Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/NuWj1EOIYIoyKM2KurqzSLMi5-8.roa
File: NuWj1EOIYIoyKM2KurqzSLMi5-8.roa (raw, json)
Hash identifier: 5OiZLFjCPoN625PcHam+f/LSVu+LIrRkd/ftf2XnS28=
Subject key identifier: 36:E5:A3:D4:43:88:60:8A:32:28:CD:8A:BA:BA:B3:48:B3:22:E7:EF
Certificate issuer: /CN=adac830ccaa74783dd961fab241a228d7cc6f808
Certificate serial: 01859618B328B1730270F10C2CDF8F8E0576
Authority key identifier: AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/NuWj1EOIYIoyKM2KurqzSLMi5-8.roa
Signing time: Mon 09 Jan 2023 10:34:39 +0000
ROA not before: Mon 09 Jan 2023 10:34:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5543
IP address blocks: 193.22.6.0/24 maxlen: 32
2a02:e840:1001::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:18:b3:28:b1:73:02:70:f1:0c:2c:df:8f:8e:05:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adac830ccaa74783dd961fab241a228d7cc6f808
Validity
Not Before: Jan 9 10:34:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36e5a3d44388608a3228cd8ababab348b322e7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f3:7e:a1:88:e5:97:a1:5a:d9:c7:de:44:c3:
99:08:93:a2:49:1a:e8:2b:a6:ce:8a:59:c7:23:bf:
af:fb:b2:f4:12:f8:56:b1:d1:ce:77:52:d4:c6:26:
9d:fe:9a:21:07:ce:6a:b7:8a:86:f3:66:85:87:81:
1e:3b:86:d7:45:2e:97:73:9d:d1:79:2a:b0:30:d1:
85:5a:8f:f2:41:aa:c8:46:df:a6:ae:a2:9f:c3:2e:
25:73:6f:a5:48:b3:31:ea:f6:30:1b:8b:88:c5:cc:
35:52:25:d6:7c:7a:e4:aa:7c:3a:2d:20:7e:0d:e9:
dd:af:73:df:e3:80:dc:77:b9:19:8b:d8:4a:36:44:
20:6b:8b:e1:96:d6:dc:7f:1b:26:94:6d:ad:ea:47:
d1:fe:8b:0a:25:80:d8:9c:30:58:58:67:88:cc:b1:
1b:ef:24:67:25:86:bc:a0:84:7b:03:c9:a9:d9:39:
22:d8:12:2a:37:1e:11:2d:27:a6:61:81:71:57:ef:
a9:ea:91:4e:8c:15:4e:e7:d3:36:0f:d5:65:30:8d:
90:57:3b:e8:e3:1b:fe:5e:ba:c7:e6:9a:90:de:34:
79:0a:ae:bb:d6:44:da:31:91:ab:a3:fb:eb:18:ee:
f9:63:42:77:00:a8:fb:14:3f:78:b0:bb:8b:bc:0c:
26:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E5:A3:D4:43:88:60:8A:32:28:CD:8A:BA:BA:B3:48:B3:22:E7:EF
X509v3 Authority Key Identifier:
keyid:AD:AC:83:0C:CA:A7:47:83:DD:96:1F:AB:24:1A:22:8D:7C:C6:F8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rayDDMqnR4Pdlh-rJBoijXzG-Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/NuWj1EOIYIoyKM2KurqzSLMi5-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/325c8d-d368-4eee-9ca8-929f7d635f4b/1/rayDDMqnR4Pdlh-rJBoijXzG-Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.6.0/24
IPv6:
2a02:e840:1001::/48
Signature Algorithm: sha256WithRSAEncryption
b0:3e:4a:13:5e:42:75:1e:48:f0:93:53:22:fa:db:4d:e7:2e:
cc:b3:56:58:df:9c:f8:88:97:18:98:8c:4d:7a:38:65:67:e5:
cf:61:dc:1d:1f:bf:27:88:85:9d:f5:b6:03:ff:77:d8:a9:2e:
7f:c0:23:66:df:9f:7d:d2:31:a1:5f:af:8e:41:78:24:db:05:
7c:6a:b0:bd:e9:ec:fc:b5:11:32:ee:d4:9a:14:ca:5a:56:08:
60:9e:bc:d7:be:0c:ce:56:d9:ae:90:68:d3:d1:53:b0:c4:0b:
e3:1b:bb:d4:c6:8c:65:ce:7d:4e:f0:32:56:2a:df:a2:f2:4b:
c9:ee:b2:27:48:51:df:8f:93:2d:a9:97:04:f3:c8:48:e5:4f:
b2:f8:f2:72:86:c3:a6:59:45:d7:31:39:af:ec:da:de:5e:d7:
86:04:f3:de:d0:8e:ad:9c:1c:14:6b:5f:ce:e2:3a:e5:90:3c:
40:01:83:1a:89:27:ac:86:d1:b0:da:fa:a1:d0:f3:c6:d9:84:
a9:9d:e7:a6:bc:23:f1:d4:f8:c5:89:35:fa:d9:c1:f0:2a:35:
cf:87:c0:6f:ea:9f:23:86:18:63:26:25:80:a5:a2:45:14:59:
13:73:c7:0b:56:a1:4e:fc:ae:69:d4:6f:9e:98:a8:c1:ad:1b:
d7:d3:94:5b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWWGLMosXMCcPEMLN+PjgV2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYWM4MzBjY2FhNzQ3ODNkZDk2MWZhYjI0MWEyMjhkN2Nj
NmY4MDgwHhcNMjMwMTA5MTAzNDM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmU1YTNkNDQzODg2MDhhMzIyOGNkOGFiYWJhYjM0OGIzMjJlN2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfN+oYjll6Fa2cfeRMOZCJOiSRro
K6bOilnHI7+v+7L0EvhWsdHOd1LUxiad/pohB85qt4qG82aFh4EeO4bXRS6Xc53R
eSqwMNGFWo/yQarIRt+mrqKfwy4lc2+lSLMx6vYwG4uIxcw1UiXWfHrkqnw6LSB+
Dendr3Pf44Dcd7kZi9hKNkQga4vhltbcfxsmlG2t6kfR/osKJYDYnDBYWGeIzLEb
7yRnJYa8oIR7A8mp2Tki2BIqNx4RLSemYYFxV++p6pFOjBVO59M2D9VlMI2QVzvo
4xv+XrrH5pqQ3jR5Cq671kTaMZGro/vrGO75Y0J3AKj7FD94sLuLvAwmFQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDblo9RDiGCKMijNirq6s0izIufvMB8GA1UdIwQY
MBaAFK2sgwzKp0eD3ZYfqyQaIo18xvgIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgt
OTI5ZjdkNjM1ZjRiLzEvTnVXajFFT0lZSW95S00yS3VycXpTTE1pNS04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zMjVjOGQtZDM2OC00ZWVlLTljYTgtOTI5ZjdkNjM1ZjRi
LzEvcmF5RERNcW5SNFBkbGgtckpCb2lqWHpHLUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwRYGMA8E
AgACMAkDBwAqAuhAEAEwDQYJKoZIhvcNAQELBQADggEBALA+ShNeQnUeSPCTUyL6
203nLsyzVljfnPiIlxiYjE16OGVn5c9h3B0fvyeIhZ31tgP/d9ipLn/AI2bfn33S
MaFfr45BeCTbBXxqsL3p7Py1ETLu1JoUylpWCGCevNe+DM5W2a6QaNPRU7DEC+Mb
u9TGjGXOfU7wMlYq36LyS8nusidIUd+Pky2plwTzyEjlT7L48nKGw6ZZRdcxOa/s
2t5e14YE897Qjq2cHBRrX87iOuWQPEABgxqJJ6yG0bDa+qHQ88bZhKmd56a8I/HU
+MWJNfrZwfAqNc+HwG/qnyOGGGMmJYClokUUWRNzxwtWoU78rmnUb56YqMGtG9fT
lFs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:51 2024 by rpki-client on console-ams.rpki-client.org