Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/0u4wH2ij1Vd67Wui3SSyWP5gEqY.roa
File: 0u4wH2ij1Vd67Wui3SSyWP5gEqY.roa (raw, json)
Hash identifier: XzAxKf755QoW8JaJ9RX9MfTYfYJp18fcY5xRDP1zGPY=
Subject key identifier: D2:EE:30:1F:68:A3:D5:57:7A:ED:6B:A2:DD:24:B2:58:FE:60:12:A6
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01856D13D8C7BE312538D07D692A9A22AF13
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/0u4wH2ij1Vd67Wui3SSyWP5gEqY.roa
Signing time: Sun 01 Jan 2023 11:24:55 +0000
ROA not before: Sun 01 Jan 2023 11:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44400
IP address blocks: 93.126.9.0/24 maxlen: 24
93.126.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:d8:c7:be:31:25:38:d0:7d:69:2a:9a:22:af:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jan 1 11:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2ee301f68a3d5577aed6ba2dd24b258fe6012a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:10:25:cd:6d:16:eb:f4:b4:92:76:41:b4:
08:4b:86:63:85:c7:1a:1f:7f:bf:3a:42:d5:b8:d6:
34:7d:73:7d:ad:c0:b5:ab:f5:00:49:11:06:09:be:
d3:65:31:bc:17:73:09:48:b7:e7:68:e8:78:43:c8:
b8:18:67:0f:61:ac:96:e5:2f:d6:f3:8e:9f:c7:24:
c4:7d:dd:7f:e4:9d:6a:b0:8e:50:34:4a:ff:04:7e:
a5:ae:78:39:3b:db:fe:15:2f:02:e9:f3:ee:ea:38:
2e:2b:3d:a5:28:ab:74:a9:f2:38:95:4f:97:d7:4f:
3c:d2:ae:71:7d:4a:5c:a3:88:52:1a:8c:62:ea:d2:
48:50:85:40:91:56:ff:52:73:08:0d:0b:96:91:93:
eb:44:9f:74:73:27:57:25:c8:c4:bc:c8:ec:af:ff:
17:cc:93:14:2c:5f:b2:81:09:9a:0d:da:03:e7:95:
2e:8b:7b:ba:42:1b:dd:ab:13:29:c8:1c:fe:4d:00:
e2:d6:df:04:1a:28:3c:50:ac:b5:c6:8b:96:a7:00:
e7:0a:ca:71:aa:39:0c:82:0b:e5:56:88:e1:5c:2f:
b9:74:0f:ea:f3:c7:65:42:b6:13:a4:28:2b:8c:98:
89:3f:1e:a8:4e:a4:09:71:8e:81:4b:0e:78:7a:b4:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EE:30:1F:68:A3:D5:57:7A:ED:6B:A2:DD:24:B2:58:FE:60:12:A6
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/0u4wH2ij1Vd67Wui3SSyWP5gEqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.9.0-93.126.10.255
Signature Algorithm: sha256WithRSAEncryption
53:0d:77:74:5d:e0:03:43:bd:da:e9:54:7f:59:15:9b:52:a5:
d4:78:21:f8:b7:24:c4:45:b8:52:d9:e0:29:82:b4:e7:44:24:
8b:94:a2:6f:4f:a1:98:27:1f:10:06:e4:dd:3d:a5:9c:79:64:
49:69:e8:77:8e:f2:63:4e:df:65:31:90:d1:ef:91:51:a1:57:
b1:bd:18:78:35:31:03:04:93:ea:5c:ae:c7:1e:ad:2c:a5:6d:
33:8e:ef:a0:57:58:a2:8a:01:f8:b9:04:a0:f3:f7:fc:33:06:
02:b9:17:dc:c7:5f:de:97:7a:ab:dc:06:b9:6a:64:31:ff:c0:
3b:5d:22:b6:e1:31:8d:63:21:2e:f7:e7:dc:05:8f:4e:5d:1c:
29:04:0a:9e:b5:a3:04:30:9b:c6:c4:87:f5:43:e5:8d:08:a2:
35:fa:c7:c6:18:09:91:09:34:50:96:20:dd:89:8d:6d:94:9c:
ec:20:1c:79:81:16:fa:0d:b7:6b:10:0b:ce:a2:53:df:2a:a1:
7b:bf:6b:ca:e4:71:d7:0e:b0:b3:49:69:58:ec:42:8a:dc:7a:
31:47:17:e3:d1:a3:32:fe:f0:d9:cd:e5:1d:66:c6:95:33:8a:
23:ba:a6:e1:40:86:04:b6:94:47:d2:4f:d6:f3:a0:97:92:71:
c7:9c:c7:2d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVtE9jHvjElONB9aSqaIq8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNTNhY2NiOTRlMTBjZjhjMmMyOTY3OTA2N2VlMzkwOTlm
NDA0ZDMwHhcNMjMwMTAxMTEyNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmVlMzAxZjY4YTNkNTU3N2FlZDZiYTJkZDI0YjI1OGZlNjAxMmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYgQJc1tFuv0tJJ2QbQIS4Zjhcca
H3+/OkLVuNY0fXN9rcC1q/UASREGCb7TZTG8F3MJSLfnaOh4Q8i4GGcPYayW5S/W
846fxyTEfd1/5J1qsI5QNEr/BH6lrng5O9v+FS8C6fPu6jguKz2lKKt0qfI4lU+X
10880q5xfUpco4hSGoxi6tJIUIVAkVb/UnMIDQuWkZPrRJ90cydXJcjEvMjsr/8X
zJMULF+ygQmaDdoD55Uui3u6QhvdqxMpyBz+TQDi1t8EGig8UKy1xouWpwDnCspx
qjkMggvlVojhXC+5dA/q88dlQrYTpCgrjJiJPx6oTqQJcY6BSw54erQHgwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNLuMB9oo9VXeu1rot0kslj+YBKmMB8GA1UdIwQY
MBaAFINTrMuU4Qz4wsKWeQZ+45CZ9ATTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEt
NmMzOTUwMTk0MzcwLzEvMHU0d0gyaWoxVmQ2N1d1aTNTU3lXUDVnRXFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEtNmMzOTUwMTk0Mzcw
LzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABdfgkD
BABdfgowDQYJKoZIhvcNAQELBQADggEBAFMNd3Rd4ANDvdrpVH9ZFZtSpdR4Ifi3
JMRFuFLZ4CmCtOdEJIuUom9PoZgnHxAG5N09pZx5ZElp6HeO8mNO32UxkNHvkVGh
V7G9GHg1MQMEk+pcrscerSylbTOO76BXWKKKAfi5BKDz9/wzBgK5F9zHX96Xeqvc
BrlqZDH/wDtdIrbhMY1jIS7359wFj05dHCkECp61owQwm8bEh/VD5Y0IojX6x8YY
CZEJNFCWIN2JjW2UnOwgHHmBFvoNt2sQC86iU98qoXu/a8rkcdcOsLNJaVjsQorc
ejFHF+PRozL+8NnN5R1mxpUziiO6puFAhgS2lEfST9bzoJeSccecxy0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-fra.rpki-client.org