Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/5O0GHutNNaRFmnxJ4JFDmUrofOI.roa
File: 5O0GHutNNaRFmnxJ4JFDmUrofOI.roa (raw, json)
Hash identifier: UQ7pfpJzwvWqbnLpAXJnQKHZKAl1mjDq9KnbRVEHzHg=
Subject key identifier: E4:ED:06:1E:EB:4D:35:A4:45:9A:7C:49:E0:91:43:99:4A:E8:7C:E2
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 01856F4B7862EF8B42A37DFB5F760CB8EFAA
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/5O0GHutNNaRFmnxJ4JFDmUrofOI.roa
Signing time: Sun 01 Jan 2023 21:44:54 +0000
ROA not before: Sun 01 Jan 2023 21:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 193.247.58.0/24 maxlen: 24
193.247.60.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:78:62:ef:8b:42:a3:7d:fb:5f:76:0c:b8:ef:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Jan 1 21:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4ed061eeb4d35a4459a7c49e09143994ae87ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ab:1f:41:09:ce:b6:50:90:82:c0:76:9a:9d:
ce:55:c5:89:06:08:3f:26:1d:85:f6:cb:1f:2b:00:
cb:bb:d1:cf:56:51:aa:d6:b3:2b:fb:16:0c:7e:c4:
b9:11:d2:4c:bc:c6:64:ca:86:03:1e:ff:c4:a7:ee:
6c:31:b9:00:15:3c:78:2e:3d:f3:ad:59:97:66:dd:
6b:d7:da:f5:dc:e7:0f:e6:19:f4:8d:e6:40:24:33:
95:cc:74:72:be:9a:65:eb:15:ec:a2:ad:ad:40:97:
6a:73:29:a6:af:58:0b:e3:4f:46:3f:76:ed:9f:e5:
47:6f:15:58:45:57:14:7b:8d:09:21:0e:d8:8b:e9:
a5:66:a8:b5:1c:95:c2:b5:62:1e:18:aa:60:dc:ff:
bb:50:d7:ee:6f:30:82:f5:71:49:71:69:e5:ed:6c:
b2:12:e3:27:67:71:0d:e1:e9:07:de:3f:cb:d4:3b:
81:e9:42:9d:7e:a4:a5:a5:6f:b6:b6:5c:18:8b:b2:
90:54:97:f2:56:c7:98:2e:5b:bc:a3:33:ea:cb:6a:
5a:47:1d:29:ad:42:c6:3b:4a:a6:fb:9e:a3:b1:40:
51:c0:92:6b:23:2a:ba:06:86:6d:69:72:06:57:59:
ec:5e:8b:13:59:51:41:23:16:16:f3:9e:c2:f9:64:
0a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:ED:06:1E:EB:4D:35:A4:45:9A:7C:49:E0:91:43:99:4A:E8:7C:E2
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/5O0GHutNNaRFmnxJ4JFDmUrofOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.58.0/24
193.247.60.0/23
Signature Algorithm: sha256WithRSAEncryption
90:fb:2e:01:c7:07:dc:e1:98:51:01:99:20:e1:af:20:fb:07:
07:a0:1e:4c:b9:f1:43:10:c8:3a:ed:db:dc:a0:d6:69:86:e2:
9e:47:53:23:8c:1e:6e:5e:e9:bf:30:a5:d0:e6:7e:51:86:76:
29:e4:1b:11:16:50:c8:bb:6e:e5:e3:7d:2f:50:33:ab:fc:fe:
02:aa:be:a7:3c:bb:1d:9d:2b:c2:7e:40:54:c9:58:34:7e:a0:
c1:6b:5a:0c:ce:89:4d:3a:f3:f4:f4:97:2e:90:c2:a7:4f:ec:
cb:58:ad:45:54:90:54:53:b2:5b:e7:46:6e:9c:58:41:04:ca:
68:0c:e6:be:f4:3d:24:5b:65:3e:69:29:fc:42:f9:4e:d5:d0:
ce:34:eb:f6:3f:4a:6a:97:14:2b:ea:a9:04:08:f3:3f:8b:72:
05:a4:b8:2c:e0:fd:bf:ae:d2:31:bd:70:e0:98:3c:af:82:2e:
5a:b0:03:6a:d3:c6:19:c6:70:6a:7f:ea:05:99:69:24:f2:b2:
6c:07:8e:c0:44:cd:4f:49:cb:b4:02:8b:33:c0:73:10:7c:58:
90:93:01:88:27:4e:b8:ef:31:db:7f:b9:55:4e:2f:82:cf:25:
7d:82:59:94:ac:97:51:3f:5e:75:7b:e8:0e:5c:5c:e0:b0:a4:
8d:5c:d9:9b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvS3hi74tCo337X3YMuO+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYTI3NTgwNjQ5YTk5MmU0MWUzMmNmOGMxMjI0NWUwN2Zm
OWY5YzUwHhcNMjMwMTAxMjE0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGVkMDYxZWViNGQzNWE0NDU5YTdjNDllMDkxNDM5OTRhZTg3Y2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArasfQQnOtlCQgsB2mp3OVcWJBgg/
Jh2F9ssfKwDLu9HPVlGq1rMr+xYMfsS5EdJMvMZkyoYDHv/Ep+5sMbkAFTx4Lj3z
rVmXZt1r19r13OcP5hn0jeZAJDOVzHRyvppl6xXsoq2tQJdqcymmr1gL409GP3bt
n+VHbxVYRVcUe40JIQ7Yi+mlZqi1HJXCtWIeGKpg3P+7UNfubzCC9XFJcWnl7Wyy
EuMnZ3EN4ekH3j/L1DuB6UKdfqSlpW+2tlwYi7KQVJfyVseYLlu8ozPqy2paRx0p
rULGO0qm+56jsUBRwJJrIyq6BoZtaXIGV1nsXosTWVFBIxYW857C+WQKqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOTtBh7rTTWkRZp8SeCRQ5lK6HziMB8GA1UdIwQY
MBaAFDCidYBkmpkuQeMs+MEiReB/+fnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMt
ZjU0ODY5OWY5NDdhLzEvNU8wR0h1dE5OYVJGbW54SjRKRkRtVXJvZk9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMtZjU0ODY5OWY5NDdh
LzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwfc6AwQB
wfc8MA0GCSqGSIb3DQEBCwUAA4IBAQCQ+y4Bxwfc4ZhRAZkg4a8g+wcHoB5MufFD
EMg67dvcoNZphuKeR1MjjB5uXum/MKXQ5n5RhnYp5BsRFlDIu27l430vUDOr/P4C
qr6nPLsdnSvCfkBUyVg0fqDBa1oMzolNOvP09JcukMKnT+zLWK1FVJBUU7Jb50Zu
nFhBBMpoDOa+9D0kW2U+aSn8QvlO1dDONOv2P0pqlxQr6qkECPM/i3IFpLgs4P2/
rtIxvXDgmDyvgi5asANq08YZxnBqf+oFmWkk8rJsB47ARM1PScu0AoszwHMQfFiQ
kwGIJ0647zHbf7lVTi+CzyV9glmUrJdRP151e+gOXFzgsKSNXNmb
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:19 2024 by rpki-client on console-fra.rpki-client.org