Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/7XAeTgJAIXL9WIsn71YQqU5JJy0.roa
File: 7XAeTgJAIXL9WIsn71YQqU5JJy0.roa (raw, json)
Hash identifier: BeKVkg8X8LlJosqAZ4bQeLoNErezt/wPMIa9h9KjoVo=
Subject key identifier: ED:70:1E:4E:02:40:21:72:FD:58:8B:27:EF:56:10:A9:4E:49:27:2D
Certificate issuer: /CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Certificate serial: 018CC726D968D396E16029746DF4CA6D105B
Authority key identifier: 94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/7XAeTgJAIXL9WIsn71YQqU5JJy0.roa
Signing time: Mon 01 Jan 2024 22:31:01 +0000
ROA not before: Mon 01 Jan 2024 22:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42074
IP address blocks: 193.108.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 18:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:d9:68:d3:96:e1:60:29:74:6d:f4:ca:6d:10:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=946a7aae15ff3e831e3803fd98c1063ccc4bf3ec
Validity
Not Before: Jan 1 22:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed701e4e02402172fd588b27ef5610a94e49272d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:3d:65:87:75:9f:0d:a0:93:1a:6f:dc:b3:
b2:9a:6f:c0:15:c5:56:de:16:56:c5:21:04:39:42:
c4:00:90:c9:55:e4:55:26:5c:0e:05:3a:1a:7e:17:
30:4c:a3:e6:fb:6f:c4:4f:ae:58:00:89:1c:5d:27:
c2:0d:85:6a:d3:a1:8b:8b:13:51:1b:cf:dd:51:39:
ce:cc:ba:79:e8:a0:38:a8:aa:3c:ce:58:5c:55:47:
92:22:cc:15:ae:e0:4c:3b:b3:a8:ce:a2:36:14:5c:
4c:ac:79:8d:2f:0c:cc:a9:68:d8:d1:b8:a1:03:3f:
c1:9e:9c:4b:a2:b9:86:a9:f9:ee:45:5f:5e:02:1d:
eb:24:fb:b0:b9:28:09:5d:af:95:79:8b:9b:51:97:
df:d5:25:07:31:ee:a7:15:df:29:63:b1:d9:e4:cb:
ca:eb:e3:e2:29:ee:6e:f9:02:24:b5:48:d7:4b:5c:
7c:cd:80:81:f6:03:29:37:f9:64:e4:42:59:0d:72:
19:00:49:92:79:57:78:9e:92:b0:40:77:06:fa:1b:
98:8e:23:be:04:f6:24:b4:92:50:0b:1a:53:a6:bc:
e1:ed:77:3d:f7:9b:0c:54:ba:bd:06:2e:ca:1b:17:
ec:7d:3f:9a:1d:ad:e1:78:79:f3:9f:0c:54:82:bd:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:70:1E:4E:02:40:21:72:FD:58:8B:27:EF:56:10:A9:4E:49:27:2D
X509v3 Authority Key Identifier:
keyid:94:6A:7A:AE:15:FF:3E:83:1E:38:03:FD:98:C1:06:3C:CC:4B:F3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGp6rhX_PoMeOAP9mMEGPMxL8-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/7XAeTgJAIXL9WIsn71YQqU5JJy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9e61b8-6223-4dce-91d5-c6d5f2a02c6f/1/lGp6rhX_PoMeOAP9mMEGPMxL8-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.241.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:4b:bb:65:86:9b:e1:75:a5:9b:3c:5a:3a:80:ea:c1:51:fb:
33:0e:4f:c3:70:51:60:16:eb:65:13:8e:24:36:da:f4:ff:62:
bd:ad:19:9c:00:76:e3:03:70:a4:4d:84:c2:54:7d:38:71:49:
5b:f2:eb:bd:8c:de:ec:81:81:e8:3c:4b:89:55:31:8f:b6:71:
20:c3:0f:06:44:9c:3a:c7:33:cc:e0:ac:16:f3:05:f1:a6:36:
87:46:d1:e9:18:c6:25:41:00:ac:a7:2e:bc:ec:30:f4:7a:93:
ef:7c:00:9f:4c:11:2a:72:5f:23:f2:3b:c9:a4:51:57:f5:de:
60:9b:8d:7b:f6:b5:b1:c5:fd:49:6f:09:d6:6c:f1:ea:9c:54:
2b:ef:73:8d:34:be:0e:4d:97:ae:cb:ee:8a:01:85:25:34:97:
88:1d:be:a5:44:ad:c3:b6:c4:1a:64:b3:07:ef:81:c2:b1:3f:
0d:2b:64:e0:68:46:14:04:0e:7a:81:04:0b:10:c9:98:e3:08:
5d:2f:61:52:83:bd:50:93:82:a3:ca:2c:d1:bc:d4:49:43:21:
c5:fc:16:c8:65:b6:3a:5a:f5:1d:bb:ee:98:f1:56:9a:48:f0:
fb:cd:04:08:16:65:e4:66:02:3a:93:04:df:3e:69:4a:df:c3:
9d:0f:bf:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJtlo05bhYCl0bfTKbRBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NmE3YWFlMTVmZjNlODMxZTM4MDNmZDk4YzEwNjNjY2M0
YmYzZWMwHhcNMjQwMTAxMjIzMTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDcwMWU0ZTAyNDAyMTcyZmQ1ODhiMjdlZjU2MTBhOTRlNDkyNzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPM9ZYd1nw2gkxpv3LOymm/AFcVW
3hZWxSEEOULEAJDJVeRVJlwOBToafhcwTKPm+2/ET65YAIkcXSfCDYVq06GLixNR
G8/dUTnOzLp56KA4qKo8zlhcVUeSIswVruBMO7OozqI2FFxMrHmNLwzMqWjY0bih
Az/BnpxLormGqfnuRV9eAh3rJPuwuSgJXa+VeYubUZff1SUHMe6nFd8pY7HZ5MvK
6+PiKe5u+QIktUjXS1x8zYCB9gMpN/lk5EJZDXIZAEmSeVd4npKwQHcG+huYjiO+
BPYktJJQCxpTprzh7Xc995sMVLq9Bi7KGxfsfT+aHa3heHnznwxUgr20KwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO1wHk4CQCFy/ViLJ+9WEKlOSSctMB8GA1UdIwQY
MBaAFJRqeq4V/z6DHjgD/ZjBBjzMS/PsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEdwNnJoWF9Qb01lT0FQOW1NRUdQTXhMOC13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS85ZTYxYjgtNjIyMy00ZGNlLTkxZDUt
YzZkNWYyYTAyYzZmLzEvN1hBZVRnSkFJWEw5V0lzbjcxWVFxVTVKSnkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS85ZTYxYjgtNjIyMy00ZGNlLTkxZDUtYzZkNWYyYTAyYzZm
LzEvbEdwNnJoWF9Qb01lT0FQOW1NRUdQTXhMOC13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWzxMA0G
CSqGSIb3DQEBCwUAA4IBAQC0S7tlhpvhdaWbPFo6gOrBUfszDk/DcFFgFutlE44k
Ntr0/2K9rRmcAHbjA3CkTYTCVH04cUlb8uu9jN7sgYHoPEuJVTGPtnEgww8GRJw6
xzPM4KwW8wXxpjaHRtHpGMYlQQCspy687DD0epPvfACfTBEqcl8j8jvJpFFX9d5g
m4179rWxxf1JbwnWbPHqnFQr73ONNL4OTZeuy+6KAYUlNJeIHb6lRK3DtsQaZLMH
74HCsT8NK2TgaEYUBA56gQQLEMmY4whdL2FSg71Qk4KjyizRvNRJQyHF/BbIZbY6
WvUdu+6Y8VaaSPD7zQQIFmXkZgI6kwTfPmlK38OdD79p
-----END CERTIFICATE-----
Generated at Sat Apr 6 22:00:31 2024 by rpki-client on console-ams.rpki-client.org