Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/8mD0AV9QCmQ2Un-FlRG42gpkW3Y.roa
File: 8mD0AV9QCmQ2Un-FlRG42gpkW3Y.roa (raw, json)
Hash identifier: qJIrEc0IwvPCRlWR9HYf6xdjNozR8Lp7j5svCJry3KA=
Subject key identifier: F2:60:F4:01:5F:50:0A:64:36:52:7F:85:95:11:B8:DA:0A:64:5B:76
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01857139CA13FBA963337EA6364559070E43
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/8mD0AV9QCmQ2Un-FlRG42gpkW3Y.roa
Signing time: Mon 02 Jan 2023 06:44:50 +0000
ROA not before: Mon 02 Jan 2023 06:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39200
IP address blocks: 193.189.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:ca:13:fb:a9:63:33:7e:a6:36:45:59:07:0e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 06:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f260f4015f500a6436527f859511b8da0a645b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:33:c6:6a:29:52:dd:70:79:a7:df:a9:81:a7:
d3:26:82:dc:61:2b:fc:80:38:2c:d7:58:c2:f4:60:
6f:eb:e8:e2:12:27:65:6c:79:13:7f:e6:19:5a:ae:
06:08:85:7d:53:ac:84:82:3e:c4:42:52:00:69:d1:
2e:1f:6f:f2:77:26:00:95:f5:2b:fb:4e:6f:52:8f:
54:dc:17:0b:8f:ab:4d:27:f9:c9:2a:28:f1:3a:f7:
d4:34:b2:ba:6c:ce:1c:3d:7b:d1:3c:37:f6:99:90:
1c:84:f9:2b:f9:42:39:51:43:bb:b7:a7:ae:ae:0d:
70:47:d5:ac:36:61:a9:27:91:51:b3:e2:95:e7:5c:
d2:d6:fd:57:c1:61:64:c7:c2:90:3e:2a:de:1e:60:
2f:8e:ca:ba:64:18:4c:4b:e6:c5:d3:45:8a:99:51:
9a:f0:37:90:60:b3:0f:7c:13:b2:e8:54:a0:0a:93:
ed:6d:44:af:61:ca:a6:bb:47:ef:e6:b6:c7:2b:52:
28:05:b3:c7:d3:b5:c8:0f:17:95:b2:2c:f3:61:bd:
62:c1:d2:f7:5f:d6:bb:29:75:7c:9c:3c:e1:09:11:
b4:00:3a:76:f4:58:f3:aa:16:6e:b7:69:18:5f:ac:
1d:27:4f:9c:7b:c1:42:df:88:f7:dd:f8:22:58:1d:
7a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:60:F4:01:5F:50:0A:64:36:52:7F:85:95:11:B8:DA:0A:64:5B:76
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/8mD0AV9QCmQ2Un-FlRG42gpkW3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.123.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c6:ed:45:11:1f:e1:a3:d7:6b:9c:ae:8e:2a:c3:c4:02:13:
48:34:1d:1b:84:22:40:fb:66:b8:a4:59:78:30:ad:b9:8a:85:
7a:52:87:d3:71:c8:22:72:66:d5:d3:c5:93:ba:f6:fa:92:60:
7c:56:00:d0:98:07:f4:cd:95:f8:fd:7d:c4:ed:e7:29:e9:39:
72:65:a5:5d:5d:5e:38:69:ff:60:1b:63:e8:14:4f:8a:a9:f4:
97:4a:41:c2:24:13:85:a5:10:37:e7:fa:35:d8:82:17:63:0d:
0a:b2:8b:d9:c7:dd:27:e2:3b:eb:85:44:06:a3:cd:b0:da:40:
ed:67:ec:a4:49:8a:26:51:7e:bf:3b:02:2a:cd:57:51:29:b8:
2a:82:62:59:03:ae:f6:50:5e:c9:ea:86:04:0f:0c:b8:f7:51:
89:6b:84:e4:b8:a1:4d:f5:55:bd:b9:92:3b:0f:37:e2:c2:8c:
66:a3:e9:0d:f7:28:be:48:da:38:b0:e5:c1:c7:9f:6f:0c:68:
58:9b:f4:95:67:2b:78:fb:b8:75:06:da:10:5d:f6:cf:8c:4b:
08:12:41:22:03:4e:bb:e3:61:51:d2:80:b7:c6:23:f1:1a:36:
54:c2:d5:14:e1:7e:79:fc:7d:09:ba:9d:31:8a:47:0c:b8:24:
43:bc:d7:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxOcoT+6ljM36mNkVZBw5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3
YjBhODgwHhcNMjMwMTAyMDY0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjYwZjQwMTVmNTAwYTY0MzY1MjdmODU5NTExYjhkYTBhNjQ1Yjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDPGailS3XB5p9+pgafTJoLcYSv8
gDgs11jC9GBv6+jiEidlbHkTf+YZWq4GCIV9U6yEgj7EQlIAadEuH2/ydyYAlfUr
+05vUo9U3BcLj6tNJ/nJKijxOvfUNLK6bM4cPXvRPDf2mZAchPkr+UI5UUO7t6eu
rg1wR9WsNmGpJ5FRs+KV51zS1v1XwWFkx8KQPireHmAvjsq6ZBhMS+bF00WKmVGa
8DeQYLMPfBOy6FSgCpPtbUSvYcqmu0fv5rbHK1IoBbPH07XIDxeVsizzYb1iwdL3
X9a7KXV8nDzhCRG0ADp29FjzqhZut2kYX6wdJ0+ce8FC34j33fgiWB16OQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPJg9AFfUApkNlJ/hZURuNoKZFt2MB8GA1UdIwQY
MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt
ZGE2MTUzODg1ZjNiLzEvOG1EMEFWOVFDbVEyVW4tRmxSRzQyZ3BrVzNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi
LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwb17MA0G
CSqGSIb3DQEBCwUAA4IBAQBcxu1FER/ho9drnK6OKsPEAhNINB0bhCJA+2a4pFl4
MK25ioV6UofTccgicmbV08WTuvb6kmB8VgDQmAf0zZX4/X3E7ecp6TlyZaVdXV44
af9gG2PoFE+KqfSXSkHCJBOFpRA35/o12IIXYw0KsovZx90n4jvrhUQGo82w2kDt
Z+ykSYomUX6/OwIqzVdRKbgqgmJZA672UF7J6oYEDwy491GJa4TkuKFN9VW9uZI7
Dzfiwoxmo+kN9yi+SNo4sOXBx59vDGhYm/SVZyt4+7h1BtoQXfbPjEsIEkEiA067
42FR0oC3xiPxGjZUwtUU4X55/H0Jup0xikcMuCRDvNfE
-----END CERTIFICATE-----
Generated at Wed Oct 4 03:26:23 2023 by rpki-client on console-fra.rpki-client.org