Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/D-9DTzPr4KMv_oV_JcMhsiXvOZI.roa
File: D-9DTzPr4KMv_oV_JcMhsiXvOZI.roa (raw, json)
Hash identifier: hYz5Zo/ESVtZ2L4RgqEvoE2Z0AEk+Fa7Lsumo3z/lQY=
Subject key identifier: 0F:EF:43:4F:33:EB:E0:A3:2F:FE:85:7F:25:C3:21:B2:25:EF:39:92
Certificate issuer: /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial: 0187C1ECE92B299D3782C8BAF8D15F10CA87
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/D-9DTzPr4KMv_oV_JcMhsiXvOZI.roa
Signing time: Thu 27 Apr 2023 08:55:41 +0000
ROA not before: Thu 27 Apr 2023 08:55:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 193.192.32.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:ec:e9:2b:29:9d:37:82:c8:ba:f8:d1:5f:10:ca:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Validity
Not Before: Apr 27 08:55:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fef434f33ebe0a32ffe857f25c321b225ef3992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:18:ab:cf:6d:86:e2:62:c1:56:d3:b6:5d:f6:
c7:ff:12:61:62:90:39:4e:b0:de:b0:d1:30:cc:83:
61:9e:cf:03:a4:28:64:4a:d6:6e:78:aa:3d:8f:27:
72:ce:36:ba:20:81:6d:db:20:37:51:0e:fe:1c:30:
7c:b9:54:dc:c9:32:1f:d4:df:90:ae:fd:ef:ba:3e:
0c:89:04:65:37:a5:c8:f4:8d:fc:e0:0f:17:7b:5d:
d6:a0:18:9d:da:f0:d7:f1:d5:74:7f:a9:10:d5:e0:
70:94:ef:4b:4a:1f:56:09:66:e1:03:02:44:89:2d:
54:31:ca:0e:99:da:06:9f:6e:b1:2f:8a:69:8f:6c:
f7:56:1d:bc:be:31:4c:ed:ee:a0:4b:01:14:68:a7:
40:a0:17:0a:63:e1:a0:e1:ff:7b:8d:50:17:2a:b9:
58:4e:89:08:53:29:1f:25:fb:a8:a7:50:68:2c:9f:
80:aa:eb:3b:b8:f1:0c:0a:53:e4:b3:8e:0f:db:18:
94:a7:6c:4a:b1:aa:22:13:36:fb:9c:40:0b:30:c8:
d5:03:c6:e4:3e:cd:93:e3:1d:30:28:9f:f8:fd:25:
68:cc:fc:bd:fa:2a:a4:ba:b4:5b:96:ab:25:76:e7:
6b:99:f4:d2:d3:ea:71:d4:d3:81:76:8e:bb:b7:a1:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EF:43:4F:33:EB:E0:A3:2F:FE:85:7F:25:C3:21:B2:25:EF:39:92
X509v3 Authority Key Identifier:
keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/D-9DTzPr4KMv_oV_JcMhsiXvOZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.32.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:cd:49:af:04:27:90:b0:67:fb:06:c7:4e:0d:cf:48:96:40:
e6:08:4f:7b:cf:78:de:e0:c8:ee:45:a7:30:a9:4c:b9:7a:3d:
0f:78:58:7d:48:51:d4:3e:26:44:22:10:7b:78:49:0e:2c:d9:
76:70:65:88:ab:b1:ac:a4:85:8e:09:96:08:d5:bf:24:18:ae:
88:71:de:4f:96:6d:4a:72:f4:b7:06:e1:ef:7c:f6:49:37:83:
af:41:3d:9b:c1:36:81:37:a3:4b:f8:25:f9:30:bb:24:2d:96:
13:8f:a2:53:8e:58:ce:0a:f6:f3:a0:33:ff:fb:71:9f:cb:00:
7d:0f:87:c2:f2:fd:ac:eb:6f:ea:b4:b1:22:b2:1d:06:82:c0:
f7:1c:d6:ce:f9:76:e3:71:4a:d9:db:b8:57:13:9d:4b:3a:7a:
4c:38:d6:58:7d:56:42:c0:a1:de:63:2d:ac:fe:c4:45:4c:61:
da:89:1e:43:79:63:75:f1:fb:c6:e2:60:16:41:46:55:9d:b0:
39:a6:aa:68:18:1c:5e:ba:38:54:d8:08:60:2b:31:c1:fa:7f:
c2:e3:23:36:1b:a4:53:0e:c8:7e:86:37:83:b4:c5:f1:cf:ce:
b5:d8:83:ed:8c:43:6c:a3:18:41:cc:d3:08:9d:4e:bd:75:f6:
d5:32:e7:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfB7OkrKZ03gsi6+NFfEMqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MzYxNjM2NTY5M2ZiNjUwMmNiNGQ2ODdiYjY2NzQ3YjFh
MmZkNzQwHhcNMjMwNDI3MDg1NTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmVmNDM0ZjMzZWJlMGEzMmZmZTg1N2YyNWMzMjFiMjI1ZWYzOTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBirz22G4mLBVtO2XfbH/xJhYpA5
TrDesNEwzINhns8DpChkStZueKo9jydyzja6IIFt2yA3UQ7+HDB8uVTcyTIf1N+Q
rv3vuj4MiQRlN6XI9I384A8Xe13WoBid2vDX8dV0f6kQ1eBwlO9LSh9WCWbhAwJE
iS1UMcoOmdoGn26xL4ppj2z3Vh28vjFM7e6gSwEUaKdAoBcKY+Gg4f97jVAXKrlY
TokIUykfJfuop1BoLJ+Aqus7uPEMClPks44P2xiUp2xKsaoiEzb7nEALMMjVA8bk
Ps2T4x0wKJ/4/SVozPy9+iqkurRblqsldudrmfTS0+px1NOBdo67t6HjfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA/vQ08z6+CjL/6FfyXDIbIl7zmSMB8GA1UdIwQY
MBaAFKk2FjZWk/tlAstNaHu2Z0exov10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZWIxODctNzQ4Ni00MDRjLWExZGMt
MDkxMjk4NzJlMTQzLzEvRC05RFR6UHI0S012X29WX0pjTWhzaVh2T1pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jZWIxODctNzQ4Ni00MDRjLWExZGMtMDkxMjk4NzJlMTQz
LzEvcVRZV05sYVQtMlVDeTAxb2U3Wm5SN0dpX1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcAgMA0G
CSqGSIb3DQEBCwUAA4IBAQCczUmvBCeQsGf7BsdODc9IlkDmCE97z3je4MjuRacw
qUy5ej0PeFh9SFHUPiZEIhB7eEkOLNl2cGWIq7GspIWOCZYI1b8kGK6Icd5Plm1K
cvS3BuHvfPZJN4OvQT2bwTaBN6NL+CX5MLskLZYTj6JTjljOCvbzoDP/+3GfywB9
D4fC8v2s62/qtLEish0GgsD3HNbO+XbjcUrZ27hXE51LOnpMONZYfVZCwKHeYy2s
/sRFTGHaiR5DeWN18fvG4mAWQUZVnbA5pqpoGBxeujhU2AhgKzHB+n/C4yM2G6RT
Dsh+hjeDtMXxz8612IPtjENsoxhBzNMInU69dfbVMudR
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:28 2024 by rpki-client on console-ams.rpki-client.org