Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/8AzViP_WtqRjx6nwDRaqSlDkjZU.roa
File: 8AzViP_WtqRjx6nwDRaqSlDkjZU.roa (raw, json)
Hash identifier: ZM/GUvyH4wzzpTeYE+ov5JG1+ezikwqEax2gEWyxGEg=
Subject key identifier: F0:0C:D5:88:FF:D6:B6:A4:63:C7:A9:F0:0D:16:AA:4A:50:E4:8D:95
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 018AEF17F89945A0AA26D48F08E6199DB569
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/8AzViP_WtqRjx6nwDRaqSlDkjZU.roa
Signing time: Mon 02 Oct 2023 06:33:59 +0000
ROA not before: Mon 02 Oct 2023 06:33:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43350
IP address blocks: 193.163.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:17:f8:99:45:a0:aa:26:d4:8f:08:e6:19:9d:b5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Oct 2 06:33:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f00cd588ffd6b6a463c7a9f00d16aa4a50e48d95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9c:c4:a6:43:25:3a:71:2a:ba:49:88:60:50:
ec:91:43:e4:78:5b:e2:3a:3d:e3:65:f0:7f:b3:1e:
60:6a:b2:77:40:57:db:ab:37:60:d8:2f:e5:b1:58:
0f:e2:5c:48:29:a2:bf:97:f4:ac:d5:c4:c5:2a:47:
0b:e4:c4:43:7b:9f:42:91:38:35:cd:d5:2d:c3:95:
6b:a8:80:e9:7c:9d:71:59:d7:9d:f8:f2:eb:c6:eb:
bf:3c:2b:8c:4f:02:4e:e3:de:bc:ea:75:65:44:3c:
42:8d:34:6e:64:f6:c7:6c:ae:56:59:dc:31:d0:09:
7f:ad:3e:1d:13:a0:ed:bb:c0:31:3e:c4:84:a7:a1:
a7:ab:07:8d:8d:eb:d6:b4:7f:46:93:bb:9a:c0:cf:
2d:b5:c9:99:dd:b8:5c:d7:c6:22:63:bc:41:96:94:
e6:89:89:f1:fd:b8:28:db:a1:d9:94:36:a7:f3:a6:
31:f1:bd:2c:ed:75:90:ca:35:21:21:8f:b0:b2:3d:
7b:24:bc:db:a1:0c:10:d1:2d:3b:26:7f:b2:a1:28:
0f:72:89:b9:08:93:b0:0d:49:2b:3c:15:8b:dd:07:
08:4d:1f:fb:ae:00:14:85:27:62:c8:c1:79:7d:d7:
6f:73:b4:0f:e6:15:c9:6a:26:1e:ed:e6:94:e7:a8:
83:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0C:D5:88:FF:D6:B6:A4:63:C7:A9:F0:0D:16:AA:4A:50:E4:8D:95
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/8AzViP_WtqRjx6nwDRaqSlDkjZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e9:78:e3:7e:f7:e1:b9:c9:fe:ce:55:99:92:28:eb:19:bd:
7f:c7:56:8d:d7:05:13:68:d7:53:5b:08:f0:4e:ef:34:27:57:
1a:66:4f:4f:01:86:fd:be:54:1e:f0:7f:40:ad:0f:ee:ca:fc:
5e:e2:2a:7f:fc:4a:7c:2d:e9:00:92:85:2d:8e:f5:61:24:34:
e4:8c:56:b6:a7:df:e2:62:eb:1a:a7:43:c7:e6:d9:82:29:57:
ba:c7:a2:b5:31:0f:10:3b:93:67:c9:5f:26:0f:f3:9f:3f:69:
81:f0:63:d5:72:14:51:25:e7:a3:7d:90:fa:16:fe:94:49:8c:
6f:3d:e8:31:74:64:e3:96:47:3f:85:49:6f:c3:10:b4:08:01:
79:b4:c4:29:ac:a3:85:48:29:7b:4d:3c:cb:0b:c6:4b:13:e5:
7e:b5:20:75:a2:e9:c0:c4:73:b3:8d:0d:b8:3c:45:d8:17:80:
1f:55:c8:23:c2:70:2c:10:85:2c:f5:89:ba:3a:8b:15:27:36:
58:21:f1:84:e7:7d:1f:5d:0f:ee:36:35:76:f3:59:ec:c3:cd:
70:1c:99:11:ee:cb:08:2d:28:0b:7d:40:19:a7:e9:5d:98:89:
ab:a2:1c:02:b5:9c:6d:61:96:66:d3:cf:25:c2:29:26:a1:ed:
30:c5:98:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrvF/iZRaCqJtSPCOYZnbVpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh
ZGFlNzUwHhcNMjMxMDAyMDYzMzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDBjZDU4OGZmZDZiNmE0NjNjN2E5ZjAwZDE2YWE0YTUwZTQ4ZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJzEpkMlOnEqukmIYFDskUPkeFvi
Oj3jZfB/sx5garJ3QFfbqzdg2C/lsVgP4lxIKaK/l/Ss1cTFKkcL5MRDe59CkTg1
zdUtw5VrqIDpfJ1xWded+PLrxuu/PCuMTwJO49686nVlRDxCjTRuZPbHbK5WWdwx
0Al/rT4dE6Dtu8AxPsSEp6GnqweNjevWtH9Gk7uawM8ttcmZ3bhc18YiY7xBlpTm
iYnx/bgo26HZlDan86Yx8b0s7XWQyjUhIY+wsj17JLzboQwQ0S07Jn+yoSgPcom5
CJOwDUkrPBWL3QcITR/7rgAUhSdiyMF5fddvc7QP5hXJaiYe7eaU56iDTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPAM1Yj/1rakY8ep8A0WqkpQ5I2VMB8GA1UdIwQY
MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt
YmM2Nzk0ZTk1ZTVhLzEvOEF6VmlQX1d0cVJqeDZud0RSYXFTbERralpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh
LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaPIMA0G
CSqGSIb3DQEBCwUAA4IBAQCw6Xjjfvfhucn+zlWZkijrGb1/x1aN1wUTaNdTWwjw
Tu80J1caZk9PAYb9vlQe8H9ArQ/uyvxe4ip//Ep8LekAkoUtjvVhJDTkjFa2p9/i
Yusap0PH5tmCKVe6x6K1MQ8QO5NnyV8mD/OfP2mB8GPVchRRJeejfZD6Fv6USYxv
PegxdGTjlkc/hUlvwxC0CAF5tMQprKOFSCl7TTzLC8ZLE+V+tSB1ounAxHOzjQ24
PEXYF4AfVcgjwnAsEIUs9Ym6OosVJzZYIfGE530fXQ/uNjV281nsw81wHJkR7ssI
LSgLfUAZp+ldmImrohwCtZxtYZZm088lwikmoe0wxZjc
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:06 2024 by rpki-client on console-ams.rpki-client.org