Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/7IeI2Mfy8EkR00ezi-eJQZtPHig.roa
File: 7IeI2Mfy8EkR00ezi-eJQZtPHig.roa (raw, json)
Hash identifier: Nu6zkkc6T5OSqGYBfPFOtnEJiRvIdarwDx5E/HAwcTA=
Subject key identifier: EC:87:88:D8:C7:F2:F0:49:11:D3:47:B3:8B:E7:89:41:9B:4F:1E:28
Certificate issuer: /CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Certificate serial: 01856F42963E6512B856C884BA42865AF490
Authority key identifier: 4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/7IeI2Mfy8EkR00ezi-eJQZtPHig.roa
Signing time: Sun 01 Jan 2023 21:35:12 +0000
ROA not before: Sun 01 Jan 2023 21:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50096
IP address blocks: 193.104.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jan 2023 16:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:96:3e:65:12:b8:56:c8:84:ba:42:86:5a:f4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8343edc843542f529fbc3e650cb6578c9206c3
Validity
Not Before: Jan 1 21:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec8788d8c7f2f04911d347b38be789419b4f1e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:05:ee:a3:9e:74:1e:75:50:23:c7:d2:46:
36:7a:4d:1c:66:d0:35:33:8f:fe:bb:3a:13:60:3e:
5c:28:03:26:4f:68:06:98:b3:d4:49:bf:f3:6b:be:
99:2e:59:86:e7:d4:4c:9b:d7:03:55:b9:21:ac:ce:
d7:aa:e6:13:ac:14:ca:4d:b0:c5:ac:0e:41:b2:8b:
d2:01:8c:65:02:86:fa:20:37:a4:f3:81:92:20:65:
ba:cd:c2:28:d2:76:e3:52:7f:d2:52:b0:b8:8c:11:
f5:45:42:8b:e4:6c:57:1c:10:d8:47:b8:c0:c2:80:
37:58:30:bd:4c:ae:8a:2f:9c:3a:09:ee:6a:a0:9d:
2e:3b:15:82:fa:52:92:7f:5d:54:01:af:9c:50:f6:
da:86:6a:42:14:a7:69:7c:c8:fc:44:1d:3c:94:ed:
49:b2:bc:8f:d2:78:4a:40:68:fa:7a:a3:d4:55:6b:
38:aa:ec:42:27:e0:5e:04:94:11:ba:9c:15:6a:4b:
63:a1:1d:36:69:db:1b:36:12:1d:fd:1d:3d:78:6d:
24:8d:ba:6b:c6:d1:9d:d5:c1:60:30:81:04:52:d8:
29:27:cf:56:8a:c6:3f:54:be:87:91:25:cd:45:bd:
e5:4c:98:fb:7f:21:80:bc:a4:18:09:01:3e:cb:d6:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:87:88:D8:C7:F2:F0:49:11:D3:47:B3:8B:E7:89:41:9B:4F:1E:28
X509v3 Authority Key Identifier:
keyid:4C:83:43:ED:C8:43:54:2F:52:9F:BC:3E:65:0C:B6:57:8C:92:06:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIND7chDVC9Sn7w-ZQy2V4ySBsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/7IeI2Mfy8EkR00ezi-eJQZtPHig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8e8218-6fb6-4e69-92e6-e9ce291d218f/1/TIND7chDVC9Sn7w-ZQy2V4ySBsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.196.0/24
Signature Algorithm: sha256WithRSAEncryption
48:cd:28:cc:74:07:80:29:71:d8:6f:4a:43:e1:9e:c4:08:ae:
c9:a8:3e:99:c8:27:36:23:7f:b9:41:ca:de:6a:47:10:65:30:
d0:6b:e6:2c:f8:ba:6b:47:98:bd:47:b8:9f:92:ee:a5:39:c8:
a6:96:a1:a5:eb:a4:fa:8c:5c:28:71:8c:56:5d:c8:5a:7a:0c:
02:56:b7:eb:84:d3:07:b9:51:12:7c:96:c5:01:2c:06:11:5e:
58:23:1c:12:49:b4:6e:e2:1e:e7:37:f5:79:31:0c:39:c1:47:
9e:3e:45:10:5b:57:38:c7:ab:fd:2d:64:58:21:b8:ac:11:3b:
12:25:e8:52:ee:fc:a8:e1:54:bb:40:3c:62:1e:bd:ef:4f:d7:
56:22:18:69:45:70:68:82:f7:9d:1d:83:b6:4d:bd:63:8e:87:
10:67:60:34:4b:15:5c:3f:9a:be:54:49:36:00:d0:99:5f:ce:
c1:bd:7e:1f:56:7a:6e:fa:cd:73:eb:55:b4:90:a5:fa:54:cf:
b7:25:d8:94:91:00:80:6e:7a:95:89:09:be:72:66:67:92:15:
9e:fc:c5:e9:b2:6d:63:ac:0c:f9:f8:d0:dd:a9:f8:99:ac:6a:
ea:76:3d:c8:73:ba:9c:8f:7f:83:66:a8:b0:5d:76:f5:33:25:
28:19:01:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvQpY+ZRK4VsiEukKGWvSQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODM0M2VkYzg0MzU0MmY1MjlmYmMzZTY1MGNiNjU3OGM5
MjA2YzMwHhcNMjMwMTAxMjEzNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzg3ODhkOGM3ZjJmMDQ5MTFkMzQ3YjM4YmU3ODk0MTliNGYxZTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTAF7qOedB51UCPH0kY2ek0cZtA1
M4/+uzoTYD5cKAMmT2gGmLPUSb/za76ZLlmG59RMm9cDVbkhrM7XquYTrBTKTbDF
rA5BsovSAYxlAob6IDek84GSIGW6zcIo0nbjUn/SUrC4jBH1RUKL5GxXHBDYR7jA
woA3WDC9TK6KL5w6Ce5qoJ0uOxWC+lKSf11UAa+cUPbahmpCFKdpfMj8RB08lO1J
sryP0nhKQGj6eqPUVWs4quxCJ+BeBJQRupwVaktjoR02adsbNhId/R09eG0kjbpr
xtGd1cFgMIEEUtgpJ89WisY/VL6HkSXNRb3lTJj7fyGAvKQYCQE+y9ZrxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOyHiNjH8vBJEdNHs4vniUGbTx4oMB8GA1UdIwQY
MBaAFEyDQ+3IQ1QvUp+8PmUMtleMkgbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElORDdjaERWQzlTbjd3LVpReTJWNHlTQnNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC84ZTgyMTgtNmZiNi00ZTY5LTkyZTYt
ZTljZTI5MWQyMThmLzEvN0llSTJNZnk4RWtSMDBlemktZUpRWnRQSGlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC84ZTgyMTgtNmZiNi00ZTY5LTkyZTYtZTljZTI5MWQyMThm
LzEvVElORDdjaERWQzlTbjd3LVpReTJWNHlTQnNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWjEMA0G
CSqGSIb3DQEBCwUAA4IBAQBIzSjMdAeAKXHYb0pD4Z7ECK7JqD6ZyCc2I3+5Qcre
akcQZTDQa+Ys+LprR5i9R7ifku6lOcimlqGl66T6jFwocYxWXchaegwCVrfrhNMH
uVESfJbFASwGEV5YIxwSSbRu4h7nN/V5MQw5wUeePkUQW1c4x6v9LWRYIbisETsS
JehS7vyo4VS7QDxiHr3vT9dWIhhpRXBogvedHYO2Tb1jjocQZ2A0SxVcP5q+VEk2
ANCZX87BvX4fVnpu+s1z61W0kKX6VM+3JdiUkQCAbnqViQm+cmZnkhWe/MXpsm1j
rAz5+NDdqfiZrGrqdj3Ic7qcj3+DZqiwXXb1MyUoGQEj
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:09 2024 by rpki-client on console-ams.rpki-client.org