Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/0DH9a3GiSiWZHCL6tulsPiz2eeU.roa
File: 0DH9a3GiSiWZHCL6tulsPiz2eeU.roa (raw, json)
Hash identifier: u943/4NmqzpbHEVt5VzUpjKyWAMrkt1UkFRMK/Nwo2g=
Subject key identifier: D0:31:FD:6B:71:A2:4A:25:99:1C:22:FA:B6:E9:6C:3E:2C:F6:79:E5
Certificate issuer: /CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Certificate serial: 01856FF03424897A078171AB9AB3A2F9791D
Authority key identifier: BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/0DH9a3GiSiWZHCL6tulsPiz2eeU.roa
Signing time: Mon 02 Jan 2023 00:44:51 +0000
ROA not before: Mon 02 Jan 2023 00:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34863
IP address blocks: 193.46.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:34:24:89:7a:07:81:71:ab:9a:b3:a2:f9:79:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfb3671c9fc746a1ca63449546557ca9e9a7d6d
Validity
Not Before: Jan 2 00:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d031fd6b71a24a25991c22fab6e96c3e2cf679e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2e:ae:41:3b:ec:6b:49:59:65:6f:ce:d3:15:
f6:d4:9a:2f:63:fd:4e:25:34:b8:33:5c:ed:69:49:
b1:73:44:e0:40:55:86:8a:be:5a:53:78:0f:5f:33:
ad:77:4d:88:4d:0e:e1:fa:1a:d5:1b:e4:fd:7e:94:
76:91:c1:08:0b:73:96:07:4e:69:41:78:46:ed:f8:
32:95:d3:60:49:e9:3e:26:b2:30:aa:33:ae:9f:5d:
bf:47:78:e6:b0:55:28:eb:20:54:64:7b:99:6c:41:
1e:df:2b:19:af:76:d1:a2:5b:33:a1:51:64:21:18:
4f:5a:94:84:91:54:d6:13:ff:e3:7a:f7:85:06:21:
cd:51:e5:f6:07:d7:34:a0:28:bf:df:72:30:41:b8:
c0:1b:35:ec:95:5c:ee:25:d7:04:f0:66:c6:d8:3e:
3c:0b:1a:35:90:a3:46:b5:4e:ca:0e:f5:93:d1:66:
f3:40:b2:eb:e9:b8:e1:a2:d2:04:ef:b3:fc:4a:06:
26:87:85:1b:62:81:d7:db:c7:a1:29:12:79:03:c7:
32:5a:79:54:67:3f:3b:15:2d:eb:2d:9f:c6:54:8d:
c1:5e:cb:c8:78:99:a5:d2:f2:c1:1f:ae:5d:9d:e7:
d8:1e:8c:91:a8:a8:e4:dc:fb:3a:a0:57:81:e4:6f:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:31:FD:6B:71:A2:4A:25:99:1C:22:FA:B6:E9:6C:3E:2C:F6:79:E5
X509v3 Authority Key Identifier:
keyid:BB:FB:36:71:C9:FC:74:6A:1C:A6:34:49:54:65:57:CA:9E:9A:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_s2ccn8dGocpjRJVGVXyp6afW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/0DH9a3GiSiWZHCL6tulsPiz2eeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d6e44d-89ab-460e-9379-95c50531d4d8/1/u_s2ccn8dGocpjRJVGVXyp6afW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.85.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:9b:2c:8b:07:ed:71:2f:53:e3:40:de:7f:04:25:58:59:2f:
99:70:12:30:f0:ff:01:8a:eb:52:b5:60:1e:f9:cc:5c:a8:d3:
8d:1b:2b:b4:23:3b:8c:04:9e:78:c5:d0:73:4a:e9:a6:1e:2b:
72:72:47:ee:3c:86:82:9a:63:f9:5c:73:d6:00:eb:02:26:ee:
b6:b5:fa:2b:66:36:d9:48:57:20:a1:29:0d:d5:dd:47:64:d3:
79:90:f3:b0:7e:bf:84:3c:40:36:c2:ce:84:47:ae:a4:81:9d:
62:cf:13:ad:85:66:b2:25:9a:dc:a8:d7:87:65:e5:84:82:36:
3a:40:5a:ad:88:36:9a:00:3b:9f:ad:b1:f2:1d:80:42:9b:9d:
51:b8:ed:9c:82:4a:45:36:28:07:36:56:bf:82:55:6f:3a:6f:
31:34:2c:d2:08:1b:ae:bb:9c:ad:4c:62:4b:3d:bf:36:32:97:
a8:e3:03:0e:19:f9:aa:8b:23:47:27:ff:06:e9:71:fa:5c:65:
0d:7a:c7:df:55:fd:1d:96:58:07:ec:3d:47:bd:89:db:2d:26:
a9:59:14:b7:52:10:9e:fb:9e:8d:32:ac:a9:30:d5:57:92:74:
4f:09:91:4d:50:bf:7e:9b:a1:f0:59:ab:9e:7f:1f:2c:47:ad:
61:b6:99:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv8DQkiXoHgXGrmrOi+XkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmIzNjcxYzlmYzc0NmExY2E2MzQ0OTU0NjU1N2NhOWU5
YTdkNmQwHhcNMjMwMTAyMDA0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDMxZmQ2YjcxYTI0YTI1OTkxYzIyZmFiNmU5NmMzZTJjZjY3OWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC6uQTvsa0lZZW/O0xX21JovY/1O
JTS4M1ztaUmxc0TgQFWGir5aU3gPXzOtd02ITQ7h+hrVG+T9fpR2kcEIC3OWB05p
QXhG7fgyldNgSek+JrIwqjOun12/R3jmsFUo6yBUZHuZbEEe3ysZr3bRolszoVFk
IRhPWpSEkVTWE//jeveFBiHNUeX2B9c0oCi/33IwQbjAGzXslVzuJdcE8GbG2D48
Cxo1kKNGtU7KDvWT0WbzQLLr6bjhotIE77P8SgYmh4UbYoHX28ehKRJ5A8cyWnlU
Zz87FS3rLZ/GVI3BXsvIeJml0vLBH65dnefYHoyRqKjk3Ps6oFeB5G+t8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNAx/WtxokolmRwi+rbpbD4s9nnlMB8GA1UdIwQY
MBaAFLv7NnHJ/HRqHKY0SVRlV8qemn1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzkt
OTVjNTA1MzFkNGQ4LzEvMERIOWEzR2lTaVdaSENMNnR1bHNQaXoyZWVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kNmU0NGQtODlhYi00NjBlLTkzNzktOTVjNTA1MzFkNGQ4
LzEvdV9zMmNjbjhkR29jcGpSSlZHVlh5cDZhZlcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS5VMA0G
CSqGSIb3DQEBCwUAA4IBAQAtmyyLB+1xL1PjQN5/BCVYWS+ZcBIw8P8BiutStWAe
+cxcqNONGyu0IzuMBJ54xdBzSummHityckfuPIaCmmP5XHPWAOsCJu62tforZjbZ
SFcgoSkN1d1HZNN5kPOwfr+EPEA2ws6ER66kgZ1izxOthWayJZrcqNeHZeWEgjY6
QFqtiDaaADufrbHyHYBCm51RuO2cgkpFNigHNla/glVvOm8xNCzSCBuuu5ytTGJL
Pb82Mpeo4wMOGfmqiyNHJ/8G6XH6XGUNesffVf0dllgH7D1HvYnbLSapWRS3UhCe
+56NMqypMNVXknRPCZFNUL9+m6HwWauefx8sR61htpks
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:35 2024 by rpki-client on console-fra.rpki-client.org