Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/Jq930kZFgmx0dxJJYEp9JA-4ozA.roa
File: Jq930kZFgmx0dxJJYEp9JA-4ozA.roa (raw, json)
Hash identifier: 5PyGFNiU9wyfxuGglZQfa88+tGvFiHoaZdi7pGtNFUw=
Subject key identifier: 26:AF:77:D2:46:45:82:6C:74:77:12:49:60:4A:7D:24:0F:B8:A3:30
Certificate issuer: /CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Certificate serial: 01886BA6AAD3BFE58D87D442FF044E217E6F
Authority key identifier: E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/Jq930kZFgmx0dxJJYEp9JA-4ozA.roa
Signing time: Tue 30 May 2023 07:54:24 +0000
ROA not before: Tue 30 May 2023 07:54:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51679
IP address blocks: 193.25.196.0/24 maxlen: 24
193.25.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Nov 2023 20:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:a6:aa:d3:bf:e5:8d:87:d4:42:ff:04:4e:21:7e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15c506035fa8dd6091b43a4e889767fcdcc48f1
Validity
Not Before: May 30 07:54:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26af77d24645826c74771249604a7d240fb8a330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c2:d5:1a:48:73:9f:1d:25:a7:6d:f9:f9:3a:
f6:60:4e:8c:d2:1d:4b:71:8e:12:2d:e7:88:b2:3a:
52:e5:1d:36:6a:eb:cd:31:5a:5e:4c:5b:09:58:de:
90:aa:4f:8f:a2:d8:1c:f9:dc:39:a7:60:f5:11:5e:
91:e7:1a:69:dd:02:bb:70:37:ac:56:cf:c8:09:87:
3f:8a:d4:4f:da:77:0c:92:fa:59:c1:86:bf:f7:21:
b6:b3:bf:da:b1:4a:99:10:f5:96:b9:e7:ae:5d:bd:
60:6b:e9:0d:5e:76:5c:cb:8c:d9:7f:b7:b6:5f:7d:
57:40:14:18:0b:0d:28:c8:db:25:00:a4:76:ac:56:
07:51:e0:e7:8f:27:52:9c:fe:30:dd:43:e3:24:f6:
4e:8c:93:1e:f1:fb:2a:39:5b:09:e2:7f:64:33:ab:
4a:98:f8:89:fa:52:f2:63:1e:e1:98:38:5c:08:fb:
f7:49:eb:0a:b6:02:b5:77:71:48:2a:7d:af:c1:65:
81:4e:64:54:9a:0e:d8:68:e5:c6:a1:dc:b6:14:7b:
97:e8:d9:ea:4b:fd:48:0a:39:a0:6a:44:fb:81:9d:
24:27:5f:13:80:7f:a9:e0:ea:4f:26:80:69:0c:f1:
77:7d:13:34:5d:06:9a:5c:30:a9:a7:fb:f8:3d:92:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AF:77:D2:46:45:82:6C:74:77:12:49:60:4A:7D:24:0F:B8:A3:30
X509v3 Authority Key Identifier:
keyid:E1:5C:50:60:35:FA:8D:D6:09:1B:43:A4:E8:89:76:7F:CD:CC:48:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VxQYDX6jdYJG0Ok6Il2f83MSPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/Jq930kZFgmx0dxJJYEp9JA-4ozA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/412345-903e-4cc1-997a-e8682f322940/1/4VxQYDX6jdYJG0Ok6Il2f83MSPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.196.0/24
193.25.223.0/24
Signature Algorithm: sha256WithRSAEncryption
32:48:d2:53:f2:af:2b:d2:3e:d0:b1:98:d2:86:e2:05:8d:ed:
5e:f7:1d:21:14:15:4d:27:c0:6e:58:3e:88:30:ef:79:2f:c0:
37:36:93:ae:e1:5c:f8:82:da:d2:1c:b5:0e:77:bc:35:f6:66:
08:2f:d5:99:22:25:2b:ca:95:fe:04:49:61:48:ec:79:9d:fb:
8f:93:b7:57:d2:92:82:dd:e5:9a:13:53:42:61:9a:cf:0f:94:
fe:69:02:41:25:79:d8:98:9c:19:66:5d:33:5b:96:ac:49:e4:
14:15:d6:a9:e9:0f:55:b8:b9:fd:75:8f:0b:8f:9a:3d:97:84:
da:d3:bd:d2:11:f3:7d:c2:a1:23:b2:1a:4e:4b:a7:0b:fa:de:
c4:b1:59:a2:80:a1:29:eb:d4:b5:72:82:26:8c:6a:4e:54:c6:
99:38:a3:10:44:b3:a3:db:5c:9b:f2:d5:bf:72:94:9b:da:38:
6e:85:1c:d6:9e:16:44:ed:5a:2e:e8:d8:59:8d:9a:c0:86:67:
71:4c:62:34:83:26:59:d6:78:e0:93:44:30:34:10:8b:4d:ea:
a4:d8:3f:2f:0f:8f:fd:28:77:27:35:4b:42:0d:71:17:8b:03:
ad:87:d3:d9:8b:6f:69:dc:a3:55:71:4d:f6:3a:4f:fb:4e:1f:
3e:67:7a:5c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYhrpqrTv+WNh9RC/wROIX5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNWM1MDYwMzVmYThkZDYwOTFiNDNhNGU4ODk3NjdmY2Rj
YzQ4ZjEwHhcNMjMwNTMwMDc1NDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmFmNzdkMjQ2NDU4MjZjNzQ3NzEyNDk2MDRhN2QyNDBmYjhhMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8LVGkhznx0lp235+Tr2YE6M0h1L
cY4SLeeIsjpS5R02auvNMVpeTFsJWN6Qqk+Potgc+dw5p2D1EV6R5xpp3QK7cDes
Vs/ICYc/itRP2ncMkvpZwYa/9yG2s7/asUqZEPWWueeuXb1ga+kNXnZcy4zZf7e2
X31XQBQYCw0oyNslAKR2rFYHUeDnjydSnP4w3UPjJPZOjJMe8fsqOVsJ4n9kM6tK
mPiJ+lLyYx7hmDhcCPv3SesKtgK1d3FIKn2vwWWBTmRUmg7YaOXGody2FHuX6Nnq
S/1ICjmgakT7gZ0kJ18TgH+p4OpPJoBpDPF3fRM0XQaaXDCpp/v4PZL6dwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCavd9JGRYJsdHcSSWBKfSQPuKMwMB8GA1UdIwQY
MBaAFOFcUGA1+o3WCRtDpOiJdn/NzEjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZ4UVlEWDZqZFlKRzBPazZJbDJmODNNU1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MTIzNDUtOTAzZS00Y2MxLTk5N2Et
ZTg2ODJmMzIyOTQwLzEvSnE5MzBrWkZnbXgwZHhKSllFcDlKQS00b3pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80MTIzNDUtOTAzZS00Y2MxLTk5N2EtZTg2ODJmMzIyOTQw
LzEvNFZ4UVlEWDZqZFlKRzBPazZJbDJmODNNU1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRnEAwQA
wRnfMA0GCSqGSIb3DQEBCwUAA4IBAQAySNJT8q8r0j7QsZjShuIFje1e9x0hFBVN
J8BuWD6IMO95L8A3NpOu4Vz4gtrSHLUOd7w19mYIL9WZIiUrypX+BElhSOx5nfuP
k7dX0pKC3eWaE1NCYZrPD5T+aQJBJXnYmJwZZl0zW5asSeQUFdap6Q9VuLn9dY8L
j5o9l4Ta073SEfN9wqEjshpOS6cL+t7EsVmigKEp69S1coImjGpOVMaZOKMQRLOj
21yb8tW/cpSb2jhuhRzWnhZE7Vou6NhZjZrAhmdxTGI0gyZZ1njgk0QwNBCLTeqk
2D8vD4/9KHcnNUtCDXEXiwOth9PZi29p3KNVcU32Ok/7Th8+Z3pc
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:18 2024 by rpki-client on console-ams.rpki-client.org