Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/0mRk0MopWhP69Xt_o3CTl4eIpD8.roa
File: 0mRk0MopWhP69Xt_o3CTl4eIpD8.roa (raw, json)
Hash identifier: tADbUYCsoUOnLu+AgB2bCW5C0H5/0QzbiLPPITqi/Hk=
Subject key identifier: D2:64:64:D0:CA:29:5A:13:FA:F5:7B:7F:A3:70:93:97:87:88:A4:3F
Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial: 018CC26D198F11856695A206790730752827
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/0mRk0MopWhP69Xt_o3CTl4eIpD8.roa
Signing time: Mon 01 Jan 2024 00:29:38 +0000
ROA not before: Mon 01 Jan 2024 00:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3269
IP address blocks: 193.207.208.0/20 maxlen: 20
193.207.224.0/21 maxlen: 21
193.207.232.0/21 maxlen: 21
193.207.240.0/22 maxlen: 22
193.207.244.0/22 maxlen: 22
193.207.192.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 08 Oct 2024 13:52:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:19:8f:11:85:66:95:a2:06:79:07:30:75:28:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d26464d0ca295a13faf57b7fa37093978788a43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0b:44:0e:e2:df:fa:88:82:5e:75:a7:d3:0b:
13:ba:be:9e:ab:0b:fd:22:bf:72:da:ca:e8:96:c4:
1f:da:fb:48:b5:a4:01:41:8e:a7:58:f8:97:ff:f2:
1c:ac:cc:f3:a5:04:37:25:84:d7:4e:dc:80:44:c4:
81:db:11:7d:67:97:cc:b8:b6:25:01:3b:c8:c2:fd:
45:54:fb:65:e6:57:c8:7f:d3:ba:c2:8d:13:8d:ac:
54:b6:6d:2c:89:ed:4d:41:d0:2a:f6:ba:29:6e:1f:
b0:f0:51:d3:b8:e5:e2:c2:43:51:2f:ad:f9:41:a0:
cd:55:48:70:5d:b2:20:33:04:3b:d5:72:88:00:ca:
a1:89:bf:75:73:9e:fa:fc:20:ff:66:37:f1:2b:5c:
4a:97:6e:39:0c:49:88:64:3a:06:2f:a7:76:73:e1:
bc:b2:b5:0e:7e:a5:f1:14:d9:b8:30:07:51:bc:9d:
a7:06:68:55:41:bb:a5:a7:33:25:92:92:2f:24:d1:
fc:30:8b:db:17:3c:36:1a:4f:7f:a6:14:82:0f:29:
c5:72:5a:50:d1:9d:7f:fa:71:27:a1:b5:4c:d8:a3:
1d:0e:eb:ec:de:24:ff:73:97:d9:8d:61:4d:08:a9:
9b:da:d5:78:f2:dc:2a:96:21:e9:74:1d:6f:50:6f:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:64:64:D0:CA:29:5A:13:FA:F5:7B:7F:A3:70:93:97:87:88:A4:3F
X509v3 Authority Key Identifier:
keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/0mRk0MopWhP69Xt_o3CTl4eIpD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.207.192.0-193.207.247.255
Signature Algorithm: sha256WithRSAEncryption
1a:21:97:e1:fe:f7:3e:07:4b:55:37:32:1c:da:0d:24:2c:bd:
7f:fb:40:fd:b6:6c:24:3f:c7:a0:d1:9c:5c:8d:75:46:54:f6:
ff:ec:ed:ca:fa:44:61:b8:db:68:b1:18:5e:ca:36:ec:d2:72:
f2:47:cb:7d:17:35:3d:ef:d3:5e:81:63:b7:1a:40:4c:b4:60:
b1:4d:83:88:a9:75:5b:62:a7:02:d8:dd:e8:c1:0a:4a:09:50:
56:f3:22:1d:08:b4:7f:93:27:ed:cf:ee:7d:9f:57:2d:c3:85:
83:fe:e7:2d:8f:be:5d:9a:88:d6:04:b4:c5:2a:67:50:d5:8d:
b5:29:22:e6:de:a9:fa:82:db:55:f5:62:16:24:97:ed:d2:a1:
40:58:ab:18:34:23:31:03:c3:f9:87:75:d6:85:ba:a2:2e:3f:
02:6b:52:bb:97:14:14:a4:c7:46:72:05:da:b4:4c:c3:6a:fe:
37:b2:bf:a3:b8:b4:b0:89:49:ec:dd:aa:e8:03:e0:8b:bc:08:
35:d4:34:a7:19:da:f4:00:7e:bb:35:0d:cf:da:cb:1f:15:d4:
7c:c2:81:79:f8:e8:6b:9f:14:73:38:7f:7d:3f:91:27:a0:0d:
16:11:3b:8e:c3:fb:11:34:5a:1b:3f:6b:7f:32:22:82:af:ab:
cc:0e:7c:b0
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzCbRmPEYVmlaIGeQcwdSgnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYjg2OTgzNTQ3MTEzMzU5YmFkZTFmM2YzODEwNDA5MWUz
YTY0MzkwHhcNMjQwMTAxMDAyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjY0NjRkMGNhMjk1YTEzZmFmNTdiN2ZhMzcwOTM5Nzg3ODhhNDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wtEDuLf+oiCXnWn0wsTur6eqwv9
Ir9y2srolsQf2vtItaQBQY6nWPiX//IcrMzzpQQ3JYTXTtyARMSB2xF9Z5fMuLYl
ATvIwv1FVPtl5lfIf9O6wo0TjaxUtm0sie1NQdAq9ropbh+w8FHTuOXiwkNRL635
QaDNVUhwXbIgMwQ71XKIAMqhib91c576/CD/ZjfxK1xKl245DEmIZDoGL6d2c+G8
srUOfqXxFNm4MAdRvJ2nBmhVQbulpzMlkpIvJNH8MIvbFzw2Gk9/phSCDynFclpQ
0Z1/+nEnobVM2KMdDuvs3iT/c5fZjWFNCKmb2tV48twqliHpdB1vUG+Y6wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNJkZNDKKVoT+vV7f6Nwk5eHiKQ/MB8GA1UdIwQY
MBaAFM64aYNUcRM1m63h8/OBBAkeOmQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2Qt
ZGVlMmY2NTBkZDg2LzEvMG1SazBNb3BXaFA2OVh0X28zQ1RsNGVJcEQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2QtZGVlMmY2NTBkZDg2
LzEvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAbBz8AD
BAPBz/AwDQYJKoZIhvcNAQELBQADggEBABohl+H+9z4HS1U3MhzaDSQsvX/7QP22
bCQ/x6DRnFyNdUZU9v/s7cr6RGG422ixGF7KNuzScvJHy30XNT3v016BY7caQEy0
YLFNg4ipdVtipwLY3ejBCkoJUFbzIh0ItH+TJ+3P7n2fVy3DhYP+5y2Pvl2aiNYE
tMUqZ1DVjbUpIubeqfqC21X1YhYkl+3SoUBYqxg0IzEDw/mHddaFuqIuPwJrUruX
FBSkx0ZyBdq0TMNq/jeyv6O4tLCJSezdqugD4Iu8CDXUNKcZ2vQAfrs1Dc/ayx8V
1HzCgXn46GufFHM4f30/kSegDRYRO47D+xE0Whs/a38yIoKvq8wOfLA=
-----END CERTIFICATE-----
Generated at Tue Oct 8 17:14:55 2024 by rpki-client on console-fra.rpki-client.org