Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/U39jNF4-UYrOai7XeoS113SnGcM.roa
File: U39jNF4-UYrOai7XeoS113SnGcM.roa (raw, json)
Hash identifier: XgCQruB/ttbNnf9k015V0YGcfhTFA06JPL4lyCHWtO4=
Subject key identifier: 53:7F:63:34:5E:3E:51:8A:CE:6A:2E:D7:7A:84:B5:D7:74:A7:19:C3
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0187DBF118B70044C396DEBB293C91365AEE
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/U39jNF4-UYrOai7XeoS113SnGcM.roa
Signing time: Tue 02 May 2023 10:10:23 +0000
ROA not before: Tue 02 May 2023 10:10:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.37.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:f1:18:b7:00:44:c3:96:de:bb:29:3c:91:36:5a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: May 2 10:10:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=537f63345e3e518ace6a2ed77a84b5d774a719c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:0d:e2:b2:62:66:4a:e4:34:ba:a4:5a:72:
0d:f5:4d:c5:2e:f1:41:f3:82:b1:1e:69:1f:39:fd:
75:3f:86:e6:9a:8d:cd:c2:3d:4a:01:5c:70:bb:13:
ed:fc:fb:f6:c4:cf:7c:52:0e:7b:95:cd:21:aa:7a:
8a:a0:b1:09:cc:e0:03:48:c7:af:eb:01:ad:58:1a:
7b:07:fa:e1:b1:7e:ff:f1:6e:6e:27:e1:32:e6:dd:
aa:05:a3:a9:d8:47:f2:d0:6d:bc:9a:e2:8a:00:69:
33:dd:18:94:14:e2:14:ab:30:b4:6b:5c:b5:44:16:
bc:fc:b5:d9:db:ac:5c:a7:26:bd:08:5d:86:ce:22:
30:7d:f9:5c:d7:b6:d9:fa:e6:1e:c1:bb:5c:52:2d:
51:13:f3:32:a7:01:b8:de:d1:f9:76:fb:19:01:29:
ea:c4:0a:71:76:3a:99:27:60:06:67:46:8a:aa:1a:
58:f1:f8:fd:83:00:b1:54:ef:81:3c:ed:4e:b1:fa:
5a:79:4c:4e:9c:0a:3c:6e:91:1b:72:c4:50:98:36:
fa:c7:6b:8d:42:ac:97:c8:65:74:3d:02:2a:a0:f6:
e9:a9:a9:3e:60:f7:3c:a9:83:0f:c7:37:0b:92:cd:
2f:46:7e:46:77:fd:d0:43:58:f1:d3:ad:9c:4d:77:
3e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7F:63:34:5E:3E:51:8A:CE:6A:2E:D7:7A:84:B5:D7:74:A7:19:C3
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/U39jNF4-UYrOai7XeoS113SnGcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.248.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:33:fd:55:a9:c1:bd:03:3e:09:e2:ff:67:3e:bf:9e:eb:c9:
a7:64:b8:a3:bc:d4:4f:2a:d1:83:e3:80:8b:34:b9:b9:84:fc:
a8:56:14:52:80:de:2c:51:e2:e1:62:94:78:83:c4:26:95:7a:
a8:0c:8f:02:52:8f:47:65:33:83:15:dc:84:1a:21:69:db:2d:
85:01:e5:85:e8:76:6f:3d:0d:78:74:f7:6c:88:69:d5:fb:9c:
32:df:a5:14:fb:e3:0e:98:cb:64:7a:ca:03:39:7e:6a:56:5a:
42:f2:7f:59:b0:f7:20:93:33:70:c2:66:98:d8:39:e7:ea:e2:
33:73:c5:47:b2:78:17:dc:95:05:c3:83:56:5e:09:15:c8:a8:
c2:a6:06:70:7d:d6:db:03:be:87:55:10:98:10:f5:71:a2:48:
84:86:e4:09:b0:87:ee:9b:8c:4e:f3:6a:8f:e3:28:21:56:7e:
83:f4:59:6c:73:48:5c:ae:97:c3:ae:fa:a6:06:0c:10:2a:6d:
71:f2:19:a3:83:89:f8:21:a2:b1:eb:07:63:f8:25:5e:25:38:
ae:04:ba:ba:54:1d:86:d3:18:03:61:73:12:d2:69:8a:0f:b4:
60:7b:ce:11:fc:2f:76:82:85:b9:6d:a7:8a:c9:7d:d8:e0:83:
93:99:50:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfb8Ri3AETDlt67KTyRNlruMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwNTAyMTAxMDIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzdmNjMzNDVlM2U1MThhY2U2YTJlZDc3YTg0YjVkNzc0YTcxOWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2MN4rJiZkrkNLqkWnIN9U3FLvFB
84KxHmkfOf11P4bmmo3Nwj1KAVxwuxPt/Pv2xM98Ug57lc0hqnqKoLEJzOADSMev
6wGtWBp7B/rhsX7/8W5uJ+Ey5t2qBaOp2Efy0G28muKKAGkz3RiUFOIUqzC0a1y1
RBa8/LXZ26xcpya9CF2GziIwfflc17bZ+uYewbtcUi1RE/MypwG43tH5dvsZASnq
xApxdjqZJ2AGZ0aKqhpY8fj9gwCxVO+BPO1OsfpaeUxOnAo8bpEbcsRQmDb6x2uN
QqyXyGV0PQIqoPbpqak+YPc8qYMPxzcLks0vRn5Gd/3QQ1jx062cTXc+qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFN/YzRePlGKzmou13qEtdd0pxnDMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvVTM5ak5GNC1VWXJPYWk3WGVvUzExM1NuR2NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSX4MA0G
CSqGSIb3DQEBCwUAA4IBAQBfM/1VqcG9Az4J4v9nPr+e68mnZLijvNRPKtGD44CL
NLm5hPyoVhRSgN4sUeLhYpR4g8QmlXqoDI8CUo9HZTODFdyEGiFp2y2FAeWF6HZv
PQ14dPdsiGnV+5wy36UU++MOmMtkesoDOX5qVlpC8n9ZsPcgkzNwwmaY2Dnn6uIz
c8VHsngX3JUFw4NWXgkVyKjCpgZwfdbbA76HVRCYEPVxokiEhuQJsIfum4xO82qP
4yghVn6D9Flsc0hcrpfDrvqmBgwQKm1x8hmjg4n4IaKx6wdj+CVeJTiuBLq6VB2G
0xgDYXMS0mmKD7Rge84R/C92goW5baeKyX3Y4IOTmVBX
-----END CERTIFICATE-----
Generated at Fri Sep 15 05:54:05 2023 by rpki-client on console-fra.rpki-client.org