Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/UmNL5iqa-bjvf4NMpPRgOKUEfRo.roa
File: UmNL5iqa-bjvf4NMpPRgOKUEfRo.roa (raw, json)
Hash identifier: 24bD0EhnqajIAjdrdXmvKrBRlv7FpOYLpaWsa4DIoXo=
Subject key identifier: 52:63:4B:E6:2A:9A:F9:B8:EF:7F:83:4C:A4:F4:60:38:A5:04:7D:1A
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 0187AC706B8FA6FF571F5F756030AFF20CB0
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/UmNL5iqa-bjvf4NMpPRgOKUEfRo.roa
Signing time: Sun 23 Apr 2023 04:47:41 +0000
ROA not before: Sun 23 Apr 2023 04:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.108.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ac:70:6b:8f:a6:ff:57:1f:5f:75:60:30:af:f2:0c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Apr 23 04:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52634be62a9af9b8ef7f834ca4f46038a5047d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:21:84:b3:dd:01:e8:86:95:ca:63:80:0f:8c:
92:7c:a6:33:d0:6c:c6:0e:03:29:46:1f:61:c6:d4:
3a:7e:18:80:c6:6a:7a:84:c6:6a:2e:e6:bb:8e:09:
09:92:2b:a4:86:06:60:f0:82:8a:e8:bd:30:2a:28:
23:72:c2:eb:dd:28:41:85:b7:50:30:29:50:90:74:
2e:aa:d8:ae:e9:e2:86:78:33:9f:35:13:63:3f:ca:
62:0c:8f:20:85:0d:34:0f:8f:31:df:e2:26:b0:d2:
c8:d3:9b:ef:23:00:39:36:81:0e:4c:c2:49:68:7d:
ab:27:92:90:bc:d4:90:94:7c:bf:48:3d:13:46:60:
a5:6e:46:11:8a:f5:9c:7e:b5:1a:38:53:3e:90:f5:
e1:e6:08:ad:19:e8:96:79:16:ad:b1:d4:bb:00:cc:
db:2b:7a:de:1a:e3:77:9b:44:41:bc:ce:7a:f5:91:
8e:cb:f6:26:03:fd:26:5b:4c:78:04:c8:a8:8a:68:
eb:a4:3a:e4:cb:ea:68:c0:c0:d2:34:41:9b:89:f7:
0b:77:c8:68:6e:8f:79:04:1e:59:e2:c8:ab:9a:08:
96:6d:56:b2:71:37:6f:cb:84:58:6c:dd:d2:ea:ac:
b2:a8:8d:9d:bf:2e:6c:11:f1:08:b6:8d:d1:53:5c:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:63:4B:E6:2A:9A:F9:B8:EF:7F:83:4C:A4:F4:60:38:A5:04:7D:1A
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/UmNL5iqa-bjvf4NMpPRgOKUEfRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.102.0/24
Signature Algorithm: sha256WithRSAEncryption
20:44:5f:55:d9:bf:8e:a8:9a:49:e1:f4:10:da:d4:3e:ca:6a:
ba:82:c8:2b:0d:18:c9:34:b2:46:1a:d2:d7:4a:31:a5:5d:c8:
2a:ec:fe:a6:5b:8b:4a:3d:24:8c:a0:ea:30:a0:b9:8f:3c:10:
21:cb:0e:c3:20:31:c9:b9:f7:86:42:7f:da:7e:a8:48:1e:07:
68:38:b5:df:5d:e3:9d:dc:f9:92:14:b6:2d:f4:aa:3b:48:62:
85:ab:6a:73:f4:e6:03:d9:a3:fd:40:ca:a7:28:48:2b:cd:1c:
f6:9c:b8:9c:36:fb:7c:17:0f:c2:77:41:0f:f9:ec:28:ab:47:
01:2b:86:67:43:e5:09:43:5d:7e:51:ab:2c:83:4f:11:51:18:
21:a7:8a:ef:65:91:ac:b4:a5:8b:17:bf:c0:bb:92:c0:93:c9:
e9:a4:0c:71:ee:ed:44:ea:d1:da:06:48:b0:a0:0f:d4:0f:17:
f1:5d:c1:84:15:b2:aa:6e:d5:fd:b1:f3:ac:35:a6:20:7b:6e:
61:b7:7f:c0:6f:9e:26:2e:54:f3:19:96:bc:0b:97:f9:a3:bc:
17:4d:37:47:2a:ee:c8:06:e6:31:c8:c4:94:33:ab:9c:4f:4a:
00:ac:65:5a:6e:4e:21:27:37:f6:b1:5a:7b:51:9a:96:18:02:
72:74:99:42
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYescGuPpv9XH191YDCv8gywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTE1N2U4MWI3YzllNDMzNjBhMWNiNTBhMzE0MDExNzU5
MjE4MDgwHhcNMjMwNDIzMDQ0NzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjYzNGJlNjJhOWFmOWI4ZWY3ZjgzNGNhNGY0NjAzOGE1MDQ3ZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iGEs90B6IaVymOAD4ySfKYz0GzG
DgMpRh9hxtQ6fhiAxmp6hMZqLua7jgkJkiukhgZg8IKK6L0wKigjcsLr3ShBhbdQ
MClQkHQuqtiu6eKGeDOfNRNjP8piDI8ghQ00D48x3+ImsNLI05vvIwA5NoEOTMJJ
aH2rJ5KQvNSQlHy/SD0TRmClbkYRivWcfrUaOFM+kPXh5gitGeiWeRatsdS7AMzb
K3reGuN3m0RBvM569ZGOy/YmA/0mW0x4BMioimjrpDrky+powMDSNEGbifcLd8ho
bo95BB5Z4sirmgiWbVaycTdvy4RYbN3S6qyyqI2dvy5sEfEIto3RU1zwtwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFFJjS+Yqmvm473+DTKT0YDilBH0aMB8GA1UdIwQY
MBaAFPsRV+gbfJ5DNgoctQoxQBF1khgIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14Rlg2QnQ4bmtNMkNoeTFDakZBRVhXU0dBZy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2
LTQxNjY2NGYwMWEyYy8xL1VtTkw1aXFhLWJqdmY0Tk1wUFJnT0tVRWZSby5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2LTQxNjY2NGYwMWEy
Yy8xLzEteEZYNkJ0OG5rTTJDaHkxQ2pGQUVYV1NHQWcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBbGYw
DQYJKoZIhvcNAQELBQADggEBACBEX1XZv46omknh9BDa1D7KarqCyCsNGMk0skYa
0tdKMaVdyCrs/qZbi0o9JIyg6jCguY88ECHLDsMgMcm594ZCf9p+qEgeB2g4td9d
453c+ZIUti30qjtIYoWranP05gPZo/1AyqcoSCvNHPacuJw2+3wXD8J3QQ/57Cir
RwErhmdD5QlDXX5RqyyDTxFRGCGniu9lkay0pYsXv8C7ksCTyemkDHHu7UTq0doG
SLCgD9QPF/FdwYQVsqpu1f2x86w1piB7bmG3f8BvniYuVPMZlrwLl/mjvBdNN0cq
7sgG5jHIxJQzq5xPSgCsZVpuTiEnN/axWntRmpYYAnJ0mUI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-fra.rpki-client.org