Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/Z3IcPbXQHi4W8g4QOcYlOLUE734.roa
File: Z3IcPbXQHi4W8g4QOcYlOLUE734.roa (raw, json)
Hash identifier: ZppWix7+HRUU+WtBd7ANbSEdQVJKUAV1DOTcXqmpkf0=
Subject key identifier: 67:72:1C:3D:B5:D0:1E:2E:16:F2:0E:10:39:C6:25:38:B5:04:EF:7E
Certificate issuer: /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial: 0188D5283EF3663E50301231358C0FD7BD1B
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/Z3IcPbXQHi4W8g4QOcYlOLUE734.roa
Signing time: Mon 19 Jun 2023 19:36:04 +0000
ROA not before: Mon 19 Jun 2023 19:36:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399989
IP address blocks: 193.135.117.0/24 maxlen: 24
193.135.116.0/24 maxlen: 24
193.135.118.0/24 maxlen: 24
193.135.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d5:28:3e:f3:66:3e:50:30:12:31:35:8c:0f:d7:bd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Validity
Not Before: Jun 19 19:36:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67721c3db5d01e2e16f20e1039c62538b504ef7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c7:2b:3d:5f:00:3a:1e:73:7e:a9:99:28:e3:
b9:c1:b6:5a:09:21:0c:0b:f4:0d:94:bd:95:12:7c:
86:d0:4d:3e:e8:d6:51:cc:e2:41:0f:7a:c6:f2:d9:
c4:b6:4b:cd:20:9a:20:7a:4f:16:d7:b1:11:19:7e:
23:4f:84:d3:67:16:4f:06:a9:d9:ac:79:84:24:74:
39:cd:5a:3d:83:54:47:74:85:36:5b:36:7e:bb:52:
ff:36:c5:6b:a5:80:ed:9d:49:e5:80:16:bc:5f:00:
4e:ea:bb:8f:9f:1c:74:66:64:d6:74:74:fa:9d:89:
d6:f0:0c:26:26:f2:5d:7b:c9:3e:9a:ad:38:65:35:
dd:29:7c:2b:88:62:d7:b0:b6:6b:17:6b:c5:77:d7:
a3:67:37:32:18:16:33:c2:4a:d7:2a:bc:bd:12:c5:
04:eb:b0:de:45:e9:d0:8d:70:e7:cb:a5:6b:2e:0b:
f7:7a:52:5f:13:dc:96:93:f9:b0:a0:4a:a8:bf:1c:
df:5a:2c:d3:12:ca:ed:81:4a:75:4c:18:0b:a8:33:
2d:8a:10:1f:68:e2:7e:ed:f5:6f:13:58:24:bb:d1:
6d:cc:ba:48:e9:e5:28:5b:ba:04:12:3a:bc:07:ca:
8c:4f:42:29:2a:fb:70:c4:fd:95:08:14:19:e5:88:
52:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:72:1C:3D:B5:D0:1E:2E:16:F2:0E:10:39:C6:25:38:B5:04:EF:7E
X509v3 Authority Key Identifier:
keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/Z3IcPbXQHi4W8g4QOcYlOLUE734.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:14:d7:c3:75:78:fd:02:71:83:ea:a5:ed:76:a2:6d:e2:9b:
ad:c6:b8:99:92:69:35:07:b7:8a:d0:20:a7:13:35:5d:75:fc:
6d:0d:3a:0d:41:8e:b3:ca:2d:5a:a7:5b:70:e6:d6:72:63:9c:
71:cc:bc:fc:cb:f3:f6:aa:6b:55:f8:4e:57:4b:82:b9:a6:04:
5e:6c:2d:91:19:25:f2:e7:2f:d2:9d:be:ff:f4:53:59:2b:df:
fd:ab:89:84:cf:09:a1:3c:95:22:3f:69:4a:72:a1:7e:7c:99:
3a:e3:0d:f2:0d:d8:24:68:c3:55:ac:44:ad:6d:51:fa:a9:e6:
06:f5:88:58:ad:40:2b:5a:60:df:d1:d4:00:e4:6e:31:36:41:
40:0b:09:db:db:7d:b7:f1:d5:81:43:c8:9d:5d:87:67:ee:c8:
56:09:af:57:eb:33:10:85:37:e5:a0:b8:10:46:79:ab:27:d6:
bb:ed:a9:ea:73:49:70:f4:e8:08:d5:5e:1b:b0:48:b7:dd:8c:
e9:1f:c9:c5:75:24:bc:98:60:3e:9d:f0:4a:34:6e:ce:db:ab:
b2:2e:93:65:95:9f:1f:f4:a9:bd:9f:ae:79:3b:51:41:4e:7c:
69:a3:fe:98:e4:8a:f7:71:f9:28:79:f1:f9:7f:2c:44:fc:86:
4d:f6:73:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjVKD7zZj5QMBIxNYwP170bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDQ4NDhiZmVmNzI0ZTI2YWJlZDNjNjVlNGU4Zjk1MDhm
YjE3OTYwHhcNMjMwNjE5MTkzNjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzcyMWMzZGI1ZDAxZTJlMTZmMjBlMTAzOWM2MjUzOGI1MDRlZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48crPV8AOh5zfqmZKOO5wbZaCSEM
C/QNlL2VEnyG0E0+6NZRzOJBD3rG8tnEtkvNIJogek8W17ERGX4jT4TTZxZPBqnZ
rHmEJHQ5zVo9g1RHdIU2WzZ+u1L/NsVrpYDtnUnlgBa8XwBO6ruPnxx0ZmTWdHT6
nYnW8AwmJvJde8k+mq04ZTXdKXwriGLXsLZrF2vFd9ejZzcyGBYzwkrXKry9EsUE
67DeRenQjXDny6VrLgv3elJfE9yWk/mwoEqovxzfWizTEsrtgUp1TBgLqDMtihAf
aOJ+7fVvE1gku9FtzLpI6eUoW7oEEjq8B8qMT0IpKvtwxP2VCBQZ5YhSawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGdyHD210B4uFvIOEDnGJTi1BO9+MB8GA1UdIwQY
MBaAFBwEhIv+9yTiar7Txl5Oj5UI+xeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFTRWlfNzNKT0pxdnRQR1hrNlBsUWo3RjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82NzI2MjktYTBlMi00NzZmLWFlYWQt
ZWUzODBiODJjZmNhLzEvWjNJY1BiWFFIaTRXOGc0UU9jWWxPTFVFNzM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny82NzI2MjktYTBlMi00NzZmLWFlYWQtZWUzODBiODJjZmNh
LzEvSEFTRWlfNzNKT0pxdnRQR1hrNlBsUWo3RjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwYd0MA0G
CSqGSIb3DQEBCwUAA4IBAQBaFNfDdXj9AnGD6qXtdqJt4putxriZkmk1B7eK0CCn
EzVddfxtDToNQY6zyi1ap1tw5tZyY5xxzLz8y/P2qmtV+E5XS4K5pgRebC2RGSXy
5y/Snb7/9FNZK9/9q4mEzwmhPJUiP2lKcqF+fJk64w3yDdgkaMNVrEStbVH6qeYG
9YhYrUArWmDf0dQA5G4xNkFACwnb23238dWBQ8idXYdn7shWCa9X6zMQhTfloLgQ
RnmrJ9a77anqc0lw9OgI1V4bsEi33YzpH8nFdSS8mGA+nfBKNG7O26uyLpNllZ8f
9Km9n655O1FBTnxpo/6Y5Ir3cfkoefH5fyxE/IZN9nMC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:20 2024 by rpki-client on console-ams.rpki-client.org