Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/AtEqfzXnVPlEk036ZU2ykSU3LIo.roa
File: AtEqfzXnVPlEk036ZU2ykSU3LIo.roa (raw, json)
Hash identifier: I7K7BmmwxxihUaeFB57MPKg9wj7AXnl2D3yTNdOdE9Y=
Subject key identifier: 02:D1:2A:7F:35:E7:54:F9:44:93:4D:FA:65:4D:B2:91:25:37:2C:8A
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01857139C91C0C1528750F272E96870491AE
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/AtEqfzXnVPlEk036ZU2ykSU3LIo.roa
Signing time: Mon 02 Jan 2023 06:44:50 +0000
ROA not before: Mon 02 Jan 2023 06:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35285
IP address blocks: 193.189.122.0/24 maxlen: 24
193.189.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:c9:1c:0c:15:28:75:0f:27:2e:96:87:04:91:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 06:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02d12a7f35e754f944934dfa654db29125372c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:89:26:85:9d:f4:d6:14:97:61:f8:86:77:7b:
2e:9d:14:f7:79:6f:d9:79:89:d1:c7:bc:91:df:01:
87:57:1e:e6:65:8d:30:6d:b9:40:91:4e:78:50:12:
a2:24:42:d2:85:94:75:f9:eb:e9:cb:a0:b7:30:ef:
5a:16:3a:b3:f5:f2:5a:90:d5:5a:de:b0:05:64:fb:
36:68:ce:24:32:42:4b:8b:6c:48:5d:9b:9c:2e:d7:
ac:ca:aa:16:f2:6a:f9:24:ee:40:68:0d:63:27:81:
24:7d:d7:3b:50:af:52:70:65:33:16:3d:74:e3:a1:
7f:1d:24:0a:b6:5e:b3:e8:4a:3f:5d:87:08:3b:07:
66:48:7c:96:13:6b:a8:0f:6e:46:06:06:23:17:8d:
41:6f:41:f9:1d:cf:ee:6b:59:dd:e9:38:4d:36:2d:
da:ac:c4:58:33:1d:3c:66:f0:62:b8:15:a7:b0:fc:
49:2c:e2:68:f5:26:79:47:ad:9b:d8:2d:3f:32:1b:
b5:dd:9e:c8:3f:c7:4f:50:1b:4f:82:ef:e5:78:8e:
47:e7:4a:ef:1e:15:87:42:c4:ca:18:b1:f8:2c:38:
fd:7d:b7:b0:7d:79:a3:bf:77:78:1b:d7:4d:39:58:
15:3c:2c:d3:5d:b0:bf:24:8b:51:cd:95:6e:02:fd:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D1:2A:7F:35:E7:54:F9:44:93:4D:FA:65:4D:B2:91:25:37:2C:8A
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/AtEqfzXnVPlEk036ZU2ykSU3LIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.122.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:d2:8b:49:90:b6:19:69:48:34:db:0a:45:1c:2a:80:e8:04:
bc:90:6f:49:47:40:65:93:2b:d6:e2:b1:c0:06:a2:c6:e0:50:
e0:3d:5c:67:8c:04:73:9a:18:4a:b2:e6:b9:6a:cd:4d:bb:2d:
9c:dd:be:2e:d4:db:c5:7e:4d:d2:da:d3:6f:eb:cd:6d:27:92:
31:d9:5d:d3:4e:02:36:6a:47:62:5a:dd:d8:6c:ca:cc:6f:55:
c2:ef:f9:65:15:6f:f7:d8:c6:16:78:b3:d5:34:fe:99:a4:30:
61:93:40:de:e2:8a:69:ea:6b:fb:ba:34:1a:91:7f:0a:81:45:
df:89:8d:cc:76:db:2f:ca:47:3b:2f:03:cf:2c:16:76:89:e6:
f0:79:e2:30:aa:a1:54:12:70:c2:51:16:02:84:c6:d3:61:20:
19:ae:a7:51:8f:20:d9:b8:c2:9b:82:1b:ed:d7:5a:92:2a:04:
5f:83:96:ee:4e:b0:5f:0e:bd:43:2c:7c:cf:0f:24:26:9f:16:
8c:64:ea:78:39:fe:54:a4:63:65:06:77:c4:7e:df:7b:d2:a0:
fd:68:cc:cb:d1:3d:a6:7f:f1:57:66:dc:83:a7:30:7c:ef:af:
76:42:f8:7f:fc:b6:90:d2:1e:02:ba:27:5d:f7:5f:2b:bb:7e:
43:ea:19:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxOckcDBUodQ8nLpaHBJGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3
YjBhODgwHhcNMjMwMTAyMDY0NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmQxMmE3ZjM1ZTc1NGY5NDQ5MzRkZmE2NTRkYjI5MTI1MzcyYzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YkmhZ301hSXYfiGd3sunRT3eW/Z
eYnRx7yR3wGHVx7mZY0wbblAkU54UBKiJELShZR1+evpy6C3MO9aFjqz9fJakNVa
3rAFZPs2aM4kMkJLi2xIXZucLtesyqoW8mr5JO5AaA1jJ4Ekfdc7UK9ScGUzFj10
46F/HSQKtl6z6Eo/XYcIOwdmSHyWE2uoD25GBgYjF41Bb0H5Hc/ua1nd6ThNNi3a
rMRYMx08ZvBiuBWnsPxJLOJo9SZ5R62b2C0/Mhu13Z7IP8dPUBtPgu/leI5H50rv
HhWHQsTKGLH4LDj9fbewfXmjv3d4G9dNOVgVPCzTXbC/JItRzZVuAv1tdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFALRKn8151T5RJNN+mVNspElNyyKMB8GA1UdIwQY
MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt
ZGE2MTUzODg1ZjNiLzEvQXRFcWZ6WG5WUGxFazAzNlpVMnlrU1UzTElvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi
LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwb16MA0G
CSqGSIb3DQEBCwUAA4IBAQC30otJkLYZaUg02wpFHCqA6AS8kG9JR0BlkyvW4rHA
BqLG4FDgPVxnjARzmhhKsua5as1Nuy2c3b4u1NvFfk3S2tNv681tJ5Ix2V3TTgI2
akdiWt3YbMrMb1XC7/llFW/32MYWeLPVNP6ZpDBhk0De4opp6mv7ujQakX8KgUXf
iY3Mdtsvykc7LwPPLBZ2iebweeIwqqFUEnDCURYChMbTYSAZrqdRjyDZuMKbghvt
11qSKgRfg5buTrBfDr1DLHzPDyQmnxaMZOp4Of5UpGNlBnfEft970qD9aMzL0T2m
f/FXZtyDpzB87692Qvh//LaQ0h4Cuidd918ru35D6hkX
-----END CERTIFICATE-----
Generated at Sat Sep 23 03:34:56 2023 by rpki-client on console-fra.rpki-client.org