Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JroXSewuTlqL8acAPutFzZNknBE.roa
File: JroXSewuTlqL8acAPutFzZNknBE.roa (raw, json)
Hash identifier: l2u/uEuBAZWFTYAPOkoRVxIEaXveXfd8HKc+kSVvGyo=
Subject key identifier: 26:BA:17:49:EC:2E:4E:5A:8B:F1:A7:00:3E:EB:45:CD:93:64:9C:11
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0189B667B941810CAE4BA99DA5D07E95C423
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JroXSewuTlqL8acAPutFzZNknBE.roa
Signing time: Wed 02 Aug 2023 13:19:58 +0000
ROA not before: Wed 02 Aug 2023 13:19:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213382
IP address blocks: 93.186.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:67:b9:41:81:0c:ae:4b:a9:9d:a5:d0:7e:95:c4:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 2 13:19:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26ba1749ec2e4e5a8bf1a7003eeb45cd93649c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7a:ba:e3:39:ca:b6:4b:4e:43:f0:8e:0c:88:
c0:72:f1:18:96:52:ad:e1:8a:34:42:50:48:00:c8:
2b:8b:69:e5:d4:4e:14:c4:1f:64:98:4a:0c:47:dc:
fd:eb:d8:3b:3c:9c:ac:ad:d3:53:13:a7:b7:d2:b4:
ed:d8:89:9f:6d:d1:78:25:4a:1b:b3:80:46:eb:31:
24:3e:d1:20:47:3b:f2:93:19:86:87:32:07:67:89:
77:0e:2e:50:b8:2a:b7:2f:9f:bf:ba:1a:8b:00:5d:
c5:10:2e:85:c9:e8:e0:e1:3e:c2:c1:70:03:86:1d:
e6:77:48:a4:78:8d:89:a0:db:61:77:9f:6a:17:5e:
0b:bc:da:9a:77:20:64:ae:af:7b:0b:dd:2d:3e:8a:
e0:b2:fc:4a:26:60:6c:44:ca:75:e2:c5:38:af:77:
98:c1:d9:9e:89:92:41:da:00:34:b1:2b:0d:62:3e:
b6:40:f8:4f:79:be:5e:27:e7:d8:ad:8a:99:e2:94:
ea:77:6e:22:06:56:95:de:25:56:04:10:3a:1b:82:
17:39:3e:e6:0c:39:37:fc:2a:69:46:e8:a7:2d:76:
72:fb:e0:e2:cd:17:3a:34:31:50:01:15:26:3d:0c:
3a:04:9c:8c:e7:81:21:7f:25:ed:37:d4:1f:af:fe:
65:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BA:17:49:EC:2E:4E:5A:8B:F1:A7:00:3E:EB:45:CD:93:64:9C:11
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/JroXSewuTlqL8acAPutFzZNknBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.186.69.0/24
Signature Algorithm: sha256WithRSAEncryption
70:78:5a:03:2f:df:16:4c:90:aa:5d:61:98:f7:27:35:1f:a6:
f0:95:d4:ff:70:3c:e8:b1:a7:74:34:33:69:a0:a5:30:41:ea:
fe:a3:5d:7f:d4:cb:cc:1a:84:7b:78:bd:a7:25:cf:64:fa:43:
fb:09:d0:b6:9a:77:3f:c5:53:00:1d:21:07:f9:e2:ab:72:de:
70:5b:54:d5:86:ed:30:15:7b:a7:21:3f:1a:38:d0:a4:b7:13:
a3:1d:f8:55:3c:0e:51:33:11:40:f4:63:0e:be:f4:6f:b8:d8:
06:78:3f:36:a9:96:a5:94:dc:89:49:ee:35:8c:2d:82:8a:c8:
1d:97:39:ad:44:ec:62:64:f8:d2:13:d9:ea:c7:89:c0:b8:2d:
47:30:d4:ac:be:71:eb:87:30:3c:71:89:6a:bb:ef:a0:2b:31:
39:21:87:fb:2f:04:01:26:29:59:b8:41:6b:f7:fa:3f:90:f9:
57:f4:60:58:c0:20:c7:4f:dd:9e:a1:2f:19:c5:8c:1c:e4:6f:
81:fc:06:50:bd:54:a7:3a:d0:7d:f3:d4:86:0e:c7:20:05:fa:
46:01:87:8f:04:e8:58:b0:05:5a:e0:5b:54:90:93:e2:0b:1c:
cc:92:88:b7:07:1c:cf:7e:7e:fd:0a:7f:c7:40:93:43:d8:82:
72:7a:33:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYm2Z7lBgQyuS6mdpdB+lcQjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwODAyMTMxOTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmJhMTc0OWVjMmU0ZTVhOGJmMWE3MDAzZWViNDVjZDkzNjQ5YzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXq64znKtktOQ/CODIjAcvEYllKt
4Yo0QlBIAMgri2nl1E4UxB9kmEoMR9z969g7PJysrdNTE6e30rTt2ImfbdF4JUob
s4BG6zEkPtEgRzvykxmGhzIHZ4l3Di5QuCq3L5+/uhqLAF3FEC6Fyejg4T7CwXAD
hh3md0ikeI2JoNthd59qF14LvNqadyBkrq97C90tPorgsvxKJmBsRMp14sU4r3eY
wdmeiZJB2gA0sSsNYj62QPhPeb5eJ+fYrYqZ4pTqd24iBlaV3iVWBBA6G4IXOT7m
DDk3/CppRuinLXZy++DizRc6NDFQARUmPQw6BJyM54EhfyXtN9Qfr/5lFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCa6F0nsLk5ai/GnAD7rRc2TZJwRMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvSnJvWFNld3VUbHFMOGFjQVB1dEZ6Wk5rbkJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbpFMA0G
CSqGSIb3DQEBCwUAA4IBAQBweFoDL98WTJCqXWGY9yc1H6bwldT/cDzosad0NDNp
oKUwQer+o11/1MvMGoR7eL2nJc9k+kP7CdC2mnc/xVMAHSEH+eKrct5wW1TVhu0w
FXunIT8aONCktxOjHfhVPA5RMxFA9GMOvvRvuNgGeD82qZallNyJSe41jC2Cisgd
lzmtROxiZPjSE9nqx4nAuC1HMNSsvnHrhzA8cYlqu++gKzE5IYf7LwQBJilZuEFr
9/o/kPlX9GBYwCDHT92eoS8ZxYwc5G+B/AZQvVSnOtB989SGDscgBfpGAYePBOhY
sAVa4FtUkJPiCxzMkoi3BxzPfn79Cn/HQJND2IJyejPf
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:57 2024 by rpki-client on console-ams.rpki-client.org