Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/MtQn4O-RAmG5LM3aZ1LC9YWi0Qs.roa
File: MtQn4O-RAmG5LM3aZ1LC9YWi0Qs.roa (raw, json)
Hash identifier: 3/ZrmMt1dR4naZ6q4g+QBRMws8XQOZYiJ17D9EYZfxw=
Subject key identifier: 32:D4:27:E0:EF:91:02:61:B9:2C:CD:DA:67:52:C2:F5:85:A2:D1:0B
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 01856F824162A6785199C48C80E5821F219A
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/MtQn4O-RAmG5LM3aZ1LC9YWi0Qs.roa
Signing time: Sun 01 Jan 2023 22:44:45 +0000
ROA not before: Sun 01 Jan 2023 22:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3214
IP address blocks: 193.34.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:41:62:a6:78:51:99:c4:8c:80:e5:82:1f:21:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jan 1 22:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32d427e0ef910261b92ccdda6752c2f585a2d10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ad:ef:c7:d2:88:a7:7c:c6:92:fc:86:fa:d5:
3f:a1:54:a3:b4:99:d1:8e:30:05:07:b2:b3:d6:bc:
ae:56:0e:5e:90:8d:e7:36:44:8a:37:2a:10:d9:03:
be:f9:7e:d7:13:c4:27:1a:6f:e7:73:f3:bc:59:c4:
f7:33:ce:1d:fa:88:26:ef:3e:09:78:29:09:49:6b:
27:2e:01:43:58:c7:39:8d:f7:c6:a4:59:42:fd:d8:
e7:da:87:d2:59:43:bd:c0:e7:52:b0:8b:31:3b:a2:
ab:b6:8b:d7:d2:29:aa:a2:ba:ff:24:34:8e:12:16:
59:63:ea:89:99:e7:81:1b:b9:7c:9f:01:b3:41:8d:
8a:9b:37:82:b8:03:b3:96:23:9c:3e:91:f0:f4:57:
61:c1:a7:01:ad:52:9d:94:b7:f0:61:43:15:4a:66:
53:dd:d3:6c:12:08:65:70:aa:a8:f1:3a:91:71:f3:
0e:05:c4:f2:c0:55:2b:aa:47:4f:1b:ae:2b:38:60:
4d:41:93:43:1e:21:d3:65:67:da:66:36:3b:84:40:
cd:bc:ef:98:cb:06:79:3f:0e:3d:6a:2c:86:28:cb:
67:bc:46:2c:fb:5a:ad:b5:8d:5a:01:13:e0:39:8a:
67:db:f5:bd:0f:64:d7:65:15:8c:03:56:c6:4a:4d:
47:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D4:27:E0:EF:91:02:61:B9:2C:CD:DA:67:52:C2:F5:85:A2:D1:0B
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/MtQn4O-RAmG5LM3aZ1LC9YWi0Qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.48.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ee:fd:db:c0:81:38:e0:11:81:d6:31:c2:27:aa:e8:13:06:
2d:bf:8e:04:8a:0c:ee:65:38:c1:5a:48:17:24:c8:b2:ac:c4:
e4:9d:71:03:72:50:f7:d6:72:f5:55:34:6e:0c:70:0b:bc:3e:
83:3d:a0:cd:28:8f:7b:f9:ea:c3:15:79:c0:8b:a1:16:4f:f5:
f4:5d:df:7f:8c:97:a7:a0:b6:9b:3b:b8:5f:77:ba:59:d2:1a:
7c:19:29:41:74:ce:72:8d:95:ab:56:9c:88:9b:b2:ce:80:7e:
55:22:7b:93:0f:e0:6d:05:a5:f4:0c:73:cd:2c:db:56:96:ab:
76:e9:7f:29:ea:62:79:c0:b3:0a:b5:b5:f6:b0:e1:bb:29:4e:
07:29:46:5a:7a:84:3b:25:f2:7b:13:ef:2a:e5:3e:15:e2:c1:
6a:b6:4e:27:34:18:dd:fb:fe:53:dd:67:cc:e4:4c:18:7c:bf:
11:88:55:f1:82:c5:c6:19:75:d8:b2:b9:ef:63:2e:89:35:25:
8d:d4:1c:b4:52:7a:bd:2e:58:c4:b0:66:ab:53:01:78:da:2c:
4e:95:c7:e6:8a:77:ad:b2:ea:c3:88:53:00:c8:d7:7a:c0:4c:
43:83:16:a7:d5:a2:3d:24:65:37:72:89:21:bb:43:ef:ed:b6:
b8:11:48:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvgkFipnhRmcSMgOWCHyGaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzUzM2Q2NjJjM2YwZDZiYjFlNjkyZjNmYWI2ZDdiYTM4
MjRjMjgwHhcNMjMwMTAxMjI0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmQ0MjdlMGVmOTEwMjYxYjkyY2NkZGE2NzUyYzJmNTg1YTJkMTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK3vx9KIp3zGkvyG+tU/oVSjtJnR
jjAFB7Kz1ryuVg5ekI3nNkSKNyoQ2QO++X7XE8QnGm/nc/O8WcT3M84d+ogm7z4J
eCkJSWsnLgFDWMc5jffGpFlC/djn2ofSWUO9wOdSsIsxO6KrtovX0imqorr/JDSO
EhZZY+qJmeeBG7l8nwGzQY2KmzeCuAOzliOcPpHw9FdhwacBrVKdlLfwYUMVSmZT
3dNsEghlcKqo8TqRcfMOBcTywFUrqkdPG64rOGBNQZNDHiHTZWfaZjY7hEDNvO+Y
ywZ5Pw49aiyGKMtnvEYs+1qttY1aARPgOYpn2/W9D2TXZRWMA1bGSk1HrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDLUJ+DvkQJhuSzN2mdSwvWFotELMB8GA1UdIwQY
MBaAFJ41M9Ziw/DWux5pLz+rbXujgkwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUt
YTc4MzQxMzA5OWQzLzEvTXRRbjRPLVJBbUc1TE0zYVoxTEM5WVdpMFFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUtYTc4MzQxMzA5OWQz
LzEvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSIwMA0G
CSqGSIb3DQEBCwUAA4IBAQBr7v3bwIE44BGB1jHCJ6roEwYtv44EigzuZTjBWkgX
JMiyrMTknXEDclD31nL1VTRuDHALvD6DPaDNKI97+erDFXnAi6EWT/X0Xd9/jJen
oLabO7hfd7pZ0hp8GSlBdM5yjZWrVpyIm7LOgH5VInuTD+BtBaX0DHPNLNtWlqt2
6X8p6mJ5wLMKtbX2sOG7KU4HKUZaeoQ7JfJ7E+8q5T4V4sFqtk4nNBjd+/5T3WfM
5EwYfL8RiFXxgsXGGXXYsrnvYy6JNSWN1By0Unq9LljEsGarUwF42ixOlcfminet
surDiFMAyNd6wExDgxan1aI9JGU3cokhu0Pv7ba4EUg3
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:48 2023 by rpki-client on console-fra.rpki-client.org