Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/9xSK7yfw7zGi-6UIUaBXrrmxFoM.roa
File: 9xSK7yfw7zGi-6UIUaBXrrmxFoM.roa (raw, json)
Hash identifier: C+fb1okKIASfs5JMkj3GCt9jUg0NP/1vxFCDuKSKmFI=
Subject key identifier: F7:14:8A:EF:27:F0:EF:31:A2:FB:A5:08:51:A0:57:AE:B9:B1:16:83
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018CC500C4DD7F5FE6A983E434243B3CF952
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/9xSK7yfw7zGi-6UIUaBXrrmxFoM.roa
Signing time: Mon 01 Jan 2024 12:30:11 +0000
ROA not before: Mon 01 Jan 2024 12:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 193.108.56.0/24 maxlen: 24
193.108.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 11:11:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:c4:dd:7f:5f:e6:a9:83:e4:34:24:3b:3c:f9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 1 12:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7148aef27f0ef31a2fba50851a057aeb9b11683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:40:02:2f:4b:ab:79:2e:f4:d2:89:28:0a:53:
9e:7d:0b:9f:a5:b4:93:54:55:94:9c:f5:a0:1c:c2:
b3:10:9d:35:3d:2f:02:b1:b2:1d:a7:9c:82:e6:e0:
49:51:84:1a:f3:61:20:c0:4f:69:0b:e7:4a:2c:ac:
20:8b:35:d2:d9:a5:e8:fa:11:ca:9e:c8:fd:88:92:
35:35:da:70:e9:fb:4d:49:5d:41:ff:0f:99:52:21:
de:76:27:11:00:a2:50:a7:59:ee:2d:c9:05:e6:45:
7c:ac:f6:45:0d:6e:cc:ba:ed:8b:d6:d7:6c:c3:92:
77:39:62:9b:98:04:15:f3:92:df:18:f0:22:86:a5:
33:d8:1c:09:e6:93:81:cf:ec:fa:50:a3:ce:d1:fd:
75:de:3d:19:97:e4:fd:44:37:dd:65:4c:b6:f9:9d:
dc:af:f5:97:ea:e5:2d:84:c0:d0:6a:f8:5f:fc:9a:
47:f8:89:24:33:a9:57:a6:94:81:15:53:89:de:95:
5a:55:b7:75:1b:74:26:7f:87:a1:38:eb:01:ba:7a:
0c:a4:2f:49:d8:fb:f0:00:66:ed:f5:9f:4f:01:bc:
9e:f4:71:97:f2:f8:6b:28:38:a7:00:dd:a8:ea:17:
6a:78:4b:a0:fd:8e:7c:c2:fc:9c:c1:83:7d:9b:e7:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:14:8A:EF:27:F0:EF:31:A2:FB:A5:08:51:A0:57:AE:B9:B1:16:83
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/9xSK7yfw7zGi-6UIUaBXrrmxFoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.56.0/24
193.108.104.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e0:41:2a:52:30:f8:61:7c:bd:34:1a:0c:de:fc:94:5f:7e:
87:93:7c:95:ae:2b:83:db:dc:9b:18:88:7f:60:04:aa:31:e4:
94:15:3e:e6:8e:82:e1:6f:de:54:80:75:d4:51:eb:de:aa:44:
51:46:2a:3c:7e:b3:8d:b2:67:ec:17:97:1e:ce:c4:cc:76:12:
62:88:30:1c:f8:6e:04:93:77:7a:54:66:34:37:92:02:26:c7:
3b:a7:15:af:db:58:14:15:e8:25:d7:54:c9:b5:55:3c:33:c8:
24:db:63:dc:dc:58:8b:fe:12:cc:21:ce:af:d7:23:1b:f0:19:
63:48:9c:be:ee:07:86:cc:89:82:50:fb:e0:87:59:10:70:3e:
e9:c5:b8:f5:eb:fc:48:f7:0e:5d:9d:11:98:4a:e4:48:c4:cf:
e6:b9:8a:0d:1e:e1:28:c0:0a:47:eb:07:4c:e2:63:8a:45:b6:
63:36:27:c8:0d:16:41:1b:57:78:6e:02:35:a3:21:58:8c:4f:
3b:7e:5a:7d:a9:8e:78:93:a4:5d:86:5c:82:e2:fa:b1:da:c8:
60:e6:01:29:0a:4e:dd:b8:aa:5d:31:db:57:09:7e:2e:14:88:
1a:71:db:60:1d:dc:cc:eb:58:97:c8:38:76:53:47:db:d8:82:
95:7a:6e:6e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzFAMTdf1/mqYPkNCQ7PPlSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjQwMTAxMTIzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzE0OGFlZjI3ZjBlZjMxYTJmYmE1MDg1MWEwNTdhZWI5YjExNjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUACL0ureS700okoClOefQufpbST
VFWUnPWgHMKzEJ01PS8CsbIdp5yC5uBJUYQa82EgwE9pC+dKLKwgizXS2aXo+hHK
nsj9iJI1Ndpw6ftNSV1B/w+ZUiHedicRAKJQp1nuLckF5kV8rPZFDW7Muu2L1tds
w5J3OWKbmAQV85LfGPAihqUz2BwJ5pOBz+z6UKPO0f113j0Zl+T9RDfdZUy2+Z3c
r/WX6uUthMDQavhf/JpH+IkkM6lXppSBFVOJ3pVaVbd1G3Qmf4ehOOsBunoMpC9J
2PvwAGbt9Z9PAbye9HGX8vhrKDinAN2o6hdqeEug/Y58wvycwYN9m+dWzwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPcUiu8n8O8xovulCFGgV665sRaDMB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvOXhTSzd5Znc3ekdpLTZVSVVhQlhycm14Rm9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwWw4AwQA
wWxoMA0GCSqGSIb3DQEBCwUAA4IBAQCT4EEqUjD4YXy9NBoM3vyUX36Hk3yVriuD
29ybGIh/YASqMeSUFT7mjoLhb95UgHXUUeveqkRRRio8frONsmfsF5cezsTMdhJi
iDAc+G4Ek3d6VGY0N5ICJsc7pxWv21gUFegl11TJtVU8M8gk22Pc3FiL/hLMIc6v
1yMb8BljSJy+7geGzImCUPvgh1kQcD7pxbj16/xI9w5dnRGYSuRIxM/muYoNHuEo
wApH6wdM4mOKRbZjNifIDRZBG1d4bgI1oyFYjE87flp9qY54k6RdhlyC4vqx2shg
5gEpCk7duKpdMdtXCX4uFIgacdtgHdzM61iXyDh2U0fb2IKVem5u
-----END CERTIFICATE-----
Generated at Tue Apr 9 14:36:28 2024 by rpki-client on console-fra.rpki-client.org