Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/wQalElWXJrr0jt1THDagnY5Pn7M.roa
File: wQalElWXJrr0jt1THDagnY5Pn7M.roa (raw, json)
Hash identifier: glnGApJfqq6/zElwEOonSnsJTGAKbTE62AN0pdllXxg=
Subject key identifier: C1:06:A5:12:55:97:26:BA:F4:8E:DD:53:1C:36:A0:9D:8E:4F:9F:B3
Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial: 018616E327EA96164BE1557BF75AFF30A6C9
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/wQalElWXJrr0jt1THDagnY5Pn7M.roa
Signing time: Fri 03 Feb 2023 10:47:10 +0000
ROA not before: Fri 03 Feb 2023 10:47:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206941
IP address blocks: 193.164.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:16:e3:27:ea:96:16:4b:e1:55:7b:f7:5a:ff:30:a6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Validity
Not Before: Feb 3 10:47:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c106a512559726baf48edd531c36a09d8e4f9fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:e0:d1:89:0e:c0:5c:b8:72:8c:c8:16:ec:
cf:50:25:26:67:6f:83:e8:aa:ed:29:1d:35:5c:02:
da:5e:ff:69:21:9e:ba:cb:33:7d:d7:40:ad:e9:8e:
06:dd:91:90:4d:78:df:00:47:14:d1:82:36:2a:6c:
bb:44:92:bc:fe:0e:6d:89:03:13:24:db:82:a7:71:
c5:ac:5b:23:0e:03:ae:4a:49:a2:22:fb:3f:4e:c4:
ee:92:93:13:82:6c:c8:2b:42:3d:f2:d4:ac:fc:88:
27:e8:9b:d9:c9:75:ac:53:b5:96:76:cc:70:6e:df:
27:1b:8c:db:18:cc:07:fc:cb:89:cf:bd:42:98:27:
b2:c1:4c:6c:e5:51:46:df:bb:63:f6:db:ee:bd:3a:
ef:f8:e0:f5:81:de:72:16:05:46:92:d5:b1:89:1f:
57:5e:dc:69:0a:dd:5e:d5:51:b6:fd:d1:4f:25:f6:
76:26:bd:c0:9f:17:83:07:1f:0f:cd:6a:e7:42:72:
c7:10:c8:43:96:22:0d:c6:09:01:26:99:1a:06:6f:
4f:52:90:46:77:30:91:64:cd:0c:e9:1e:41:9e:e3:
3a:c7:dd:04:a8:cd:a0:9d:c9:c0:dd:1e:94:cb:eb:
94:aa:d9:c4:33:98:ab:5d:77:23:85:80:02:25:a9:
64:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:06:A5:12:55:97:26:BA:F4:8E:DD:53:1C:36:A0:9D:8E:4F:9F:B3
X509v3 Authority Key Identifier:
keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/wQalElWXJrr0jt1THDagnY5Pn7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.164.90.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:8f:20:25:7f:69:9c:e1:47:88:dc:8e:45:f8:b6:28:97:48:
7a:09:7d:02:ac:57:08:25:08:8e:b8:2e:b9:2f:27:e1:23:c8:
10:ab:83:77:7c:5d:bf:70:c5:32:28:d3:00:cc:1f:57:9a:ff:
bc:d7:8e:07:15:40:14:4f:de:2c:dd:b8:e2:bd:03:f6:bc:6c:
f6:c6:d6:36:92:39:38:7a:c9:7f:b3:eb:72:30:a6:fb:d0:f9:
5d:a3:33:09:ee:e7:4c:fd:34:6b:15:48:0b:75:8a:1d:4e:d5:
f5:fa:cf:2f:cf:ec:a7:e6:8c:5c:a6:b5:fb:69:81:72:00:ed:
e3:13:0b:7f:ce:8d:41:f9:7f:b0:3a:12:b5:10:8e:3c:8f:4c:
c9:ae:13:b8:f7:ac:f8:6c:a6:9d:4c:8c:17:c8:29:68:f2:cf:
b5:03:ef:a4:e4:be:58:65:09:6e:d8:64:0e:64:9f:8a:ba:6e:
7a:d4:da:14:6f:f6:16:e9:90:39:30:a7:0d:7e:8a:10:37:0c:
42:de:51:6b:14:06:82:4b:12:6d:f7:8a:5b:e8:e5:9e:77:4a:
d7:e3:f8:e8:ae:bd:55:06:76:c1:37:7e:6c:af:52:68:92:ab:
78:13:0e:e5:b1:d7:80:44:e2:c3:2c:37:a0:ca:0d:9f:fd:4a:
bb:1c:7d:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYW4yfqlhZL4VV791r/MKbJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNjk4YzFjZGM2NmRjMjg1ZDBmODA3NjI5YzQ2MjYxYTg4
YjJkZTcwHhcNMjMwMjAzMTA0NzEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTA2YTUxMjU1OTcyNmJhZjQ4ZWRkNTMxYzM2YTA5ZDhlNGY5ZmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWvg0YkOwFy4cozIFuzPUCUmZ2+D
6KrtKR01XALaXv9pIZ66yzN910Ct6Y4G3ZGQTXjfAEcU0YI2Kmy7RJK8/g5tiQMT
JNuCp3HFrFsjDgOuSkmiIvs/TsTukpMTgmzIK0I98tSs/Ign6JvZyXWsU7WWdsxw
bt8nG4zbGMwH/MuJz71CmCeywUxs5VFG37tj9tvuvTrv+OD1gd5yFgVGktWxiR9X
XtxpCt1e1VG2/dFPJfZ2Jr3AnxeDBx8PzWrnQnLHEMhDliINxgkBJpkaBm9PUpBG
dzCRZM0M6R5BnuM6x90EqM2gncnA3R6Uy+uUqtnEM5irXXcjhYACJalkKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMEGpRJVlya69I7dUxw2oJ2OT5+zMB8GA1UdIwQY
MBaAFCFpjBzcZtwoXQ+AdinEYmGoiy3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWIt
NGQ3MzczMGY3ZDMyLzEvd1FhbEVsV1hKcnIwanQxVEhEYWduWTVQbjdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWItNGQ3MzczMGY3ZDMy
LzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaRaMA0G
CSqGSIb3DQEBCwUAA4IBAQA7jyAlf2mc4UeI3I5F+LYol0h6CX0CrFcIJQiOuC65
LyfhI8gQq4N3fF2/cMUyKNMAzB9Xmv+8144HFUAUT94s3bjivQP2vGz2xtY2kjk4
esl/s+tyMKb70PldozMJ7udM/TRrFUgLdYodTtX1+s8vz+yn5oxcprX7aYFyAO3j
Ewt/zo1B+X+wOhK1EI48j0zJrhO496z4bKadTIwXyClo8s+1A++k5L5YZQlu2GQO
ZJ+Kum561NoUb/YW6ZA5MKcNfooQNwxC3lFrFAaCSxJt94pb6OWed0rX4/jorr1V
BnbBN35sr1Jokqt4Ew7lsdeAROLDLDegyg2f/Uq7HH13
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:26 2024 by rpki-client on console-fra.rpki-client.org