Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/xGAPzlg0TlNcyH1oxXRSKLeUtCk.roa
File: xGAPzlg0TlNcyH1oxXRSKLeUtCk.roa (raw, json)
Hash identifier: Uidp4+eZMOeb49VhZu6xXZ1I+A8MmQ+/TCIuK2PnX3U=
Subject key identifier: C4:60:0F:CE:58:34:4E:53:5C:C8:7D:68:C5:74:52:28:B7:94:B4:29
Certificate issuer: /CN=06c92df2c9faa2915fc5feb5a4270183419faef2
Certificate serial: 01856D787E627F7C0AE2336A23AD92835FE0
Authority key identifier: 06:C9:2D:F2:C9:FA:A2:91:5F:C5:FE:B5:A4:27:01:83:41:9F:AE:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bskt8sn6opFfxf61pCcBg0GfrvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/xGAPzlg0TlNcyH1oxXRSKLeUtCk.roa
Signing time: Sun 01 Jan 2023 13:14:51 +0000
ROA not before: Sun 01 Jan 2023 13:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207241
IP address blocks: 193.200.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:7e:62:7f:7c:0a:e2:33:6a:23:ad:92:83:5f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c92df2c9faa2915fc5feb5a4270183419faef2
Validity
Not Before: Jan 1 13:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4600fce58344e535cc87d68c5745228b794b429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:db:e0:4f:77:0f:3c:e7:fa:71:88:53:24:
87:fd:c2:af:18:dd:87:09:9f:4c:fa:cd:07:ae:28:
9e:73:f5:4f:1e:30:6b:93:96:99:e9:95:95:ed:d8:
fe:8f:b9:4e:78:f8:67:99:8d:e4:dc:c9:45:8f:cd:
14:10:2a:8e:fb:bd:fa:f8:65:8f:d4:b1:c1:45:e8:
be:b0:82:4c:f0:39:2a:31:7c:ab:c4:59:13:89:10:
cf:bd:cb:ac:6f:df:31:54:61:97:c7:a1:19:86:54:
4b:c7:34:25:bb:49:92:4a:61:4a:c6:ab:5c:48:11:
1a:fa:8a:a1:3e:d2:54:8c:69:2f:0a:fb:1a:21:45:
ba:db:99:f0:25:99:79:11:a8:28:8a:fd:52:7d:43:
97:9f:b9:ac:3a:2e:7d:9c:55:63:4d:32:8b:a1:94:
5f:4d:79:95:10:05:fa:64:f0:f9:93:a8:62:90:ee:
9f:18:27:da:a7:41:b8:f4:a8:18:d9:95:76:b2:f5:
53:34:e7:46:28:f7:0c:5b:76:75:15:03:05:a4:24:
33:15:8b:2d:fd:ed:71:81:40:47:b9:54:96:59:3d:
d7:b8:2c:41:ec:87:9a:84:7e:c7:02:8d:b1:f0:b9:
69:61:fc:d1:f6:e2:c9:ce:15:2a:43:f1:5e:7b:7a:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:60:0F:CE:58:34:4E:53:5C:C8:7D:68:C5:74:52:28:B7:94:B4:29
X509v3 Authority Key Identifier:
keyid:06:C9:2D:F2:C9:FA:A2:91:5F:C5:FE:B5:A4:27:01:83:41:9F:AE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bskt8sn6opFfxf61pCcBg0GfrvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/xGAPzlg0TlNcyH1oxXRSKLeUtCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/aae9a1-d05d-47ca-91de-d6d55c169e16/1/Bskt8sn6opFfxf61pCcBg0GfrvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.181.0/24
Signature Algorithm: sha256WithRSAEncryption
43:aa:97:5a:4e:99:8d:cd:2c:6c:ba:49:30:70:42:37:f2:90:
71:93:84:35:21:cb:91:4a:03:d2:00:1b:6e:90:ee:53:f1:16:
11:8e:80:0c:02:e6:9a:0b:f5:af:38:e8:7d:42:61:f0:ec:a1:
38:ef:ac:00:c5:13:63:24:99:b9:e5:26:97:11:34:68:fa:96:
84:fc:13:0d:a2:5e:29:1b:69:97:49:ef:e1:1f:59:74:67:c3:
0e:f5:67:74:93:f0:d5:b5:b1:f3:90:9d:13:e3:14:56:d7:63:
fe:46:d8:b0:ed:32:fc:40:ff:41:30:17:31:10:d9:eb:25:d8:
8a:e2:01:a0:a7:d2:8d:d1:22:db:ef:1f:4d:40:e7:d2:79:c6:
93:5d:7f:fb:0d:d5:90:a5:2b:8a:3f:c2:1b:39:77:90:1b:56:
43:f8:b9:91:f9:83:e1:eb:d7:f9:e7:c6:ef:6d:2c:b6:d4:a2:
19:53:c5:59:9b:23:b4:db:9d:d6:6a:27:03:dd:c6:16:c5:ad:
3f:09:4d:f4:3a:32:c0:c1:55:1e:0f:1a:4b:42:0c:1f:7f:34:
d1:a4:b4:dd:3c:f7:2d:db:b2:9d:67:09:ff:81:0c:dc:9f:87:
70:74:c1:9b:07:ab:95:88:29:c0:05:5d:00:9b:5c:e6:77:25:
3c:0a:23:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVteH5if3wK4jNqI62Sg1/gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzkyZGYyYzlmYWEyOTE1ZmM1ZmViNWE0MjcwMTgzNDE5
ZmFlZjIwHhcNMjMwMTAxMTMxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDYwMGZjZTU4MzQ0ZTUzNWNjODdkNjhjNTc0NTIyOGI3OTRiNDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsbb4E93Dzzn+nGIUySH/cKvGN2H
CZ9M+s0Hriiec/VPHjBrk5aZ6ZWV7dj+j7lOePhnmY3k3MlFj80UECqO+736+GWP
1LHBRei+sIJM8DkqMXyrxFkTiRDPvcusb98xVGGXx6EZhlRLxzQlu0mSSmFKxqtc
SBEa+oqhPtJUjGkvCvsaIUW625nwJZl5Eagoiv1SfUOXn7msOi59nFVjTTKLoZRf
TXmVEAX6ZPD5k6hikO6fGCfap0G49KgY2ZV2svVTNOdGKPcMW3Z1FQMFpCQzFYst
/e1xgUBHuVSWWT3XuCxB7IeahH7HAo2x8LlpYfzR9uLJzhUqQ/Fee3pUUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMRgD85YNE5TXMh9aMV0Uii3lLQpMB8GA1UdIwQY
MBaAFAbJLfLJ+qKRX8X+taQnAYNBn67yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNrdDhzbjZvcEZmeGY2MXBDY0JnMEdmcnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9hYWU5YTEtZDA1ZC00N2NhLTkxZGUt
ZDZkNTVjMTY5ZTE2LzEveEdBUHpsZzBUbE5jeUgxb3hYUlNLTGVVdENrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9hYWU5YTEtZDA1ZC00N2NhLTkxZGUtZDZkNTVjMTY5ZTE2
LzEvQnNrdDhzbjZvcEZmeGY2MXBDY0JnMEdmcnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwci1MA0G
CSqGSIb3DQEBCwUAA4IBAQBDqpdaTpmNzSxsukkwcEI38pBxk4Q1IcuRSgPSABtu
kO5T8RYRjoAMAuaaC/WvOOh9QmHw7KE476wAxRNjJJm55SaXETRo+paE/BMNol4p
G2mXSe/hH1l0Z8MO9Wd0k/DVtbHzkJ0T4xRW12P+Rtiw7TL8QP9BMBcxENnrJdiK
4gGgp9KN0SLb7x9NQOfSecaTXX/7DdWQpSuKP8IbOXeQG1ZD+LmR+YPh69f558bv
bSy21KIZU8VZmyO0253WaicD3cYWxa0/CU30OjLAwVUeDxpLQgwffzTRpLTdPPct
27KdZwn/gQzcn4dwdMGbB6uViCnABV0Am1zmdyU8CiNJ
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:52 2024 by rpki-client on console-fra.rpki-client.org