Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tEU9fqUzFSuenXvFD7WkVdSUIaU.roa
File: tEU9fqUzFSuenXvFD7WkVdSUIaU.roa (raw, json)
Hash identifier: Fynivo9LI0iUiJjfLqa5GmvJ7Ai0kb35HXtPxaZbrRg=
Subject key identifier: B4:45:3D:7E:A5:33:15:2B:9E:9D:7B:C5:0F:B5:A4:55:D4:94:21:A5
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185EE52E8E524D87986DF78AE9CB82AD90B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tEU9fqUzFSuenXvFD7WkVdSUIaU.roa
Signing time: Thu 26 Jan 2023 13:44:49 +0000
ROA not before: Thu 26 Jan 2023 13:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 213.232.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ee:52:e8:e5:24:d8:79:86:df:78:ae:9c:b8:2a:d9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 26 13:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4453d7ea533152b9e9d7bc50fb5a455d49421a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:93:b5:d9:a6:9f:bd:2a:e7:54:04:7a:9e:
0a:0f:31:8b:51:f3:c1:e9:7c:af:e1:27:fd:8d:a8:
19:97:fa:a8:a9:f1:af:18:6a:4c:4f:8f:a2:01:12:
1b:76:7e:8c:1c:77:d8:84:55:66:82:41:57:c1:3e:
7b:4a:26:5e:a7:24:b7:15:0b:f7:88:c6:fd:f8:22:
e4:3a:00:f4:b6:9d:52:f0:19:6d:35:01:70:8a:c3:
d3:53:c0:83:c7:b9:6b:73:f5:77:85:b0:71:5f:fc:
bb:8f:08:a0:e0:f8:d2:c2:48:41:e5:dd:e4:91:d1:
57:43:3c:78:e5:a1:7d:23:36:75:47:23:2a:84:21:
5d:b4:f4:45:5e:4e:5f:58:60:24:2c:fb:13:be:db:
70:9e:ab:87:8d:b6:da:d0:5b:81:b2:ce:78:54:0f:
51:3c:64:6c:a9:36:36:e8:6a:e5:65:36:c6:ad:0c:
03:06:e1:31:07:d1:af:d0:c0:f9:3e:08:0f:22:3c:
52:80:43:9a:23:a3:e8:2c:9d:2b:64:ec:0e:1d:fc:
47:16:8f:62:46:25:52:db:39:9a:b5:49:7f:77:21:
18:16:ce:79:c6:8a:37:0f:9b:f0:4f:7e:c5:11:7c:
72:c5:ed:d3:99:ff:a2:f6:b9:36:8b:f3:e1:a0:71:
12:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:45:3D:7E:A5:33:15:2B:9E:9D:7B:C5:0F:B5:A4:55:D4:94:21:A5
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tEU9fqUzFSuenXvFD7WkVdSUIaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.232.93.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cc:a1:20:2c:0d:91:a9:a3:2a:12:9a:9c:e8:ea:b0:91:70:
ba:d8:6b:3f:f6:83:b7:c9:3f:e3:67:e1:15:c9:fb:24:b0:e3:
e1:8b:a1:06:4d:df:6b:f4:df:e2:d7:cf:3d:c9:f1:88:ee:df:
90:eb:a7:72:3d:89:16:c9:9f:ec:c5:15:11:e7:07:1c:5f:80:
dc:c3:18:de:cc:93:d4:4c:b8:55:e6:0e:0a:fe:09:bc:91:9c:
04:6e:5a:66:81:11:42:ff:76:24:48:c1:96:33:45:4f:b4:ef:
31:de:c3:ff:fb:53:a7:fc:8b:96:2b:eb:41:15:4c:75:d2:ab:
1a:01:0d:8f:c4:3a:09:cb:1c:40:b4:b4:df:22:ed:f3:cb:1b:
c5:e9:81:70:40:f4:92:53:51:19:f8:7f:fb:30:98:70:92:95:
9b:38:62:73:a0:23:6e:cd:38:21:0d:dd:14:b5:16:41:75:51:
3f:71:ad:48:29:7a:14:77:6b:13:da:52:58:c9:92:cf:6a:33:
47:dc:53:c9:33:c1:e2:9a:63:2a:9e:88:9e:38:0a:4c:00:6e:
e6:98:f9:8f:30:d8:18:d5:6c:96:49:a4:cc:8c:c5:59:60:81:
23:2a:85:db:8d:54:6b:7b:76:f9:11:8d:ba:bd:fb:5e:d5:04:
0b:87:86:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXuUujlJNh5ht94rpy4KtkLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMTI2MTM0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDQ1M2Q3ZWE1MzMxNTJiOWU5ZDdiYzUwZmI1YTQ1NWQ0OTQyMWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjeTtdmmn70q51QEep4KDzGLUfPB
6Xyv4Sf9jagZl/qoqfGvGGpMT4+iARIbdn6MHHfYhFVmgkFXwT57SiZepyS3FQv3
iMb9+CLkOgD0tp1S8BltNQFwisPTU8CDx7lrc/V3hbBxX/y7jwig4PjSwkhB5d3k
kdFXQzx45aF9IzZ1RyMqhCFdtPRFXk5fWGAkLPsTvttwnquHjbba0FuBss54VA9R
PGRsqTY26GrlZTbGrQwDBuExB9Gv0MD5PggPIjxSgEOaI6PoLJ0rZOwOHfxHFo9i
RiVS2zmatUl/dyEYFs55xoo3D5vwT37FEXxyxe3Tmf+i9rk2i/PhoHESYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLRFPX6lMxUrnp17xQ+1pFXUlCGlMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvdEVVOWZxVXpGU3Vlblh2RkQ3V2tWZFNVSWFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ehdMA0G
CSqGSIb3DQEBCwUAA4IBAQANzKEgLA2RqaMqEpqc6OqwkXC62Gs/9oO3yT/jZ+EV
yfsksOPhi6EGTd9r9N/i1889yfGI7t+Q66dyPYkWyZ/sxRUR5wccX4DcwxjezJPU
TLhV5g4K/gm8kZwEblpmgRFC/3YkSMGWM0VPtO8x3sP/+1On/IuWK+tBFUx10qsa
AQ2PxDoJyxxAtLTfIu3zyxvF6YFwQPSSU1EZ+H/7MJhwkpWbOGJzoCNuzTghDd0U
tRZBdVE/ca1IKXoUd2sT2lJYyZLPajNH3FPJM8HimmMqnoieOApMAG7mmPmPMNgY
1WyWSaTMjMVZYIEjKoXbjVRre3b5EY26vfte1QQLh4Z0
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org