Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/tjr5t29uaJXSHmFc1SJsTrXopWo.roa
File: tjr5t29uaJXSHmFc1SJsTrXopWo.roa (raw, json)
Hash identifier: Pmc5SPmBP/GC1Fr4IhWh6eMeNhpMT7kRdz96Lz+nkh0=
Subject key identifier: B6:3A:F9:B7:6F:6E:68:95:D2:1E:61:5C:D5:22:6C:4E:B5:E8:A5:6A
Certificate issuer: /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial: 018800C8A51A3755EE2B432774862FB5BF9B
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/tjr5t29uaJXSHmFc1SJsTrXopWo.roa
Signing time: Tue 09 May 2023 13:52:09 +0000
ROA not before: Tue 09 May 2023 13:52:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.178.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:00:c8:a5:1a:37:55:ee:2b:43:27:74:86:2f:b5:bf:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Validity
Not Before: May 9 13:52:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b63af9b76f6e6895d21e615cd5226c4eb5e8a56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:5c:56:4d:2b:03:34:86:eb:48:51:2b:bf:
ce:51:e7:c6:cd:b9:ca:b0:76:9b:84:2a:9a:36:5e:
f5:78:bf:f2:5f:55:eb:3b:2d:ef:60:d6:9e:2a:d2:
0c:a4:83:ce:7f:26:58:c1:cb:41:f9:bf:a1:12:2f:
07:46:80:4b:65:5c:28:37:14:2e:15:80:39:c4:aa:
10:64:0e:c6:98:3d:cb:f9:44:32:11:c1:54:c3:49:
34:9e:8c:c3:33:af:e2:91:7e:0e:0d:3d:fd:ea:ff:
04:2a:2a:91:de:fb:fd:82:dc:dd:42:19:49:0c:27:
31:31:db:3e:a1:31:10:d9:6d:30:dc:fa:dc:53:32:
d1:d8:bc:98:c9:9d:bd:22:70:9b:74:bb:7b:38:a4:
23:3e:be:c5:31:37:a2:87:5b:4b:d6:1d:a3:5a:0f:
8b:05:25:fa:5c:75:89:78:b3:39:56:a0:ea:fe:06:
a7:70:0c:d7:14:ca:22:15:f4:e7:ea:44:76:8f:09:
8e:b4:df:9f:6f:b3:55:ec:a0:dc:56:bf:1b:27:c3:
a9:2f:26:51:26:e5:e3:2a:c6:c9:6b:4b:08:c0:11:
86:d2:80:bd:90:8e:89:0f:83:16:dc:17:d8:2d:65:
81:00:9e:2f:ac:e9:9f:f3:63:a3:09:2e:32:3b:79:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3A:F9:B7:6F:6E:68:95:D2:1E:61:5C:D5:22:6C:4E:B5:E8:A5:6A
X509v3 Authority Key Identifier:
keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/tjr5t29uaJXSHmFc1SJsTrXopWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:19:71:f5:d4:61:cc:ac:9e:b5:b7:91:c5:99:f0:0e:a6:ce:
e1:f3:88:b6:5c:f1:56:6c:23:d0:55:67:8b:59:77:0b:16:ba:
b5:6d:79:50:b0:a8:0e:98:c5:eb:80:7f:e4:f3:17:59:f3:81:
04:36:36:b1:7f:d1:89:07:49:3d:de:2d:e6:63:28:84:16:e9:
0f:a1:fe:55:7a:c2:f2:39:49:49:43:90:5c:6d:29:2f:e9:62:
8f:80:aa:ef:23:dc:e9:99:8b:bc:b9:c7:a7:0d:60:26:da:96:
b4:51:9e:27:5a:cd:2f:d7:6f:73:19:df:21:cc:c0:48:45:81:
c4:00:b7:2e:49:3f:1b:27:77:e7:bb:2d:c1:a9:80:5e:ed:29:
41:34:da:7d:15:55:dc:20:20:98:83:15:5a:b6:73:3a:cd:a4:
9d:b7:f5:b7:e8:02:f5:bc:01:0c:4c:06:c9:a9:34:ec:79:67:
a9:b3:9f:14:b7:3b:ba:f2:16:67:83:ab:a7:ad:ba:a3:10:55:
7a:58:0c:cf:07:2c:d1:9d:a1:57:d8:18:4f:1e:fb:02:3e:c1:
84:29:3a:e0:df:93:ac:47:e0:3c:a5:63:db:32:4a:96:bb:ac:
1b:b1:b8:51:60:4b:ee:e1:36:5b:40:5b:ed:05:cf:c6:86:d5:
57:48:6c:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgAyKUaN1XuK0MndIYvtb+bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjA2NWM4YmRiNzhmZjI5NGY3YzU0NTQ5NzFkYmZhYmZi
NmMxODQwHhcNMjMwNTA5MTM1MjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjNhZjliNzZmNmU2ODk1ZDIxZTYxNWNkNTIyNmM0ZWI1ZThhNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMpcVk0rAzSG60hRK7/OUefGzbnK
sHabhCqaNl71eL/yX1XrOy3vYNaeKtIMpIPOfyZYwctB+b+hEi8HRoBLZVwoNxQu
FYA5xKoQZA7GmD3L+UQyEcFUw0k0nozDM6/ikX4ODT396v8EKiqR3vv9gtzdQhlJ
DCcxMds+oTEQ2W0w3PrcUzLR2LyYyZ29InCbdLt7OKQjPr7FMTeih1tL1h2jWg+L
BSX6XHWJeLM5VqDq/gancAzXFMoiFfTn6kR2jwmOtN+fb7NV7KDcVr8bJ8OpLyZR
JuXjKsbJa0sIwBGG0oC9kI6JD4MW3BfYLWWBAJ4vrOmf82OjCS4yO3nLwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLY6+bdvbmiV0h5hXNUibE616KVqMB8GA1UdIwQY
MBaAFNXwZci9t4/ylPfFRUlx2/q/tsGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWIt
MzVhNWRjMmM3OTJjLzEvdGpyNXQyOXVhSlhTSG1GYzFTSnNUclhvcFdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9mMjc3ZWEtNzI2YS00MDUyLThlNWItMzVhNWRjMmM3OTJj
LzEvMWZCbHlMMjNqX0tVOThWRlNYSGItci0yd1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbJzMA0G
CSqGSIb3DQEBCwUAA4IBAQAPGXH11GHMrJ61t5HFmfAOps7h84i2XPFWbCPQVWeL
WXcLFrq1bXlQsKgOmMXrgH/k8xdZ84EENjaxf9GJB0k93i3mYyiEFukPof5VesLy
OUlJQ5BcbSkv6WKPgKrvI9zpmYu8ucenDWAm2pa0UZ4nWs0v129zGd8hzMBIRYHE
ALcuST8bJ3fnuy3BqYBe7SlBNNp9FVXcICCYgxVatnM6zaSdt/W36AL1vAEMTAbJ
qTTseWeps58Utzu68hZng6unrbqjEFV6WAzPByzRnaFX2BhPHvsCPsGEKTrg35Os
R+A8pWPbMkqWu6wbsbhRYEvu4TZbQFvtBc/GhtVXSGww
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-ams.rpki-client.org