Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/Kr71KdIAQn3ZeeQdUeGx8a6x7j4.roa
File: Kr71KdIAQn3ZeeQdUeGx8a6x7j4.roa (raw, json)
Hash identifier: c2PpThQFx4F0BLCx6i4r5wToSAsdi6ICPcs4BXpvyXU=
Subject key identifier: 2A:BE:F5:29:D2:00:42:7D:D9:79:E4:1D:51:E1:B1:F1:AE:B1:EE:3E
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 01856E01C0818B4BE4C6901F03E2CBDD94D2
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/Kr71KdIAQn3ZeeQdUeGx8a6x7j4.roa
Signing time: Sun 01 Jan 2023 15:44:46 +0000
ROA not before: Sun 01 Jan 2023 15:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1257
IP address blocks: 193.10.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:c0:81:8b:4b:e4:c6:90:1f:03:e2:cb:dd:94:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2abef529d200427dd979e41d51e1b1f1aeb1ee3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:03:7b:a6:d9:d5:a3:46:87:9e:55:63:f7:
f0:6c:f2:ab:47:1c:9f:32:41:cf:28:52:e7:5f:0d:
e2:40:32:2e:18:d7:35:a5:ba:b4:dd:65:07:89:e1:
45:30:47:6c:1d:e0:94:e2:9c:a2:cd:7e:fb:85:1d:
5a:70:ca:8f:5b:3a:ad:f9:16:8a:d6:cf:e9:9b:e0:
52:82:8e:7e:72:b3:68:1d:9c:41:a8:97:d9:80:b8:
5a:dc:d7:79:cd:1a:05:e3:7c:5f:51:cd:62:fb:01:
70:85:2d:7e:be:97:fb:5c:72:8d:6f:e2:f8:31:ad:
84:34:ad:86:65:b2:a4:78:ca:0a:cb:b4:21:2c:09:
01:a0:b6:4b:ba:70:d4:10:4f:59:ac:cb:37:a6:4e:
55:33:ff:a6:15:1b:a1:f5:4d:66:02:bb:a7:75:c4:
1a:5b:73:84:04:31:29:86:86:a1:e5:f2:e7:c6:b8:
d5:70:19:4a:16:48:e3:04:f3:e7:16:e0:44:da:f8:
70:7c:0a:68:d1:2d:a4:94:dd:aa:40:ef:5b:5d:6a:
0d:88:de:62:3e:3a:92:8c:0b:ea:70:fb:14:c2:24:
f9:c3:18:d2:a0:33:1f:19:ed:d6:4d:e3:29:7f:86:
77:ac:60:81:64:a9:56:5a:cb:54:fd:ad:b0:12:05:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BE:F5:29:D2:00:42:7D:D9:79:E4:1D:51:E1:B1:F1:AE:B1:EE:3E
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/Kr71KdIAQn3ZeeQdUeGx8a6x7j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.144.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b9:2c:6f:2c:0c:2c:2e:4e:f1:a5:60:ba:8a:63:42:83:99:
72:46:08:bc:4f:bb:21:4e:b3:1e:7e:0b:3b:01:d8:32:8a:09:
14:38:e7:c0:93:37:99:c7:f1:63:01:98:14:14:de:d3:93:44:
bc:0e:f4:ea:1f:e4:7e:96:53:fc:4b:e5:53:55:01:cf:58:4e:
aa:41:3f:6e:6d:ff:a0:f5:cc:be:8e:30:33:6d:eb:03:4f:45:
c1:23:34:5a:82:f7:b1:33:16:47:8e:ac:a8:3b:f3:fe:3e:56:
c5:bf:e6:8f:31:18:55:b6:75:0f:2c:ec:47:b8:5a:27:32:5b:
60:e1:95:4a:a9:fa:0b:db:43:3f:3a:58:07:28:c2:de:f6:9f:
e1:eb:b3:9a:49:7f:4a:a1:fc:bf:f2:45:4d:0d:e4:94:5e:0d:
7f:71:f0:32:4e:a7:e5:ed:e3:27:db:5c:d5:dd:d4:72:27:d3:
2a:0b:b5:59:8d:8e:fe:3d:29:2f:6e:7e:ab:20:b0:81:3d:51:
7a:30:27:0e:82:c9:4f:db:f0:37:e7:6a:17:c7:41:db:ef:9b:
86:82:ff:a1:ef:ed:21:99:e8:85:83:34:fe:b8:fd:ed:51:ab:
e2:61:c0:72:dd:cf:bd:89:66:7a:c2:56:02:1e:a5:54:e5:48:
b2:53:15:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuAcCBi0vkxpAfA+LL3ZTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5
NGM1ZjIwHhcNMjMwMTAxMTU0NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWJlZjUyOWQyMDA0MjdkZDk3OWU0MWQ1MWUxYjFmMWFlYjFlZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOkDe6bZ1aNGh55VY/fwbPKrRxyf
MkHPKFLnXw3iQDIuGNc1pbq03WUHieFFMEdsHeCU4pyizX77hR1acMqPWzqt+RaK
1s/pm+BSgo5+crNoHZxBqJfZgLha3Nd5zRoF43xfUc1i+wFwhS1+vpf7XHKNb+L4
Ma2ENK2GZbKkeMoKy7QhLAkBoLZLunDUEE9ZrMs3pk5VM/+mFRuh9U1mArundcQa
W3OEBDEphoah5fLnxrjVcBlKFkjjBPPnFuBE2vhwfApo0S2klN2qQO9bXWoNiN5i
PjqSjAvqcPsUwiT5wxjSoDMfGe3WTeMpf4Z3rGCBZKlWWstU/a2wEgUR/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCq+9SnSAEJ92XnkHVHhsfGuse4+MB8GA1UdIwQY
MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt
NDY0ZWIxODNiNTY4LzEvS3I3MUtkSUFRbjNaZWVRZFVlR3g4YTZ4N2o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4
LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQqQMA0G
CSqGSIb3DQEBCwUAA4IBAQANuSxvLAwsLk7xpWC6imNCg5lyRgi8T7shTrMefgs7
AdgyigkUOOfAkzeZx/FjAZgUFN7Tk0S8DvTqH+R+llP8S+VTVQHPWE6qQT9ubf+g
9cy+jjAzbesDT0XBIzRagvexMxZHjqyoO/P+PlbFv+aPMRhVtnUPLOxHuFonMltg
4ZVKqfoL20M/OlgHKMLe9p/h67OaSX9Kofy/8kVNDeSUXg1/cfAyTqfl7eMn21zV
3dRyJ9MqC7VZjY7+PSkvbn6rILCBPVF6MCcOgslP2/A352oXx0Hb75uGgv+h7+0h
meiFgzT+uP3tUaviYcBy3c+9iWZ6wlYCHqVU5UiyUxUZ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:57 2023 by rpki-client on console-fra.rpki-client.org