8:E9:98:81:A2:2F:68:62:0A:2E:0B:74:A6:28
X509v3 Authority Key Identifier:
keyid:98:26:D9:0D:EB:10:16:28:9D:C0:EF:8C:44:B5:34:E9:FB:27:1B:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCbZDesQFiidwO-MRLU06fsnG1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/IrM-SH7G2OmYgaIvaGIKLgt0pig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/853849-be2e-432f-87a6-a64dad67b735/1/mCbZDesQFiidwO-MRLU06fsnG1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.135.0/24
Signature Algorithm: sha256WithRSAEncryption
06:1f:85:dc:ec:00:d1:f8:81:2b:f9:e9:b9:89:0b:7e:73:c5:
6e:45:ec:de:83:61:7f:92:de:00:1a:a2:27:79:fc:c7:2f:5d:
ef:c1:e4:65:f9:98:bf:02:85:53:1d:a2:99:9a:6f:6d:d6:2f:
15:da:02:01:52:11:bb:86:eb:af:ec:f7:e5:49:ef:88:4e:9a:
b7:b4:d5:75:c4:55:0d:4e:12:10:7a:12:d3:a5:47:71:63:5e:
db:79:5a:fd:e4:66:39:55:d2:6d:5b:04:b0:db:ca:bc:fe:d4:
0a:50:7d:08:75:b8:55:68:16:31:0d:02:1f:4f:a0:01:43:ce:
d5:00:e7:e5:d3:b3:70:69:d0:52:f0:de:3d:96:d1:8e:f3:7a:
d4:e1:4e:0a:23:62:b3:c6:24:96:be:26:d0:f5:ef:3d:e2:9f:
47:ab:f8:a9:42:36:ab:22:ee:73:9b:46:0a:12:fb:c9:99:c4:
85:be:9c:d6:2f:9a:91:8d:fd:44:4e:61:92:9e:9f:f3:8a:1f:
15:fa:ef:a9:0e:e6:64:8d:b3:67:82:5a:b1:68:06:2f:7e:04:
2a:d5:bb:82:2f:f2:26:71:7c:51:76:c7:ab:4d:93:cd:91:9d:
87:b5:78:3f:bf:2f:73:69:20:d2:fa:96:e9:26:ee:1b:71:a0:
24:64:af:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVycTubBGetxY04Wr/xogf+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MjZkOTBkZWIxMDE2Mjg5ZGMwZWY4YzQ0YjUzNGU5ZmIy
NzFiNWIwHhcNMjMwMTAyMTIyNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmIzM2U0ODdlYzZkOGU5OTg4MWEyMmY2ODYyMGEyZTBiNzRhNjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+XgzeNSt7+Dct96jHElkWrm3e/C
/CYsKXfHAjkghbHa60QwN8AgRn2YW054aNo5QjblL6S3sgG8MQoa6cJpCiFwUZ4E
5ikmYYJu1E4rGY1WTipHfWligjxuauKI0kK6ROKp0YKu371SDxNOcNmMlbzOqgRT
dE9d5VAMVLT/E0wBbYmfCPcpX3uB7OnWYepVBrFMP9ploMcqzq8gFjWH3le4cfBh
e9wXy2qKwbC+2KNiSE015qe1PkQnBlRTHUm1zkzQyAI8vLA6dyhsYkgxfKcBGdx4
78UZUppxRDiYCNozRbjdza+BqKhZkF2NJxBRYwmCgVFGTUzV/OnyU5+t7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCKzPkh+xtjpmIGiL2hiCi4LdKYoMB8GA1UdIwQY
MBaAFJgm2Q3rEBYoncDvjES1NOn7JxtbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NTM4NDktYmUyZS00MzJmLTg3YTYt
YTY0ZGFkNjdiNzM1LzEvSXJNLVNIN0cyT21ZZ2FJdmFHSUtMZ3QwcGlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NTM4NDktYmUyZS00MzJmLTg3YTYtYTY0ZGFkNjdiNzM1
LzEvbUNiWkRlc1FGaWlkd08tTVJMVTA2ZnNuRzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRqHMA0G
CSqGSIb3DQEBCwUAA4IBAQAGH4Xc7ADR+IEr+em5iQt+c8VuRezeg2F/kt4AGqIn
efzHL13vweRl+Zi/AoVTHaKZmm9t1i8V2gIBUhG7huuv7PflSe+ITpq3tNV1xFUN
ThIQehLTpUdxY17beVr95GY5VdJtWwSw28q8/tQKUH0IdbhVaBYxDQIfT6ABQ87V
AOfl07NwadBS8N49ltGO83rU4U4KI2KzxiSWvibQ9e894p9Hq/ipQjarIu5zm0YK
EvvJmcSFvpzWL5qRjf1ETmGSnp/zih8V+u+pDuZkjbNnglqxaAYvfgQq1buCL/Im
cXxRdserTZPNkZ2HtXg/vy9zaSDS+pbpJu4bcaAkZK9O
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org