Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/vR5DThq8-HhCOXzaBsn9as6Uilg.roa
File: vR5DThq8-HhCOXzaBsn9as6Uilg.roa (raw, json)
Hash identifier: qoCeBn0m4HGOxTdk+RLoNBxWCcLq4OeyHQK2CghTAno=
Subject key identifier: BD:1E:43:4E:1A:BC:F8:78:42:39:7C:DA:06:C9:FD:6A:CE:94:8A:58
Certificate issuer: /CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Certificate serial: 01931CEC52B59BCB38082F1FE8076A163876
Authority key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/vR5DThq8-HhCOXzaBsn9as6Uilg.roa
Signing time: Mon 11 Nov 2024 20:31:09 +0000
ROA not before: Mon 11 Nov 2024 20:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39647
IP address blocks: 193.84.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 07:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1c:ec:52:b5:9b:cb:38:08:2f:1f:e8:07:6a:16:38:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Validity
Not Before: Nov 11 20:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd1e434e1abcf87842397cda06c9fd6ace948a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:fe:0c:45:5c:1f:9d:26:e4:84:2a:81:87:a5:
92:ef:8a:93:28:fe:42:63:64:dd:20:9c:3e:63:7c:
d4:4b:2e:b0:8e:a3:bc:dd:bd:74:3c:e1:f7:80:45:
3e:33:aa:f3:34:d0:03:d6:99:64:29:b3:f5:75:5f:
f1:ae:7f:68:91:40:47:1d:28:f8:51:7e:bc:2e:79:
73:01:cc:14:5a:2d:a3:68:32:ac:7e:bb:5d:de:f3:
7e:58:81:b8:e9:b8:7a:08:95:2c:d8:56:6d:5c:56:
8a:47:2f:71:f6:fb:03:b2:4d:8c:7b:c6:c0:e7:e1:
33:e0:0e:e4:b8:53:76:cb:19:82:fc:3f:72:0c:d1:
09:fd:c9:c2:85:05:6d:da:5c:ca:1f:4b:de:00:d0:
cd:fa:9e:c4:10:c5:80:91:12:0d:9d:e7:50:e3:fd:
51:63:36:d7:3c:45:06:58:f2:6f:53:4b:c7:74:19:
64:05:89:4d:cd:2e:bf:3a:73:08:8b:e9:29:83:d0:
d0:21:0e:a8:72:98:4f:7a:8f:79:44:7a:86:31:82:
e3:34:f0:95:d5:bc:86:bb:fd:07:b5:fe:8c:f4:50:
9f:d4:94:a4:f1:f1:45:59:1c:e7:53:1f:9e:ac:d0:
e5:4a:90:83:e3:c3:c2:57:f4:6c:06:0c:68:8b:54:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1E:43:4E:1A:BC:F8:78:42:39:7C:DA:06:C9:FD:6A:CE:94:8A:58
X509v3 Authority Key Identifier:
keyid:30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/vR5DThq8-HhCOXzaBsn9as6Uilg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:58:1e:a9:87:38:8d:92:29:d5:90:33:75:b0:02:7f:da:6a:
d8:52:23:17:bf:db:aa:aa:24:ba:ec:3d:62:4d:93:ea:66:5c:
b8:6d:9c:7a:7b:45:b6:ab:ae:56:1b:34:50:43:cc:44:1a:3f:
e5:9c:95:36:0a:96:d4:60:42:55:2e:c0:91:1f:8a:1d:0c:99:
8c:54:a7:da:47:da:56:f4:b3:85:d0:e6:af:93:7e:66:90:ec:
c1:17:0d:09:c1:7d:d3:df:a8:11:1f:e0:0e:a6:b1:39:8d:a4:
e6:94:bb:21:f7:fe:02:63:34:ae:5e:20:30:d3:5e:8f:86:15:
f5:e6:48:fb:e2:9a:64:fe:a6:ee:0a:d5:26:fb:12:0b:0d:0f:
ed:fd:33:dd:bc:90:63:50:ae:f9:63:5c:f3:59:3a:6b:75:6c:
e4:4b:58:8f:a7:d2:97:45:64:8f:a0:90:dd:cb:b8:02:ff:32:
79:3d:e5:ab:ac:bc:21:3f:75:89:15:21:2f:bb:9b:2f:a8:cc:
be:dc:26:50:38:01:6a:f5:85:d9:2b:75:57:41:44:26:7a:08:
c6:f8:d6:94:8a:a1:6c:9e:35:53:c7:61:4c:10:ae:6c:58:db:
d0:e9:99:43:a2:03:a7:3c:1c:9a:12:de:ba:64:be:30:f1:25:
72:ae:e4:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMc7FK1m8s4CC8f6AdqFjh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwZDVlMjAyMmVhODJlYzc3ZjkyZGRkYjc3NjYxOGNkNmMw
NTc1NzUwHhcNMjQxMTExMjAzMTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDFlNDM0ZTFhYmNmODc4NDIzOTdjZGEwNmM5ZmQ2YWNlOTQ4YTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+v4MRVwfnSbkhCqBh6WS74qTKP5C
Y2TdIJw+Y3zUSy6wjqO83b10POH3gEU+M6rzNNAD1plkKbP1dV/xrn9okUBHHSj4
UX68LnlzAcwUWi2jaDKsfrtd3vN+WIG46bh6CJUs2FZtXFaKRy9x9vsDsk2Me8bA
5+Ez4A7kuFN2yxmC/D9yDNEJ/cnChQVt2lzKH0veANDN+p7EEMWAkRINnedQ4/1R
YzbXPEUGWPJvU0vHdBlkBYlNzS6/OnMIi+kpg9DQIQ6ocphPeo95RHqGMYLjNPCV
1byGu/0Htf6M9FCf1JSk8fFFWRznUx+erNDlSpCD48PCV/RsBgxoi1RT8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL0eQ04avPh4Qjl82gbJ/WrOlIpYMB8GA1UdIwQY
MBaAFDDV4gIuqC7Hf5Ld23dmGM1sBXV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU5YaUFpNm9Mc2Rfa3QzYmQyWVl6V3dGZFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mN2NhNGEtY2E3My00N2Y4LTlmZDct
OWIyZjUxYjgwYTk4LzEvdlI1RFRocTgtSGhDT1h6YUJzbjlhczZVaWxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mN2NhNGEtY2E3My00N2Y4LTlmZDctOWIyZjUxYjgwYTk4
LzEvTU5YaUFpNm9Mc2Rfa3QzYmQyWVl6V3dGZFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwVT3MA0G
CSqGSIb3DQEBCwUAA4IBAQBOWB6phziNkinVkDN1sAJ/2mrYUiMXv9uqqiS67D1i
TZPqZly4bZx6e0W2q65WGzRQQ8xEGj/lnJU2CpbUYEJVLsCRH4odDJmMVKfaR9pW
9LOF0Oavk35mkOzBFw0JwX3T36gRH+AOprE5jaTmlLsh9/4CYzSuXiAw016PhhX1
5kj74ppk/qbuCtUm+xILDQ/t/TPdvJBjUK75Y1zzWTprdWzkS1iPp9KXRWSPoJDd
y7gC/zJ5PeWrrLwhP3WJFSEvu5svqMy+3CZQOAFq9YXZK3VXQUQmegjG+NaUiqFs
njVTx2FMEK5sWNvQ6ZlDogOnPByaEt66ZL4w8SVyruRk
-----END CERTIFICATE-----
Generated at Mon Nov 18 11:03:26 2024 by rpki-client on console-ams.rpki-client.org