Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/U_fIUJlbBtt4bgwiXixD8-86t7E.roa
File: U_fIUJlbBtt4bgwiXixD8-86t7E.roa (raw, json)
Hash identifier: zxpy+JBN87tpdBsrFKL41KkrjQmPZQ8+nzf+XQFxyQA=
Subject key identifier: 53:F7:C8:50:99:5B:06:DB:78:6E:0C:22:5E:2C:43:F3:EF:3A:B7:B1
Certificate issuer: /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial: 018572CCB2E5A2415B46EEF57B11C104184E
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/U_fIUJlbBtt4bgwiXixD8-86t7E.roa
Signing time: Mon 02 Jan 2023 14:04:55 +0000
ROA not before: Mon 02 Jan 2023 14:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62343
IP address blocks: 93.115.209.0/24 maxlen: 24
93.115.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:b2:e5:a2:41:5b:46:ee:f5:7b:11:c1:04:18:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Validity
Not Before: Jan 2 14:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53f7c850995b06db786e0c225e2c43f3ef3ab7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7a:97:57:aa:ae:44:a4:b5:07:a8:4a:e3:80:
31:52:59:c1:40:0b:10:c4:45:ff:f7:11:9a:ab:a8:
66:28:2f:8a:3c:88:78:15:6f:90:00:17:d5:89:00:
ea:8f:a7:2f:00:9e:3a:93:f3:3d:ac:2a:dd:d7:b5:
f2:89:34:7c:44:bf:82:11:f7:34:bc:1d:46:65:74:
6a:78:d3:0e:61:9d:79:49:fb:78:99:2f:30:e5:51:
00:91:cc:ff:90:6c:3d:c0:3a:3d:ff:89:24:bd:ef:
3b:6b:40:b0:eb:8f:43:e5:57:0f:33:81:d1:97:d3:
b7:8e:fb:20:27:dd:b4:37:00:f5:09:9b:c0:90:27:
63:44:d1:cf:40:0d:46:be:a9:7e:ea:30:d3:1e:67:
06:9b:d5:b1:14:a1:ac:95:42:0e:5c:8a:df:1a:24:
10:ab:58:07:ac:05:23:7f:7b:bb:f2:1d:74:9d:03:
14:ac:72:1f:14:c3:c0:68:e7:a5:9e:f0:e9:89:57:
c8:c6:5e:e6:0a:18:cb:8a:1e:a9:08:a9:6c:48:78:
4e:3c:57:9e:aa:ee:11:8a:ef:d6:b1:73:d0:01:b0:
c8:03:b4:18:2b:86:87:f1:59:cc:0b:ca:43:0d:b9:
82:cb:af:a6:43:72:53:33:2b:bc:f3:67:23:c3:66:
04:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F7:C8:50:99:5B:06:DB:78:6E:0C:22:5E:2C:43:F3:EF:3A:B7:B1
X509v3 Authority Key Identifier:
keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/U_fIUJlbBtt4bgwiXixD8-86t7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.208.0/23
Signature Algorithm: sha256WithRSAEncryption
54:a4:1f:82:bd:45:65:4b:04:8e:8f:f3:3a:0b:ac:d1:dd:fd:
d9:ff:b8:37:3f:61:62:fb:9a:0b:e9:16:43:34:01:88:3a:f0:
cc:4a:26:8f:76:55:54:8d:76:21:1f:4b:6c:de:58:fe:c9:63:
36:51:d5:f7:87:68:e5:6a:1e:96:eb:b6:23:50:23:1b:57:cc:
75:45:d5:20:39:82:ee:77:8a:96:ac:55:8b:9c:51:51:e9:5a:
04:3d:27:48:87:fb:94:6b:f6:01:51:0b:15:1f:63:58:d5:df:
9f:f1:72:c1:42:43:fb:22:0f:de:c9:aa:69:fb:a0:bc:7d:2e:
18:cc:b0:7b:ea:eb:94:b0:fa:cb:86:e7:6a:dc:2b:e7:ed:77:
2f:ae:4a:d4:d5:06:ec:7b:e3:40:86:26:a6:6f:1b:4a:a7:6d:
76:f8:9a:62:c6:e7:d4:b8:e3:21:b0:ef:92:4b:45:f7:80:5c:
fd:2f:f1:44:69:d6:98:96:0a:09:2b:74:3d:e9:e4:02:fb:c6:
22:de:8d:45:05:12:16:dd:bb:0f:0e:e7:ea:ce:e7:15:a2:ac:
46:fe:b2:19:e2:f6:4a:45:aa:e0:f9:96:ff:6f:d5:1d:20:8a:
83:91:b2:6b:83:29:43:1c:b4:b5:50:37:f7:c8:aa:d2:90:9c:
7c:70:90:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyzLLlokFbRu71exHBBBhOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2FkOWU2Y2UyNjUxZDk1YWQxODY1NmVjYmI5MzUzNjE4
OWZhYWYwHhcNMjMwMTAyMTQwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2Y3Yzg1MDk5NWIwNmRiNzg2ZTBjMjI1ZTJjNDNmM2VmM2FiN2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinqXV6quRKS1B6hK44AxUlnBQAsQ
xEX/9xGaq6hmKC+KPIh4FW+QABfViQDqj6cvAJ46k/M9rCrd17XyiTR8RL+CEfc0
vB1GZXRqeNMOYZ15Sft4mS8w5VEAkcz/kGw9wDo9/4kkve87a0Cw649D5VcPM4HR
l9O3jvsgJ920NwD1CZvAkCdjRNHPQA1Gvql+6jDTHmcGm9WxFKGslUIOXIrfGiQQ
q1gHrAUjf3u78h10nQMUrHIfFMPAaOelnvDpiVfIxl7mChjLih6pCKlsSHhOPFee
qu4Riu/WsXPQAbDIA7QYK4aH8VnMC8pDDbmCy6+mQ3JTMyu882cjw2YEvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFP3yFCZWwbbeG4MIl4sQ/PvOrexMB8GA1UdIwQY
MBaAFBI62ebOJlHZWtGGVuy7k1NhifqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMDRmYWUtZjdiZC00ZjcwLTkxMWEt
MWIxOTIzNzFmNDQyLzEvVV9mSVVKbGJCdHQ0Ymd3aVhpeEQ4LTg2dDdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8yMDRmYWUtZjdiZC00ZjcwLTkxMWEtMWIxOTIzNzFmNDQy
LzEvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXXPQMA0G
CSqGSIb3DQEBCwUAA4IBAQBUpB+CvUVlSwSOj/M6C6zR3f3Z/7g3P2Fi+5oL6RZD
NAGIOvDMSiaPdlVUjXYhH0ts3lj+yWM2UdX3h2jlah6W67YjUCMbV8x1RdUgOYLu
d4qWrFWLnFFR6VoEPSdIh/uUa/YBUQsVH2NY1d+f8XLBQkP7Ig/eyapp+6C8fS4Y
zLB76uuUsPrLhudq3Cvn7XcvrkrU1Qbse+NAhiambxtKp212+JpixufUuOMhsO+S
S0X3gFz9L/FEadaYlgoJK3Q96eQC+8Yi3o1FBRIW3bsPDufqzucVoqxG/rIZ4vZK
Rarg+Zb/b9UdIIqDkbJrgylDHLS1UDf3yKrSkJx8cJAc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:54 2024 by rpki-client on console-fra.rpki-client.org