Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/KlPqW6lO_WBf0leQgDGPVtKScLg.roa
File: KlPqW6lO_WBf0leQgDGPVtKScLg.roa (raw, json)
Hash identifier: tiZhiQg8jMOeWwfmAZuzzOEFRm71V7F4rcLomSiJrOk=
Subject key identifier: 2A:53:EA:5B:A9:4E:FD:60:5F:D2:57:90:80:31:8F:56:D2:92:70:B8
Certificate issuer: /CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Certificate serial: 01856F4B7959F86CFFF5D5ED6BFB301D538E
Authority key identifier: 30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/KlPqW6lO_WBf0leQgDGPVtKScLg.roa
Signing time: Sun 01 Jan 2023 21:44:55 +0000
ROA not before: Sun 01 Jan 2023 21:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206225
IP address blocks: 193.247.48.0/21 maxlen: 24
193.247.56.0/23 maxlen: 23
193.247.62.0/23 maxlen: 23
193.247.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:79:59:f8:6c:ff:f5:d5:ed:6b:fb:30:1d:53:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30a27580649a992e41e32cf8c12245e07ff9f9c5
Validity
Not Before: Jan 1 21:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a53ea5ba94efd605fd2579080318f56d29270b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4c:07:07:a6:06:03:9b:08:50:96:b7:c8:2c:
7e:38:d3:da:17:29:7b:3c:cd:3e:d2:45:b4:80:53:
a7:ad:0f:19:06:cc:d2:70:aa:78:70:b3:ab:04:a8:
85:e9:61:b3:72:26:4a:98:95:ca:03:d7:13:d6:20:
53:a6:5e:27:8e:e7:72:36:6b:61:dd:08:5a:63:3f:
32:2b:bf:db:f4:10:11:ce:fc:32:08:16:b3:b4:d1:
f2:a0:64:30:ad:6f:7d:b7:2d:f8:c2:0e:02:ae:9b:
d9:96:c4:00:10:30:69:3a:1d:0c:d4:b1:a6:18:1b:
4c:ca:7d:9d:7c:9f:44:a7:df:07:15:a0:5b:ea:06:
c6:c5:f0:81:2c:0d:0b:54:ce:3c:dd:f8:58:4d:67:
be:94:d2:82:fe:66:c5:f2:64:77:5f:b9:70:f4:cf:
c0:44:4f:8d:04:d2:68:02:69:ab:83:e6:9a:81:ab:
db:05:c5:73:2f:a1:ca:23:54:02:c4:ca:25:e7:3b:
1e:06:42:21:dc:a7:46:78:be:61:b1:fd:a3:93:9d:
47:9d:7e:7b:b4:28:8c:e1:c3:8a:f3:4d:da:f6:a8:
9a:8d:72:1d:60:a9:07:c1:be:7b:2a:a4:bf:ee:0b:
b8:a1:b2:51:4f:1c:b6:86:f1:f7:ba:f5:05:ed:1a:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:53:EA:5B:A9:4E:FD:60:5F:D2:57:90:80:31:8F:56:D2:92:70:B8
X509v3 Authority Key Identifier:
keyid:30:A2:75:80:64:9A:99:2E:41:E3:2C:F8:C1:22:45:E0:7F:F9:F9:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJ1gGSamS5B4yz4wSJF4H_5-cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/KlPqW6lO_WBf0leQgDGPVtKScLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/29b42b-566e-43e9-a2dc-f548699f947a/1/MKJ1gGSamS5B4yz4wSJF4H_5-cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.48.0-193.247.57.255
193.247.59.0/24
193.247.62.0/23
Signature Algorithm: sha256WithRSAEncryption
91:f5:cd:44:2d:eb:56:0f:65:2c:a8:3f:9e:fd:c4:41:54:54:
55:1f:95:cf:f2:e2:2c:3d:58:ee:49:e9:b4:4c:3f:ae:cc:ac:
9a:de:c3:58:34:80:0b:4f:c7:d6:fa:ae:10:81:62:21:b9:07:
66:1d:ed:f2:07:41:e6:b8:2d:ab:01:fc:21:d0:c4:11:df:46:
99:12:a4:e4:58:1f:7d:58:ee:9c:97:39:89:3b:1e:29:d9:8e:
49:53:95:69:66:78:7c:da:86:33:17:4c:01:41:ad:80:63:6d:
8a:ef:9b:8d:ad:14:6c:0d:86:b1:7c:0e:de:42:d8:bf:96:4c:
eb:38:cb:a7:4b:91:ec:10:94:47:1d:5c:5c:46:56:27:56:36:
91:68:64:55:2f:47:59:6f:37:e1:e2:db:2e:50:88:3c:be:71:
eb:13:a8:87:4f:f2:db:c5:23:ee:00:51:cf:d7:ac:55:d9:1e:
71:65:01:4b:d9:98:d7:3a:d4:38:62:49:e9:29:7b:48:25:f5:
03:af:f2:1c:4f:0e:d3:26:b9:0e:84:1d:40:b8:76:50:fc:f7:
a5:62:a3:f1:fc:73:86:48:b9:5e:d7:5e:29:61:b7:b1:8e:b1:
50:64:9f:20:2e:c1:dd:d0:a7:50:bc:7c:2a:a6:7e:53:c2:10:
de:60:e5:a6
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYVvS3lZ+Gz/9dXta/swHVOOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYTI3NTgwNjQ5YTk5MmU0MWUzMmNmOGMxMjI0NWUwN2Zm
OWY5YzUwHhcNMjMwMTAxMjE0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTUzZWE1YmE5NGVmZDYwNWZkMjU3OTA4MDMxOGY1NmQyOTI3MGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEwHB6YGA5sIUJa3yCx+ONPaFyl7
PM0+0kW0gFOnrQ8ZBszScKp4cLOrBKiF6WGzciZKmJXKA9cT1iBTpl4njudyNmth
3QhaYz8yK7/b9BARzvwyCBaztNHyoGQwrW99ty34wg4CrpvZlsQAEDBpOh0M1LGm
GBtMyn2dfJ9Ep98HFaBb6gbGxfCBLA0LVM483fhYTWe+lNKC/mbF8mR3X7lw9M/A
RE+NBNJoAmmrg+aagavbBcVzL6HKI1QCxMol5zseBkIh3KdGeL5hsf2jk51HnX57
tCiM4cOK803a9qiajXIdYKkHwb57KqS/7gu4obJRTxy2hvH3uvUF7RqAnwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFCpT6lupTv1gX9JXkIAxj1bSknC4MB8GA1UdIwQY
MBaAFDCidYBkmpkuQeMs+MEiReB/+fnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMt
ZjU0ODY5OWY5NDdhLzEvS2xQcVc2bE9fV0JmMGxlUWdER1BWdEtTY0xnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yOWI0MmItNTY2ZS00M2U5LWEyZGMtZjU0ODY5OWY5NDdh
LzEvTUtKMWdHU2FtUzVCNHl6NHdTSkY0SF81LWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBATB9zAD
BAHB9zgDBADB9zsDBAHB9z4wDQYJKoZIhvcNAQELBQADggEBAJH1zUQt61YPZSyo
P579xEFUVFUflc/y4iw9WO5J6bRMP67MrJrew1g0gAtPx9b6rhCBYiG5B2Yd7fIH
Qea4LasB/CHQxBHfRpkSpORYH31Y7pyXOYk7HinZjklTlWlmeHzahjMXTAFBrYBj
bYrvm42tFGwNhrF8Dt5C2L+WTOs4y6dLkewQlEcdXFxGVidWNpFoZFUvR1lvN+Hi
2y5QiDy+cesTqIdP8tvFI+4AUc/XrFXZHnFlAUvZmNc61DhiSekpe0gl9QOv8hxP
DtMmuQ6EHUC4dlD896Vio/H8c4ZIuV7XXilht7GOsVBknyAuwd3Qp1C8fCqmflPC
EN5g5aY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:29 2024 by rpki-client on console-fra.rpki-client.org