Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/N6lNdtWriNuvALqIJTZNgnhMqME.roa
File: N6lNdtWriNuvALqIJTZNgnhMqME.roa (raw, json)
Hash identifier: MAP/xjAKJBKm/igwFePNAUpfr6AB25mYzGkA9xIa4UI=
Subject key identifier: 37:A9:4D:76:D5:AB:88:DB:AF:00:BA:88:25:36:4D:82:78:4C:A8:C1
Certificate issuer: /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial: 018BC51BD79C350222F3D3C16BB18B6C4A9B
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/N6lNdtWriNuvALqIJTZNgnhMqME.roa
Signing time: Sun 12 Nov 2023 19:56:57 +0000
ROA not before: Sun 12 Nov 2023 19:56:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211493
IP address blocks: 193.32.84.0/24 maxlen: 24
2a10:d2c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c5:1b:d7:9c:35:02:22:f3:d3:c1:6b:b1:8b:6c:4a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Validity
Not Before: Nov 12 19:56:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37a94d76d5ab88dbaf00ba8825364d82784ca8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:75:66:3c:10:24:20:29:cf:77:a0:2d:75:5c:
6e:b6:1f:e1:85:09:72:e9:12:eb:96:46:0c:db:1f:
91:7a:a8:a1:34:16:bc:10:6a:a5:4b:7f:fc:55:1c:
e4:1d:68:05:ef:d9:75:50:19:d6:12:03:4e:32:d3:
20:59:2a:01:6b:0d:df:86:a5:ab:82:a9:8d:e4:f2:
63:7f:c0:c6:97:85:f7:5a:a8:5d:ce:94:c3:5b:6f:
42:0c:4a:9f:bf:48:08:0c:c7:bc:dc:7d:55:b6:db:
8f:d1:ca:14:c7:75:d9:48:d3:d3:80:5e:14:28:8b:
96:c8:a0:87:02:3d:eb:59:02:ae:ec:dd:d8:0f:62:
81:d2:de:3c:ac:1f:24:22:0a:28:a7:c3:a0:c6:fe:
d7:ed:1d:ac:9d:ca:e5:60:c9:3b:2b:67:a2:2d:b7:
f6:ce:41:f5:aa:24:9a:33:88:de:44:a5:00:02:f1:
3c:c6:c8:41:1c:3a:cd:f3:0a:5f:dc:a2:5b:e3:00:
69:ee:5d:d3:27:98:24:c4:3e:b2:07:db:38:78:75:
93:3c:d5:b1:72:52:8e:4a:5e:80:ee:c4:33:1f:c4:
e2:18:27:2a:fe:24:17:f7:4d:91:a5:0d:8c:0e:40:
b2:bd:9a:50:98:a7:73:66:b9:3f:e8:59:04:fc:01:
ee:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A9:4D:76:D5:AB:88:DB:AF:00:BA:88:25:36:4D:82:78:4C:A8:C1
X509v3 Authority Key Identifier:
keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/N6lNdtWriNuvALqIJTZNgnhMqME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.84.0/24
IPv6:
2a10:d2c0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:91:1b:21:fe:70:73:00:36:27:46:db:f1:1d:cb:e0:e6:db:
12:30:8b:02:c0:a2:c4:f3:b4:07:6f:68:61:4d:e4:4f:9f:8e:
a6:ef:27:7b:f7:28:5b:48:48:78:6a:0c:34:d4:ec:33:23:63:
29:f0:f2:86:ee:fb:09:c0:a6:52:44:ad:d2:2b:90:1f:2e:a2:
20:fe:a1:88:98:5e:e2:d2:bd:c0:58:0a:61:71:31:81:78:f5:
5d:67:fa:38:4b:4b:5e:f1:ea:94:fa:9f:3a:88:64:59:35:40:
b9:e4:fe:2d:90:17:4f:f9:d8:13:53:e4:66:2c:f2:35:f2:18:
5f:f5:71:25:b3:67:bc:f3:3b:f0:5b:84:44:e4:ff:51:37:cc:
18:5f:cd:2d:14:a3:ba:e2:fc:53:f5:96:89:57:dc:eb:c4:f0:
f4:37:71:71:41:29:37:33:08:a8:b3:d0:23:59:b8:aa:00:ff:
06:be:be:25:56:34:32:76:78:04:f7:47:b8:f7:d8:04:21:c9:
be:ba:91:5f:af:35:ab:eb:0c:02:7b:91:40:ca:bc:51:62:9d:
58:db:df:f3:56:b6:dd:85:88:1e:8d:3b:84:c8:e9:37:a9:79:
d9:30:5f:82:c9:f9:79:84:22:c7:9f:36:36:71:d6:4e:a7:96:
03:8b:88:81
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYvFG9ecNQIi89PBa7GLbEqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYTBkNTg2OGM3YTQxZDZmZTlkY2JjZjkzODA1YWM0MmNi
ZGJkYmYwHhcNMjMxMTEyMTk1NjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2E5NGQ3NmQ1YWI4OGRiYWYwMGJhODgyNTM2NGQ4Mjc4NGNhOGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinVmPBAkICnPd6AtdVxuth/hhQly
6RLrlkYM2x+ReqihNBa8EGqlS3/8VRzkHWgF79l1UBnWEgNOMtMgWSoBaw3fhqWr
gqmN5PJjf8DGl4X3WqhdzpTDW29CDEqfv0gIDMe83H1VttuP0coUx3XZSNPTgF4U
KIuWyKCHAj3rWQKu7N3YD2KB0t48rB8kIgoop8Ogxv7X7R2sncrlYMk7K2eiLbf2
zkH1qiSaM4jeRKUAAvE8xshBHDrN8wpf3KJb4wBp7l3TJ5gkxD6yB9s4eHWTPNWx
clKOSl6A7sQzH8TiGCcq/iQX902RpQ2MDkCyvZpQmKdzZrk/6FkE/AHutwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDepTXbVq4jbrwC6iCU2TYJ4TKjBMB8GA1UdIwQY
MBaAFAGg1YaMekHW/p3Lz5OAWsQsvb2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWFEVmhveDZRZGItbmN2UGs0QmF4Q3k5dmI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mY2RiZWUtZGI5ZC00NmI4LTllMDMt
MTQ2ZTBiMTc4MDg1LzEvTjZsTmR0V3JpTnV2QUxxSUpUWk5nbmhNcU1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mY2RiZWUtZGI5ZC00NmI4LTllMDMtMTQ2ZTBiMTc4MDg1
LzEvQWFEVmhveDZRZGItbmN2UGs0QmF4Q3k5dmI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSBUMA0E
AgACMAcDBQAqENLAMA0GCSqGSIb3DQEBCwUAA4IBAQArkRsh/nBzADYnRtvxHcvg
5tsSMIsCwKLE87QHb2hhTeRPn46m7yd79yhbSEh4agw01OwzI2Mp8PKG7vsJwKZS
RK3SK5AfLqIg/qGImF7i0r3AWAphcTGBePVdZ/o4S0te8eqU+p86iGRZNUC55P4t
kBdP+dgTU+RmLPI18hhf9XEls2e88zvwW4RE5P9RN8wYX80tFKO64vxT9ZaJV9zr
xPD0N3FxQSk3Mwios9AjWbiqAP8Gvr4lVjQydngE90e499gEIcm+upFfrzWr6wwC
e5FAyrxRYp1Y29/zVrbdhYgejTuEyOk3qXnZMF+Cyfl5hCLHnzY2cdZOp5YDi4iB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:17 2024 by rpki-client on console-fra.rpki-client.org