Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/1-AlFr1_R830R5Aca4-8tLmWwzDc.roa
File: 1-AlFr1_R830R5Aca4-8tLmWwzDc.roa (raw, json)
Hash identifier: 57B034oOySrDSQJ6J5eZZ22Bszejh9PuUguthwataP0=
Subject key identifier: F8:09:45:AF:5F:D1:F3:7D:11:E4:07:1A:E3:EF:2D:2E:65:B0:CC:37
Certificate issuer: /CN=be18e2d9f509c9d3b455112aa288d336185801a0
Certificate serial: 01856C65B7456783D6305019A96139D1C20B
Authority key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/1-AlFr1_R830R5Aca4-8tLmWwzDc.roa
Signing time: Sun 01 Jan 2023 08:14:43 +0000
ROA not before: Sun 01 Jan 2023 08:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211425
IP address blocks: 193.56.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:b7:45:67:83:d6:30:50:19:a9:61:39:d1:c2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be18e2d9f509c9d3b455112aa288d336185801a0
Validity
Not Before: Jan 1 08:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f80945af5fd1f37d11e4071ae3ef2d2e65b0cc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:2c:3d:14:0d:6c:3a:54:6e:97:45:61:46:
3e:8a:c7:74:d6:91:e1:1e:9f:e0:3d:37:f8:45:80:
3c:99:71:b0:8f:07:bf:40:ea:36:8f:bb:4a:ad:b0:
64:61:69:b6:10:6b:11:30:0f:62:1f:ff:3b:a8:20:
6c:7b:64:8b:b0:b5:ce:7a:86:30:fd:7c:ff:e5:8e:
85:c8:f7:1e:65:20:9a:42:0e:d8:64:3c:ab:e6:51:
92:58:7d:c3:aa:d7:80:13:8f:02:9b:c4:c6:08:4c:
33:54:89:86:71:2c:44:72:87:92:97:ef:53:38:72:
50:de:56:02:64:d0:f0:68:d3:0f:ba:3e:5d:f1:9d:
d6:31:43:d6:1f:0f:fe:9f:27:c8:d3:d6:50:9c:84:
54:de:a2:3e:dc:3a:bc:d0:4b:03:98:e4:45:04:76:
3f:ba:e3:54:ff:ad:fa:35:e2:94:3f:e5:db:ea:2a:
dd:35:94:18:fb:9d:37:6e:25:24:52:18:b3:8f:23:
86:17:cd:ed:aa:77:34:14:b0:65:c0:fc:14:4d:50:
27:b9:50:91:52:14:0a:7f:45:de:99:32:66:ce:19:
a2:e4:10:1a:ac:fb:b3:4b:28:35:d0:5f:62:be:42:
e0:f0:91:eb:40:32:5c:21:86:a2:6f:4f:a6:ae:99:
b3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:09:45:AF:5F:D1:F3:7D:11:E4:07:1A:E3:EF:2D:2E:65:B0:CC:37
X509v3 Authority Key Identifier:
keyid:BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/1-AlFr1_R830R5Aca4-8tLmWwzDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.0.0/24
Signature Algorithm: sha256WithRSAEncryption
17:dc:fd:62:86:f4:0d:3e:8a:c0:10:6d:08:5e:39:5f:bc:b5:
ff:be:18:76:da:02:3b:1b:35:9e:5c:7a:3e:69:62:82:63:c6:
fe:e3:2c:3e:4d:57:e9:7a:fa:68:22:6c:1b:4b:70:ed:d7:67:
fd:66:67:a2:51:ba:21:b3:5b:bf:57:a3:73:36:61:bf:6f:ed:
26:7c:77:fd:2e:83:a4:e8:38:04:ff:01:02:0c:bd:f9:df:fd:
b4:10:b5:b3:24:ee:6c:00:9e:1f:81:72:ba:8f:91:89:af:7a:
07:6a:16:ec:e2:e5:2f:85:c9:3c:da:f2:ee:08:a0:b3:b8:19:
0d:7e:ab:7c:1e:6c:28:9a:0c:a0:22:eb:5b:d3:bf:95:89:a5:
f9:74:df:90:38:5d:92:08:9f:00:70:ca:76:fc:ed:3a:61:b4:
b0:a1:17:05:c5:8a:9f:c1:9a:8f:04:1a:fd:d6:ac:12:fd:97:
b5:a6:57:2e:b4:f3:1c:7e:8d:d0:fb:54:db:36:45:6d:0c:75:
c6:e1:69:57:23:db:9c:e5:fe:11:27:c6:6a:ac:2c:fd:a5:c6:
78:68:57:02:41:45:13:0c:28:2b:b4:5b:e9:a3:fb:01:8b:93:
dd:00:0f:b7:06:73:33:ee:fa:f5:a3:df:a8:2a:54:d8:52:6a:
59:f1:0f:9a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVsZbdFZ4PWMFAZqWE50cILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMThlMmQ5ZjUwOWM5ZDNiNDU1MTEyYWEyODhkMzM2MTg1
ODAxYTAwHhcNMjMwMTAxMDgxNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODA5NDVhZjVmZDFmMzdkMTFlNDA3MWFlM2VmMmQyZTY1YjBjYzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZksPRQNbDpUbpdFYUY+isd01pHh
Hp/gPTf4RYA8mXGwjwe/QOo2j7tKrbBkYWm2EGsRMA9iH/87qCBse2SLsLXOeoYw
/Xz/5Y6FyPceZSCaQg7YZDyr5lGSWH3DqteAE48Cm8TGCEwzVImGcSxEcoeSl+9T
OHJQ3lYCZNDwaNMPuj5d8Z3WMUPWHw/+nyfI09ZQnIRU3qI+3Dq80EsDmORFBHY/
uuNU/636NeKUP+Xb6irdNZQY+503biUkUhizjyOGF83tqnc0FLBlwPwUTVAnuVCR
UhQKf0XemTJmzhmi5BAarPuzSyg10F9ivkLg8JHrQDJcIYaib0+mrpmz7QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPgJRa9f0fN9EeQHGuPvLS5lsMw3MB8GA1UdIwQY
MBaAFL4Y4tn1CcnTtFURKqKI0zYYWAGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmhqaTJmVUp5ZE8wVlJFcW9valROaGhZQWFBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82NjQ1ZDUtZDE5My00YTYzLTg1ZTYt
MmNhMGU1YzEwNGZkLzEvMS1BbEZyMV9SODMwUjVBY2E0LTh0TG1Xd3pEYy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYWIvNjY0NWQ1LWQxOTMtNGE2My04NWU2LTJjYTBlNWMxMDRm
ZC8xL3ZoamkyZlVKeWRPMFZSRXFvb2pUTmhoWUFhQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAME4ADAN
BgkqhkiG9w0BAQsFAAOCAQEAF9z9Yob0DT6KwBBtCF45X7y1/74YdtoCOxs1nlx6
PmligmPG/uMsPk1X6Xr6aCJsG0tw7ddn/WZnolG6IbNbv1ejczZhv2/tJnx3/S6D
pOg4BP8BAgy9+d/9tBC1syTubACeH4Fyuo+Ria96B2oW7OLlL4XJPNry7gigs7gZ
DX6rfB5sKJoMoCLrW9O/lYml+XTfkDhdkgifAHDKdvztOmG0sKEXBcWKn8GajwQa
/dasEv2XtaZXLrTzHH6N0PtU2zZFbQx1xuFpVyPbnOX+ESfGaqws/aXGeGhXAkFF
EwwoK7Rb6aP7AYuT3QAPtwZzM+769aPfqCpU2FJqWfEPmg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:17 2024 by rpki-client on console-fra.rpki-client.org