Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/A8_83kMIeC1gQCuFYGLVyKZqBTA.roa
File: A8_83kMIeC1gQCuFYGLVyKZqBTA.roa (raw, json)
Hash identifier: 0FQvfI+44AoFxAmjQLRJkBJlmvtCYwEmppM+naPSBDY=
Subject key identifier: 03:CF:FC:DE:43:08:78:2D:60:40:2B:85:60:62:D5:C8:A6:6A:05:30
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 0185714C4581D823159EDB85A01838BE0171
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/A8_83kMIeC1gQCuFYGLVyKZqBTA.roa
Signing time: Mon 02 Jan 2023 07:05:01 +0000
ROA not before: Mon 02 Jan 2023 07:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 193.57.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:45:81:d8:23:15:9e:db:85:a0:18:38:be:01:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 2 07:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03cffcde4308782d60402b856062d5c8a66a0530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6b:00:a6:d6:10:0c:61:e2:14:53:f5:9f:9c:
01:3c:45:e5:97:d5:4c:6d:71:46:40:db:1a:85:07:
3b:7b:78:1b:b8:3b:42:a8:9a:07:94:62:88:55:27:
c0:2f:6a:c4:36:d9:04:e3:e1:70:cf:09:08:af:05:
d3:0f:b2:74:d4:0f:4c:fb:77:f8:24:17:1c:06:da:
95:4b:b0:0b:02:62:c1:fd:76:a2:1f:10:69:b7:60:
03:ce:22:46:42:cc:f6:cf:12:93:b7:87:7c:ce:fa:
07:ea:e9:de:4a:d8:00:79:13:cc:96:39:2a:40:26:
dc:b6:3a:12:bd:03:35:4b:13:8c:2b:99:5e:f5:8b:
f4:d8:30:a1:65:72:b5:8f:52:57:ae:5b:c5:69:70:
74:01:d3:9e:93:c2:91:76:03:9a:82:e5:5e:00:29:
80:c0:ea:e6:4c:90:d3:26:d4:00:e6:76:6d:d4:54:
cd:2b:3f:58:76:28:7f:50:73:17:6a:91:a4:21:4b:
7a:b3:24:ba:44:70:fe:d1:2b:e6:a0:36:86:bb:99:
c2:de:cc:63:f1:1e:af:9d:7c:f7:1f:aa:79:2a:b4:
c2:12:78:f3:af:a4:4b:62:73:aa:44:53:7a:ea:11:
d7:34:9e:d5:48:61:04:91:42:1a:17:77:75:26:d7:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CF:FC:DE:43:08:78:2D:60:40:2B:85:60:62:D5:C8:A6:6A:05:30
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/A8_83kMIeC1gQCuFYGLVyKZqBTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.165.0/24
Signature Algorithm: sha256WithRSAEncryption
23:07:c7:00:0e:5f:90:07:32:a4:7f:cc:94:0e:f3:de:14:2e:
5d:f9:46:a3:72:35:f8:53:2d:3c:52:05:7f:e1:14:a0:80:3e:
7b:43:63:4d:2f:49:f9:95:3f:16:82:26:de:2c:d0:16:60:5a:
33:48:94:59:fb:03:39:27:f9:cc:6c:33:6f:9d:67:3f:e5:9d:
c8:e4:35:d8:05:3d:d4:b1:89:4c:b1:4f:eb:ba:83:92:1b:5c:
b9:6c:44:a4:72:57:c1:8b:05:69:4f:5e:c9:dc:7a:42:2f:1e:
9a:8f:e8:12:9d:4f:63:ce:18:dd:59:8a:9c:7c:1d:86:3b:98:
45:47:79:b9:f4:38:1d:e4:4c:3f:89:00:62:25:3f:a3:95:6d:
59:3d:24:0b:47:68:d3:62:e7:84:a3:11:8d:76:b3:8d:30:92:
7c:dc:18:bf:51:66:0e:cd:c4:78:a4:c6:08:96:62:98:ff:df:
18:8d:27:78:a8:97:3a:6d:b1:a3:31:72:1e:1d:35:eb:5a:45:
84:51:00:ec:c9:2b:ac:d8:ea:0b:b5:09:90:7a:d3:64:89:35:
33:65:af:a7:47:69:0d:ef:ad:7f:02:2c:cb:0d:9a:8f:dd:9e:
70:2d:26:39:f4:cf:1a:31:3b:15:7a:1f:a4:15:a3:91:17:3a:
07:b6:1e:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxTEWB2CMVntuFoBg4vgFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi
YzU5MDEwHhcNMjMwMTAyMDcwNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2NmZmNkZTQzMDg3ODJkNjA0MDJiODU2MDYyZDVjOGE2NmEwNTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGsAptYQDGHiFFP1n5wBPEXll9VM
bXFGQNsahQc7e3gbuDtCqJoHlGKIVSfAL2rENtkE4+FwzwkIrwXTD7J01A9M+3f4
JBccBtqVS7ALAmLB/XaiHxBpt2ADziJGQsz2zxKTt4d8zvoH6uneStgAeRPMljkq
QCbctjoSvQM1SxOMK5le9Yv02DChZXK1j1JXrlvFaXB0AdOek8KRdgOaguVeACmA
wOrmTJDTJtQA5nZt1FTNKz9Ydih/UHMXapGkIUt6syS6RHD+0SvmoDaGu5nC3sxj
8R6vnXz3H6p5KrTCEnjzr6RLYnOqRFN66hHXNJ7VSGEEkUIaF3d1JtdRSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAPP/N5DCHgtYEArhWBi1cimagUwMB8GA1UdIwQY
MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt
NGRkMDQzNDZhYmMzLzEvQThfODNrTUllQzFnUUN1RllHTFZ5S1pxQlRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz
LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTmlMA0G
CSqGSIb3DQEBCwUAA4IBAQAjB8cADl+QBzKkf8yUDvPeFC5d+UajcjX4Uy08UgV/
4RSggD57Q2NNL0n5lT8WgibeLNAWYFozSJRZ+wM5J/nMbDNvnWc/5Z3I5DXYBT3U
sYlMsU/ruoOSG1y5bESkclfBiwVpT17J3HpCLx6aj+gSnU9jzhjdWYqcfB2GO5hF
R3m59Dgd5Ew/iQBiJT+jlW1ZPSQLR2jTYueEoxGNdrONMJJ83Bi/UWYOzcR4pMYI
lmKY/98YjSd4qJc6bbGjMXIeHTXrWkWEUQDsySus2OoLtQmQetNkiTUzZa+nR2kN
761/AizLDZqP3Z5wLSY59M8aMTsVeh+kFaORFzoHth54
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:20 2024 by rpki-client on console-fra.rpki-client.org