Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/72tBzEB5PWtWTLpvrwkq08t0cU4.roa
File: 72tBzEB5PWtWTLpvrwkq08t0cU4.roa (raw, json)
Hash identifier: iNP9JgO5ieFQ8WAlTUOl4w7WhpnXq8IjhuSzOznC9Lc=
Subject key identifier: EF:6B:41:CC:40:79:3D:6B:56:4C:BA:6F:AF:09:2A:D3:CB:74:71:4E
Certificate issuer: /CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Certificate serial: 018571A7B2EE47E8B358A0832CA1E58B9E03
Authority key identifier: 15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/72tBzEB5PWtWTLpvrwkq08t0cU4.roa
Signing time: Mon 02 Jan 2023 08:44:53 +0000
ROA not before: Mon 02 Jan 2023 08:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3242
IP address blocks: 193.43.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:b2:ee:47:e8:b3:58:a0:83:2c:a1:e5:8b:9e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Validity
Not Before: Jan 2 08:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef6b41cc40793d6b564cba6faf092ad3cb74714e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:07:b3:82:c7:6a:d6:7c:94:b0:b5:2d:68:bc:
ec:ce:99:72:6f:28:95:43:fd:8d:71:ae:e1:44:b4:
c5:b1:4f:e5:e9:fd:dc:3d:1a:0b:c7:7b:88:da:3d:
70:db:79:f1:4f:f1:d8:2a:fd:bb:2c:8f:cf:7c:1b:
c4:ba:22:87:ce:dc:91:7f:2c:f1:94:61:09:14:24:
11:58:57:72:bc:a8:19:b6:3a:85:63:c0:5c:bc:fe:
c8:e0:17:a1:7f:30:80:52:39:6c:b1:34:cb:7b:0b:
35:9d:d9:45:43:42:4c:6a:aa:86:98:6a:43:e8:c3:
0c:5e:28:17:b3:1d:66:45:9c:34:fb:7f:61:28:2b:
cc:5d:c2:0a:02:ac:85:9e:b1:d5:ab:0c:13:fa:7c:
5a:70:e3:8b:c5:3d:48:6c:2c:c2:f9:b6:43:51:60:
9d:6d:47:71:aa:9d:af:7d:58:96:0c:62:1b:79:c9:
a9:ae:78:05:97:75:18:82:38:28:87:4f:31:9e:17:
85:e1:98:80:0a:8f:12:a2:29:71:e1:42:4c:b9:14:
9a:9f:fa:43:15:7f:0a:28:39:6d:cb:7c:51:a4:4f:
d4:7c:a6:08:89:65:d7:98:c7:cd:8b:5b:85:69:31:
5c:a8:30:ef:80:fa:4b:5b:8f:bb:40:22:8c:90:cb:
42:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6B:41:CC:40:79:3D:6B:56:4C:BA:6F:AF:09:2A:D3:CB:74:71:4E
X509v3 Authority Key Identifier:
keyid:15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/72tBzEB5PWtWTLpvrwkq08t0cU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.132.0/23
Signature Algorithm: sha256WithRSAEncryption
61:a2:34:5f:e6:86:f9:36:e9:da:28:04:7a:2b:d9:1c:1e:be:
00:f7:c0:85:5f:1a:b3:a7:30:1a:74:74:d3:b3:ef:56:2f:09:
54:b1:6c:8e:1c:c2:28:94:da:17:a9:13:a9:1d:20:5e:43:5e:
ab:9b:06:69:99:90:0c:ea:ad:9b:fa:b8:49:5e:4e:3b:ef:ba:
7f:e3:f9:7d:f4:8f:5e:a3:94:73:78:47:ff:d9:e8:dc:30:58:
bc:63:b2:6e:7e:ca:0d:f3:75:3a:3c:29:2b:71:8e:48:e0:69:
86:14:fc:4d:7e:82:83:0e:57:18:4e:24:4a:bd:10:12:60:dc:
03:a9:e7:36:35:d0:20:eb:72:0b:b2:00:c4:61:40:37:c6:b3:
8e:7d:07:0e:a5:98:fe:99:e0:5b:6d:a1:c6:64:8f:b3:45:2c:
6f:6a:12:2e:1e:39:01:20:1b:6b:7d:a2:30:fc:c3:94:2b:99:
25:d4:1a:56:73:56:15:db:74:e4:a3:c2:9b:8f:54:d7:4a:4d:
e2:8a:33:a1:94:e8:c0:b0:9d:14:57:be:bb:5b:bc:a7:13:23:
a7:60:3c:e1:f6:1d:bc:75:aa:62:1d:66:3d:97:bb:71:45:48:
65:14:08:3b:09:16:7c:20:e7:19:38:02:06:c0:7e:9e:e8:bf:
07:b5:a9:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxp7LuR+izWKCDLKHli54DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzNjZDJkMWY2ZGNmMWVlYzk3ZTg2OTQzYzRlNTNiMGM4
OGVhYWUwHhcNMjMwMTAyMDg0NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjZiNDFjYzQwNzkzZDZiNTY0Y2JhNmZhZjA5MmFkM2NiNzQ3MTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Aezgsdq1nyUsLUtaLzszplybyiV
Q/2Nca7hRLTFsU/l6f3cPRoLx3uI2j1w23nxT/HYKv27LI/PfBvEuiKHztyRfyzx
lGEJFCQRWFdyvKgZtjqFY8BcvP7I4BehfzCAUjlssTTLews1ndlFQ0JMaqqGmGpD
6MMMXigXsx1mRZw0+39hKCvMXcIKAqyFnrHVqwwT+nxacOOLxT1IbCzC+bZDUWCd
bUdxqp2vfViWDGIbecmprngFl3UYgjgoh08xnheF4ZiACo8Soilx4UJMuRSan/pD
FX8KKDlty3xRpE/UfKYIiWXXmMfNi1uFaTFcqDDvgPpLW4+7QCKMkMtCPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO9rQcxAeT1rVky6b68JKtPLdHFOMB8GA1UdIwQY
MBaAFBUzzS0fbc8e7JfoaUPE5TsMiOquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRQTkxSOXR6eDdzbC1ocFE4VGxPd3lJNnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC81NjUxOTEtZDk4MS00MWU1LTk2MWMt
OWZlNTViMTcxNjgzLzEvNzJ0QnpFQjVQV3RXVExwdnJ3a3EwOHQwY1U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC81NjUxOTEtZDk4MS00MWU1LTk2MWMtOWZlNTViMTcxNjgz
LzEvRlRQTkxSOXR6eDdzbC1ocFE4VGxPd3lJNnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSuEMA0G
CSqGSIb3DQEBCwUAA4IBAQBhojRf5ob5NunaKAR6K9kcHr4A98CFXxqzpzAadHTT
s+9WLwlUsWyOHMIolNoXqROpHSBeQ16rmwZpmZAM6q2b+rhJXk4777p/4/l99I9e
o5RzeEf/2ejcMFi8Y7JufsoN83U6PCkrcY5I4GmGFPxNfoKDDlcYTiRKvRASYNwD
qec2NdAg63ILsgDEYUA3xrOOfQcOpZj+meBbbaHGZI+zRSxvahIuHjkBIBtrfaIw
/MOUK5kl1BpWc1YV23Tko8Kbj1TXSk3iijOhlOjAsJ0UV767W7ynEyOnYDzh9h28
dapiHWY9l7txRUhlFAg7CRZ8IOcZOAIGwH6e6L8Htalp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:16 2024 by rpki-client on console-fra.rpki-client.org