Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/7JuLPHcoKUFWLNg2QZti_4i1iYQ.roa
File: 7JuLPHcoKUFWLNg2QZti_4i1iYQ.roa (raw, json)
Hash identifier: yEhhA3AudJeD/gxxVxUUH6V1BB3D/DjabiuEmm4CVYI=
Subject key identifier: EC:9B:8B:3C:77:28:29:41:56:2C:D8:36:41:9B:62:FF:88:B5:89:84
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01867A45C0CAA00BCDD1518298D90B935E3C
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/7JuLPHcoKUFWLNg2QZti_4i1iYQ.roa
Signing time: Wed 22 Feb 2023 17:57:17 +0000
ROA not before: Wed 22 Feb 2023 17:57:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.109.160.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Feb 2023 20:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:45:c0:ca:a0:0b:cd:d1:51:82:98:d9:0b:93:5e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Feb 22 17:57:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec9b8b3c77282941562cd836419b62ff88b58984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:18:cc:62:f1:20:eb:e2:5c:ac:4b:69:86:
3e:94:27:9d:04:98:d4:79:e2:f5:6a:24:c8:57:64:
89:76:e2:6f:95:00:09:73:e3:68:6e:fd:87:ec:6d:
a6:fa:81:0c:79:dd:38:cc:2e:f2:c7:93:28:d6:18:
12:be:50:45:a3:ba:09:76:e0:59:aa:8a:c0:c4:5e:
0c:be:0c:7a:ff:de:3a:a7:ad:f2:cc:cc:d3:0c:0a:
00:c1:fb:9d:4e:7f:66:4a:45:35:99:75:ca:ed:0c:
57:74:16:ac:96:d8:bf:a5:8f:ac:45:5b:b4:1a:a3:
0d:16:77:de:8e:42:f1:2c:1c:be:c0:b4:93:22:8a:
3c:2b:3d:06:f8:eb:af:84:70:10:b0:76:36:db:b4:
a8:68:dc:f7:dc:40:5b:d2:88:fa:d8:9d:05:0c:4c:
bb:57:33:7e:9b:45:39:f2:c9:51:59:42:30:1c:19:
57:f8:75:0d:f5:cf:58:c4:11:a3:38:d9:1d:02:d4:
5e:9c:ba:15:ec:d5:f7:ab:07:af:4b:49:50:c4:81:
1e:8b:99:b6:0f:be:33:72:49:4c:82:d1:2b:ef:69:
f3:50:19:61:0f:7e:ec:60:48:da:8c:07:07:10:a6:
85:67:b5:f0:6e:bf:57:f0:73:39:82:a0:04:9f:66:
0a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9B:8B:3C:77:28:29:41:56:2C:D8:36:41:9B:62:FF:88:B5:89:84
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/7JuLPHcoKUFWLNg2QZti_4i1iYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:d2:60:c4:0a:06:1d:e5:a4:30:49:52:63:ae:33:44:92:5c:
13:c7:0e:c4:00:99:aa:95:13:a0:ff:c6:67:4c:ff:bb:bf:c0:
67:2e:43:e0:84:78:0f:de:9d:24:2d:26:73:b2:38:be:45:c8:
b1:e0:20:d1:ae:20:c4:3b:e7:42:66:df:99:8d:51:26:e2:33:
5c:cd:8e:52:fe:9b:8a:85:36:07:0d:00:35:11:5c:23:39:37:
ad:ec:98:58:40:7b:33:f3:96:07:0b:da:79:e2:54:f7:15:e2:
a8:eb:04:5f:8b:a1:c4:12:d2:27:fd:ed:9a:43:54:e8:ec:fd:
52:23:a7:5b:ec:d3:b5:b5:a6:60:4f:96:30:be:bd:b8:07:7b:
c9:f6:6f:43:d3:cb:36:04:95:2a:48:3a:02:10:30:89:ef:02:
3c:47:f3:f1:d2:df:2c:96:2e:f6:ba:01:c1:c2:dd:ef:41:47:
68:10:9f:78:2a:22:93:46:64:af:b5:bd:8f:07:11:fa:02:b1:
3b:2d:2d:76:fc:72:a0:7c:f1:d6:dc:aa:f3:20:32:de:bb:e7:
f8:0b:a3:56:38:fa:8f:64:af:5a:37:5a:76:11:98:ee:21:57:
be:8a:d7:f3:71:c2:91:1a:c2:7c:07:ff:7b:12:02:95:e5:b2:
f6:48:56:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ6RcDKoAvN0VGCmNkLk148MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjMwMjIyMTc1NzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzliOGIzYzc3MjgyOTQxNTYyY2Q4MzY0MTliNjJmZjg4YjU4OTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCgYzGLxIOviXKxLaYY+lCedBJjU
eeL1aiTIV2SJduJvlQAJc+Nobv2H7G2m+oEMed04zC7yx5Mo1hgSvlBFo7oJduBZ
qorAxF4Mvgx6/946p63yzMzTDAoAwfudTn9mSkU1mXXK7QxXdBaslti/pY+sRVu0
GqMNFnfejkLxLBy+wLSTIoo8Kz0G+OuvhHAQsHY227SoaNz33EBb0oj62J0FDEy7
VzN+m0U58slRWUIwHBlX+HUN9c9YxBGjONkdAtRenLoV7NX3qwevS0lQxIEei5m2
D74zcklMgtEr72nzUBlhD37sYEjajAcHEKaFZ7Xwbr9X8HM5gqAEn2YK0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOybizx3KClBVizYNkGbYv+ItYmEMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvN0p1TFBIY29LVUZXTE5nMlFadGlfNGkxaVlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwW2gMA0G
CSqGSIb3DQEBCwUAA4IBAQAO0mDECgYd5aQwSVJjrjNEklwTxw7EAJmqlROg/8Zn
TP+7v8BnLkPghHgP3p0kLSZzsji+Rcix4CDRriDEO+dCZt+ZjVEm4jNczY5S/puK
hTYHDQA1EVwjOTet7JhYQHsz85YHC9p54lT3FeKo6wRfi6HEEtIn/e2aQ1To7P1S
I6db7NO1taZgT5Ywvr24B3vJ9m9D08s2BJUqSDoCEDCJ7wI8R/Px0t8sli72ugHB
wt3vQUdoEJ94KiKTRmSvtb2PBxH6ArE7LS12/HKgfPHW3KrzIDLeu+f4C6NWOPqP
ZK9aN1p2EZjuIVe+itfzccKRGsJ8B/97EgKV5bL2SFZS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org