Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/RdqiV21qrb2rD1q8bJpAjjfYNLM.roa
File: RdqiV21qrb2rD1q8bJpAjjfYNLM.roa (raw, json)
Hash identifier: wja/L0S1Xej1SGZP9QRU+/e3dz+83sDofbshc4w2qVM=
Subject key identifier: 45:DA:A2:57:6D:6A:AD:BD:AB:0F:5A:BC:6C:9A:40:8E:37:D8:34:B3
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 01856F5DCB61C3F6C4C6DDC200D0ED60A8AD
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/RdqiV21qrb2rD1q8bJpAjjfYNLM.roa
Signing time: Sun 01 Jan 2023 22:04:55 +0000
ROA not before: Sun 01 Jan 2023 22:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47477
IP address blocks: 193.83.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:cb:61:c3:f6:c4:c6:dd:c2:00:d0:ed:60:a8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 22:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45daa2576d6aadbdab0f5abc6c9a408e37d834b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d3:b7:f3:05:a0:2f:be:5f:6b:96:a9:46:e4:
78:16:8e:e5:cd:6a:dd:cb:15:7c:43:13:83:7a:12:
ea:b0:47:2f:e2:ce:46:f9:0f:b0:54:65:9a:d4:5c:
00:fd:a2:40:22:e4:5c:96:76:4c:11:92:74:ef:fc:
52:b4:e9:4c:47:f9:68:0b:ce:92:82:e7:a8:13:aa:
eb:6a:63:04:3b:fe:d2:13:0f:f6:7e:2f:61:b6:89:
60:53:31:71:57:ab:33:34:7a:d5:34:a5:f3:41:22:
97:aa:4c:a8:d4:6e:ae:fc:f6:85:e1:c6:fc:25:be:
09:09:19:cf:81:77:19:23:d5:33:f9:7e:f6:f4:87:
39:fe:59:21:6d:72:51:7b:53:30:be:93:92:93:a9:
4e:12:42:95:7a:db:58:65:13:fe:0d:8f:f0:9a:ad:
6b:8d:01:ec:90:f5:5c:82:8d:31:4f:53:fc:be:43:
82:46:39:78:5a:9f:c9:e6:4f:32:51:6e:6c:c7:4a:
ec:c3:84:a5:57:18:9a:b0:e2:6d:5f:a1:50:16:cd:
0e:5a:2c:3a:3e:10:b1:54:03:57:8c:54:f2:92:ff:
13:7b:d4:b0:26:98:b0:96:cb:e5:41:6a:22:c4:bf:
25:43:b6:07:0f:09:16:0d:9a:4f:5d:be:57:43:ec:
e5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DA:A2:57:6D:6A:AD:BD:AB:0F:5A:BC:6C:9A:40:8E:37:D8:34:B3
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/RdqiV21qrb2rD1q8bJpAjjfYNLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.83.204.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:80:ba:ae:ac:d9:cc:03:6d:12:93:96:b5:82:98:37:55:71:
d0:2d:f7:35:d5:f1:6e:69:52:f7:1b:5c:52:79:7a:85:21:33:
5a:78:ae:f6:b2:0e:2d:1d:a7:ef:89:3f:ba:6e:5d:0a:12:61:
67:bf:4c:bf:12:0a:60:a2:d2:cd:be:87:e6:87:98:cf:37:45:
57:12:0a:45:b4:5a:94:b5:0e:2c:45:c2:56:de:6c:37:91:e4:
27:59:7d:24:9a:d4:dd:04:36:aa:ad:79:63:e3:ff:4b:3e:d2:
a8:72:4b:5d:e1:d0:6c:fd:c6:90:8a:7a:2d:e0:9d:c6:5e:5a:
51:c3:33:c3:69:56:e4:4e:1c:cd:a2:46:46:02:16:23:56:d2:
b1:6b:b6:00:be:83:86:e3:40:58:b0:cd:d1:68:01:37:09:1f:
26:eb:ba:57:d4:75:3f:20:3c:3c:71:33:3d:3e:9a:47:bb:e0:
6a:64:fc:27:4d:71:c0:bc:fd:57:43:47:2e:c4:45:91:2b:df:
c9:3c:71:49:54:ce:c6:28:9f:c8:cb:61:04:8b:ff:dd:37:a9:
40:b0:da:92:c1:04:c3:2f:0f:5e:27:d2:6d:e1:69:76:18:75:
dc:71:7a:52:8f:99:a2:97:84:47:82:36:7e:5c:b4:9b:8c:e9:
22:6d:3f:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXcthw/bExt3CANDtYKitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjMwMTAxMjIwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWRhYTI1NzZkNmFhZGJkYWIwZjVhYmM2YzlhNDA4ZTM3ZDgzNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdO38wWgL75fa5apRuR4Fo7lzWrd
yxV8QxODehLqsEcv4s5G+Q+wVGWa1FwA/aJAIuRclnZMEZJ07/xStOlMR/loC86S
gueoE6rramMEO/7SEw/2fi9htolgUzFxV6szNHrVNKXzQSKXqkyo1G6u/PaF4cb8
Jb4JCRnPgXcZI9Uz+X729Ic5/lkhbXJRe1MwvpOSk6lOEkKVettYZRP+DY/wmq1r
jQHskPVcgo0xT1P8vkOCRjl4Wp/J5k8yUW5sx0rsw4SlVxiasOJtX6FQFs0OWiw6
PhCxVANXjFTykv8Te9SwJpiwlsvlQWoixL8lQ7YHDwkWDZpPXb5XQ+zlrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEXaoldtaq29qw9avGyaQI432DSzMB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvUmRxaVYyMXFyYjJyRDFxOGJKcEFqamZZTkxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwVPMMA0G
CSqGSIb3DQEBCwUAA4IBAQDHgLqurNnMA20Sk5a1gpg3VXHQLfc11fFuaVL3G1xS
eXqFITNaeK72sg4tHafviT+6bl0KEmFnv0y/EgpgotLNvofmh5jPN0VXEgpFtFqU
tQ4sRcJW3mw3keQnWX0kmtTdBDaqrXlj4/9LPtKocktd4dBs/caQinot4J3GXlpR
wzPDaVbkThzNokZGAhYjVtKxa7YAvoOG40BYsM3RaAE3CR8m67pX1HU/IDw8cTM9
PppHu+BqZPwnTXHAvP1XQ0cuxEWRK9/JPHFJVM7GKJ/Iy2EEi//dN6lAsNqSwQTD
Lw9eJ9Jt4Wl2GHXccXpSj5mil4RHgjZ+XLSbjOkibT95
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:16 2024 by rpki-client on console-ams.rpki-client.org