Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/wMtetfpkCxzNz85PZCiA6q0jaMM.roa
File: wMtetfpkCxzNz85PZCiA6q0jaMM.roa (raw, json)
Hash identifier: 8dI7Q/monqHnvGDz8JXmlAgfxfXi8H+AN3l6M1OQbTs=
Subject key identifier: C0:CB:5E:B5:FA:64:0B:1C:CD:CF:CE:4F:64:28:80:EA:AD:23:68:C3
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 01857227EB73597EED5D39BC9F8437218E7B
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/wMtetfpkCxzNz85PZCiA6q0jaMM.roa
Signing time: Mon 02 Jan 2023 11:04:56 +0000
ROA not before: Mon 02 Jan 2023 11:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 193.9.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:eb:73:59:7e:ed:5d:39:bc:9f:84:37:21:8e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Jan 2 11:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0cb5eb5fa640b1ccdcfce4f642880eaad2368c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:96:8d:8b:e5:a8:89:80:77:fd:ec:d9:30:f7:
38:d5:af:8d:90:d1:e9:ec:7c:eb:a3:0c:3a:da:25:
02:ee:1f:90:42:6b:5a:6a:2a:82:ab:a4:51:a2:bc:
36:f7:6e:12:47:64:a7:3b:ab:21:47:aa:84:0c:97:
69:6b:1a:a5:65:80:c8:88:95:b5:3a:d2:95:f9:de:
6e:61:53:f9:e7:9b:ac:20:98:b7:7d:c5:95:0d:60:
08:dc:80:a9:a2:c9:3c:9a:4b:a9:14:c0:7b:53:d2:
e5:33:5e:0b:8c:01:a1:02:2f:23:a0:d9:a6:14:e1:
2d:0d:07:b9:99:5c:97:6d:92:c1:02:33:a6:23:48:
63:f5:c8:32:e6:ee:de:8f:e5:a4:ab:e5:fb:c5:27:
d0:47:8f:66:f1:67:25:bc:07:95:90:18:ec:fa:ee:
bb:8d:ec:4b:1a:4e:f4:1f:0f:7c:59:4f:da:a8:a7:
35:c0:1b:bd:43:30:d5:6f:80:eb:12:cd:70:5a:f2:
49:63:3a:df:67:02:a3:73:af:1f:f8:be:0d:46:6f:
28:e0:f6:fc:5e:64:f7:b9:7c:cb:74:73:da:5b:42:
75:fe:57:7d:27:bb:07:40:3a:ee:3c:2b:d9:a5:2a:
c9:17:4a:53:05:4f:72:3a:77:cd:7e:15:4b:53:f2:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CB:5E:B5:FA:64:0B:1C:CD:CF:CE:4F:64:28:80:EA:AD:23:68:C3
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/wMtetfpkCxzNz85PZCiA6q0jaMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.122.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a2:86:77:3a:ff:f2:f6:51:1d:b4:fe:8d:04:2c:68:f7:5f:
84:60:a8:c4:58:d9:7c:a8:6a:ba:ff:ba:1e:6a:ed:ef:2b:ec:
df:36:84:b2:24:d2:dd:2d:6c:78:c3:6f:b8:84:ee:b9:b6:72:
5b:c1:64:49:02:d5:60:ff:5d:9d:38:6a:89:f1:49:53:9d:bf:
a4:c1:9e:b0:f0:7b:5e:63:42:b2:cb:aa:dd:f7:6c:9f:14:01:
e8:a8:ea:3c:13:04:09:34:ac:11:d8:f4:25:2b:71:9f:4c:d6:
03:2e:1f:de:1d:ca:c7:b3:b3:d9:e7:60:a7:d7:83:6c:84:66:
7d:ef:e7:1f:f1:f5:c6:9b:a9:42:1e:35:0c:63:12:c7:e2:c7:
ad:31:2c:9e:90:88:61:42:3b:76:0f:4b:fa:d7:8c:d2:ef:f0:
76:d0:b3:55:59:ba:31:cb:c2:41:83:bf:63:d2:60:67:a5:64:
43:f5:bf:5f:5b:66:90:c7:26:6f:49:41:35:cb:24:4b:2b:83:
c8:5d:fb:64:d9:bc:5e:f9:0a:f7:f7:c7:36:38:97:4d:bb:44:
f3:ea:35:bc:5c:f4:7c:c3:8b:47:24:84:d7:fd:fd:8f:37:b1:
5e:aa:5a:35:85:be:9f:c9:12:1c:06:65:21:a9:21:49:de:61:
39:ac:2a:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyJ+tzWX7tXTm8n4Q3IY57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjODY2NjJiNzUyYzhhM2JlNzJlODU0NDM5NGZmOTI2ZjY4
ZmJmN2UwHhcNMjMwMTAyMTEwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGNiNWViNWZhNjQwYjFjY2RjZmNlNGY2NDI4ODBlYWFkMjM2OGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJaNi+WoiYB3/ezZMPc41a+NkNHp
7Hzroww62iUC7h+QQmtaaiqCq6RRorw2924SR2SnO6shR6qEDJdpaxqlZYDIiJW1
OtKV+d5uYVP555usIJi3fcWVDWAI3ICposk8mkupFMB7U9LlM14LjAGhAi8joNmm
FOEtDQe5mVyXbZLBAjOmI0hj9cgy5u7ej+Wkq+X7xSfQR49m8WclvAeVkBjs+u67
jexLGk70Hw98WU/aqKc1wBu9QzDVb4DrEs1wWvJJYzrfZwKjc68f+L4NRm8o4Pb8
XmT3uXzLdHPaW0J1/ld9J7sHQDruPCvZpSrJF0pTBU9yOnfNfhVLU/LzqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMDLXrX6ZAsczc/OT2QogOqtI2jDMB8GA1UdIwQY
MBaAFAyGZit1LIo75y6FRDlP+Sb2j79+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5Yjgt
MWNjYzljMjk1ZThlLzEvd010ZXRmcGtDeHpOejg1UFpDaUE2cTBqYU1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5YjgtMWNjYzljMjk1ZThl
LzEvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQl6MA0G
CSqGSIb3DQEBCwUAA4IBAQBbooZ3Ov/y9lEdtP6NBCxo91+EYKjEWNl8qGq6/7oe
au3vK+zfNoSyJNLdLWx4w2+4hO65tnJbwWRJAtVg/12dOGqJ8UlTnb+kwZ6w8Hte
Y0Kyy6rd92yfFAHoqOo8EwQJNKwR2PQlK3GfTNYDLh/eHcrHs7PZ52Cn14NshGZ9
7+cf8fXGm6lCHjUMYxLH4setMSyekIhhQjt2D0v614zS7/B20LNVWboxy8JBg79j
0mBnpWRD9b9fW2aQxyZvSUE1yyRLK4PIXftk2bxe+Qr398c2OJdNu0Tz6jW8XPR8
w4tHJITX/f2PN7Feqlo1hb6fyRIcBmUhqSFJ3mE5rCpb
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:43 2024 by rpki-client on console-fra.rpki-client.org