Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/9b9HPVYWbscGCeg2-PYNpfMfWnQ.roa
File: 9b9HPVYWbscGCeg2-PYNpfMfWnQ.roa (raw, json)
Hash identifier: /QMypZrYQt/FVAoF/TiHKi+3+rQ+NjjLfBIUTockQuY=
Subject key identifier: F5:BF:47:3D:56:16:6E:C7:06:09:E8:36:F8:F6:0D:A5:F3:1F:5A:74
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 018A97D4F2DE642D451ED347E1F02B0D8F7C
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/9b9HPVYWbscGCeg2-PYNpfMfWnQ.roa
Signing time: Fri 15 Sep 2023 07:53:50 +0000
ROA not before: Fri 15 Sep 2023 07:53:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 193.108.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:97:d4:f2:de:64:2d:45:1e:d3:47:e1:f0:2b:0d:8f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: Sep 15 07:53:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5bf473d56166ec70609e836f8f60da5f31f5a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:9b:77:c4:b6:63:a5:73:10:d0:90:3c:46:
7d:ca:e5:46:8b:f2:a8:3b:11:f1:48:c0:4f:ab:b4:
83:85:0c:ba:9a:bf:21:12:cd:99:7f:69:ea:c2:fb:
54:db:b3:dc:27:1a:ca:cc:34:34:3b:2c:89:1d:ac:
cf:dc:ba:21:fd:fd:51:b4:68:f5:5c:88:96:5f:cb:
e6:50:87:96:87:b1:20:8b:fe:b6:5c:d2:02:c5:ad:
fa:a1:70:0b:00:55:8e:4d:f7:10:f2:d7:56:22:ba:
23:36:3a:68:d9:44:6a:5c:b0:9e:26:4f:b5:03:13:
7d:fb:e4:82:58:d1:d2:55:ab:31:e4:b7:a0:c5:16:
e8:a1:0c:89:f9:f2:4f:ba:4b:5b:c0:dd:0c:d8:d8:
92:8f:c5:ae:b6:1c:fe:99:59:e0:2f:7b:9f:b5:b5:
89:80:d3:15:66:33:b9:70:9e:a3:8a:9a:22:12:f7:
42:b3:08:f0:f6:b4:e5:72:13:1c:ef:42:53:93:34:
ac:a1:74:39:41:61:76:fb:3d:18:de:cb:e4:0b:db:
e3:90:67:9a:48:7a:4e:25:c7:bc:a5:38:43:a7:ba:
4d:37:e5:b4:7b:8f:b2:85:ac:d7:2e:6a:72:77:77:
06:ae:f8:93:f9:3d:5b:f2:6e:fc:09:40:0a:d8:59:
dc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BF:47:3D:56:16:6E:C7:06:09:E8:36:F8:F6:0D:A5:F3:1F:5A:74
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/9b9HPVYWbscGCeg2-PYNpfMfWnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.15.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:d9:cb:7e:c8:cc:e3:90:a3:89:81:46:d7:3a:90:6c:be:1b:
14:2d:26:75:7b:3a:df:8d:89:4c:bc:91:5f:be:8e:e2:59:87:
7e:3d:17:be:d3:a3:74:2a:bd:c4:32:fb:23:d7:bf:37:c0:c4:
98:41:ca:65:cb:2a:80:04:be:a4:3a:85:6c:1d:16:95:48:6f:
13:6b:c1:f4:0a:01:3d:90:6f:7e:29:cb:99:0c:b0:16:73:74:
46:a6:ad:73:55:98:fc:3a:e8:0d:64:08:30:e9:b3:4b:b6:51:
be:09:08:32:34:49:65:c5:a9:27:f7:e0:91:1b:89:7a:cd:60:
7a:8e:a0:62:0f:26:79:47:c9:11:c3:9d:5e:1f:39:17:bc:9b:
a2:91:77:10:47:43:0b:f4:41:ab:08:b8:8c:74:0f:4b:38:28:
8a:60:d0:bd:ab:4c:4c:f9:87:79:d9:75:ee:01:c5:e8:d1:db:
8a:70:c8:46:5e:83:cc:a8:1e:25:6b:16:a5:83:d2:4e:c4:80:
95:89:4a:28:6c:25:6b:ba:04:99:b1:b7:53:be:ae:7d:27:fe:
bb:53:f4:0a:dd:89:a3:a8:cd:5e:8f:f2:25:36:43:08:20:1e:
09:c9:f1:24:df:34:df:83:c1:71:5c:a0:69:54:bf:0c:b5:cd:
be:89:62:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqX1PLeZC1FHtNH4fArDY98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1M2Q0NzZkYjk2ZGUxZTU4NjIzMTE5YTcwYjlkN2IwMGI2
NzZkYTAwHhcNMjMwOTE1MDc1MzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWJmNDczZDU2MTY2ZWM3MDYwOWU4MzZmOGY2MGRhNWYzMWY1YTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZKbd8S2Y6VzENCQPEZ9yuVGi/Ko
OxHxSMBPq7SDhQy6mr8hEs2Zf2nqwvtU27PcJxrKzDQ0OyyJHazP3Loh/f1RtGj1
XIiWX8vmUIeWh7Egi/62XNICxa36oXALAFWOTfcQ8tdWIrojNjpo2URqXLCeJk+1
AxN9++SCWNHSVasx5LegxRbooQyJ+fJPuktbwN0M2NiSj8Wuthz+mVngL3uftbWJ
gNMVZjO5cJ6jipoiEvdCswjw9rTlchMc70JTkzSsoXQ5QWF2+z0Y3svkC9vjkGea
SHpOJce8pThDp7pNN+W0e4+yhazXLmpyd3cGrviT+T1b8m78CUAK2FnczQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPW/Rz1WFm7HBgnoNvj2DaXzH1p0MB8GA1UdIwQY
MBaAFHU9R225beHlhiMRmnC517ALZ22gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUt
NDY4NTc4MmFjMmMzLzEvOWI5SFBWWVdic2NHQ2VnMi1QWU5wZk1mV25RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUtNDY4NTc4MmFjMmMz
LzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWwPMA0G
CSqGSIb3DQEBCwUAA4IBAQC32ct+yMzjkKOJgUbXOpBsvhsULSZ1ezrfjYlMvJFf
vo7iWYd+PRe+06N0Kr3EMvsj1783wMSYQcplyyqABL6kOoVsHRaVSG8Ta8H0CgE9
kG9+KcuZDLAWc3RGpq1zVZj8OugNZAgw6bNLtlG+CQgyNEllxakn9+CRG4l6zWB6
jqBiDyZ5R8kRw51eHzkXvJuikXcQR0ML9EGrCLiMdA9LOCiKYNC9q0xM+Yd52XXu
AcXo0duKcMhGXoPMqB4laxalg9JOxICViUoobCVrugSZsbdTvq59J/67U/QK3Ymj
qM1ej/IlNkMIIB4JyfEk3zTfg8FxXKBpVL8Mtc2+iWIL
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:52 2024 by rpki-client on console-fra.rpki-client.org