Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/69JnUv8P2um0B6SjDh3UcxvDT-g.roa
File: 69JnUv8P2um0B6SjDh3UcxvDT-g.roa (raw, json)
Hash identifier: womwl1jAou2XgL6sHKWVjM8tkpRb4giSpC7GPIxQQpA=
Subject key identifier: EB:D2:67:52:FF:0F:DA:E9:B4:07:A4:A3:0E:1D:D4:73:1B:C3:4F:E8
Certificate issuer: /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Certificate serial: 018570DE642C74F4DC49D16F7C4FC311F73A
Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/69JnUv8P2um0B6SjDh3UcxvDT-g.roa
Signing time: Mon 02 Jan 2023 05:05:00 +0000
ROA not before: Mon 02 Jan 2023 05:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3304
IP address blocks: 193.28.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:64:2c:74:f4:dc:49:d1:6f:7c:4f:c3:11:f7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Validity
Not Before: Jan 2 05:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebd26752ff0fdae9b407a4a30e1dd4731bc34fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:02:f6:cc:e2:9b:06:c0:cb:e2:b6:6b:7e:7f:
a2:e0:1c:97:6f:d1:39:c5:2d:14:4b:c9:4f:5a:08:
d3:42:77:04:ef:31:2b:54:87:59:70:f9:11:68:27:
69:8e:eb:01:b0:8d:2f:5e:35:8d:ed:be:73:71:de:
70:62:9c:b3:68:ef:01:63:fe:ab:eb:17:ad:95:4f:
97:37:9b:f9:bc:a9:08:50:a0:14:9f:03:20:3c:8d:
18:78:35:39:fb:56:b0:43:39:9a:68:a8:d8:f5:4f:
4f:8f:6e:44:f3:02:b9:7d:4c:9f:4b:b8:fb:60:0f:
f8:9c:4d:d3:ae:a3:9b:f4:e5:b5:0f:63:3a:cc:50:
69:c9:d6:3a:5e:d4:ff:e5:f9:a4:28:92:11:ac:2f:
fa:ae:00:7a:94:c4:1a:45:f4:f2:ff:19:9f:80:28:
ae:62:46:5c:19:53:80:8d:cb:7e:35:e1:b2:0b:54:
de:4a:94:6c:50:2a:31:a0:28:ef:66:a2:cd:77:07:
ea:f8:67:66:c8:83:0b:e6:bd:a3:12:88:03:a4:14:
de:24:29:0c:d6:10:9a:57:89:4e:a8:57:fe:e8:87:
3a:5f:5b:36:0d:17:e0:2c:05:72:2d:af:9e:44:02:
bc:5d:d7:3c:ed:8c:cf:87:f8:54:b8:ac:8b:38:80:
5b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D2:67:52:FF:0F:DA:E9:B4:07:A4:A3:0E:1D:D4:73:1B:C3:4F:E8
X509v3 Authority Key Identifier:
keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/69JnUv8P2um0B6SjDh3UcxvDT-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.47.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:79:b6:51:a8:63:01:78:59:c9:f6:e4:ae:f7:a2:c4:45:6d:
fc:79:82:f4:f4:a9:d8:8d:d6:10:eb:16:6f:60:f7:e5:0d:01:
fd:51:91:3e:43:50:5c:c9:c4:0b:4a:95:3a:d1:86:9b:98:d9:
80:89:fc:44:34:ed:dc:11:5b:84:3f:de:6a:47:a8:74:77:b0:
9d:e2:95:f6:b7:5b:8b:17:51:5e:fa:f3:bb:f2:68:48:21:6b:
22:e7:35:e0:a6:85:db:15:11:53:0b:fb:8a:f6:01:28:20:2f:
b2:ee:14:c0:cd:ad:87:88:08:39:0f:06:dc:b6:64:c6:44:1f:
93:f7:2b:dc:14:4c:1c:4a:35:92:ec:95:7c:0f:40:35:3b:11:
96:5b:e6:4d:2e:cf:ca:c4:b3:c9:89:4f:dd:76:84:ea:42:b8:
fa:70:1a:8b:82:ba:6d:ab:43:1c:54:5a:7a:9b:f1:ff:0c:e0:
b4:26:0a:c1:5f:37:89:93:9c:4a:e5:12:ba:d2:47:95:fd:2d:
d8:e1:b9:c9:94:f4:fc:45:51:6c:c7:20:8d:c8:31:0e:45:cb:
0f:6d:a5:b5:19:27:d0:6a:19:76:f1:dc:da:9b:f2:b6:b8:a4:
1a:2c:7c:e0:4d:11:84:ea:0c:b5:de:87:ff:8d:cb:87:16:a0:
d1:38:11:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw3mQsdPTcSdFvfE/DEfc6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmEzYWY4MzlhYTFkY2U3NThmNDg5ZTJkMzFhZTIyMDky
ZmM5OWEwHhcNMjMwMTAyMDUwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmQyNjc1MmZmMGZkYWU5YjQwN2E0YTMwZTFkZDQ3MzFiYzM0ZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QL2zOKbBsDL4rZrfn+i4ByXb9E5
xS0US8lPWgjTQncE7zErVIdZcPkRaCdpjusBsI0vXjWN7b5zcd5wYpyzaO8BY/6r
6xetlU+XN5v5vKkIUKAUnwMgPI0YeDU5+1awQzmaaKjY9U9Pj25E8wK5fUyfS7j7
YA/4nE3TrqOb9OW1D2M6zFBpydY6XtT/5fmkKJIRrC/6rgB6lMQaRfTy/xmfgCiu
YkZcGVOAjct+NeGyC1TeSpRsUCoxoCjvZqLNdwfq+GdmyIML5r2jEogDpBTeJCkM
1hCaV4lOqFf+6Ic6X1s2DRfgLAVyLa+eRAK8Xdc87YzPh/hUuKyLOIBbJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOvSZ1L/D9rptAekow4d1HMbw0/oMB8GA1UdIwQY
MBaAFL36Ovg5qh3OdY9Ini0xriIJL8maMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84Y2RiYzUtOTM2NS00YTBjLWI5YTMt
YWU3NzQ2ZjA5NjMwLzEvNjlKblV2OFAydW0wQjZTakRoM1VjeHZEVC1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC84Y2RiYzUtOTM2NS00YTBjLWI5YTMtYWU3NzQ2ZjA5NjMw
LzEvdmZvNi1EbXFIYzUxajBpZUxUR3VJZ2t2eVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRwvMA0G
CSqGSIb3DQEBCwUAA4IBAQAeebZRqGMBeFnJ9uSu96LERW38eYL09KnYjdYQ6xZv
YPflDQH9UZE+Q1BcycQLSpU60YabmNmAifxENO3cEVuEP95qR6h0d7Cd4pX2t1uL
F1Fe+vO78mhIIWsi5zXgpoXbFRFTC/uK9gEoIC+y7hTAza2HiAg5DwbctmTGRB+T
9yvcFEwcSjWS7JV8D0A1OxGWW+ZNLs/KxLPJiU/ddoTqQrj6cBqLgrptq0McVFp6
m/H/DOC0JgrBXzeJk5xK5RK60keV/S3Y4bnJlPT8RVFsxyCNyDEORcsPbaW1GSfQ
ahl28dzam/K2uKQaLHzgTRGE6gy13of/jcuHFqDROBF0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:09 2024 by rpki-client on console-ams.rpki-client.org