Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/aDVA9AZD_CS2FRdIg-c12ncWXSw.roa
File: aDVA9AZD_CS2FRdIg-c12ncWXSw.roa (raw, json)
Hash identifier: EnMXd7+5jq8iRgOoo17XqVc20ri7N7GP6186iDp9Fvc=
Subject key identifier: 68:35:40:F4:06:43:FC:24:B6:15:17:48:83:E7:35:DA:77:16:5D:2C
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019276469CEBBBC47FFDF4266058556B397B
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/aDVA9AZD_CS2FRdIg-c12ncWXSw.roa
Signing time: Thu 10 Oct 2024 11:53:12 +0000
ROA not before: Thu 10 Oct 2024 11:53:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 299262
IP address blocks: 193.35.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 13 Oct 2024 19:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:46:9c:eb:bb:c4:7f:fd:f4:26:60:58:55:6b:39:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 10 11:53:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=683540f40643fc24b615174883e735da77165d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:b1:83:ed:06:63:4d:6e:0d:9b:08:d8:c8:
73:4e:5a:8e:f7:a3:4e:23:8d:b6:16:d2:6c:b5:f6:
b0:3f:25:e9:ac:0a:db:af:62:29:e0:e2:91:a2:75:
1a:f2:88:e2:ae:64:36:8b:32:5a:ee:2b:46:ab:13:
ff:50:7e:58:8d:6e:a2:7b:bd:1b:37:60:78:bc:69:
56:40:ea:9a:86:16:c5:0c:e7:3e:68:e5:59:75:ce:
5b:0c:1c:9d:5d:bc:dc:86:30:b6:c5:ee:9b:f9:04:
c1:97:f0:18:e6:18:b1:f4:6e:41:06:4c:16:40:6e:
56:28:61:6f:f7:e8:42:4f:01:cb:1f:36:6f:50:d5:
d7:f4:ed:13:52:3a:80:47:c3:4d:c1:e5:c2:a5:af:
6b:43:ec:7f:90:75:11:a2:a3:5d:a5:f5:e6:5a:93:
7f:0f:1a:94:90:ec:27:23:b9:f3:d4:04:5f:b5:10:
43:fb:22:a7:f7:6a:3a:28:47:67:22:3a:78:4f:8b:
91:a4:bf:f6:6d:3a:c3:5a:7e:33:74:26:44:b0:15:
53:15:bf:6a:b1:a4:6f:24:69:4d:3b:b4:e9:fa:5e:
b1:ef:86:6f:7b:57:54:65:63:51:a4:dc:e7:f3:b5:
ad:8f:72:33:79:90:ae:bc:06:d9:0b:32:e3:9e:80:
23:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:35:40:F4:06:43:FC:24:B6:15:17:48:83:E7:35:DA:77:16:5D:2C
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/aDVA9AZD_CS2FRdIg-c12ncWXSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:14:b5:a1:f7:e8:df:8e:91:07:dc:e8:50:94:ce:a3:a8:b3:
29:cc:ee:4e:e0:85:13:d0:3a:be:01:86:b1:c7:46:0b:8d:3d:
d4:73:c1:2c:26:cb:cc:20:c8:08:98:54:dc:ea:0d:0e:17:ee:
a5:02:41:f8:c4:6e:d7:58:92:d0:ef:6e:ff:2a:37:df:79:32:
4c:8a:77:4f:bf:e9:12:ce:84:82:fc:58:98:8f:a2:07:45:b9:
17:05:2e:15:41:01:13:2c:25:ef:c2:a5:c8:54:9f:3c:4f:0f:
1f:ad:79:63:c8:b0:ce:28:ea:f7:2b:3a:5f:99:ea:5a:f5:6f:
3f:c4:a0:4c:7d:f5:f2:8c:b8:d1:60:d9:61:bb:f4:1e:2d:cd:
8c:e8:f5:b9:6d:3f:4f:c1:10:e8:69:09:03:b4:39:ee:ff:56:
98:c9:43:d3:25:43:95:44:3c:e2:b0:25:51:db:29:57:54:64:
39:59:95:60:77:48:69:94:86:0a:10:95:52:61:6d:7f:c7:f1:
a6:dc:31:33:8b:90:2f:a7:fd:b4:7d:83:80:2d:9e:ae:24:74:
60:8d:04:80:bd:42:09:e8:49:c4:a3:83:f0:1b:54:74:e1:39:
d7:30:eb:8e:e7:01:18:91:93:cd:c0:08:1d:ab:63:51:92:2a:
a3:e0:27:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJ2Rpzru8R//fQmYFhVazl7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjQxMDEwMTE1MzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODM1NDBmNDA2NDNmYzI0YjYxNTE3NDg4M2U3MzVkYTc3MTY1ZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziaxg+0GY01uDZsI2MhzTlqO96NO
I422FtJstfawPyXprArbr2Ip4OKRonUa8ojirmQ2izJa7itGqxP/UH5YjW6ie70b
N2B4vGlWQOqahhbFDOc+aOVZdc5bDBydXbzchjC2xe6b+QTBl/AY5hix9G5BBkwW
QG5WKGFv9+hCTwHLHzZvUNXX9O0TUjqAR8NNweXCpa9rQ+x/kHURoqNdpfXmWpN/
DxqUkOwnI7nz1ARftRBD+yKn92o6KEdnIjp4T4uRpL/2bTrDWn4zdCZEsBVTFb9q
saRvJGlNO7Tp+l6x74Zve1dUZWNRpNzn87Wtj3IzeZCuvAbZCzLjnoAjNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGg1QPQGQ/wkthUXSIPnNdp3Fl0sMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvYURWQTlBWkRfQ1MyRlJkSWctYzEybmNXWFN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSOaMA0G
CSqGSIb3DQEBCwUAA4IBAQCjFLWh9+jfjpEH3OhQlM6jqLMpzO5O4IUT0Dq+AYax
x0YLjT3Uc8EsJsvMIMgImFTc6g0OF+6lAkH4xG7XWJLQ727/KjffeTJMindPv+kS
zoSC/FiYj6IHRbkXBS4VQQETLCXvwqXIVJ88Tw8frXljyLDOKOr3Kzpfmepa9W8/
xKBMffXyjLjRYNlhu/QeLc2M6PW5bT9PwRDoaQkDtDnu/1aYyUPTJUOVRDzisCVR
2ylXVGQ5WZVgd0hplIYKEJVSYW1/x/Gm3DEzi5Avp/20fYOALZ6uJHRgjQSAvUIJ
6EnEo4PwG1R04TnXMOuO5wEYkZPNwAgdq2NRkiqj4CeE
-----END CERTIFICATE-----
Generated at Sun Oct 13 22:30:29 2024 by rpki-client on console-ams.rpki-client.org