Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/DmCRvXM9Jsv8y5C0pJELHguhKOM.roa
File: DmCRvXM9Jsv8y5C0pJELHguhKOM.roa (raw, json)
Hash identifier: LfymZiOMiGBcSkvy048GPaTC8b5HIuZIgZPTDGos0P4=
Subject key identifier: 0E:60:91:BD:73:3D:26:CB:FC:CB:90:B4:A4:91:0B:1E:0B:A1:28:E3
Certificate issuer: /CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Certificate serial: 0185706730AA73F0905AF892D29215FF05CA
Authority key identifier: 1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/DmCRvXM9Jsv8y5C0pJELHguhKOM.roa
Signing time: Mon 02 Jan 2023 02:54:48 +0000
ROA not before: Mon 02 Jan 2023 02:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208814
IP address blocks: 193.138.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:30:aa:73:f0:90:5a:f8:92:d2:92:15:ff:05:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7ad7754795ddd605f28838bb7cc359df7a266a
Validity
Not Before: Jan 2 02:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e6091bd733d26cbfccb90b4a4910b1e0ba128e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8f:ad:a9:39:c9:4d:83:6c:02:a2:d1:4c:4c:
bb:70:f5:36:09:dc:a9:31:4a:53:98:ad:39:50:2f:
89:70:fb:a4:db:e7:f0:84:11:4f:45:a2:8c:ee:46:
98:7b:e7:ec:a6:06:f5:87:7b:31:2a:6b:5e:04:e6:
fb:a6:ab:79:3f:ab:1e:a0:28:31:59:a4:8f:ff:1d:
b6:44:4c:43:80:ba:40:01:ae:d9:57:b7:79:3c:ea:
fa:48:89:a4:dc:64:09:d5:af:3a:8f:9a:51:92:5b:
b5:fa:3b:50:8d:4d:b4:f4:bb:8c:f3:d3:31:98:7a:
20:df:c9:6f:a9:84:88:10:0d:b7:5b:8c:ba:3b:38:
cb:03:21:e5:a8:75:e9:2c:fe:60:f4:58:fc:9f:bb:
c1:ce:19:e3:2e:3c:a0:c6:a1:b6:3d:75:d2:a0:64:
66:66:4f:2b:00:2e:85:31:0a:ab:12:48:95:cc:62:
5c:60:38:47:b0:69:a1:f4:ba:8d:23:33:c4:02:07:
dd:a6:b7:36:54:4f:8d:89:6e:8a:57:dc:ea:24:4e:
ad:64:4a:48:3c:e1:87:07:cf:66:eb:e7:5f:8f:20:
6f:fc:fb:01:86:9b:62:76:5f:6e:30:5a:a1:e7:3b:
ef:bf:01:21:39:a4:a0:5f:2c:b4:4a:56:5b:de:64:
1b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:60:91:BD:73:3D:26:CB:FC:CB:90:B4:A4:91:0B:1E:0B:A1:28:E3
X509v3 Authority Key Identifier:
keyid:1C:7A:D7:75:47:95:DD:D6:05:F2:88:38:BB:7C:C3:59:DF:7A:26:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHrXdUeV3dYF8og4u3zDWd96Jmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/DmCRvXM9Jsv8y5C0pJELHguhKOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5a9e3-6722-4b6a-be58-ada5c20e3f7b/1/HHrXdUeV3dYF8og4u3zDWd96Jmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.81.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c9:7f:42:11:e5:4c:06:9f:bd:0b:6a:3a:74:60:39:71:52:
ae:39:a6:eb:7f:18:d3:07:4f:8b:61:96:d6:63:56:33:b2:2b:
49:e5:71:8c:53:6e:b9:a3:81:fc:ad:aa:61:b0:c3:1b:ca:97:
f5:b1:61:45:41:fb:5e:df:e6:55:0a:3b:7a:98:a8:11:10:fe:
29:00:43:b7:51:a9:a0:83:96:d3:74:36:8e:16:3c:6f:5e:15:
ce:a8:a5:75:0b:28:77:42:00:87:68:e3:5b:8a:1f:3b:5e:a9:
9f:61:a6:79:1c:75:9d:d8:80:e9:f8:77:43:07:25:9f:0e:76:
6b:d3:d1:67:f5:f7:64:10:48:b0:8c:84:01:fb:f7:33:50:e1:
65:47:18:ae:f9:ee:04:c4:37:39:63:66:ae:1b:58:8e:aa:bc:
69:10:ce:69:4e:92:00:9e:15:74:50:f2:06:32:b4:3d:b3:a6:
df:df:1e:40:bf:cd:3a:7e:50:14:57:fb:6c:b5:b6:71:60:bf:
f3:fc:87:91:23:90:80:27:08:d2:45:79:c7:5f:2a:23:b4:27:
f3:a0:47:ba:bc:13:fc:d3:3e:21:fc:a0:ca:9f:a5:ab:ae:25:
6c:f4:a4:f4:35:ba:2d:83:20:7a:39:e5:ef:86:da:c7:55:70:
c2:16:2a:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZzCqc/CQWviS0pIV/wXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjN2FkNzc1NDc5NWRkZDYwNWYyODgzOGJiN2NjMzU5ZGY3
YTI2NmEwHhcNMjMwMTAyMDI1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTYwOTFiZDczM2QyNmNiZmNjYjkwYjRhNDkxMGIxZTBiYTEyOGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I+tqTnJTYNsAqLRTEy7cPU2Cdyp
MUpTmK05UC+JcPuk2+fwhBFPRaKM7kaYe+fspgb1h3sxKmteBOb7pqt5P6seoCgx
WaSP/x22RExDgLpAAa7ZV7d5POr6SImk3GQJ1a86j5pRklu1+jtQjU209LuM89Mx
mHog38lvqYSIEA23W4y6OzjLAyHlqHXpLP5g9Fj8n7vBzhnjLjygxqG2PXXSoGRm
Zk8rAC6FMQqrEkiVzGJcYDhHsGmh9LqNIzPEAgfdprc2VE+NiW6KV9zqJE6tZEpI
POGHB89m6+dfjyBv/PsBhptidl9uMFqh5zvvvwEhOaSgXyy0SlZb3mQb0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA5gkb1zPSbL/MuQtKSRCx4LoSjjMB8GA1UdIwQY
MBaAFBx613VHld3WBfKIOLt8w1nfeiZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgt
YWRhNWMyMGUzZjdiLzEvRG1DUnZYTTlKc3Y4eTVDMHBKRUxIZ3VoS09NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9jNWE5ZTMtNjcyMi00YjZhLWJlNTgtYWRhNWMyMGUzZjdi
LzEvSEhyWGRVZVYzZFlGOG9nNHUzekRXZDk2Sm1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYpRMA0G
CSqGSIb3DQEBCwUAA4IBAQAVyX9CEeVMBp+9C2o6dGA5cVKuOabrfxjTB0+LYZbW
Y1YzsitJ5XGMU265o4H8raphsMMbypf1sWFFQfte3+ZVCjt6mKgREP4pAEO3Uamg
g5bTdDaOFjxvXhXOqKV1Cyh3QgCHaONbih87XqmfYaZ5HHWd2IDp+HdDByWfDnZr
09Fn9fdkEEiwjIQB+/czUOFlRxiu+e4ExDc5Y2auG1iOqrxpEM5pTpIAnhV0UPIG
MrQ9s6bf3x5Av806flAUV/tstbZxYL/z/IeRI5CAJwjSRXnHXyojtCfzoEe6vBP8
0z4h/KDKn6WrriVs9KT0NbotgyB6OeXvhtrHVXDCFiov
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:25 2024 by rpki-client on console-fra.rpki-client.org