Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/xrYEDpJeNfu-D4xwCtE5HTgPBlE.roa
File: xrYEDpJeNfu-D4xwCtE5HTgPBlE.roa (raw, json)
Hash identifier: ChAD7tCoOcd28Z1NyDxZU8A384suMaZVApdS20pgd7c=
Subject key identifier: C6:B6:04:0E:92:5E:35:FB:BE:0F:8C:70:0A:D1:39:1D:38:0F:06:51
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01856ECB6FEDB2732084A15C3394FA236F75
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/xrYEDpJeNfu-D4xwCtE5HTgPBlE.roa
Signing time: Sun 01 Jan 2023 19:25:04 +0000
ROA not before: Sun 01 Jan 2023 19:25:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30890
IP address blocks: 195.28.2.0/23 maxlen: 23
193.19.192.0/22 maxlen: 22
193.19.192.0/24 maxlen: 24
193.19.194.0/24 maxlen: 24
193.19.195.0/24 maxlen: 24
193.19.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Oct 2023 10:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:6f:ed:b2:73:20:84:a1:5c:33:94:fa:23:6f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 19:25:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6b6040e925e35fbbe0f8c700ad1391d380f0651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:06:0d:28:76:a5:52:14:d1:15:ab:52:5d:
d8:94:ae:92:a1:91:76:c7:8b:1e:31:0f:b3:fe:8e:
de:84:5a:76:b8:d1:b5:77:93:59:7e:ce:86:eb:75:
ae:b0:91:62:ae:3b:16:b6:57:24:d3:f7:24:e2:2b:
fc:2f:98:78:cf:15:24:6b:c6:b4:ed:3d:2b:32:b6:
68:df:de:bd:32:31:44:86:c5:1f:7d:60:cb:0f:8c:
3b:f8:65:4a:42:f9:ec:6a:23:59:da:d2:2d:9a:85:
77:bb:34:18:3a:fa:81:0b:f4:e0:8f:08:b3:5f:6e:
df:4a:21:35:9f:93:91:82:62:19:07:a6:59:fb:26:
ae:ec:17:98:8f:e8:f6:33:73:f3:19:1a:17:8d:39:
7e:fe:e1:c6:70:89:12:16:02:6d:2c:b6:57:92:5e:
96:74:09:e7:be:e0:f9:4c:d1:0b:d5:f0:d0:6e:42:
ff:98:59:41:00:14:3b:9d:22:66:70:68:a3:53:01:
68:84:5e:23:8d:71:c3:ad:18:93:67:c7:97:08:37:
81:4f:66:fc:40:25:b7:ce:b8:7c:4c:a9:6c:3f:eb:
47:0a:6d:24:e3:d8:ba:f8:02:0e:84:d2:c7:df:fb:
c7:08:4f:cf:18:fd:93:3e:7b:a8:a4:68:77:8f:71:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B6:04:0E:92:5E:35:FB:BE:0F:8C:70:0A:D1:39:1D:38:0F:06:51
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/xrYEDpJeNfu-D4xwCtE5HTgPBlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.192.0/22
195.28.2.0/23
Signature Algorithm: sha256WithRSAEncryption
43:f0:82:74:4f:f2:96:a8:33:59:5b:3c:ab:83:61:1a:c0:25:
0b:07:28:00:88:c1:b9:0b:77:b6:8f:51:42:3f:49:e6:07:88:
59:76:ff:0c:f8:ca:b8:27:a4:f9:49:67:fa:f7:e2:ab:f6:46:
5c:f0:07:08:a0:53:9f:e1:3c:d7:21:35:13:f5:cf:c8:d9:2c:
ff:fb:88:01:43:da:24:9a:f2:ae:d0:f0:06:15:52:b4:17:fd:
3f:88:b0:d3:1d:04:03:1c:17:06:be:f7:0b:0a:5a:35:30:88:
6a:12:29:d3:b5:17:5c:9d:b1:a1:16:fe:9b:13:62:cd:c9:25:
e3:13:df:48:a4:a3:5c:7a:66:d8:c9:61:01:4b:2b:80:d1:8b:
3f:be:30:87:49:a4:06:bd:1e:df:b8:ed:8c:66:10:08:37:e6:
26:d1:27:f9:30:fe:ff:b0:53:ec:f0:f6:28:07:fe:74:b8:0c:
fd:15:e6:af:37:54:dc:03:11:e6:12:4d:16:4a:e6:aa:56:8f:
17:94:2c:9c:0a:af:3b:a4:b5:a6:f9:9e:72:d7:27:db:06:8c:
5a:05:b0:e9:9f:74:e8:19:3c:cf:47:64:d1:c5:04:0f:80:14:
73:22:59:e8:78:07:bd:ac:38:43:cf:a5:d2:96:60:62:69:a0:
a1:c7:8b:0a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVuy2/tsnMghKFcM5T6I291MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjMwMTAxMTkyNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmI2MDQwZTkyNWUzNWZiYmUwZjhjNzAwYWQxMzkxZDM4MGYwNjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6AGDSh2pVIU0RWrUl3YlK6SoZF2
x4seMQ+z/o7ehFp2uNG1d5NZfs6G63WusJFirjsWtlck0/ck4iv8L5h4zxUka8a0
7T0rMrZo3969MjFEhsUffWDLD4w7+GVKQvnsaiNZ2tItmoV3uzQYOvqBC/Tgjwiz
X27fSiE1n5ORgmIZB6ZZ+yau7BeYj+j2M3PzGRoXjTl+/uHGcIkSFgJtLLZXkl6W
dAnnvuD5TNEL1fDQbkL/mFlBABQ7nSJmcGijUwFohF4jjXHDrRiTZ8eXCDeBT2b8
QCW3zrh8TKlsP+tHCm0k49i6+AIOhNLH3/vHCE/PGP2TPnuopGh3j3GXWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMa2BA6SXjX7vg+McArROR04DwZRMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEveHJZRURwSmVOZnUtRDR4d0N0RTVIVGdQQmxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwRPAAwQB
wxwCMA0GCSqGSIb3DQEBCwUAA4IBAQBD8IJ0T/KWqDNZWzyrg2EawCULBygAiMG5
C3e2j1FCP0nmB4hZdv8M+Mq4J6T5SWf69+Kr9kZc8AcIoFOf4TzXITUT9c/I2Sz/
+4gBQ9okmvKu0PAGFVK0F/0/iLDTHQQDHBcGvvcLClo1MIhqEinTtRdcnbGhFv6b
E2LNySXjE99IpKNcembYyWEBSyuA0Ys/vjCHSaQGvR7fuO2MZhAIN+Ym0Sf5MP7/
sFPs8PYoB/50uAz9FeavN1TcAxHmEk0WSuaqVo8XlCycCq87pLWm+Z5y1yfbBoxa
BbDpn3ToGTzPR2TRxQQPgBRzIlnoeAe9rDhDz6XSlmBiaaChx4sK
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org