Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/kvNLc7-WZ7LxRVWaK7d3V2cZrnY.roa
File: kvNLc7-WZ7LxRVWaK7d3V2cZrnY.roa (raw, json)
Hash identifier: HRFpc2B7aU2UJUeIb/4OkHzNozByHHADYFjGki4RQDA=
Subject key identifier: 92:F3:4B:73:BF:96:67:B2:F1:45:55:9A:2B:B7:77:57:67:19:AE:76
Certificate issuer: /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial: 018C104EFED6895FDD5346A4A4E35A56AC55
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/kvNLc7-WZ7LxRVWaK7d3V2cZrnY.roa
Signing time: Mon 27 Nov 2023 10:24:21 +0000
ROA not before: Mon 27 Nov 2023 10:24:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21113
IP address blocks: 193.202.240.0/20 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:10:4e:fe:d6:89:5f:dd:53:46:a4:a4:e3:5a:56:ac:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Validity
Not Before: Nov 27 10:24:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92f34b73bf9667b2f145559a2bb777576719ae76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:fb:5b:fe:3f:39:4e:c8:69:44:dd:5b:38:
22:4d:c7:73:90:0f:14:ec:bc:59:42:c2:51:75:d5:
b9:b5:7f:ec:dd:f2:e1:c5:25:fa:8a:e7:2f:5a:49:
c2:aa:51:db:ff:60:52:89:86:c8:68:83:ed:e2:6f:
c7:f1:55:47:b3:2d:3c:48:91:d3:b2:87:2c:44:1d:
c5:d4:7e:b1:12:20:c1:f0:09:cd:8d:f1:50:fa:eb:
d5:f1:2a:21:38:d8:dc:26:25:6b:bc:42:b1:c9:05:
84:97:ff:c4:f4:fa:1e:81:01:96:f3:24:e2:f0:bc:
4d:da:ed:2c:fd:76:d5:3e:90:c9:b8:fd:ff:be:23:
38:b7:4a:97:ab:fc:17:29:dd:11:97:80:92:4c:76:
8c:19:27:7c:42:1f:28:94:65:40:47:d3:9b:eb:44:
40:a6:41:2a:69:36:bc:04:d5:52:2a:fb:49:a7:89:
92:a4:22:4f:d7:28:0b:f9:ff:96:d9:e6:6c:23:04:
7d:5f:6e:51:72:9f:ba:10:94:89:5b:65:6b:98:16:
3e:92:70:d8:07:4e:a6:56:01:56:e6:1e:23:8e:f8:
0e:77:e9:cd:93:7f:6d:3e:9c:ac:5d:db:3f:0e:a0:
59:af:d6:80:79:4f:52:bf:10:b8:88:ea:d8:e2:f3:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F3:4B:73:BF:96:67:B2:F1:45:55:9A:2B:B7:77:57:67:19:AE:76
X509v3 Authority Key Identifier:
keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/kvNLc7-WZ7LxRVWaK7d3V2cZrnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.240.0/20
Signature Algorithm: sha256WithRSAEncryption
49:a7:e2:08:ee:f9:d5:3d:9c:0c:55:9d:59:b3:ef:28:3d:ab:
ff:41:24:de:12:1c:07:39:af:79:3f:05:b8:da:03:d5:d7:98:
2b:29:b3:70:12:ad:3f:c7:a1:97:25:08:48:37:f1:15:dd:d9:
55:6a:fa:19:3a:1b:73:a5:12:22:88:5b:70:25:32:cd:70:b9:
a9:b7:43:c7:93:58:4f:e7:55:41:0b:5c:40:81:08:e0:f2:cb:
84:3d:a9:ed:9b:cd:ac:19:dd:9f:e9:b6:80:db:d3:34:91:43:
ac:56:8f:d5:1c:1e:1e:dc:1d:95:93:13:94:95:96:39:ff:66:
7a:de:3b:9c:6f:dd:de:c5:ff:15:55:14:b8:8a:a4:74:cc:b2:
25:a3:6a:cb:1a:ca:ff:39:b3:40:25:b3:7b:6d:a7:43:43:35:
50:ff:e1:3d:cd:8c:51:95:9a:e0:96:77:a8:7c:e7:d6:4b:ae:
47:15:fa:ca:6b:93:01:6d:a6:ed:cc:38:26:85:46:13:88:45:
dd:44:bc:df:6f:4d:29:61:7c:a0:e4:87:4c:77:f6:82:ae:8a:
f0:ae:aa:30:63:19:82:7a:a4:57:76:a6:19:b6:6b:5e:f3:47:
cc:fe:61:bf:13:5d:5a:6b:f6:37:9c:67:d7:76:0c:3f:5a:63:
c8:cf:0e:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwQTv7WiV/dU0akpONaVqxVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZGRkNmU3YTFmZWI2ZmI0N2M5YTJmODk5MTg4MjcwOTRk
YmZjMTcwHhcNMjMxMTI3MTAyNDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmYzNGI3M2JmOTY2N2IyZjE0NTU1OWEyYmI3Nzc1NzY3MTlhZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zL7W/4/OU7IaUTdWzgiTcdzkA8U
7LxZQsJRddW5tX/s3fLhxSX6iucvWknCqlHb/2BSiYbIaIPt4m/H8VVHsy08SJHT
socsRB3F1H6xEiDB8AnNjfFQ+uvV8SohONjcJiVrvEKxyQWEl//E9PoegQGW8yTi
8LxN2u0s/XbVPpDJuP3/viM4t0qXq/wXKd0Rl4CSTHaMGSd8Qh8olGVAR9Ob60RA
pkEqaTa8BNVSKvtJp4mSpCJP1ygL+f+W2eZsIwR9X25Rcp+6EJSJW2VrmBY+knDY
B06mVgFW5h4jjvgOd+nNk39tPpysXds/DqBZr9aAeU9SvxC4iOrY4vNUQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJLzS3O/lmey8UVVmiu3d1dnGa52MB8GA1UdIwQY
MBaAFN7d1ueh/rb7R8mi+JkYgnCU2/wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3QzVzU2SC10dnRIeWFMNG1SaUNjSlRiX0JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wYWQ5OWEtMWEwZi00MmUwLWFlN2Qt
ZjA3MTgzNzczYjI2LzEva3ZOTGM3LVdaN0x4UlZXYUs3ZDNWMmNacm5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wYWQ5OWEtMWEwZi00MmUwLWFlN2QtZjA3MTgzNzczYjI2
LzEvM3QzVzU2SC10dnRIeWFMNG1SaUNjSlRiX0JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwcrwMA0G
CSqGSIb3DQEBCwUAA4IBAQBJp+II7vnVPZwMVZ1Zs+8oPav/QSTeEhwHOa95PwW4
2gPV15grKbNwEq0/x6GXJQhIN/EV3dlVavoZOhtzpRIiiFtwJTLNcLmpt0PHk1hP
51VBC1xAgQjg8suEPantm82sGd2f6baA29M0kUOsVo/VHB4e3B2VkxOUlZY5/2Z6
3jucb93exf8VVRS4iqR0zLIlo2rLGsr/ObNAJbN7badDQzVQ/+E9zYxRlZrglneo
fOfWS65HFfrKa5MBbabtzDgmhUYTiEXdRLzfb00pYXyg5IdMd/aCrorwrqowYxmC
eqRXdqYZtmte80fM/mG/E11aa/Y3nGfXdgw/WmPIzw4t
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:21 2024 by rpki-client on console-fra.rpki-client.org