Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/IgvnSkdCUwjvJPNcYyguXOVYADo.roa
File: IgvnSkdCUwjvJPNcYyguXOVYADo.roa (raw, json)
Hash identifier: qNhxBq5zOTUGKJ8YnvrrqmQ9NuVQkdID3v4dMjdQImA=
Subject key identifier: 22:0B:E7:4A:47:42:53:08:EF:24:F3:5C:63:28:2E:5C:E5:58:00:3A
Certificate issuer: /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Certificate serial: 01856C25B0C295E8875146B416D54847F846
Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/IgvnSkdCUwjvJPNcYyguXOVYADo.roa
Signing time: Sun 01 Jan 2023 07:04:47 +0000
ROA not before: Sun 01 Jan 2023 07:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14630
IP address blocks: 193.23.124.0/24 maxlen: 24
194.35.33.0/24 maxlen: 24
194.35.35.0/24 maxlen: 24
194.35.32.0/24 maxlen: 24
194.35.34.0/24 maxlen: 24
2a0d:fd40:56::/48 maxlen: 48
2a0d:fd40::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:b0:c2:95:e8:87:51:46:b4:16:d5:48:47:f8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Validity
Not Before: Jan 1 07:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=220be74a47425308ef24f35c63282e5ce558003a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c6:c3:b0:7e:9b:47:93:83:ce:73:3e:f7:ae:
8d:a5:7f:6b:58:b7:2c:ae:9c:56:60:6b:bb:c3:f5:
d4:21:d0:11:1a:eb:44:21:6a:88:39:0b:4b:ae:63:
ed:69:99:81:9e:28:3d:c8:05:ee:2b:1c:b6:74:75:
2f:af:53:0e:96:91:05:cf:86:86:4b:0c:8e:95:b2:
ac:cd:43:b3:35:ae:8f:f4:91:17:2e:21:45:63:43:
46:b1:7a:25:97:25:b1:8f:d9:34:cb:63:6c:1b:2f:
9e:8a:20:89:12:d9:cb:d7:1a:0c:8a:9f:f9:d9:7e:
4a:a0:5d:7c:66:3b:14:09:e3:d4:12:15:66:03:92:
c5:2d:ea:c2:4f:aa:29:64:0a:b4:cd:60:93:df:a7:
8e:6d:d0:2c:63:fc:3f:ff:b7:13:43:5c:b0:c1:a8:
23:2f:60:0f:f6:04:db:91:6e:98:74:94:b0:bf:29:
42:02:43:3e:0f:24:a3:e6:b0:6f:92:9f:0f:93:1f:
a4:41:4a:30:50:b2:26:8d:c2:4b:28:64:fe:de:66:
74:50:0d:30:d4:ca:51:c9:d6:61:7c:53:2c:94:d5:
cb:84:1a:dd:00:8e:09:9d:db:a3:98:29:26:35:1e:
f3:58:26:34:37:f0:db:c3:35:60:ea:1b:0a:07:4f:
40:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0B:E7:4A:47:42:53:08:EF:24:F3:5C:63:28:2E:5C:E5:58:00:3A
X509v3 Authority Key Identifier:
keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/IgvnSkdCUwjvJPNcYyguXOVYADo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.124.0/24
194.35.32.0/22
IPv6:
2a0d:fd40::/29
Signature Algorithm: sha256WithRSAEncryption
43:1e:27:3d:c1:dd:e9:49:e9:07:f9:f6:86:d7:8f:d1:91:cd:
22:e0:d4:b6:6d:93:6e:f4:f2:e1:4f:4a:3c:35:e5:57:d5:33:
43:e2:9b:e6:bf:02:ab:17:71:37:38:53:61:06:44:cd:40:7f:
15:c2:b5:1e:88:07:db:1c:ea:e3:7a:bb:c7:23:d9:0a:ca:d6:
1a:46:47:b5:cc:b3:24:44:e1:1a:7b:28:fc:fa:ae:8b:c2:41:
c9:46:9c:6b:61:5c:27:58:d8:79:0e:c8:1f:d8:4f:43:e0:28:
7f:41:51:4a:09:48:17:7d:fe:e7:d9:20:24:fc:8f:9e:de:ff:
e0:ab:d8:6a:75:29:d4:17:9e:7c:ab:8d:7b:09:c2:b0:0b:e2:
9d:e1:1b:76:97:25:bb:3d:3e:d2:79:c1:6a:63:f1:1e:0f:e2:
ee:8e:47:55:8a:20:e5:2f:98:7b:a1:63:56:50:d8:6c:3e:88:
19:b1:2d:65:db:df:f0:28:18:dc:b1:1d:67:16:00:36:81:6f:
59:6d:41:96:6f:18:69:e8:0a:86:b0:00:0a:f7:e8:a7:8e:d1:
8a:05:e6:66:ab:49:54:8b:b7:6a:f5:be:97:3c:82:7d:4d:6a:
1a:36:66:d7:5f:5a:00:8c:9a:81:d7:ca:fc:7e:46:35:37:46:
f9:f6:f5:7c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVsJbDCleiHUUa0FtVIR/hGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYzIwMDRhMWFmMDMwYmE5OWZjZjQ1MWYzYmQ4OGVmYzUz
ODQ2YTkwHhcNMjMwMTAxMDcwNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjBiZTc0YTQ3NDI1MzA4ZWYyNGYzNWM2MzI4MmU1Y2U1NTgwMDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsbDsH6bR5ODznM+966NpX9rWLcs
rpxWYGu7w/XUIdARGutEIWqIOQtLrmPtaZmBnig9yAXuKxy2dHUvr1MOlpEFz4aG
SwyOlbKszUOzNa6P9JEXLiFFY0NGsXollyWxj9k0y2NsGy+eiiCJEtnL1xoMip/5
2X5KoF18ZjsUCePUEhVmA5LFLerCT6opZAq0zWCT36eObdAsY/w//7cTQ1ywwagj
L2AP9gTbkW6YdJSwvylCAkM+DySj5rBvkp8Pkx+kQUowULImjcJLKGT+3mZ0UA0w
1MpRydZhfFMslNXLhBrdAI4JndujmCkmNR7zWCY0N/DbwzVg6hsKB09AiQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCIL50pHQlMI7yTzXGMoLlzlWAA6MB8GA1UdIwQY
MBaAFNzCAEoa8DC6mfz0UfO9iO/FOEapMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01JQVNocndNTHFaX1BSUjg3Mkk3OFU0UnFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MTJiNDAtNTNhZS00OTUzLWFmZjUt
NTZhMzMwNTc0OTdiLzEvSWd2blNrZENVd2p2SlBOY1l5Z3VYT1ZZQURvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS83MTJiNDAtNTNhZS00OTUzLWFmZjUtNTZhMzMwNTc0OTdi
LzEvM01JQVNocndNTHFaX1BSUjg3Mkk3OFU0UnFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAwRd8AwQC
wiMgMA0EAgACMAcDBQMqDf1AMA0GCSqGSIb3DQEBCwUAA4IBAQBDHic9wd3pSekH
+faG14/Rkc0i4NS2bZNu9PLhT0o8NeVX1TND4pvmvwKrF3E3OFNhBkTNQH8VwrUe
iAfbHOrjervHI9kKytYaRke1zLMkROEaeyj8+q6LwkHJRpxrYVwnWNh5Dsgf2E9D
4Ch/QVFKCUgXff7n2SAk/I+e3v/gq9hqdSnUF558q417CcKwC+Kd4Rt2lyW7PT7S
ecFqY/EeD+LujkdViiDlL5h7oWNWUNhsPogZsS1l29/wKBjcsR1nFgA2gW9ZbUGW
bxhp6AqGsAAK9+injtGKBeZmq0lUi7dq9b6XPIJ9TWoaNmbXX1oAjJqB18r8fkY1
N0b59vV8
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:11 2024 by rpki-client on console-fra.rpki-client.org