Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/Xy-J1GXdKZ2V3JHVikAWAvhyC4Y.roa
File: Xy-J1GXdKZ2V3JHVikAWAvhyC4Y.roa (raw, json)
Hash identifier: 25PdpsELtcPMhsq4cQdZCJTpDvvuq8jJsEh+ZGxZkw4=
Subject key identifier: 5F:2F:89:D4:65:DD:29:9D:95:DC:91:D5:8A:40:16:02:F8:72:0B:86
Certificate issuer: /CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Certificate serial: 018ECC7C838746F9C9AFCF35F36E6F2D606A
Authority key identifier: 69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/Xy-J1GXdKZ2V3JHVikAWAvhyC4Y.roa
Signing time: Thu 11 Apr 2024 09:28:15 +0000
ROA not before: Thu 11 Apr 2024 09:28:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 193.93.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 18 Apr 2024 07:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:7c:83:87:46:f9:c9:af:cf:35:f3:6e:6f:2d:60:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696c67b25d2f225d972cfdf3b4eaff22e37900a8
Validity
Not Before: Apr 11 09:28:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f2f89d465dd299d95dc91d58a401602f8720b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:81:c6:da:82:0f:e2:47:ed:34:31:99:a1:4b:
87:71:38:24:ef:0b:70:92:e8:ca:66:79:82:79:ad:
46:a9:36:51:4d:b6:8d:dd:4d:1a:82:1d:88:84:45:
69:6c:05:24:d1:bb:5b:c8:a2:63:4c:f7:d0:16:2d:
35:0c:48:23:bd:78:94:45:01:75:73:97:28:56:b3:
5d:b1:f6:3b:3c:be:06:5e:9a:d7:dd:8a:d5:21:71:
be:8a:c8:2c:05:e9:29:51:b7:70:68:ee:d9:ac:ca:
7c:2f:2c:9c:b7:35:ee:03:dd:ad:8b:27:b8:9d:90:
3c:7f:fd:c8:27:55:54:91:0e:00:71:86:4d:d0:72:
c1:92:4d:0e:f9:0d:71:c6:75:b0:52:e7:9f:e0:fa:
3a:a5:5b:8a:73:ad:14:7f:e0:38:76:5f:a1:8e:d2:
60:b8:67:78:91:01:59:66:73:d4:2e:a5:e1:4a:b2:
36:47:c8:c2:c2:d0:40:a3:7c:62:d4:0c:8f:fd:1b:
06:57:85:4c:86:f1:1d:6f:9e:a4:48:de:f6:ba:9f:
03:03:a7:cd:90:f3:7e:27:71:77:20:3b:c1:0c:4b:
f2:74:d8:b8:c1:0a:4b:dc:42:da:2b:10:05:5b:c4:
50:3b:5d:bf:79:f7:af:fd:d9:22:2b:9e:11:1c:e2:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2F:89:D4:65:DD:29:9D:95:DC:91:D5:8A:40:16:02:F8:72:0B:86
X509v3 Authority Key Identifier:
keyid:69:6C:67:B2:5D:2F:22:5D:97:2C:FD:F3:B4:EA:FF:22:E3:79:00:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnsl0vIl2XLP3ztOr_IuN5AKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/Xy-J1GXdKZ2V3JHVikAWAvhyC4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3c634a-0cd9-4765-bd09-5663de16d66f/1/aWxnsl0vIl2XLP3ztOr_IuN5AKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.64.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:65:37:5a:21:e3:8b:70:2c:12:05:1e:00:69:fc:94:a4:a5:
72:5b:99:bf:a6:96:6a:17:57:6c:29:05:15:9e:e6:c8:30:de:
47:45:81:0c:d3:21:3d:4e:18:56:62:43:0f:87:81:56:c4:dc:
54:5b:26:af:77:1c:c0:8f:c6:2d:28:7b:5d:dd:3e:a9:0f:47:
50:62:e5:8d:39:fa:bb:c8:27:ee:09:af:4f:28:b4:b4:a9:92:
99:9c:56:ed:86:dc:99:05:8e:ea:7f:c6:f9:5c:cc:a3:69:00:
88:0f:f9:b6:b1:a6:3c:eb:5d:71:10:13:b1:9f:89:29:35:8a:
2a:06:c5:70:5b:f8:38:9f:4a:f0:26:d9:16:47:5e:3e:46:f1:
ce:41:fe:b3:2d:7f:2a:06:1a:e3:cd:d6:19:d7:19:01:2c:0c:
d0:1c:c5:72:4f:a5:35:d0:9f:4e:9d:36:da:46:22:b4:67:94:
2a:b1:7f:4a:b2:26:5b:7b:2c:e9:1b:f0:43:ba:94:b3:56:eb:
ca:fd:27:7a:7e:57:40:3d:93:f8:da:44:cc:fa:28:37:83:72:
51:d0:ef:6c:12:5c:95:b5:ed:81:77:56:e6:12:53:06:1c:fc:
4c:4f:9a:b9:b6:5e:1b:79:0f:8c:5a:49:e3:20:71:cb:07:88:
e4:38:d8:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7MfIOHRvnJr881825vLWBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NmM2N2IyNWQyZjIyNWQ5NzJjZmRmM2I0ZWFmZjIyZTM3
OTAwYTgwHhcNMjQwNDExMDkyODE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjJmODlkNDY1ZGQyOTlkOTVkYzkxZDU4YTQwMTYwMmY4NzIwYjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIHG2oIP4kftNDGZoUuHcTgk7wtw
kujKZnmCea1GqTZRTbaN3U0agh2IhEVpbAUk0btbyKJjTPfQFi01DEgjvXiURQF1
c5coVrNdsfY7PL4GXprX3YrVIXG+isgsBekpUbdwaO7ZrMp8LyyctzXuA92tiye4
nZA8f/3IJ1VUkQ4AcYZN0HLBkk0O+Q1xxnWwUuef4Po6pVuKc60Uf+A4dl+hjtJg
uGd4kQFZZnPULqXhSrI2R8jCwtBAo3xi1AyP/RsGV4VMhvEdb56kSN72up8DA6fN
kPN+J3F3IDvBDEvydNi4wQpL3ELaKxAFW8RQO12/efev/dkiK54RHOLekwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF8vidRl3SmdldyR1YpAFgL4cguGMB8GA1UdIwQY
MBaAFGlsZ7JdLyJdlyz987Tq/yLjeQCoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8zYzYzNGEtMGNkOS00NzY1LWJkMDkt
NTY2M2RlMTZkNjZmLzEvWHktSjFHWGRLWjJWM0pIVmlrQVdBdmh5QzRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8zYzYzNGEtMGNkOS00NzY1LWJkMDktNTY2M2RlMTZkNjZm
LzEvYVd4bnNsMHZJbDJYTFAzenRPcl9JdU41QUtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwV1AMA0G
CSqGSIb3DQEBCwUAA4IBAQBcZTdaIeOLcCwSBR4AafyUpKVyW5m/ppZqF1dsKQUV
nubIMN5HRYEM0yE9ThhWYkMPh4FWxNxUWyavdxzAj8YtKHtd3T6pD0dQYuWNOfq7
yCfuCa9PKLS0qZKZnFbthtyZBY7qf8b5XMyjaQCID/m2saY8611xEBOxn4kpNYoq
BsVwW/g4n0rwJtkWR14+RvHOQf6zLX8qBhrjzdYZ1xkBLAzQHMVyT6U10J9OnTba
RiK0Z5QqsX9KsiZbeyzpG/BDupSzVuvK/Sd6fldAPZP42kTM+ig3g3JR0O9sElyV
te2Bd1bmElMGHPxMT5q5tl4beQ+MWknjIHHLB4jkONhl
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:00 2024 by rpki-client on console-ams.rpki-client.org