Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/Uj4TWauTUnH0n3ZQL_CdiU2su_w.roa
File: Uj4TWauTUnH0n3ZQL_CdiU2su_w.roa (raw, json)
Hash identifier: Em18/26Bn4HeksZhegTV/8T4QD/tOSUBYJ3/pUOB4pw=
Subject key identifier: 52:3E:13:59:AB:93:52:71:F4:9F:76:50:2F:F0:9D:89:4D:AC:BB:FC
Certificate issuer: /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial: 01856C53D9689088ED57B1DCEF5AD57343F5
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/Uj4TWauTUnH0n3ZQL_CdiU2su_w.roa
Signing time: Sun 01 Jan 2023 07:55:12 +0000
ROA not before: Sun 01 Jan 2023 07:55:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205399
IP address blocks: 193.106.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d9:68:90:88:ed:57:b1:dc:ef:5a:d5:73:43:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Validity
Not Before: Jan 1 07:55:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=523e1359ab935271f49f76502ff09d894dacbbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:29:d5:02:f0:72:ad:1c:59:a3:0d:64:8f:e5:
e3:5a:13:a3:96:aa:e6:18:6f:86:50:7e:5a:a9:e2:
07:35:76:70:b3:59:d5:ba:af:25:a3:7d:27:b3:2e:
d7:3b:80:95:09:5a:b7:de:5f:dc:2c:bf:ad:e8:2f:
b8:63:92:11:4a:1b:f5:2e:31:e6:d0:57:f0:b1:26:
f8:34:9f:e1:00:15:80:6f:2c:8c:72:4a:cc:52:15:
1c:43:c6:58:d3:cf:db:42:77:11:39:b0:ea:7b:7d:
06:13:3b:6b:0e:a0:5d:1c:76:28:c9:bb:07:10:ba:
f2:a0:f8:0b:a7:c3:cd:af:df:48:2b:23:72:8f:c6:
9d:dc:64:0a:f0:72:b5:65:4c:52:c3:0a:d7:ec:0d:
8d:4c:42:7c:1e:3e:0e:4f:5b:ac:ac:87:6b:4b:e6:
59:26:57:e4:86:7e:6a:38:73:27:9c:ac:32:a9:41:
4d:bd:e5:4f:92:bf:bb:ff:d5:4d:fc:46:07:3e:01:
23:27:7a:11:64:e8:34:79:1c:df:f8:ec:ac:a9:58:
e0:a2:e7:85:77:5f:30:77:6a:cc:71:7f:b4:fa:f6:
28:86:c0:ea:60:4f:34:ad:d7:45:d2:46:7e:bb:e5:
05:8f:71:36:00:d2:4a:53:ab:29:3c:fe:b7:79:c6:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3E:13:59:AB:93:52:71:F4:9F:76:50:2F:F0:9D:89:4D:AC:BB:FC
X509v3 Authority Key Identifier:
keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/Uj4TWauTUnH0n3ZQL_CdiU2su_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.188.0/24
Signature Algorithm: sha256WithRSAEncryption
37:55:91:a5:a2:e6:55:3c:d3:06:ca:80:5f:52:ec:8d:60:3f:
ce:ed:32:09:1c:a7:d3:50:dc:78:77:ce:69:41:6b:81:f5:ce:
3d:43:8a:39:a4:a6:5b:00:06:7c:4e:b2:1a:6e:6d:41:0f:e3:
76:37:6b:f7:7b:95:fb:19:f6:76:5d:3c:86:61:04:86:83:6e:
2d:77:fa:ef:5e:03:5c:c7:83:af:7f:21:1b:ec:72:10:e4:c7:
c2:04:7a:40:ff:c5:fa:d7:b8:a8:e5:ba:21:63:c8:db:6b:8e:
4b:64:39:aa:32:8d:7d:5d:3d:e6:ca:41:71:99:fc:03:81:8e:
80:e5:00:d6:10:96:2e:60:a2:08:a8:33:27:62:db:2d:ae:8a:
05:7e:46:18:09:9e:a9:9e:4b:4b:a8:d2:96:ca:8b:cd:1c:8c:
83:44:9e:78:a7:fd:a4:fe:89:8a:c6:04:dd:7a:61:b3:e0:ac:
25:d2:2d:50:e2:7c:9c:81:eb:c6:00:c7:85:55:0d:dd:d8:d9:
42:3d:63:c2:3b:9e:6a:53:ad:3a:bb:b0:ae:ea:0d:c8:83:24:
bd:81:7e:4c:7b:f3:52:12:b8:df:5a:aa:b4:f1:47:69:5a:f9:
5d:7f:9d:c6:ad:fb:3b:85:ac:90:78:0c:8e:23:1e:7f:ad:87:
ec:40:b4:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU9lokIjtV7Hc71rVc0P1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGUxYjkwZDUxMmNjMzQwMmY3NjE0MTQwNjI5Nzk1ZTRk
NGFjNGMwHhcNMjMwMTAxMDc1NTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjNlMTM1OWFiOTM1MjcxZjQ5Zjc2NTAyZmYwOWQ4OTRkYWNiYmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SnVAvByrRxZow1kj+XjWhOjlqrm
GG+GUH5aqeIHNXZws1nVuq8lo30nsy7XO4CVCVq33l/cLL+t6C+4Y5IRShv1LjHm
0FfwsSb4NJ/hABWAbyyMckrMUhUcQ8ZY08/bQncRObDqe30GEztrDqBdHHYoybsH
ELryoPgLp8PNr99IKyNyj8ad3GQK8HK1ZUxSwwrX7A2NTEJ8Hj4OT1usrIdrS+ZZ
Jlfkhn5qOHMnnKwyqUFNveVPkr+7/9VN/EYHPgEjJ3oRZOg0eRzf+OysqVjgoueF
d18wd2rMcX+0+vYohsDqYE80rddF0kZ+u+UFj3E2ANJKU6spPP63ecan/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFI+E1mrk1Jx9J92UC/wnYlNrLv8MB8GA1UdIwQY
MBaAFNwOG5DVEsw0AvdhQUBil5Xk1KxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYt
MTZmNTJjZWE0ZWIxLzEvVWo0VFdhdVRVbkgwbjNaUUxfQ2RpVTJzdV93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85YTIzMTQtMjMxMC00M2RkLWE3NjYtMTZmNTJjZWE0ZWIx
LzEvM0E0YmtOVVN6RFFDOTJGQlFHS1hsZVRVckV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWq8MA0G
CSqGSIb3DQEBCwUAA4IBAQA3VZGlouZVPNMGyoBfUuyNYD/O7TIJHKfTUNx4d85p
QWuB9c49Q4o5pKZbAAZ8TrIabm1BD+N2N2v3e5X7GfZ2XTyGYQSGg24td/rvXgNc
x4OvfyEb7HIQ5MfCBHpA/8X617io5bohY8jba45LZDmqMo19XT3mykFxmfwDgY6A
5QDWEJYuYKIIqDMnYtstrooFfkYYCZ6pnktLqNKWyovNHIyDRJ54p/2k/omKxgTd
emGz4Kwl0i1Q4nycgevGAMeFVQ3d2NlCPWPCO55qU606u7Cu6g3IgyS9gX5Me/NS
ErjfWqq08UdpWvldf53Grfs7hayQeAyOIx5/rYfsQLSG
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:11 2024 by rpki-client on console-fra.rpki-client.org