Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/SsMX4SFzmtLKklqAu6iJCjn836c.roa
File: SsMX4SFzmtLKklqAu6iJCjn836c.roa (raw, json)
Hash identifier: sCh7A5ZlOP3dmIfpz+SCYbJsMR8ZnQKcAyWulu7L1qA=
Subject key identifier: 4A:C3:17:E1:21:73:9A:D2:CA:92:5A:80:BB:A8:89:0A:39:FC:DF:A7
Certificate issuer: /CN=73d0a3ab299a6598d32bc75450021888795b3d2b
Certificate serial: 018CC64B74E3C1EEA74D4E46EB5EAB4930D1
Authority key identifier: 73:D0:A3:AB:29:9A:65:98:D3:2B:C7:54:50:02:18:88:79:5B:3D:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/SsMX4SFzmtLKklqAu6iJCjn836c.roa
Signing time: Mon 01 Jan 2024 18:31:23 +0000
ROA not before: Mon 01 Jan 2024 18:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400377
IP address blocks: 193.33.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 13:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:74:e3:c1:ee:a7:4d:4e:46:eb:5e:ab:49:30:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d0a3ab299a6598d32bc75450021888795b3d2b
Validity
Not Before: Jan 1 18:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ac317e121739ad2ca925a80bba8890a39fcdfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:5d:62:be:e2:59:15:ef:3d:e8:58:80:6b:
4d:2d:7b:b8:f7:b6:10:11:25:8b:a6:eb:1c:11:6a:
a6:82:9b:d3:0f:38:d4:9e:a0:a7:b8:88:d6:0c:3d:
70:4a:9c:29:ec:b2:e5:a5:53:b2:bf:86:3e:90:9c:
a1:27:a5:bd:80:db:20:23:d5:29:c4:b1:81:9b:fe:
a9:0f:6a:16:24:d7:e5:70:54:d8:a9:78:83:30:95:
9a:69:01:40:d1:11:6c:60:eb:aa:37:9f:ca:8c:bc:
a6:df:06:03:c2:e6:44:25:48:2d:63:a2:ce:20:b3:
f6:1e:8e:7a:3d:8e:7e:48:5a:be:02:0c:48:fe:5d:
9c:3c:8b:72:0e:d7:e7:25:d9:eb:09:1a:0c:9f:e6:
85:b8:da:e7:ef:5d:5b:a6:b9:40:b6:ba:c1:b7:eb:
0a:e6:8e:61:01:78:27:02:4f:74:f3:c6:7c:59:72:
a6:f9:fe:bc:9e:ef:09:70:5f:28:7d:82:65:c7:93:
ad:17:9c:0e:a2:02:c2:1d:ca:cc:19:7c:db:74:20:
18:4a:31:ab:d9:94:b0:cb:d5:45:da:d6:11:72:92:
4e:f2:ca:bb:26:89:78:1a:c5:70:48:38:8d:7e:ca:
6a:33:2c:ea:0f:7b:18:f5:03:4f:fc:27:33:c0:f7:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C3:17:E1:21:73:9A:D2:CA:92:5A:80:BB:A8:89:0A:39:FC:DF:A7
X509v3 Authority Key Identifier:
keyid:73:D0:A3:AB:29:9A:65:98:D3:2B:C7:54:50:02:18:88:79:5B:3D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/SsMX4SFzmtLKklqAu6iJCjn836c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.157.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f3:f0:eb:43:46:16:5c:5f:b4:31:d6:6b:78:3a:f9:fc:db:
8d:f6:f0:31:94:7f:40:ed:c3:f2:bb:60:1e:2e:b7:86:8e:53:
4f:35:aa:b8:da:5d:4b:9e:ea:9b:3e:58:1a:1e:12:de:a2:fb:
b9:c4:51:5d:6c:56:1a:f8:08:c7:6d:86:8d:ea:e8:95:04:02:
32:fd:79:61:0c:56:08:a4:84:07:65:4f:e9:42:13:b3:83:d7:
ea:fa:8d:d7:4f:6c:dc:25:f2:ea:a9:f2:77:40:5d:6d:15:0b:
2a:8b:f8:1b:7e:db:1f:d0:d7:98:45:3c:1c:59:4b:03:5f:4e:
59:d8:01:4c:95:14:87:05:71:bd:31:34:c7:ef:31:97:cb:6b:
09:3b:f7:dc:89:9d:d4:bf:a3:1c:41:25:c5:b6:8a:ee:38:8c:
14:06:28:a9:d7:5c:2b:f3:43:3b:8a:f3:8a:53:b8:f1:d3:08:
b0:90:51:0e:cb:34:3b:f3:d0:a9:52:fa:d4:82:fb:61:d5:0f:
b9:e3:7a:11:c9:af:35:1c:24:eb:4c:65:8b:03:5e:eb:87:5e:
0b:b4:a2:69:b5:5f:b2:a2:c8:08:c6:b8:cb:87:52:15:a2:37:
db:ad:95:d2:58:54:2a:88:8d:15:d9:c8:5c:06:7b:e2:29:45:
b1:e5:37:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS3Tjwe6nTU5G616rSTDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZDBhM2FiMjk5YTY1OThkMzJiYzc1NDUwMDIxODg4Nzk1
YjNkMmIwHhcNMjQwMTAxMTgzMTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWMzMTdlMTIxNzM5YWQyY2E5MjVhODBiYmE4ODkwYTM5ZmNkZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz1dYr7iWRXvPehYgGtNLXu497YQ
ESWLpuscEWqmgpvTDzjUnqCnuIjWDD1wSpwp7LLlpVOyv4Y+kJyhJ6W9gNsgI9Up
xLGBm/6pD2oWJNflcFTYqXiDMJWaaQFA0RFsYOuqN5/KjLym3wYDwuZEJUgtY6LO
ILP2Ho56PY5+SFq+AgxI/l2cPItyDtfnJdnrCRoMn+aFuNrn711bprlAtrrBt+sK
5o5hAXgnAk9088Z8WXKm+f68nu8JcF8ofYJlx5OtF5wOogLCHcrMGXzbdCAYSjGr
2ZSwy9VF2tYRcpJO8sq7Jol4GsVwSDiNfspqMyzqD3sY9QNP/CczwPcCgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFErDF+Ehc5rSypJagLuoiQo5/N+nMB8GA1UdIwQY
MBaAFHPQo6spmmWY0yvHVFACGIh5Wz0rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzlDanF5bWFaWmpUSzhkVVVBSVlpSGxiUFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yYmU3YmItYWI5OC00ZWQzLWI1ZWUt
MTBjZjY1OTQ4YTU2LzEvU3NNWDRTRnptdExLa2xxQXU2aUpDam44MzZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8yYmU3YmItYWI5OC00ZWQzLWI1ZWUtMTBjZjY1OTQ4YTU2
LzEvYzlDanF5bWFaWmpUSzhkVVVBSVlpSGxiUFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSGdMA0G
CSqGSIb3DQEBCwUAA4IBAQB78/DrQ0YWXF+0MdZreDr5/NuN9vAxlH9A7cPyu2Ae
LreGjlNPNaq42l1LnuqbPlgaHhLeovu5xFFdbFYa+AjHbYaN6uiVBAIy/XlhDFYI
pIQHZU/pQhOzg9fq+o3XT2zcJfLqqfJ3QF1tFQsqi/gbftsf0NeYRTwcWUsDX05Z
2AFMlRSHBXG9MTTH7zGXy2sJO/fciZ3Uv6McQSXFtoruOIwUBiip11wr80M7ivOK
U7jx0wiwkFEOyzQ789CpUvrUgvth1Q+543oRya81HCTrTGWLA17rh14LtKJptV+y
osgIxrjLh1IVojfbrZXSWFQqiI0V2chcBnviKUWx5Tey
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:20 2024 by rpki-client on console-ams.rpki-client.org