Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/_AFzRtzHrPWGXSatoWio0raSo-k.roa
File: _AFzRtzHrPWGXSatoWio0raSo-k.roa (raw, json)
Hash identifier: CtmikqkDtRxhK1MfY2s2DIXfb3csvPD9YQurS+SLJ7Y=
Subject key identifier: FC:01:73:46:DC:C7:AC:F5:86:5D:26:AD:A1:68:A8:D2:B6:92:A3:E9
Certificate issuer: /CN=854bb7aa3908c998de3c42f7e1849538b0592617
Certificate serial: 018572559D20BDD56FB39C6821AD67A32251
Authority key identifier: 85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/_AFzRtzHrPWGXSatoWio0raSo-k.roa
Signing time: Mon 02 Jan 2023 11:54:51 +0000
ROA not before: Mon 02 Jan 2023 11:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39522
IP address blocks: 193.36.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:9d:20:bd:d5:6f:b3:9c:68:21:ad:67:a3:22:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854bb7aa3908c998de3c42f7e1849538b0592617
Validity
Not Before: Jan 2 11:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc017346dcc7acf5865d26ada168a8d2b692a3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ce:d6:8a:f3:9c:eb:26:24:a2:fb:b4:76:4f:
65:33:0a:c0:ea:93:e8:b2:83:10:01:29:75:3b:09:
82:5c:0a:ca:3d:29:b7:89:13:0f:7e:ae:e7:08:3e:
89:0f:ff:3a:23:ed:70:5f:85:f5:25:1e:bc:15:b3:
91:d3:c7:14:77:f3:32:c9:1e:20:4e:ca:4a:ab:a6:
d8:87:f6:1e:9c:00:74:88:f9:f9:88:64:e1:ba:f4:
4d:59:fc:e6:7b:e3:d7:9e:2d:f2:71:92:99:b7:ed:
1b:47:d2:44:f2:e4:6d:b0:9c:7a:81:29:a7:ec:50:
d5:11:95:6c:4e:95:5e:e5:c7:b3:42:93:f4:ea:62:
9d:3b:ef:c0:57:7a:49:85:3d:22:f1:e0:1a:d6:c6:
9a:2d:74:39:47:c2:89:13:42:c7:17:70:db:7b:f0:
d5:61:92:31:25:9d:95:7b:09:0e:86:7a:6f:8b:e1:
eb:04:2c:41:c4:17:c7:58:2a:2d:e9:5b:03:18:96:
b8:11:9d:d9:2f:85:65:c2:13:c6:b6:c9:be:8f:78:
aa:d3:39:03:9a:b4:47:a7:1c:ed:e2:be:2f:ea:5e:
cb:be:eb:8e:c4:27:83:88:87:35:73:59:a1:32:c6:
ad:22:9d:5a:51:7b:96:b4:f4:98:2b:08:06:22:fd:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:01:73:46:DC:C7:AC:F5:86:5D:26:AD:A1:68:A8:D2:B6:92:A3:E9
X509v3 Authority Key Identifier:
keyid:85:4B:B7:AA:39:08:C9:98:DE:3C:42:F7:E1:84:95:38:B0:59:26:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUu3qjkIyZjePEL34YSVOLBZJhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/_AFzRtzHrPWGXSatoWio0raSo-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/965826-eb93-470e-b67a-64e52b9dd8d1/1/hUu3qjkIyZjePEL34YSVOLBZJhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.33.0/24
Signature Algorithm: sha256WithRSAEncryption
22:a2:70:48:1d:9f:8f:3f:62:98:cc:55:59:bf:96:5a:24:7c:
3a:f3:de:09:1e:47:3e:9f:e9:38:d5:24:65:13:d6:21:dd:0d:
a2:88:64:91:2c:f4:3d:80:28:4f:ee:ab:a2:eb:2d:e3:ed:88:
31:2d:5a:d3:94:01:c2:37:9f:fe:49:44:10:f1:ca:0c:3f:8b:
43:65:1b:d6:f8:a1:cf:3e:9a:97:40:df:b5:6a:d5:d2:bf:db:
6e:0d:f2:16:fd:2a:da:a9:1a:a8:96:7d:a8:8f:1d:e7:3a:2e:
02:c9:48:29:e2:68:ec:83:b0:a2:2e:1a:79:92:76:49:17:ff:
a1:98:1f:3b:9e:5f:ce:8b:09:e7:3f:15:b5:de:de:30:8c:15:
a2:2e:d3:ad:13:d1:f9:63:a2:3f:60:6c:18:24:32:71:4f:77:
f6:e2:84:aa:23:63:cb:7a:3b:93:00:dc:f3:22:10:90:57:43:
d1:01:7a:d7:2a:66:68:60:5d:8a:03:12:78:14:99:2f:c0:db:
f4:a4:63:f5:7e:f8:75:05:b9:47:9b:90:eb:e9:16:55:d0:8f:
b1:b0:03:f6:c9:c8:e7:28:96:8d:02:9c:cc:dc:2a:86:82:bd:
66:36:41:c3:7d:51:51:c8:ad:90:93:5f:1c:78:99:df:83:0a:
01:66:ed:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyVZ0gvdVvs5xoIa1noyJRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NGJiN2FhMzkwOGM5OThkZTNjNDJmN2UxODQ5NTM4YjA1
OTI2MTcwHhcNMjMwMTAyMTE1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzAxNzM0NmRjYzdhY2Y1ODY1ZDI2YWRhMTY4YThkMmI2OTJhM2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc7WivOc6yYkovu0dk9lMwrA6pPo
soMQASl1OwmCXArKPSm3iRMPfq7nCD6JD/86I+1wX4X1JR68FbOR08cUd/MyyR4g
TspKq6bYh/YenAB0iPn5iGThuvRNWfzme+PXni3ycZKZt+0bR9JE8uRtsJx6gSmn
7FDVEZVsTpVe5cezQpP06mKdO+/AV3pJhT0i8eAa1saaLXQ5R8KJE0LHF3Dbe/DV
YZIxJZ2VewkOhnpvi+HrBCxBxBfHWCot6VsDGJa4EZ3ZL4VlwhPGtsm+j3iq0zkD
mrRHpxzt4r4v6l7LvuuOxCeDiIc1c1mhMsatIp1aUXuWtPSYKwgGIv0B2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPwBc0bcx6z1hl0mraFoqNK2kqPpMB8GA1UdIwQY
MBaAFIVLt6o5CMmY3jxC9+GElTiwWSYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2Et
NjRlNTJiOWRkOGQxLzEvX0FGelJ0ekhyUFdHWFNhdG9XaW8wcmFTby1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NjU4MjYtZWI5My00NzBlLWI2N2EtNjRlNTJiOWRkOGQx
LzEvaFV1M3Fqa0l5WmplUEVMMzRZU1ZPTEJaSmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSQhMA0G
CSqGSIb3DQEBCwUAA4IBAQAionBIHZ+PP2KYzFVZv5ZaJHw6894JHkc+n+k41SRl
E9Yh3Q2iiGSRLPQ9gChP7qui6y3j7YgxLVrTlAHCN5/+SUQQ8coMP4tDZRvW+KHP
PpqXQN+1atXSv9tuDfIW/SraqRqoln2ojx3nOi4CyUgp4mjsg7CiLhp5knZJF/+h
mB87nl/OiwnnPxW13t4wjBWiLtOtE9H5Y6I/YGwYJDJxT3f24oSqI2PLejuTANzz
IhCQV0PRAXrXKmZoYF2KAxJ4FJkvwNv0pGP1fvh1BblHm5Dr6RZV0I+xsAP2ycjn
KJaNApzM3CqGgr1mNkHDfVFRyK2Qk18ceJnfgwoBZu2y
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:05 2024 by rpki-client on console-fra.rpki-client.org