Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/ruR0xT2PlKZxsdUFHfWX0xk0wmQ.roa
File: ruR0xT2PlKZxsdUFHfWX0xk0wmQ.roa (raw, json)
Hash identifier: roUSYbET9XpdIqzrynRp3n11dhqbxeWTnsq3S2+FADA=
Subject key identifier: AE:E4:74:C5:3D:8F:94:A6:71:B1:D5:05:1D:F5:97:D3:19:34:C2:64
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 0187BDD67707225EBA7A6E24690C09C87AD3
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/ruR0xT2PlKZxsdUFHfWX0xk0wmQ.roa
Signing time: Wed 26 Apr 2023 13:52:41 +0000
ROA not before: Wed 26 Apr 2023 13:52:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47456
IP address blocks: 193.105.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:d6:77:07:22:5e:ba:7a:6e:24:69:0c:09:c8:7a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Apr 26 13:52:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aee474c53d8f94a671b1d5051df597d31934c264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f5:6e:41:1e:53:03:c7:73:c5:15:04:98:28:
7c:bc:6f:f0:c8:48:fe:9c:5d:55:b9:e7:16:a5:45:
c9:34:ef:b0:a1:4c:56:6f:2c:bd:31:9b:0e:ea:2a:
31:bd:9e:2a:ec:a8:e5:0f:b7:10:ca:0d:e6:df:53:
ca:aa:6f:da:3b:d7:d4:95:b9:5a:d9:dd:46:b5:f4:
fc:9d:8b:1d:00:f7:7e:4c:d5:19:2c:29:0c:da:7a:
23:3b:f2:c5:70:bc:09:ae:e8:e2:7b:5f:66:0d:50:
10:9a:0d:7a:8e:71:bb:86:29:d2:1f:cf:a4:6f:e2:
48:60:6c:b9:82:62:78:e7:df:f8:0d:d1:e7:e4:c8:
4f:14:0d:a8:fc:4f:d6:fd:9c:1b:fc:aa:2c:04:1f:
e6:f5:16:6c:c1:f6:18:64:ce:65:83:e7:9e:9e:cb:
ae:0d:3e:aa:ac:bc:67:db:18:85:59:db:72:d5:e3:
9c:98:0b:85:ad:3c:8d:bf:d1:0b:24:a6:c1:ad:54:
e9:14:3a:e9:c8:45:04:b6:8a:72:f6:20:95:6c:62:
7f:c9:b1:7f:22:bb:3e:eb:a7:db:9b:d1:29:08:f6:
6a:17:d6:7b:19:ba:ee:53:d8:38:b4:72:07:14:28:
bd:11:0e:a4:00:56:40:65:6e:15:e3:07:26:6d:b6:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E4:74:C5:3D:8F:94:A6:71:B1:D5:05:1D:F5:97:D3:19:34:C2:64
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/ruR0xT2PlKZxsdUFHfWX0xk0wmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.11.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b2:6a:ed:8c:09:d9:d2:25:74:68:8b:63:04:23:76:a5:59:
f5:2f:d8:88:09:dc:6c:92:90:5e:69:03:b6:bc:86:e7:c5:eb:
62:93:94:68:5c:75:62:89:f1:14:72:13:fc:25:f0:a0:59:d4:
14:cf:95:c4:22:c2:6c:3d:b6:26:38:36:88:19:13:fa:9e:69:
43:78:b2:61:b0:ab:4a:18:cb:50:b1:4c:de:7d:ae:a7:8f:55:
60:06:44:d2:d7:c0:b5:fe:1a:bb:89:82:5f:f0:62:4c:74:11:
ea:27:07:38:13:f1:41:53:82:89:9d:3f:4a:47:5a:e0:4f:f8:
d8:8c:fa:48:f3:3d:a1:ad:fb:3d:75:4c:1c:56:c4:6a:58:4c:
2b:8c:65:16:0c:e5:82:8b:b7:58:9e:2a:4b:90:a3:4b:87:f8:
7c:99:d5:08:18:32:cb:7d:39:ee:ad:2f:79:9d:7b:ce:97:34:
8b:17:4b:f5:32:51:7a:be:20:24:01:f4:d2:76:d2:1b:63:df:
a1:f4:16:40:e7:39:b2:53:74:13:93:d4:b9:fa:56:ee:b0:ef:
20:6c:2a:1d:d0:dc:5f:18:a4:57:d8:1e:ac:af:31:33:33:d6:
1b:1a:5c:66:9e:d2:a5:21:1d:e0:57:ec:83:23:29:68:ef:46:
73:d1:8b:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYe91ncHIl66em4kaQwJyHrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy
NzAxMjMwHhcNMjMwNDI2MTM1MjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWU0NzRjNTNkOGY5NGE2NzFiMWQ1MDUxZGY1OTdkMzE5MzRjMjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPVuQR5TA8dzxRUEmCh8vG/wyEj+
nF1VuecWpUXJNO+woUxWbyy9MZsO6ioxvZ4q7KjlD7cQyg3m31PKqm/aO9fUlbla
2d1GtfT8nYsdAPd+TNUZLCkM2nojO/LFcLwJrujie19mDVAQmg16jnG7hinSH8+k
b+JIYGy5gmJ459/4DdHn5MhPFA2o/E/W/Zwb/KosBB/m9RZswfYYZM5lg+eensuu
DT6qrLxn2xiFWdty1eOcmAuFrTyNv9ELJKbBrVTpFDrpyEUEtopy9iCVbGJ/ybF/
Irs+66fbm9EpCPZqF9Z7GbruU9g4tHIHFCi9EQ6kAFZAZW4V4wcmbbZOVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK7kdMU9j5SmcbHVBR31l9MZNMJkMB8GA1UdIwQY
MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt
YmZiNGJhMzBlNDVhLzEvcnVSMHhUMlBsS1p4c2RVRkhmV1gweGswd21RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh
LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWkLMA0G
CSqGSIb3DQEBCwUAA4IBAQAfsmrtjAnZ0iV0aItjBCN2pVn1L9iICdxskpBeaQO2
vIbnxetik5RoXHViifEUchP8JfCgWdQUz5XEIsJsPbYmODaIGRP6nmlDeLJhsKtK
GMtQsUzefa6nj1VgBkTS18C1/hq7iYJf8GJMdBHqJwc4E/FBU4KJnT9KR1rgT/jY
jPpI8z2hrfs9dUwcVsRqWEwrjGUWDOWCi7dYnipLkKNLh/h8mdUIGDLLfTnurS95
nXvOlzSLF0v1MlF6viAkAfTSdtIbY9+h9BZA5zmyU3QTk9S5+lbusO8gbCod0Nxf
GKRX2B6srzEzM9YbGlxmntKlIR3gV+yDIylo70Zz0YuD
-----END CERTIFICATE-----
Generated at Fri Aug 18 14:45:28 2023 by rpki-client on console-fra.rpki-client.org