Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/eJDTRcTtPirCPLzkxKEA4rNkIRc.roa
File: eJDTRcTtPirCPLzkxKEA4rNkIRc.roa (raw, json)
Hash identifier: RdarcRs/ydujNKHs7HskCzbBLmaORKY+WyPBH2KJ8/s=
Subject key identifier: 78:90:D3:45:C4:ED:3E:2A:C2:3C:BC:E4:C4:A1:00:E2:B3:64:21:17
Certificate issuer: /CN=6af9c540b146bb44c8219d01375c10124920ae9f
Certificate serial: 01856BB7CE1FF9BB6B2487E3B0FE9CC8ECDB
Authority key identifier: 6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/eJDTRcTtPirCPLzkxKEA4rNkIRc.roa
Signing time: Sun 01 Jan 2023 05:04:46 +0000
ROA not before: Sun 01 Jan 2023 05:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3215
IP address blocks: 193.37.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b7:ce:1f:f9:bb:6b:24:87:e3:b0:fe:9c:c8:ec:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6af9c540b146bb44c8219d01375c10124920ae9f
Validity
Not Before: Jan 1 05:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7890d345c4ed3e2ac23cbce4c4a100e2b3642117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f5:f8:b9:9e:39:ce:1d:97:2f:21:cb:a4:d4:
e5:06:d8:7c:da:53:71:a2:59:b2:ac:37:9e:4d:9f:
46:6c:8a:16:6a:67:cb:67:99:34:42:e3:bc:59:73:
49:86:16:d4:03:43:66:0f:b5:dc:12:c5:98:1e:39:
a5:07:e7:fa:f4:f6:b0:fa:5e:f5:02:0e:4c:79:55:
1c:5e:c5:3a:4c:84:6f:6e:5c:05:95:b7:79:7e:fb:
36:32:79:64:b2:71:5f:5a:02:9e:30:82:fa:59:1a:
c3:5f:f7:83:03:01:51:bb:b0:97:fe:82:35:8b:9c:
4e:9e:c4:ea:7e:73:90:49:51:a2:c7:42:b1:dd:95:
cf:2f:50:4a:e8:df:e7:e7:fb:d5:18:9f:54:82:62:
e8:67:1d:69:18:c1:4e:41:21:d4:9f:2e:d0:6d:37:
62:ad:d4:1f:9a:3e:90:d6:03:35:71:5b:59:df:db:
a5:2a:89:0a:bf:f1:e7:20:0b:bb:fe:ee:56:55:4d:
ac:5c:be:41:6e:b9:e3:69:16:32:f3:62:4b:35:52:
b7:f4:01:37:7b:b6:6b:b3:27:e1:2b:47:01:99:9f:
e3:41:de:73:34:34:48:78:d0:b1:80:86:4e:0e:5d:
54:2d:05:ef:d0:89:51:a3:38:38:92:83:3e:08:38:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:90:D3:45:C4:ED:3E:2A:C2:3C:BC:E4:C4:A1:00:E2:B3:64:21:17
X509v3 Authority Key Identifier:
keyid:6A:F9:C5:40:B1:46:BB:44:C8:21:9D:01:37:5C:10:12:49:20:AE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avnFQLFGu0TIIZ0BN1wQEkkgrp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/eJDTRcTtPirCPLzkxKEA4rNkIRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/379529-f469-4363-8b87-421a99bdd78f/1/avnFQLFGu0TIIZ0BN1wQEkkgrp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.250.0/24
Signature Algorithm: sha256WithRSAEncryption
05:36:34:b4:8d:c2:87:26:8f:b3:2b:82:30:4a:81:a5:9e:a5:
55:b5:7d:50:cf:44:04:19:84:83:f7:94:bf:7b:ae:b9:7c:48:
af:c2:c7:03:d5:84:f4:11:a8:ed:04:07:1b:9b:74:f5:6e:df:
31:cf:50:cc:dc:56:7c:65:11:0d:d8:49:bc:f2:67:0a:83:28:
f9:7e:b0:46:15:7a:36:38:bb:c6:97:96:14:c6:00:d4:90:b5:
78:18:7c:6d:ab:95:3c:04:f2:ba:34:80:73:16:0f:2e:a8:7f:
9f:7a:64:9f:80:58:b1:49:20:ac:e2:bd:2c:1f:30:f4:20:18:
f8:27:95:b0:11:90:cb:5d:e8:cf:c3:e1:f4:57:d2:bd:4d:14:
65:77:e5:f0:c7:51:b8:7d:4d:96:4e:e7:6d:7a:e4:87:b8:6f:
79:a6:de:50:2b:92:ba:1c:f2:eb:63:d4:7a:86:20:84:ca:bc:
c6:a5:78:9a:a4:15:cf:22:ef:60:4c:7d:85:4b:b0:fa:f6:a3:
4e:75:48:49:5d:49:5e:01:7a:46:53:93:0b:62:75:c8:96:9d:
49:bf:4a:0f:f6:11:ea:67:71:81:17:e6:be:19:5c:85:60:52:
71:80:3e:39:3f:53:51:b5:21:0d:76:03:e5:74:3c:ea:66:f4:
ec:27:80:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrt84f+btrJIfjsP6cyOzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZjljNTQwYjE0NmJiNDRjODIxOWQwMTM3NWMxMDEyNDky
MGFlOWYwHhcNMjMwMTAxMDUwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODkwZDM0NWM0ZWQzZTJhYzIzY2JjZTRjNGExMDBlMmIzNjQyMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvX4uZ45zh2XLyHLpNTlBth82lNx
olmyrDeeTZ9GbIoWamfLZ5k0QuO8WXNJhhbUA0NmD7XcEsWYHjmlB+f69Paw+l71
Ag5MeVUcXsU6TIRvblwFlbd5fvs2MnlksnFfWgKeMIL6WRrDX/eDAwFRu7CX/oI1
i5xOnsTqfnOQSVGix0Kx3ZXPL1BK6N/n5/vVGJ9UgmLoZx1pGMFOQSHUny7QbTdi
rdQfmj6Q1gM1cVtZ39ulKokKv/HnIAu7/u5WVU2sXL5BbrnjaRYy82JLNVK39AE3
e7ZrsyfhK0cBmZ/jQd5zNDRIeNCxgIZODl1ULQXv0IlRozg4koM+CDgbrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHiQ00XE7T4qwjy85MShAOKzZCEXMB8GA1UdIwQY
MBaAFGr5xUCxRrtEyCGdATdcEBJJIK6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zNzk1MjktZjQ2OS00MzYzLThiODct
NDIxYTk5YmRkNzhmLzEvZUpEVFJjVHRQaXJDUEx6a3hLRUE0ck5rSVJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zNzk1MjktZjQ2OS00MzYzLThiODctNDIxYTk5YmRkNzhm
LzEvYXZuRlFMRkd1MFRJSVowQk4xd1FFa2tncnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSX6MA0G
CSqGSIb3DQEBCwUAA4IBAQAFNjS0jcKHJo+zK4IwSoGlnqVVtX1Qz0QEGYSD95S/
e665fEivwscD1YT0EajtBAcbm3T1bt8xz1DM3FZ8ZREN2Em88mcKgyj5frBGFXo2
OLvGl5YUxgDUkLV4GHxtq5U8BPK6NIBzFg8uqH+femSfgFixSSCs4r0sHzD0IBj4
J5WwEZDLXejPw+H0V9K9TRRld+Xwx1G4fU2WTudteuSHuG95pt5QK5K6HPLrY9R6
hiCEyrzGpXiapBXPIu9gTH2FS7D69qNOdUhJXUleAXpGU5MLYnXIlp1Jv0oP9hHq
Z3GBF+a+GVyFYFJxgD45P1NRtSENdgPldDzqZvTsJ4Dc
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:37 2024 by rpki-client on console-ams.rpki-client.org