Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/cwwIufr5n6xFHufmu2IAVFJaDYg.roa
File: cwwIufr5n6xFHufmu2IAVFJaDYg.roa (raw, json)
Hash identifier: XKPqwuELxZHTqhjfqwJYkWVvPhFlLhLEbH3tXnVwq7Q=
Subject key identifier: 73:0C:08:B9:FA:F9:9F:AC:45:1E:E7:E6:BB:62:00:54:52:5A:0D:88
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 0189D07D965769C0E98D693F4CDECBDAFD0E
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/cwwIufr5n6xFHufmu2IAVFJaDYg.roa
Signing time: Mon 07 Aug 2023 14:53:58 +0000
ROA not before: Mon 07 Aug 2023 14:53:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210538
IP address blocks: 193.164.4.0/24 maxlen: 24
193.164.7.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:7d:96:57:69:c0:e9:8d:69:3f:4c:de:cb:da:fd:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Aug 7 14:53:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=730c08b9faf99fac451ee7e6bb620054525a0d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a2:b1:39:b2:be:ba:5b:86:00:86:12:b5:ec:
a2:aa:ee:f3:d6:71:24:27:f9:21:db:f1:a8:21:72:
36:ca:cc:ab:7f:e8:70:60:8b:d2:b1:70:6e:48:a5:
ec:a1:fd:af:5c:f9:6c:24:f7:5f:14:de:cb:8e:b5:
3b:d2:94:5e:9a:83:4b:1d:4a:08:a2:d4:27:af:6a:
60:e1:1e:0d:d1:4a:a9:69:63:96:d1:a5:ca:2f:6c:
6f:78:a9:39:96:3a:1b:33:00:06:21:8a:ec:24:b5:
52:70:30:72:ab:5a:f5:af:59:78:53:1e:c2:89:1f:
67:97:fb:a1:e2:c2:a8:34:6e:b4:39:63:c1:fd:07:
8c:a5:e2:dc:7b:16:c4:0a:3e:27:e0:1c:82:f8:07:
05:4d:44:e8:04:a6:59:da:21:66:6b:55:9e:8f:03:
49:f4:9c:b7:73:ca:99:36:e7:ab:05:7b:42:62:31:
93:d2:e0:29:de:4b:61:36:b2:6d:6f:e4:34:a3:7a:
cf:22:39:a5:2f:0d:5f:cb:66:2d:1d:bc:fe:f9:ab:
ff:09:f5:45:8c:64:10:92:4d:45:0d:23:2b:59:a8:
d9:14:e6:89:7b:e8:cc:18:26:b8:6c:97:0d:27:bf:
5e:6d:f5:7f:5a:fe:ce:33:5f:1a:f0:73:d2:3a:8d:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0C:08:B9:FA:F9:9F:AC:45:1E:E7:E6:BB:62:00:54:52:5A:0D:88
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/cwwIufr5n6xFHufmu2IAVFJaDYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.102.0/24
193.164.4.0/24
193.164.6.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:d6:ff:7b:a6:68:9f:de:ae:96:d0:29:b5:b9:15:0d:45:c6:
85:d1:3c:66:19:3f:80:7f:eb:17:6d:72:87:cd:4d:11:66:02:
6f:44:3e:d0:2b:93:36:1f:71:a7:16:4a:cb:e6:59:7d:cc:ae:
fd:d3:9a:44:dd:7b:aa:10:8b:83:01:d9:8c:b1:bd:b0:23:86:
3c:6c:b4:17:de:64:3c:e9:b1:7b:4c:29:7f:4a:18:7b:ad:6a:
c7:10:59:4c:c9:85:e1:d1:fe:2b:5f:96:0b:6c:fe:65:27:f3:
45:a8:20:3b:8a:cc:f7:63:d1:48:05:fc:71:a5:31:e2:74:40:
9c:a1:70:33:df:b3:78:27:c3:a6:18:82:f6:06:db:69:3a:e7:
44:3c:e1:03:23:25:93:98:b6:16:b8:ee:ac:6d:19:06:44:83:
ab:18:b1:8f:35:2e:3c:fd:44:82:0e:d9:05:09:e7:45:d3:6a:
7a:e7:21:52:20:59:a2:87:06:34:3e:f0:fc:bf:b1:63:13:c4:
eb:31:1e:56:f7:4f:1e:f3:51:06:ab:69:68:0c:ae:28:fb:70:
3d:7d:37:8c:15:1f:59:ec:59:0b:c6:70:37:5b:04:04:fc:82:
13:45:d1:71:f8:4b:68:5f:0b:7f:2e:df:c4:5f:30:2b:35:f3:
50:d1:42:8c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYnQfZZXacDpjWk/TN7L2v0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYjVhODBhNzEwNmUwYTRiODU0NWM4MTUwYmI3MmM2OTlm
Y2M5YTAwHhcNMjMwODA3MTQ1MzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzBjMDhiOWZhZjk5ZmFjNDUxZWU3ZTZiYjYyMDA1NDUyNWEwZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaKxObK+uluGAIYSteyiqu7z1nEk
J/kh2/GoIXI2ysyrf+hwYIvSsXBuSKXsof2vXPlsJPdfFN7LjrU70pRemoNLHUoI
otQnr2pg4R4N0UqpaWOW0aXKL2xveKk5ljobMwAGIYrsJLVScDByq1r1r1l4Ux7C
iR9nl/uh4sKoNG60OWPB/QeMpeLcexbECj4n4ByC+AcFTUToBKZZ2iFma1WejwNJ
9Jy3c8qZNuerBXtCYjGT0uAp3kthNrJtb+Q0o3rPIjmlLw1fy2YtHbz++av/CfVF
jGQQkk1FDSMrWajZFOaJe+jMGCa4bJcNJ79ebfV/Wv7OM18a8HPSOo0jBwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHMMCLn6+Z+sRR7n5rtiAFRSWg2IMB8GA1UdIwQY
MBaAFLC1qApxBuCkuFRcgVC7csaZ/MmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDIt
NzQ1ZTA4ZmU1OGM2LzEvY3d3SXVmcjVuNnhGSHVmbXUySUFWRkphRFlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mMTUzZGMtY2JmYi00YTRmLTgwZDItNzQ1ZTA4ZmU1OGM2
LzEvc0xXb0NuRUc0S1M0VkZ5QlVMdHl4cG44eWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXbFmAwQA
waQEAwQBwaQGMA0GCSqGSIb3DQEBCwUAA4IBAQA+1v97pmif3q6W0Cm1uRUNRcaF
0TxmGT+Af+sXbXKHzU0RZgJvRD7QK5M2H3GnFkrL5ll9zK7905pE3XuqEIuDAdmM
sb2wI4Y8bLQX3mQ86bF7TCl/Shh7rWrHEFlMyYXh0f4rX5YLbP5lJ/NFqCA7isz3
Y9FIBfxxpTHidECcoXAz37N4J8OmGIL2BttpOudEPOEDIyWTmLYWuO6sbRkGRIOr
GLGPNS48/USCDtkFCedF02p65yFSIFmihwY0PvD8v7FjE8TrMR5W908e81EGq2lo
DK4o+3A9fTeMFR9Z7FkLxnA3WwQE/IITRdFx+EtoXwt/Lt/EXzArNfNQ0UKM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-fra.rpki-client.org