Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/u5_MCzZpiEGnVZ8KRZObaZzlaKM.roa
File: u5_MCzZpiEGnVZ8KRZObaZzlaKM.roa (raw, json)
Hash identifier: VXY8OQKIzu/UvaKGHp98sc1TbDfwEY1ngVqpkQ5h4Zc=
Subject key identifier: BB:9F:CC:0B:36:69:88:41:A7:55:9F:0A:45:93:9B:69:9C:E5:68:A3
Certificate issuer: /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial: 01856CB831D33EF65D5FAA38FA161552DC5A
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/u5_MCzZpiEGnVZ8KRZObaZzlaKM.roa
Signing time: Sun 01 Jan 2023 09:44:48 +0000
ROA not before: Sun 01 Jan 2023 09:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59545
IP address blocks: 93.157.0.0/21 maxlen: 32
195.5.163.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 19 Apr 2023 00:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:31:d3:3e:f6:5d:5f:aa:38:fa:16:15:52:dc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Validity
Not Before: Jan 1 09:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb9fcc0b36698841a7559f0a45939b699ce568a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:08:dc:e4:ae:34:8d:cd:f7:08:04:e8:ed:
f3:a9:fa:d5:9c:32:68:b6:42:47:6a:82:62:bf:74:
89:05:10:a4:fc:d1:11:4f:5c:c6:7e:d8:30:d9:ba:
66:b9:50:f8:44:5b:27:ad:00:77:22:60:04:cd:3d:
3f:91:f7:54:22:ad:83:9e:06:9e:42:43:87:82:59:
7d:58:ac:58:2c:52:d7:e7:33:da:82:80:5c:6b:68:
19:fa:48:7a:05:84:58:6c:b7:b7:7f:b8:29:ac:7e:
2f:9e:d6:8f:5c:ed:c2:28:05:5b:5b:bf:6f:fc:10:
fa:52:e1:f4:38:d1:a0:5c:32:67:f5:9c:13:61:50:
47:99:b3:bd:77:cb:8a:ff:75:9b:2b:6d:71:17:0a:
54:f4:00:ab:96:38:54:fd:ba:25:86:32:f1:db:37:
21:23:7a:d6:92:c7:81:48:e8:d8:17:34:5d:e6:e9:
14:3b:4e:a5:9d:b2:9c:71:13:96:14:ab:73:69:ae:
9c:f0:80:fb:bd:86:09:cf:76:b4:5f:9d:73:d9:29:
f9:01:69:a8:ec:ed:8c:03:69:ba:95:e2:9c:a7:92:
33:a9:b2:20:74:8e:a4:f5:7d:69:ab:15:41:4a:77:
68:b2:4a:44:1b:e1:ea:8c:50:1b:21:61:35:b8:82:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9F:CC:0B:36:69:88:41:A7:55:9F:0A:45:93:9B:69:9C:E5:68:A3
X509v3 Authority Key Identifier:
keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/u5_MCzZpiEGnVZ8KRZObaZzlaKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.0.0/21
195.5.163.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:9e:9b:f3:7a:b2:24:97:ff:c6:48:d0:3a:48:fe:2f:65:49:
8a:e9:62:1c:f5:12:f2:5d:04:a7:b9:da:f7:5d:b9:a2:d2:1b:
08:28:e3:16:82:97:51:2d:21:00:f8:93:ae:e8:47:d2:60:8e:
7f:7b:6a:eb:ec:36:98:a9:ad:c7:5d:5a:d6:a5:e5:41:64:53:
5d:39:92:17:bd:8d:e5:de:1c:98:0c:41:94:35:70:1f:a2:98:
e8:54:70:6b:2c:40:af:99:df:c1:0c:48:eb:5b:7d:ee:da:17:
f9:0e:df:65:fb:ef:4f:fc:a1:1e:b9:c2:fa:58:31:0a:7a:ac:
a9:2c:4b:63:9b:98:c3:a3:23:54:db:86:0a:fb:d6:37:c7:41:
cb:62:39:54:15:22:63:c5:88:ae:a7:08:85:de:64:f3:c2:46:
3c:e6:dc:b0:37:96:88:81:8f:81:ca:c9:5e:8b:da:b3:c2:1d:
8e:ed:60:2d:38:4c:26:48:85:6f:f2:5e:12:6e:22:85:0b:75:
9f:45:32:2a:fb:b4:11:d8:9d:69:65:ea:2e:40:b1:06:d6:e0:
45:cc:48:81:ad:85:cc:96:25:d0:5c:28:16:da:d4:bd:42:fe:
55:fd:7c:ef:6d:7f:6f:c5:b5:bf:de:1c:16:77:a9:98:83:2a:
ba:86:0c:b5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsuDHTPvZdX6o4+hYVUtxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZjZhZDgzZjI1YzI4ODZhMjU4NTdmYjUxNWQ0NTU5NTI3
YzQ2ZjcwHhcNMjMwMTAxMDk0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjlmY2MwYjM2Njk4ODQxYTc1NTlmMGE0NTkzOWI2OTljZTU2OGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5gI3OSuNI3N9wgE6O3zqfrVnDJo
tkJHaoJiv3SJBRCk/NERT1zGftgw2bpmuVD4RFsnrQB3ImAEzT0/kfdUIq2Dngae
QkOHgll9WKxYLFLX5zPagoBca2gZ+kh6BYRYbLe3f7gprH4vntaPXO3CKAVbW79v
/BD6UuH0ONGgXDJn9ZwTYVBHmbO9d8uK/3WbK21xFwpU9ACrljhU/bolhjLx2zch
I3rWkseBSOjYFzRd5ukUO06lnbKccROWFKtzaa6c8ID7vYYJz3a0X51z2Sn5AWmo
7O2MA2m6leKcp5IzqbIgdI6k9X1pqxVBSndoskpEG+HqjFAbIWE1uIJ7IwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLufzAs2aYhBp1WfCkWTm2mc5WijMB8GA1UdIwQY
MBaAFMf2rYPyXCiGolhX+1FdRVlSfEb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveF9hdGdfSmNLSWFpV0ZmN1VWMUZXVko4UnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85N2U0ZTUtMDI0Ny00NmJhLTgzY2Et
MzI2OGFlOTA5NmRjLzEvdTVfTUN6WnBpRUduVlo4S1JaT2JhWnpsYUtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi85N2U0ZTUtMDI0Ny00NmJhLTgzY2EtMzI2OGFlOTA5NmRj
LzEveF9hdGdfSmNLSWFpV0ZmN1VWMUZXVko4UnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXZ0AAwQA
wwWjMA0GCSqGSIb3DQEBCwUAA4IBAQDXnpvzerIkl//GSNA6SP4vZUmK6WIc9RLy
XQSnudr3Xbmi0hsIKOMWgpdRLSEA+JOu6EfSYI5/e2rr7DaYqa3HXVrWpeVBZFNd
OZIXvY3l3hyYDEGUNXAfopjoVHBrLECvmd/BDEjrW33u2hf5Dt9l++9P/KEeucL6
WDEKeqypLEtjm5jDoyNU24YK+9Y3x0HLYjlUFSJjxYiupwiF3mTzwkY85tywN5aI
gY+Byslei9qzwh2O7WAtOEwmSIVv8l4SbiKFC3WfRTIq+7QR2J1pZeouQLEG1uBF
zEiBrYXMliXQXCgW2tS9Qv5V/XzvbX9vxbW/3hwWd6mYgyq6hgy1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-fra.rpki-client.org