Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/PipFZjqqFelGM-yEVjUOya7HlYY.roa
File: PipFZjqqFelGM-yEVjUOya7HlYY.roa (raw, json)
Hash identifier: 1CsY52XcNIzTAVBQ4plX8KGZtHRdENwE5mAWYmN3xoA=
Subject key identifier: 3E:2A:45:66:3A:AA:15:E9:46:33:EC:84:56:35:0E:C9:AE:C7:95:86
Certificate issuer: /CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Certificate serial: 0189FD2F63C57BB7EFF8D8573CA15C22EDDD
Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/PipFZjqqFelGM-yEVjUOya7HlYY.roa
Signing time: Wed 16 Aug 2023 07:11:28 +0000
ROA not before: Wed 16 Aug 2023 07:11:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35661
IP address blocks: 193.39.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:2f:63:c5:7b:b7:ef:f8:d8:57:3c:a1:5c:22:ed:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Validity
Not Before: Aug 16 07:11:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e2a45663aaa15e94633ec8456350ec9aec79586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:26:f6:fd:51:e1:04:19:23:0b:60:c7:89:59:
f2:23:95:19:c8:55:ad:96:d4:73:f4:71:e0:4a:19:
dc:0b:fe:cd:00:26:29:c2:bb:16:d7:e1:cf:07:8c:
f2:a6:46:d2:b7:19:96:4a:73:59:cb:c0:85:e0:a2:
ef:71:af:1b:15:69:9d:4b:f2:e2:2e:a1:a8:bb:b4:
09:8c:bb:15:ee:54:21:c0:48:6e:f3:67:a8:7e:4c:
8c:c9:21:55:3d:68:83:e3:66:4f:28:3f:73:5e:a4:
f9:7f:45:a0:e5:6a:e3:75:6b:fc:25:23:3f:2b:6b:
78:20:4a:d7:8e:00:c9:dd:6c:60:c7:5a:7e:fc:db:
0e:80:50:98:b2:74:2d:ee:04:ac:46:d3:5a:20:b9:
3b:a2:0b:4b:b9:5b:e9:e1:4e:80:26:3b:13:a0:ea:
2d:e5:7d:62:d4:fd:05:18:9a:b0:05:a9:72:64:fc:
7a:dd:6d:c7:1d:83:37:3f:52:4a:eb:50:b9:1d:60:
b3:e2:d5:ed:84:ea:43:58:9f:77:a0:03:67:05:11:
ab:50:e6:00:2a:21:50:ea:48:85:15:4f:52:90:66:
12:70:68:2c:b0:cf:d4:bb:41:35:87:f8:20:ba:58:
09:15:24:c4:d6:75:b4:74:84:b3:4f:1a:4d:bb:90:
f2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2A:45:66:3A:AA:15:E9:46:33:EC:84:56:35:0E:C9:AE:C7:95:86
X509v3 Authority Key Identifier:
keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/PipFZjqqFelGM-yEVjUOya7HlYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.79.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:23:e0:1a:b2:8a:21:ac:38:be:a5:a3:75:71:8c:91:17:dd:
a0:3d:a9:3f:68:da:5d:cb:5c:cc:9a:ce:2b:90:4c:d7:3a:1b:
f1:bb:0c:7b:34:84:e8:9c:cd:60:3d:65:38:25:94:04:95:b8:
cd:20:21:92:2e:21:e6:08:3a:53:33:83:ea:8c:42:24:88:ec:
72:92:9f:f5:6b:35:3a:02:12:c6:93:9d:f4:23:dd:b4:fe:66:
33:15:81:73:fc:24:cb:2d:07:fd:2a:22:ee:80:a8:65:6c:46:
23:0a:7e:19:4b:c7:c6:a5:02:81:d8:d6:29:2d:09:bc:93:a2:
14:83:aa:ea:a0:29:cc:21:51:23:2f:4c:17:e9:50:aa:54:6f:
f9:d0:ea:d7:fd:c4:97:31:2f:d4:06:7c:01:5f:4f:32:99:b9:
17:70:8e:b3:bc:f2:39:33:d4:04:bb:95:a4:4a:44:47:8b:96:
78:ea:1d:c7:d8:45:bf:a4:be:a5:26:b5:94:12:b9:d2:50:51:
4e:c4:e8:3d:33:bd:be:b9:3b:de:2d:b0:27:2b:02:e7:ab:9b:
77:9a:24:4e:54:8f:19:bb:55:60:d1:4e:66:75:3b:8b:25:42:
03:29:b6:ad:4e:78:78:7a:58:89:b0:82:33:44:81:47:46:0c:
b6:51:94:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYn9L2PFe7fv+NhXPKFcIu3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMTEzZGQ1ZDA3NTljMDMwMDkzODAxNDBjNjY4ZWJiZDFm
OWMxNjgwHhcNMjMwODE2MDcxMTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTJhNDU2NjNhYWExNWU5NDYzM2VjODQ1NjM1MGVjOWFlYzc5NTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCb2/VHhBBkjC2DHiVnyI5UZyFWt
ltRz9HHgShncC/7NACYpwrsW1+HPB4zypkbStxmWSnNZy8CF4KLvca8bFWmdS/Li
LqGou7QJjLsV7lQhwEhu82eofkyMySFVPWiD42ZPKD9zXqT5f0Wg5WrjdWv8JSM/
K2t4IErXjgDJ3Wxgx1p+/NsOgFCYsnQt7gSsRtNaILk7ogtLuVvp4U6AJjsToOot
5X1i1P0FGJqwBalyZPx63W3HHYM3P1JK61C5HWCz4tXthOpDWJ93oANnBRGrUOYA
KiFQ6kiFFU9SkGYScGgssM/Uu0E1h/ggulgJFSTE1nW0dISzTxpNu5DyGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD4qRWY6qhXpRjPshFY1Dsmux5WGMB8GA1UdIwQY
MBaAFNARPdXQdZwDAJOAFAxmjrvR+cFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82OTE0Y2UtNjZjMi00MjM4LTkyYjct
YTJkNjM2ZjMyNWU2LzEvUGlwRlpqcXFGZWxHTS15RVZqVU95YTdIbFlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS82OTE0Y2UtNjZjMi00MjM4LTkyYjctYTJkNjM2ZjMyNWU2
LzEvMEJFOTFkQjFuQU1BazRBVURHYU91OUg1d1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSdPMA0G
CSqGSIb3DQEBCwUAA4IBAQBvI+AasoohrDi+paN1cYyRF92gPak/aNpdy1zMms4r
kEzXOhvxuwx7NITonM1gPWU4JZQElbjNICGSLiHmCDpTM4PqjEIkiOxykp/1azU6
AhLGk530I920/mYzFYFz/CTLLQf9KiLugKhlbEYjCn4ZS8fGpQKB2NYpLQm8k6IU
g6rqoCnMIVEjL0wX6VCqVG/50OrX/cSXMS/UBnwBX08ymbkXcI6zvPI5M9QEu5Wk
SkRHi5Z46h3H2EW/pL6lJrWUErnSUFFOxOg9M72+uTveLbAnKwLnq5t3miROVI8Z
u1Vg0U5mdTuLJUIDKbatTnh4eliJsIIzRIFHRgy2UZQH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-fra.rpki-client.org