Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/SvkBM4EeYupfeVkE78AECxZx6pc.roa
File: SvkBM4EeYupfeVkE78AECxZx6pc.roa (raw, json)
Hash identifier: xLBCHVj4y42HEOgVHnT77qbZf3/aXNx6EPaxM49C7nQ=
Subject key identifier: 4A:F9:01:33:81:1E:62:EA:5F:79:59:04:EF:C0:04:0B:16:71:EA:97
Certificate issuer: /CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Certificate serial: 0188250A619635B20BE9C076534CB8850E62
Authority key identifier: EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/SvkBM4EeYupfeVkE78AECxZx6pc.roa
Signing time: Tue 16 May 2023 14:50:17 +0000
ROA not before: Tue 16 May 2023 14:50:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202269
IP address blocks: 217.197.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:25:0a:61:96:35:b2:0b:e9:c0:76:53:4c:b8:85:0e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb02b523bd3af6fc6c37ddd66cdf47993db8632b
Validity
Not Before: May 16 14:50:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4af90133811e62ea5f795904efc0040b1671ea97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:b0:30:58:3c:b4:6a:9a:61:ee:0e:7d:97:
ad:2d:d1:79:b5:93:85:96:44:76:1f:95:af:99:b1:
91:cd:fc:00:63:3f:e1:20:a4:22:44:c8:ce:53:2d:
d6:f9:05:a9:0f:5d:5b:17:f9:7e:07:a8:8e:73:27:
7e:8f:0c:38:9c:e3:c5:04:6f:dc:ee:d9:be:d1:78:
d0:0c:bd:7d:5b:45:4a:02:3e:eb:b0:11:b2:c4:96:
b2:52:28:d5:c2:b5:43:bd:25:b6:a1:d1:45:43:d3:
26:c2:a4:01:b5:86:9b:83:c1:fd:cb:1b:64:03:f7:
a8:b5:1f:13:0c:85:b9:14:49:b4:88:f0:13:b5:fe:
ba:a7:81:13:78:e6:55:ff:d5:cb:e1:76:96:c3:67:
e4:0b:fd:f0:d9:aa:ac:e0:42:06:44:be:e0:48:03:
2c:b9:54:9e:48:e4:c0:92:f9:de:70:3f:67:be:2a:
c2:f3:a5:b5:44:a1:36:ac:a5:2d:7a:cc:b8:2f:1c:
04:b2:61:65:a9:36:1a:18:16:04:bc:1d:9a:23:1c:
de:83:cd:c6:ff:c6:ee:54:a4:3c:59:1a:94:38:30:
04:6f:7f:5b:a1:63:60:16:42:e9:62:ca:93:42:db:
aa:71:ac:2e:ff:ac:2c:e7:0e:44:88:17:1d:ff:e2:
62:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F9:01:33:81:1E:62:EA:5F:79:59:04:EF:C0:04:0B:16:71:EA:97
X509v3 Authority Key Identifier:
keyid:EB:02:B5:23:BD:3A:F6:FC:6C:37:DD:D6:6C:DF:47:99:3D:B8:63:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wK1I7069vxsN93WbN9HmT24Yys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/SvkBM4EeYupfeVkE78AECxZx6pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/331874-7b31-4879-bf0b-0585e9edc330/1/6wK1I7069vxsN93WbN9HmT24Yys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.197.97.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:26:f3:6e:19:de:88:9b:86:8e:d3:79:3b:59:81:c0:6f:6f:
6f:db:70:40:0a:5d:07:07:2b:de:a3:39:b9:16:6e:d7:c0:8c:
a5:f8:73:74:53:ac:9d:4b:ec:4f:7e:54:4f:6b:71:fb:58:9b:
88:79:c2:58:5f:ed:8b:ab:3b:24:2c:b1:66:a4:26:59:b0:6f:
ef:69:60:55:f3:37:0c:39:75:46:41:66:c3:66:ba:c7:3b:58:
1e:54:a8:93:be:e0:31:ca:b7:b2:27:8d:62:57:c4:17:25:f6:
b4:29:3e:72:8e:ed:94:60:19:a7:65:a7:e3:86:3b:01:f8:1d:
c9:0b:af:89:2b:53:12:2f:a4:e1:64:9b:da:d9:a5:1f:9b:ec:
e9:90:66:5d:f7:ba:c1:62:ee:04:75:15:be:41:b7:83:ad:3e:
6f:76:a1:3e:c2:2b:b6:ce:5e:b5:90:93:e0:e3:79:4a:e8:0e:
7c:ec:06:70:ad:9d:e1:63:d0:d3:90:35:5e:91:9b:c4:7e:5c:
21:49:84:a2:2f:cd:c9:47:47:c0:9a:7e:24:76:85:76:90:12:
e1:88:65:74:af:86:22:74:9b:15:84:12:42:7a:94:44:48:10:
b2:ee:a0:0d:bf:cf:14:e2:85:a9:7e:50:66:a1:a2:11:01:b3:
c9:d0:f6:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYglCmGWNbIL6cB2U0y4hQ5iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMDJiNTIzYmQzYWY2ZmM2YzM3ZGRkNjZjZGY0Nzk5M2Ri
ODYzMmIwHhcNMjMwNTE2MTQ1MDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWY5MDEzMzgxMWU2MmVhNWY3OTU5MDRlZmMwMDQwYjE2NzFlYTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT+wMFg8tGqaYe4OfZetLdF5tZOF
lkR2H5WvmbGRzfwAYz/hIKQiRMjOUy3W+QWpD11bF/l+B6iOcyd+jww4nOPFBG/c
7tm+0XjQDL19W0VKAj7rsBGyxJayUijVwrVDvSW2odFFQ9MmwqQBtYabg8H9yxtk
A/eotR8TDIW5FEm0iPATtf66p4ETeOZV/9XL4XaWw2fkC/3w2aqs4EIGRL7gSAMs
uVSeSOTAkvnecD9nvirC86W1RKE2rKUtesy4LxwEsmFlqTYaGBYEvB2aIxzeg83G
/8buVKQ8WRqUODAEb39boWNgFkLpYsqTQtuqcawu/6ws5w5EiBcd/+JiDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEr5ATOBHmLqX3lZBO/ABAsWceqXMB8GA1UdIwQY
MBaAFOsCtSO9Ovb8bDfd1mzfR5k9uGMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNndLMUk3MDY5dnhzTjkzV2JOOUhtVDI0WXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zMzE4NzQtN2IzMS00ODc5LWJmMGIt
MDU4NWU5ZWRjMzMwLzEvU3ZrQk00RWVZdXBmZVZrRTc4QUVDeFp4NnBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zMzE4NzQtN2IzMS00ODc5LWJmMGItMDU4NWU5ZWRjMzMw
LzEvNndLMUk3MDY5dnhzTjkzV2JOOUhtVDI0WXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2cVhMA0G
CSqGSIb3DQEBCwUAA4IBAQBtJvNuGd6Im4aO03k7WYHAb29v23BACl0HByveozm5
Fm7XwIyl+HN0U6ydS+xPflRPa3H7WJuIecJYX+2LqzskLLFmpCZZsG/vaWBV8zcM
OXVGQWbDZrrHO1geVKiTvuAxyreyJ41iV8QXJfa0KT5yju2UYBmnZafjhjsB+B3J
C6+JK1MSL6ThZJva2aUfm+zpkGZd97rBYu4EdRW+QbeDrT5vdqE+wiu2zl61kJPg
43lK6A587AZwrZ3hY9DTkDVekZvEflwhSYSiL83JR0fAmn4kdoV2kBLhiGV0r4Yi
dJsVhBJCepRESBCy7qANv88U4oWpflBmoaIRAbPJ0PYM
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:39 2024 by rpki-client on console-fra.rpki-client.org