Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/esNSzDaSvyCiJCUcBpPNxpq3ezQ.roa
File: esNSzDaSvyCiJCUcBpPNxpq3ezQ.roa (raw, json)
Hash identifier: /7XAtcpXnXPRTzVlxVXULiTdRnWZjzBPYPXYdKL9bwQ=
Subject key identifier: 7A:C3:52:CC:36:92:BF:20:A2:24:25:1C:06:93:CD:C6:9A:B7:7B:34
Certificate issuer: /CN=e1977859d071f7150837b2acb4353ff33efd831c
Certificate serial: 018CC80305F232BC0B154B5029516178BE2A
Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/esNSzDaSvyCiJCUcBpPNxpq3ezQ.roa
Signing time: Tue 02 Jan 2024 02:31:30 +0000
ROA not before: Tue 02 Jan 2024 02:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 193.221.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 11:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:05:f2:32:bc:0b:15:4b:50:29:51:61:78:be:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c
Validity
Not Before: Jan 2 02:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ac352cc3692bf20a224251c0693cdc69ab77b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:75:6d:8a:58:c1:5e:19:46:cf:40:6b:9c:c0:
db:b8:84:5f:59:79:97:06:00:46:42:23:6d:f5:87:
11:3d:0e:7f:fe:e0:87:fe:12:08:7d:c5:ed:fe:67:
b2:e7:c2:f6:e7:fb:8d:62:e2:11:53:6b:57:78:4f:
3c:72:b5:4b:b9:b5:c5:0f:32:b7:17:ec:d9:b3:d7:
e1:50:3c:3d:37:41:bb:a4:5a:99:0e:3a:a9:8e:12:
bd:6f:f9:23:88:bc:c2:b3:a0:75:95:2e:67:e9:a4:
eb:01:8c:ad:85:8f:d6:9f:ed:13:5a:9c:f3:bc:84:
e3:4d:0f:37:19:9d:75:6f:40:9a:e2:ca:e8:68:82:
5d:03:1a:da:33:60:2a:ae:83:c0:dc:fd:d6:84:fb:
34:75:5c:f5:ea:bd:d6:67:8c:a7:0c:c4:b7:ca:65:
e3:fa:3b:57:c8:34:81:05:e5:91:d5:54:b1:fa:2c:
21:f3:1a:fd:ec:fe:e9:ad:6f:a5:e5:46:1d:a9:7e:
4e:62:b7:61:e4:fc:9e:58:fc:e8:26:1d:c9:bc:3c:
c3:a4:df:99:11:66:15:e9:e2:14:6b:3b:ef:72:3b:
b2:fa:d1:8d:b5:2c:4e:04:a1:bd:3e:ab:a9:c7:70:
a1:57:4a:32:9c:67:f1:06:20:77:21:c8:e6:59:e7:
04:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C3:52:CC:36:92:BF:20:A2:24:25:1C:06:93:CD:C6:9A:B7:7B:34
X509v3 Authority Key Identifier:
keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/esNSzDaSvyCiJCUcBpPNxpq3ezQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.125.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a8:0b:40:a9:c9:5f:2a:d4:b1:30:a4:a6:e0:c3:30:4a:b7:
2d:d7:e5:4c:ef:5d:1a:37:b6:03:f0:ee:7c:bf:ea:73:6f:84:
5e:95:55:31:7b:68:7b:95:5b:12:3a:76:47:8c:d9:73:1f:9a:
b5:ca:f5:bf:be:91:0c:f9:a1:c4:dd:13:e9:6d:05:7c:ec:65:
af:dc:80:c7:39:7a:ea:cd:bb:32:5c:47:03:cd:8c:65:db:46:
a9:24:03:21:4c:ac:06:43:41:07:66:75:78:00:f0:4d:00:13:
b2:88:8f:6c:69:81:cb:10:a4:d2:e3:07:f7:84:87:f9:08:3a:
93:f4:bf:73:67:1a:ae:b5:b6:a4:65:c8:96:4d:86:be:16:f6:
5f:e7:d5:bc:9e:0d:83:fb:76:83:ae:70:d4:36:5a:e5:75:25:
ce:2b:fc:2d:c3:10:7e:c1:93:03:3e:d4:81:1d:a0:e7:10:2d:
cf:8f:dd:27:94:d3:79:c7:92:0e:17:2e:cd:19:d3:c2:2b:4a:
91:bd:05:39:7b:59:f9:6b:d1:ec:0b:6e:13:5a:07:33:c9:c0:
de:d4:05:04:a3:dc:4e:51:2d:1f:a1:2e:67:c6:fb:c7:28:b5:
e6:be:73:eb:21:5f:6c:41:d7:74:4b:19:32:de:91:a0:5f:e8:
6b:3c:4d:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAwXyMrwLFUtQKVFheL4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOTc3ODU5ZDA3MWY3MTUwODM3YjJhY2I0MzUzZmYzM2Vm
ZDgzMWMwHhcNMjQwMTAyMDIzMTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWMzNTJjYzM2OTJiZjIwYTIyNDI1MWMwNjkzY2RjNjlhYjc3YjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3VtiljBXhlGz0BrnMDbuIRfWXmX
BgBGQiNt9YcRPQ5//uCH/hIIfcXt/mey58L25/uNYuIRU2tXeE88crVLubXFDzK3
F+zZs9fhUDw9N0G7pFqZDjqpjhK9b/kjiLzCs6B1lS5n6aTrAYythY/Wn+0TWpzz
vITjTQ83GZ11b0Ca4sroaIJdAxraM2AqroPA3P3WhPs0dVz16r3WZ4ynDMS3ymXj
+jtXyDSBBeWR1VSx+iwh8xr97P7prW+l5UYdqX5OYrdh5PyeWPzoJh3JvDzDpN+Z
EWYV6eIUazvvcjuy+tGNtSxOBKG9Pqupx3ChV0oynGfxBiB3IcjmWecEEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHrDUsw2kr8goiQlHAaTzcaat3s0MB8GA1UdIwQY
MBaAFOGXeFnQcfcVCDeyrLQ1P/M+/YMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZDdjZDctZWU2My00ODg2LThmZTEt
YjVjZTZiNmZkNGQxLzEvZXNOU3pEYVN2eUNpSkNVY0JwUE54cHEzZXpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZDdjZDctZWU2My00ODg2LThmZTEtYjVjZTZiNmZkNGQx
LzEvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd19MA0G
CSqGSIb3DQEBCwUAA4IBAQBtqAtAqclfKtSxMKSm4MMwSrct1+VM710aN7YD8O58
v+pzb4RelVUxe2h7lVsSOnZHjNlzH5q1yvW/vpEM+aHE3RPpbQV87GWv3IDHOXrq
zbsyXEcDzYxl20apJAMhTKwGQ0EHZnV4APBNABOyiI9saYHLEKTS4wf3hIf5CDqT
9L9zZxqutbakZciWTYa+FvZf59W8ng2D+3aDrnDUNlrldSXOK/wtwxB+wZMDPtSB
HaDnEC3Pj90nlNN5x5IOFy7NGdPCK0qRvQU5e1n5a9HsC24TWgczycDe1AUEo9xO
US0foS5nxvvHKLXmvnPrIV9sQdd0Sxky3pGgX+hrPE3L
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:28 2024 by rpki-client on console-ams.rpki-client.org