Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/AlRrNjc6jCUqQ6cuuy7ZqCrsQcM.roa
File: AlRrNjc6jCUqQ6cuuy7ZqCrsQcM.roa (raw, json)
Hash identifier: Yzey3MHNbnO7tJx70ARSdPWs9JShhc2rOCyP/WGY7pw=
Subject key identifier: 02:54:6B:36:37:3A:8C:25:2A:43:A7:2E:BB:2E:D9:A8:2A:EC:41:C3
Certificate issuer: /CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Certificate serial: 01856F79719525AE18EAB218DEC29C6A84A3
Authority key identifier: 4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/AlRrNjc6jCUqQ6cuuy7ZqCrsQcM.roa
Signing time: Sun 01 Jan 2023 22:35:07 +0000
ROA not before: Sun 01 Jan 2023 22:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35343
IP address blocks: 193.47.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:71:95:25:ae:18:ea:b2:18:de:c2:9c:6a:84:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb1104bba5a3f1ddd2deebba3481919f4f961a4
Validity
Not Before: Jan 1 22:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02546b36373a8c252a43a72ebb2ed9a82aec41c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:40:1d:a4:ae:79:3d:32:41:7b:39:43:5f:8c:
f0:d8:5d:15:1a:7e:a9:d2:5b:38:3c:2e:8f:5f:34:
3d:67:63:ff:ad:24:f6:b1:1f:28:4e:a2:d9:7f:06:
8e:b4:55:47:6d:ff:00:4d:c2:2c:69:a4:d1:cf:c4:
fb:d6:55:56:fb:2f:04:e3:9a:94:ac:6a:08:fe:4a:
52:77:c3:35:9a:a0:c9:d3:03:6f:9f:52:a1:16:8a:
e4:99:ed:dd:1e:c9:50:7f:e3:70:be:26:cf:91:8b:
9e:c4:b1:cc:01:04:ef:96:69:e3:c3:44:67:1e:17:
1d:46:0f:f1:c8:ab:b3:fe:ae:db:25:27:24:ee:b3:
75:e2:2e:20:27:3f:3e:3c:f5:84:3e:e1:c1:41:62:
23:7a:49:9b:08:9a:83:c1:21:9b:fb:94:03:0e:cd:
de:63:c8:b9:d5:c4:ee:09:cd:0b:93:ea:89:5e:15:
05:83:57:ba:f4:68:26:0e:80:b9:9a:8c:71:34:be:
a9:a1:90:7e:36:ee:f0:50:f9:a0:8a:aa:79:0d:79:
42:4c:29:ca:76:e3:41:f5:f9:66:b7:5c:06:4c:76:
ab:a7:37:04:19:7c:b6:d3:48:c4:00:37:36:54:8b:
7b:81:de:c0:84:dc:66:ff:e1:45:c1:9b:e6:fd:a5:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:54:6B:36:37:3A:8C:25:2A:43:A7:2E:BB:2E:D9:A8:2A:EC:41:C3
X509v3 Authority Key Identifier:
keyid:4F:B1:10:4B:BA:5A:3F:1D:DD:2D:EE:BB:A3:48:19:19:F4:F9:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7EQS7paPx3dLe67o0gZGfT5YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/AlRrNjc6jCUqQ6cuuy7ZqCrsQcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/89ee94-5010-44ad-9e17-436ab4ade0a7/1/T7EQS7paPx3dLe67o0gZGfT5YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.136.0/24
Signature Algorithm: sha256WithRSAEncryption
54:43:9e:b9:1b:9a:31:9c:f4:7f:68:64:73:a4:87:f4:de:c2:
1d:9b:a1:66:28:8d:d1:b6:d3:c4:61:5e:a8:65:6b:6a:41:51:
da:31:65:b9:1b:d9:64:47:ce:c4:37:ae:2d:7a:35:17:e2:90:
be:d1:e6:14:2d:9b:e8:ff:fc:64:22:22:96:3f:df:20:d6:f7:
3a:26:68:73:1c:e9:94:a6:cc:63:1c:39:6e:ca:04:d8:95:f0:
51:37:a3:6c:ac:4f:3a:75:87:65:ee:2c:b0:6b:06:1c:ff:57:
71:42:1c:9d:80:2a:7b:d0:bb:a5:80:68:b3:83:a6:92:6c:f9:
7a:1b:8d:d1:57:70:e7:eb:c8:8c:18:6a:c3:f7:13:a7:ec:f6:
41:96:08:72:39:50:a8:10:72:64:f5:4e:7a:7e:fe:f5:4f:06:
82:2b:96:78:fb:77:cc:98:f6:32:52:fc:71:0d:75:b1:b1:a2:
43:94:39:33:ed:f4:26:2e:c6:ad:60:de:fa:17:52:d1:1e:9a:
ca:c4:6f:86:1b:39:e1:f1:30:d4:ce:93:06:0d:86:80:69:20:
be:d1:67:8d:49:d2:2f:04:bf:ea:48:06:a1:84:05:f8:b8:f6:
ee:8b:1c:da:c1:bc:ad:04:d2:29:d0:42:b8:5f:2d:d5:7b:98:
48:44:f3:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVveXGVJa4Y6rIY3sKcaoSjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYjExMDRiYmE1YTNmMWRkZDJkZWViYmEzNDgxOTE5ZjRm
OTYxYTQwHhcNMjMwMTAxMjIzNTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjU0NmIzNjM3M2E4YzI1MmE0M2E3MmViYjJlZDlhODJhZWM0MWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEAdpK55PTJBezlDX4zw2F0VGn6p
0ls4PC6PXzQ9Z2P/rST2sR8oTqLZfwaOtFVHbf8ATcIsaaTRz8T71lVW+y8E45qU
rGoI/kpSd8M1mqDJ0wNvn1KhForkme3dHslQf+NwvibPkYuexLHMAQTvlmnjw0Rn
HhcdRg/xyKuz/q7bJSck7rN14i4gJz8+PPWEPuHBQWIjekmbCJqDwSGb+5QDDs3e
Y8i51cTuCc0Lk+qJXhUFg1e69GgmDoC5moxxNL6poZB+Nu7wUPmgiqp5DXlCTCnK
duNB9flmt1wGTHarpzcEGXy200jEADc2VIt7gd7AhNxm/+FFwZvm/aU7+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAJUazY3OowlKkOnLrsu2agq7EHDMB8GA1UdIwQY
MBaAFE+xEEu6Wj8d3S3uu6NIGRn0+WGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84OWVlOTQtNTAxMC00NGFkLTllMTct
NDM2YWI0YWRlMGE3LzEvQWxSck5qYzZqQ1VxUTZjdXV5N1pxQ3JzUWNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny84OWVlOTQtNTAxMC00NGFkLTllMTctNDM2YWI0YWRlMGE3
LzEvVDdFUVM3cGFQeDNkTGU2N28wZ1pHZlQ1WWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS+IMA0G
CSqGSIb3DQEBCwUAA4IBAQBUQ565G5oxnPR/aGRzpIf03sIdm6FmKI3RttPEYV6o
ZWtqQVHaMWW5G9lkR87EN64tejUX4pC+0eYULZvo//xkIiKWP98g1vc6JmhzHOmU
psxjHDluygTYlfBRN6NsrE86dYdl7iywawYc/1dxQhydgCp70LulgGizg6aSbPl6
G43RV3Dn68iMGGrD9xOn7PZBlghyOVCoEHJk9U56fv71TwaCK5Z4+3fMmPYyUvxx
DXWxsaJDlDkz7fQmLsatYN76F1LRHprKxG+GGznh8TDUzpMGDYaAaSC+0WeNSdIv
BL/qSAahhAX4uPbuixzawbytBNIp0EK4Xy3Ve5hIRPNn
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:34 2024 by rpki-client on console-fra.rpki-client.org