Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/cGv5f7yGrWZ6p5xQdvdz0ttGfsg.roa
File: cGv5f7yGrWZ6p5xQdvdz0ttGfsg.roa (raw, json)
Hash identifier: EQCWlh66NYm/QNgEj95nkNdIczfZap0Svi6mN/z7Y94=
Subject key identifier: 70:6B:F9:7F:BC:86:AD:66:7A:A7:9C:50:76:F7:73:D2:DB:46:7E:C8
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 0190D98CC2AB569C795ED5F33B16B543ECF1
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/cGv5f7yGrWZ6p5xQdvdz0ttGfsg.roa
Signing time: Mon 22 Jul 2024 08:26:38 +0000
ROA not before: Mon 22 Jul 2024 08:26:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 193.108.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 12:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:8c:c2:ab:56:9c:79:5e:d5:f3:3b:16:b5:43:ec:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jul 22 08:26:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=706bf97fbc86ad667aa79c5076f773d2db467ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3e:ff:3b:92:09:6b:c0:ce:fe:68:49:a5:8d:
20:bc:4f:f3:b0:63:46:62:db:af:4e:d8:77:22:55:
77:a2:fb:96:bd:5e:c8:f1:db:b3:f9:97:b9:19:76:
6d:e8:e3:f0:75:63:91:99:df:1e:f9:57:8f:d4:fc:
65:31:74:44:a0:5d:08:9f:8a:7a:86:fa:39:c9:ff:
b5:5b:84:eb:18:4b:cc:37:42:fd:12:96:de:ec:2b:
1c:c5:83:bc:4e:04:1d:ba:02:67:1a:d4:b0:9a:87:
be:58:84:bb:40:0b:6e:fb:b5:93:02:34:b1:95:10:
1a:70:ee:6b:ae:b4:68:f2:06:66:54:8f:da:75:41:
d9:3a:da:ea:62:0b:85:dd:8e:d6:4d:e3:90:5b:70:
ab:a8:57:64:56:4e:1b:d8:dc:a1:05:64:e2:78:13:
82:7c:bf:6c:47:f7:9a:ff:e3:41:69:98:8f:a4:d5:
4a:71:16:fe:72:b2:79:59:cc:94:44:63:37:ad:ed:
d1:25:e3:3f:33:c3:21:59:7e:70:02:6e:f0:60:20:
bd:1b:c2:83:ce:4e:84:c3:21:e0:7e:50:cd:9f:d9:
9b:fc:13:cd:bf:06:a6:63:f9:6f:a5:a0:5a:81:9d:
98:64:1f:f5:7f:f2:56:63:fa:e7:d5:a5:06:f6:dd:
1e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:F9:7F:BC:86:AD:66:7A:A7:9C:50:76:F7:73:D2:DB:46:7E:C8
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/cGv5f7yGrWZ6p5xQdvdz0ttGfsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.59.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:1f:3d:c3:81:4d:0c:bf:1c:00:e8:68:78:fe:40:6a:3e:11:
ab:bc:69:8d:49:e7:9a:c9:d7:d6:60:59:ad:10:70:83:54:ad:
2b:96:75:5a:ac:7e:89:f4:92:b3:86:c7:c2:8e:7f:cc:3b:e1:
0c:8e:76:8e:21:7d:79:41:be:6f:ee:1c:02:e6:27:b7:7e:c6:
49:cd:09:9f:1a:f6:cc:95:f5:89:6c:5d:be:f9:e7:3a:39:a8:
cb:8e:be:0e:94:de:08:7c:91:93:48:ba:d2:65:58:35:9f:55:
c9:af:b2:a1:28:0d:0a:9a:52:80:e6:26:37:cf:80:94:8b:23:
26:89:a2:09:f7:4c:95:02:17:16:1e:03:fa:91:9f:f1:bc:4a:
29:b8:88:7d:02:3a:01:69:1b:1d:7b:44:da:0f:9b:b5:25:ae:
78:d2:84:90:8d:f4:2e:32:96:8c:8d:5c:b6:d5:2b:0b:19:05:
6b:7e:29:fd:ef:a1:9b:e6:2d:ac:fe:f2:6a:09:a3:ab:5a:84:
7f:60:83:2f:45:1f:29:63:4c:5c:52:90:76:20:32:f1:e4:8d:
0f:ff:f8:51:14:c1:68:fa:53:b3:fd:7a:ae:a8:aa:68:89:43:
c6:e2:ab:f2:99:08:75:81:c6:69:56:df:6c:32:95:77:10:d9:
f9:e8:34:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDZjMKrVpx5XtXzOxa1Q+zxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjQwNzIyMDgyNjM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDZiZjk3ZmJjODZhZDY2N2FhNzljNTA3NmY3NzNkMmRiNDY3ZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtz7/O5IJa8DO/mhJpY0gvE/zsGNG
YtuvTth3IlV3ovuWvV7I8duz+Ze5GXZt6OPwdWORmd8e+VeP1PxlMXREoF0In4p6
hvo5yf+1W4TrGEvMN0L9Epbe7CscxYO8TgQdugJnGtSwmoe+WIS7QAtu+7WTAjSx
lRAacO5rrrRo8gZmVI/adUHZOtrqYguF3Y7WTeOQW3CrqFdkVk4b2NyhBWTieBOC
fL9sR/ea/+NBaZiPpNVKcRb+crJ5WcyURGM3re3RJeM/M8MhWX5wAm7wYCC9G8KD
zk6EwyHgflDNn9mb/BPNvwamY/lvpaBagZ2YZB/1f/JWY/rn1aUG9t0eZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHBr+X+8hq1meqecUHb3c9LbRn7IMB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvY0d2NWY3eUdyV1o2cDV4UWR2ZHowdHRHZnNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWw7MA0G
CSqGSIb3DQEBCwUAA4IBAQCsHz3DgU0MvxwA6Gh4/kBqPhGrvGmNSeeaydfWYFmt
EHCDVK0rlnVarH6J9JKzhsfCjn/MO+EMjnaOIX15Qb5v7hwC5ie3fsZJzQmfGvbM
lfWJbF2++ec6OajLjr4OlN4IfJGTSLrSZVg1n1XJr7KhKA0KmlKA5iY3z4CUiyMm
iaIJ90yVAhcWHgP6kZ/xvEopuIh9AjoBaRsde0TaD5u1Ja540oSQjfQuMpaMjVy2
1SsLGQVrfin976Gb5i2s/vJqCaOrWoR/YIMvRR8pY0xcUpB2IDLx5I0P//hRFMFo
+lOz/XquqKpoiUPG4qvymQh1gcZpVt9sMpV3ENn56DQl
-----END CERTIFICATE-----
Generated at Thu Jul 25 14:55:53 2024 by rpki-client on console-fra.rpki-client.org