Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/jAZjkPRnrtq08DoqGcxMUVNXYyk.roa
File: jAZjkPRnrtq08DoqGcxMUVNXYyk.roa (raw, json)
Hash identifier: FfDIuiAb/vxS0gVGQiQHaC9hMt65uDnz0BKd+oOwVCA=
Subject key identifier: 8C:06:63:90:F4:67:AE:DA:B4:F0:3A:2A:19:CC:4C:51:53:57:63:29
Certificate issuer: /CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Certificate serial: 018CC3B729F01DE8D95CF73BFF0227B2478B
Authority key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/jAZjkPRnrtq08DoqGcxMUVNXYyk.roa
Signing time: Mon 01 Jan 2024 06:30:10 +0000
ROA not before: Mon 01 Jan 2024 06:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60860
IP address blocks: 193.107.82.0/24 maxlen: 24
193.107.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 09:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:29:f0:1d:e8:d9:5c:f7:3b:ff:02:27:b2:47:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c066390f467aedab4f03a2a19cc4c5153576329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:95:9e:bf:03:9c:fe:4b:15:5f:00:0f:b4:
00:76:0c:c6:2e:b3:a4:60:6d:cc:22:4b:e3:08:a2:
93:33:0a:3d:3a:a4:a6:7c:0f:25:50:18:bd:6c:d0:
24:8a:1e:c5:f1:e7:75:2f:ec:fc:bb:7d:c1:bf:9d:
46:f0:5c:96:33:22:05:0c:5a:4d:f3:75:85:18:fd:
44:38:40:59:6b:f2:2e:2c:a4:e3:8d:7c:fe:1a:24:
2a:d3:d9:e7:be:6b:d8:a7:cd:38:ab:2b:ab:b2:d8:
67:51:30:51:f1:7f:cb:d5:ec:95:dc:49:c8:91:d3:
c2:da:8f:37:1a:30:e0:59:0c:80:0c:5a:be:38:f1:
7a:a5:04:25:c2:1f:b5:3a:1d:ae:70:93:72:31:e6:
1c:6b:82:06:8e:1f:ab:0a:72:fd:da:57:ec:19:74:
7e:0f:9f:b7:04:89:75:2c:ef:9c:c2:b1:b4:ff:f4:
0c:d1:7c:6a:23:b8:d6:bc:bf:7a:c9:26:73:d1:5e:
38:12:0e:98:98:b8:0d:d4:0f:25:4d:f3:2b:fa:a5:
17:f8:ee:8f:4d:ce:af:91:f5:32:31:90:41:a3:d0:
2c:8f:e1:48:1f:d4:1f:65:75:11:3a:ee:7a:2b:e9:
82:57:89:04:36:d1:ed:3a:6b:27:bc:9d:07:07:a0:
ab:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:06:63:90:F4:67:AE:DA:B4:F0:3A:2A:19:CC:4C:51:53:57:63:29
X509v3 Authority Key Identifier:
keyid:0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/jAZjkPRnrtq08DoqGcxMUVNXYyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.82.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:41:e5:7f:8e:30:78:40:7c:83:08:5c:f1:6d:fc:94:a0:e3:
6a:6d:70:31:6d:d1:db:3a:c3:42:ce:a1:75:ae:f2:ad:7b:0f:
f9:54:88:fb:16:02:5f:ab:87:f8:9d:58:aa:c9:d4:b4:2c:76:
7a:a4:aa:55:74:00:fb:f7:b5:4b:b5:d3:0d:57:de:a8:8e:88:
84:5e:26:32:5f:38:48:95:44:4f:fe:f9:a8:40:dc:0f:14:6a:
24:31:07:85:88:09:a5:83:ad:49:06:19:44:c9:2a:f8:84:73:
e1:f4:2e:79:93:61:85:64:ab:59:3d:43:cd:84:aa:36:9b:8b:
21:f4:b7:e6:f3:18:91:da:ad:c2:03:b6:73:ca:55:de:b6:ca:
d4:03:31:fc:4d:27:a0:99:ed:a8:56:d3:78:bb:75:05:09:b1:
2a:b5:e4:3b:bc:1e:fd:b3:71:f8:6a:5a:52:19:8b:84:3e:b6:
fc:ed:55:87:2d:5f:33:a3:f4:5c:1a:75:50:ca:8f:2e:bb:b6:
62:04:27:eb:1f:1a:ad:cc:8e:66:72:45:f3:c0:d3:5a:15:53:
92:10:0b:8d:20:cb:22:be:a4:84:a9:21:88:d0:5f:5f:bc:95:
65:24:a5:ad:6d:cf:47:86:6c:17:34:a9:b8:23:f9:01:c5:b2:
dc:02:41:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtynwHejZXPc7/wInskeLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMjgyYTE1YzFhNWQxNTRiYmRhODcyYjM1NzYwN2E5MWY5
NTBhYTUwHhcNMjQwMTAxMDYzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzA2NjM5MGY0NjdhZWRhYjRmMDNhMmExOWNjNGM1MTUzNTc2MzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVOVnr8DnP5LFV8AD7QAdgzGLrOk
YG3MIkvjCKKTMwo9OqSmfA8lUBi9bNAkih7F8ed1L+z8u33Bv51G8FyWMyIFDFpN
83WFGP1EOEBZa/IuLKTjjXz+GiQq09nnvmvYp804qyursthnUTBR8X/L1eyV3EnI
kdPC2o83GjDgWQyADFq+OPF6pQQlwh+1Oh2ucJNyMeYca4IGjh+rCnL92lfsGXR+
D5+3BIl1LO+cwrG0//QM0XxqI7jWvL96ySZz0V44Eg6YmLgN1A8lTfMr+qUX+O6P
Tc6vkfUyMZBBo9Asj+FIH9QfZXUROu56K+mCV4kENtHtOmsnvJ0HB6CrZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIwGY5D0Z67atPA6KhnMTFFTV2MpMB8GA1UdIwQY
MBaAFA4oKhXBpdFUu9qHKzV2B6kflQqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGlncUZjR2wwVlM3Mm9jck5YWUhxUi1WQ3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kYWYxYWUtZDVlYi00Y2E0LThhYWYt
Nzg3NDFhYzkzYjMwLzEvakFaamtQUm5ydHEwOERvcUdjeE1VVk5YWXlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9kYWYxYWUtZDVlYi00Y2E0LThhYWYtNzg3NDFhYzkzYjMw
LzEvRGlncUZjR2wwVlM3Mm9jck5YWUhxUi1WQ3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwWtSMA0G
CSqGSIb3DQEBCwUAA4IBAQCkQeV/jjB4QHyDCFzxbfyUoONqbXAxbdHbOsNCzqF1
rvKtew/5VIj7FgJfq4f4nViqydS0LHZ6pKpVdAD797VLtdMNV96ojoiEXiYyXzhI
lURP/vmoQNwPFGokMQeFiAmlg61JBhlEySr4hHPh9C55k2GFZKtZPUPNhKo2m4sh
9Lfm8xiR2q3CA7ZzylXetsrUAzH8TSegme2oVtN4u3UFCbEqteQ7vB79s3H4alpS
GYuEPrb87VWHLV8zo/RcGnVQyo8uu7ZiBCfrHxqtzI5mckXzwNNaFVOSEAuNIMsi
vqSEqSGI0F9fvJVlJKWtbc9HhmwXNKm4I/kBxbLcAkF2
-----END CERTIFICATE-----
Generated at Thu Jan 11 12:38:57 2024 by rpki-client on console-ams.rpki-client.org