Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/CD6YFf_iHW-Vy3O7gBoYw8gkv5c.roa
File: CD6YFf_iHW-Vy3O7gBoYw8gkv5c.roa (raw, json)
Hash identifier: ko8sDTC9RxPSua3ihJSuOlLZQ+3AFK/NDtH9Jt575+o=
Subject key identifier: 08:3E:98:15:FF:E2:1D:6F:95:CB:73:BB:80:1A:18:C3:C8:24:BF:97
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 01856D13DDB6E16B54CC01D0D1EB7F30A2D5
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/CD6YFf_iHW-Vy3O7gBoYw8gkv5c.roa
Signing time: Sun 01 Jan 2023 11:24:56 +0000
ROA not before: Sun 01 Jan 2023 11:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 193.108.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:dd:b6:e1:6b:54:cc:01:d0:d1:eb:7f:30:a2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Jan 1 11:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=083e9815ffe21d6f95cb73bb801a18c3c824bf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a8:ee:04:2e:9b:55:7a:c4:60:54:68:ce:19:
df:60:55:d2:7e:64:21:e8:07:1e:59:4a:2f:30:64:
29:04:56:a0:db:0d:78:4e:06:0e:ed:4e:cd:91:cb:
83:6d:6f:77:ca:e7:68:c8:25:e3:51:e6:35:06:d4:
74:9a:3b:c9:ac:69:91:72:52:62:4f:66:05:ea:9e:
33:c7:46:9d:d1:d8:f6:df:7f:fe:64:37:76:4a:f2:
67:32:dd:90:e5:a3:71:ea:ba:85:05:1c:53:48:2e:
86:15:06:05:e2:d4:c6:7d:a2:80:fe:b9:f5:14:ed:
c8:bb:06:08:ea:1f:53:8b:9a:87:40:46:ed:21:5f:
f9:c3:c5:0b:76:dc:4d:84:ce:79:80:b8:0c:5e:f1:
85:5a:fa:2d:de:be:f2:e3:8a:77:6c:25:94:e2:6e:
48:ad:1c:2f:a4:db:60:8f:4c:6e:2f:db:8b:c1:0f:
58:3e:2a:6a:fa:b3:6e:e4:35:9e:64:90:1d:43:ee:
3f:87:c9:e2:6d:74:75:ac:63:51:e1:d1:db:4a:ff:
08:2a:ae:ca:b5:94:a5:10:20:29:01:63:ca:e4:5f:
8e:70:87:7d:22:2c:6e:ed:06:7b:6d:6d:cd:ec:69:
2d:8d:93:c9:fa:46:0f:75:9c:56:48:c2:b4:11:7a:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3E:98:15:FF:E2:1D:6F:95:CB:73:BB:80:1A:18:C3:C8:24:BF:97
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/CD6YFf_iHW-Vy3O7gBoYw8gkv5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.102.0/24
Signature Algorithm: sha256WithRSAEncryption
78:05:e1:dd:9c:6e:d3:76:f1:d7:be:93:0f:19:57:bf:b7:69:
dd:48:0c:8a:e0:c6:de:c6:f2:21:ad:47:38:ce:82:b5:3e:5f:
f9:bc:3d:a7:50:6a:9f:88:71:57:b4:68:cc:31:58:66:b9:eb:
9d:cb:07:cf:53:e4:ae:e1:cc:ce:c5:8a:3f:dd:a5:03:f7:49:
77:19:da:49:d5:85:1b:db:fe:15:53:37:c2:8c:5a:bd:0d:dc:
2d:03:ac:62:08:7f:b0:e0:43:2f:3a:2d:39:7f:a6:1e:6f:d2:
a3:0f:25:e6:ce:e9:10:8d:2c:e9:fd:d2:0c:03:c9:87:c1:62:
b6:90:7c:94:7e:43:7f:73:5e:18:12:92:01:c0:ea:bd:47:1a:
14:d3:56:e5:a9:02:62:37:a7:ed:92:2f:7e:e2:0c:a6:15:fe:
21:60:c9:5b:da:7f:9b:15:e6:cb:8a:4b:e5:47:2f:6b:91:08:
2a:dc:53:32:37:6e:cc:7c:d3:bc:81:df:6f:20:77:13:98:fa:
bd:3c:e1:72:fe:70:58:86:e8:9c:59:4b:c8:c9:47:93:96:87:
61:71:27:cb:c8:da:e2:ca:2c:de:76:d3:3d:d8:80:89:98:af:
a1:52:37:46:17:2d:69:74:22:4f:c4:4f:24:b1:15:5b:52:20:
7e:47:45:67
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVtE9224WtUzAHQ0et/MKLVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTE1N2U4MWI3YzllNDMzNjBhMWNiNTBhMzE0MDExNzU5
MjE4MDgwHhcNMjMwMTAxMTEyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODNlOTgxNWZmZTIxZDZmOTVjYjczYmI4MDFhMThjM2M4MjRiZjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36juBC6bVXrEYFRozhnfYFXSfmQh
6AceWUovMGQpBFag2w14TgYO7U7NkcuDbW93yudoyCXjUeY1BtR0mjvJrGmRclJi
T2YF6p4zx0ad0dj233/+ZDd2SvJnMt2Q5aNx6rqFBRxTSC6GFQYF4tTGfaKA/rn1
FO3IuwYI6h9Ti5qHQEbtIV/5w8ULdtxNhM55gLgMXvGFWvot3r7y44p3bCWU4m5I
rRwvpNtgj0xuL9uLwQ9YPipq+rNu5DWeZJAdQ+4/h8nibXR1rGNR4dHbSv8IKq7K
tZSlECApAWPK5F+OcId9Iixu7QZ7bW3N7GktjZPJ+kYPdZxWSMK0EXpoIwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFAg+mBX/4h1vlctzu4AaGMPIJL+XMB8GA1UdIwQY
MBaAFPsRV+gbfJ5DNgoctQoxQBF1khgIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14Rlg2QnQ4bmtNMkNoeTFDakZBRVhXU0dBZy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2
LTQxNjY2NGYwMWEyYy8xL0NENllGZl9pSFctVnkzTzdnQm9Zdzhna3Y1Yy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2LTQxNjY2NGYwMWEy
Yy8xLzEteEZYNkJ0OG5rTTJDaHkxQ2pGQUVYV1NHQWcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBbGYw
DQYJKoZIhvcNAQELBQADggEBAHgF4d2cbtN28de+kw8ZV7+3ad1IDIrgxt7G8iGt
RzjOgrU+X/m8PadQap+IcVe0aMwxWGa5653LB89T5K7hzM7Fij/dpQP3SXcZ2knV
hRvb/hVTN8KMWr0N3C0DrGIIf7DgQy86LTl/ph5v0qMPJebO6RCNLOn90gwDyYfB
YraQfJR+Q39zXhgSkgHA6r1HGhTTVuWpAmI3p+2SL37iDKYV/iFgyVvaf5sV5suK
S+VHL2uRCCrcUzI3bsx807yB328gdxOY+r084XL+cFiG6JxZS8jJR5OWh2FxJ8vI
2uLKLN520z3YgImYr6FSN0YXLWl0Ik/ETySxFVtSIH5HRWc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:13 2023 by rpki-client on console-ams.rpki-client.org