Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/k-Xd2rVAD27WlyXnun9kywloUMs.roa
File: k-Xd2rVAD27WlyXnun9kywloUMs.roa (raw, json)
Hash identifier: tsUGrhKdIqRUQDik+zA4akx0G4shfdOrdgtAxFm1fIA=
Subject key identifier: 93:E5:DD:DA:B5:40:0F:6E:D6:97:25:E7:BA:7F:64:CB:09:68:50:CB
Certificate issuer: /CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Certificate serial: 01856BEEDB52BEC77C3AB5B58EB73B7FD090
Authority key identifier: 9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/k-Xd2rVAD27WlyXnun9kywloUMs.roa
Signing time: Sun 01 Jan 2023 06:04:53 +0000
ROA not before: Sun 01 Jan 2023 06:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202495
IP address blocks: 193.148.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:db:52:be:c7:7c:3a:b5:b5:8e:b7:3b:7f:d0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d287533ceba0645a148cf10c8c27ea9a721a09d
Validity
Not Before: Jan 1 06:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93e5dddab5400f6ed69725e7ba7f64cb096850cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:75:b5:b2:d4:9a:6d:5b:27:72:1e:2d:05:b2:
ee:07:7d:fa:ba:c3:0d:0d:fa:05:ec:c3:c7:31:59:
b2:7e:8e:f3:55:86:4b:65:97:f3:d3:12:34:28:a2:
fc:b4:6b:db:ac:4d:98:f8:c7:ce:1a:a1:57:55:f4:
09:d7:7c:90:ea:3f:3c:1e:34:29:17:af:66:f1:81:
ed:80:e2:62:97:6e:13:ae:d1:87:2a:6f:f6:11:08:
ad:29:21:62:f6:0d:03:83:00:2c:c5:64:3e:51:cf:
3c:3c:55:c0:6a:e9:12:e8:a6:cd:96:34:3a:26:5f:
7f:af:97:d0:6a:89:67:20:db:50:4e:87:23:a9:0e:
5a:93:0b:ad:2d:72:04:5a:dd:fd:7a:76:46:fb:a2:
f7:3e:c7:93:b4:df:51:30:60:77:22:17:82:dd:cc:
05:2a:4e:26:db:6c:3f:dc:48:0f:55:e3:db:6e:8f:
b9:09:a8:70:fa:da:12:4e:8e:73:65:25:4d:2d:ed:
14:f6:a9:b5:80:b5:1f:e8:6d:4d:d9:bd:a5:14:08:
a5:e0:c9:d0:8a:f9:0d:ec:5b:cc:23:b5:2c:75:78:
68:6c:a4:6a:7e:f1:59:3c:bc:22:d0:8a:11:33:af:
39:de:89:97:07:07:73:69:4f:09:3c:f1:70:69:85:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E5:DD:DA:B5:40:0F:6E:D6:97:25:E7:BA:7F:64:CB:09:68:50:CB
X509v3 Authority Key Identifier:
keyid:9D:28:75:33:CE:BA:06:45:A1:48:CF:10:C8:C2:7E:A9:A7:21:A0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSh1M866BkWhSM8QyMJ-qachoJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/k-Xd2rVAD27WlyXnun9kywloUMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8a6692-f646-49f0-8821-0212b3eae97c/1/nSh1M866BkWhSM8QyMJ-qachoJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.8.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:29:86:a6:d7:04:92:70:c6:d2:f5:24:52:d9:c5:d4:d7:5b:
3d:0d:98:f4:c2:cd:9e:1e:02:fd:aa:21:e9:03:cd:ec:37:e6:
f2:bd:00:a1:c3:2a:0f:67:db:1f:5d:bb:72:e4:88:65:bb:f1:
50:24:3c:58:7d:67:b9:21:c8:38:1e:d3:2e:5a:32:54:1d:1c:
51:62:00:ab:fc:b1:2a:53:de:e3:01:a7:6e:58:ba:46:39:d6:
ee:b7:f5:74:0c:ce:ed:5c:6a:f0:8c:0b:92:d1:41:3a:6e:8e:
18:0d:e5:d6:3c:09:2e:f6:bb:1b:4b:82:e2:57:86:ce:1c:48:
68:06:2b:8f:08:94:b9:43:64:6a:4d:e9:f3:40:25:8a:6a:64:
e6:cd:f2:6f:7d:dc:db:3f:1b:d8:d8:30:49:f1:e5:20:44:d9:
ce:0e:67:bf:56:62:79:bc:bb:72:94:dc:f0:af:6e:f7:2d:a0:
97:17:ec:88:d7:b7:24:7f:70:55:e9:c7:73:04:b6:66:35:f1:
bb:62:ed:50:b0:e2:fc:56:c6:9a:e8:07:d5:a9:91:20:0c:a2:
09:97:1c:4c:df:d3:dd:d6:9f:7a:3e:bb:bf:95:58:ca:3a:a7:
4d:2b:9c:45:a3:7b:0b:ca:47:5e:79:c0:3f:92:ab:e4:28:6c:
72:5a:8a:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr7ttSvsd8OrW1jrc7f9CQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjg3NTMzY2ViYTA2NDVhMTQ4Y2YxMGM4YzI3ZWE5YTcy
MWEwOWQwHhcNMjMwMTAxMDYwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2U1ZGRkYWI1NDAwZjZlZDY5NzI1ZTdiYTdmNjRjYjA5Njg1MGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3W1stSabVsnch4tBbLuB336usMN
DfoF7MPHMVmyfo7zVYZLZZfz0xI0KKL8tGvbrE2Y+MfOGqFXVfQJ13yQ6j88HjQp
F69m8YHtgOJil24TrtGHKm/2EQitKSFi9g0DgwAsxWQ+Uc88PFXAaukS6KbNljQ6
Jl9/r5fQaolnINtQTocjqQ5akwutLXIEWt39enZG+6L3PseTtN9RMGB3IheC3cwF
Kk4m22w/3EgPVePbbo+5Cahw+toSTo5zZSVNLe0U9qm1gLUf6G1N2b2lFAil4MnQ
ivkN7FvMI7UsdXhobKRqfvFZPLwi0IoRM6853omXBwdzaU8JPPFwaYVe3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJPl3dq1QA9u1pcl57p/ZMsJaFDLMB8GA1UdIwQY
MBaAFJ0odTPOugZFoUjPEMjCfqmnIaCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNoMU04NjZCa1doU004UXlNSi1xYWNob0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC84YTY2OTItZjY0Ni00OWYwLTg4MjEt
MDIxMmIzZWFlOTdjLzEvay1YZDJyVkFEMjdXbHlYbnVuOWt5d2xvVU1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC84YTY2OTItZjY0Ni00OWYwLTg4MjEtMDIxMmIzZWFlOTdj
LzEvblNoMU04NjZCa1doU004UXlNSi1xYWNob0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZQIMA0G
CSqGSIb3DQEBCwUAA4IBAQCiKYam1wSScMbS9SRS2cXU11s9DZj0ws2eHgL9qiHp
A83sN+byvQChwyoPZ9sfXbty5Ihlu/FQJDxYfWe5Icg4HtMuWjJUHRxRYgCr/LEq
U97jAaduWLpGOdbut/V0DM7tXGrwjAuS0UE6bo4YDeXWPAku9rsbS4LiV4bOHEho
BiuPCJS5Q2RqTenzQCWKamTmzfJvfdzbPxvY2DBJ8eUgRNnODme/VmJ5vLtylNzw
r273LaCXF+yI17ckf3BV6cdzBLZmNfG7Yu1QsOL8Vsaa6AfVqZEgDKIJlxxM39Pd
1p96Pru/lVjKOqdNK5xFo3sLykdeecA/kqvkKGxyWoo4
-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:40 2024 by rpki-client on console-fra.rpki-client.org