Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/mekSL_mC_uBvUu1sD4x7GHq7vbQ.roa
File: mekSL_mC_uBvUu1sD4x7GHq7vbQ.roa (raw, json)
Hash identifier: UFjijJU74ly9worpuUEMHakeDRnXnCdK2A5kq0ng0nE=
Subject key identifier: 99:E9:12:2F:F9:82:FE:E0:6F:52:ED:6C:0F:8C:7B:18:7A:BB:BD:B4
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 0186406ECC06A4E9D4F8DB1CA821148F23DC
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/mekSL_mC_uBvUu1sD4x7GHq7vbQ.roa
Signing time: Sat 11 Feb 2023 12:24:08 +0000
ROA not before: Sat 11 Feb 2023 12:24:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203496
IP address blocks: 193.135.96.0/22 maxlen: 24
193.228.198.0/24 maxlen: 24
2a13:a207:fff0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:40:6e:cc:06:a4:e9:d4:f8:db:1c:a8:21:14:8f:23:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: Feb 11 12:24:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99e9122ff982fee06f52ed6c0f8c7b187abbbdb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3c:4d:5a:ff:24:28:fe:55:0c:37:9d:23:3c:
5d:e7:b4:ff:a3:01:88:21:62:bd:46:47:c0:62:79:
dc:27:a2:7a:b8:e8:5e:d9:66:8e:80:ff:a3:d5:c7:
55:e0:ce:bd:4d:ce:9f:e5:c3:1f:7e:9c:5d:ba:41:
b3:a6:3c:3d:9f:9c:26:63:f4:59:f6:ba:2b:ec:c9:
9e:ba:c8:34:b8:36:9d:9d:ff:84:e3:f6:f2:6e:ea:
77:ba:76:e8:bc:5a:0e:11:b0:3e:bd:5a:b0:ee:59:
21:aa:1a:9e:2e:f6:48:74:d6:1f:b1:00:f8:bb:c5:
7c:dc:d6:ad:5e:7e:ae:57:c2:88:c5:af:ad:63:65:
08:43:da:15:13:48:36:ad:0e:3a:17:48:d1:e0:34:
5f:e6:b2:2c:5e:4a:4c:1a:a2:9c:dc:2c:03:ab:0a:
40:b0:b5:dd:be:86:9e:2a:f3:e9:f5:12:a7:60:55:
f0:57:a7:4f:31:9a:92:92:8d:b5:c6:ba:53:d0:b3:
b8:63:10:6e:99:36:3e:ec:5e:42:fd:a1:42:9a:ad:
90:5d:b9:3f:85:cf:12:8e:6c:6b:ef:6b:9c:50:76:
5b:06:95:5b:0b:ad:5e:28:6a:b6:25:c0:2d:19:11:
d0:93:39:8e:05:a9:fe:98:99:33:4d:1d:7d:6b:b8:
b8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E9:12:2F:F9:82:FE:E0:6F:52:ED:6C:0F:8C:7B:18:7A:BB:BD:B4
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/mekSL_mC_uBvUu1sD4x7GHq7vbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.96.0/22
193.228.198.0/24
IPv6:
2a13:a207:fff0::/44
Signature Algorithm: sha256WithRSAEncryption
07:5d:b4:e3:1e:79:ab:e9:60:d9:1a:c3:26:8f:52:57:66:1d:
1b:85:7f:67:c9:93:ee:d7:1d:2b:92:44:21:87:f0:e8:b6:3c:
0c:3d:11:fd:90:96:f1:ef:40:58:71:47:0d:19:a3:b7:95:e6:
16:60:16:0e:4b:7a:7e:b0:db:fb:62:81:17:a2:58:c1:ff:51:
2e:69:85:c5:1b:26:e1:a0:d1:c0:3f:7b:91:62:0e:08:f0:aa:
a8:48:3c:c2:a2:ba:9b:0a:8c:4b:7f:cb:34:65:cb:41:99:02:
07:5d:fb:f6:85:df:99:36:52:af:85:aa:43:16:ee:66:c1:49:
69:8a:4a:ae:5f:37:76:30:4b:c0:b3:62:33:82:bd:f2:66:49:
21:cb:7b:34:f5:3d:b9:f0:99:fc:44:84:1b:a7:51:8f:a2:66:
1c:16:70:41:53:38:6b:29:ac:ac:15:ff:ba:6f:18:f3:30:4b:
62:fe:df:35:d3:98:49:06:31:37:49:58:e5:3a:b7:73:4a:0f:
43:94:09:65:3c:60:fb:16:57:0d:01:c6:2d:fd:e6:dc:55:37:
67:22:4f:fb:a3:33:32:22:43:c1:85:c2:70:47:7b:89:f4:1c:
d2:e0:96:cf:a1:3a:e8:b3:ad:46:f1:24:32:cc:be:7e:5a:d6:
af:13:cf:a4
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYZAbswGpOnU+NscqCEUjyPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTYzNmZmNTIzZTVmMzczNDIyN2YzM2M0NGMyZTUwZmY4
ZDFlZTIwHhcNMjMwMjExMTIyNDA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWU5MTIyZmY5ODJmZWUwNmY1MmVkNmMwZjhjN2IxODdhYmJiZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTxNWv8kKP5VDDedIzxd57T/owGI
IWK9RkfAYnncJ6J6uOhe2WaOgP+j1cdV4M69Tc6f5cMffpxdukGzpjw9n5wmY/RZ
9ror7Mmeusg0uDadnf+E4/bybup3unbovFoOEbA+vVqw7lkhqhqeLvZIdNYfsQD4
u8V83NatXn6uV8KIxa+tY2UIQ9oVE0g2rQ46F0jR4DRf5rIsXkpMGqKc3CwDqwpA
sLXdvoaeKvPp9RKnYFXwV6dPMZqSko21xrpT0LO4YxBumTY+7F5C/aFCmq2QXbk/
hc8Sjmxr72ucUHZbBpVbC61eKGq2JcAtGRHQkzmOBan+mJkzTR19a7i4BwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFJnpEi/5gv7gb1LtbA+Mexh6u720MB8GA1UdIwQY
MBaAFL3mNv9SPl83NCJ/M8RMLlD/jR7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYt
N2JmYjQzODFhYjU0LzEvbWVrU0xfbUNfdUJ2VXUxc0Q0eDdHSHE3dmJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYtN2JmYjQzODFhYjU0
LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCwYdgAwQA
weTGMA8EAgACMAkDBwQqE6IH//AwDQYJKoZIhvcNAQELBQADggEBAAddtOMeeavp
YNkawyaPUldmHRuFf2fJk+7XHSuSRCGH8Oi2PAw9Ef2QlvHvQFhxRw0Zo7eV5hZg
Fg5Len6w2/tigReiWMH/US5phcUbJuGg0cA/e5FiDgjwqqhIPMKiupsKjEt/yzRl
y0GZAgdd+/aF35k2Uq+FqkMW7mbBSWmKSq5fN3YwS8CzYjOCvfJmSSHLezT1Pbnw
mfxEhBunUY+iZhwWcEFTOGsprKwV/7pvGPMwS2L+3zXTmEkGMTdJWOU6t3NKD0OU
CWU8YPsWVw0Bxi395txVN2ciT/ujMzIiQ8GFwnBHe4n0HNLgls+hOuizrUbxJDLM
vn5a1q8Tz6Q=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:33 2023 by rpki-client on console-ams.rpki-client.org