Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_wHGQTNfXGTYZ_bdhpvvhEYQt44.roa
File: _wHGQTNfXGTYZ_bdhpvvhEYQt44.roa (raw, json)
Hash identifier: ZkJ1lTiRKXG5jlpeZg7q/1xIcct2r8o5NmbYJm+hjz0=
Subject key identifier: FF:01:C6:41:33:5F:5C:64:D8:67:F6:DD:86:9B:EF:84:46:10:B7:8E
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018926B51B9527CAD0886DE188E49EA83364
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_wHGQTNfXGTYZ_bdhpvvhEYQt44.roa
Signing time: Wed 05 Jul 2023 15:39:10 +0000
ROA not before: Wed 05 Jul 2023 15:39:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 193.148.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:b5:1b:95:27:ca:d0:88:6d:e1:88:e4:9e:a8:33:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 5 15:39:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff01c641335f5c64d867f6dd869bef844610b78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:14:f3:b9:c0:60:ee:e2:50:8a:9a:2d:9c:f7:
85:52:e7:80:9c:47:ac:49:09:6c:b7:43:56:cf:55:
bd:74:c4:58:c5:5a:df:cf:88:c5:1e:77:39:8f:45:
f7:4d:04:07:64:6b:e7:19:cf:26:3a:ae:eb:ea:95:
68:e4:48:33:2d:24:e2:3d:91:07:36:52:4e:42:58:
7b:00:82:e9:68:d0:9a:9c:3f:db:7c:9f:66:ce:02:
f6:13:29:cb:eb:85:0f:6c:38:49:c1:0c:0d:40:b0:
63:d9:14:68:a8:9f:db:f4:ae:f6:d9:69:5c:0a:fa:
9b:06:bd:78:ab:1f:4c:7d:b5:38:f6:1b:75:35:8e:
ae:17:f4:fc:95:ba:1a:2b:d4:7f:d8:cf:3f:40:c4:
f3:8d:a7:74:d4:95:11:d6:a7:ec:87:d6:9b:ca:0f:
d8:72:11:0c:5f:2b:c6:30:62:23:e6:50:c8:cc:ce:
94:c4:97:b0:00:f5:f8:0a:e3:2f:b5:14:9f:60:79:
0c:3f:3d:6d:1b:0c:98:3d:ca:28:e0:42:48:9f:0f:
39:ee:7b:7f:36:2f:42:83:ac:7f:c5:70:b2:56:07:
f4:40:6c:58:07:bd:57:93:d5:c5:7a:0f:25:fd:fb:
4c:f7:ba:aa:e4:e0:7f:77:98:30:73:29:28:7f:cf:
65:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:01:C6:41:33:5F:5C:64:D8:67:F6:DD:86:9B:EF:84:46:10:B7:8E
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/_wHGQTNfXGTYZ_bdhpvvhEYQt44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.61.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ba:1b:ca:76:3c:03:9e:ec:3b:63:f8:97:9c:e4:bc:2b:03:
6b:8a:35:73:a5:bc:cf:b8:41:0d:dd:00:45:81:db:ae:aa:77:
42:16:2e:50:9f:15:4b:d8:ab:8f:aa:56:67:82:00:87:eb:6b:
f1:a3:97:69:1b:39:82:94:74:50:35:1b:1e:12:57:51:90:1b:
ec:e4:26:69:8e:c3:fd:fb:6f:b8:9c:50:e2:9b:31:fd:c7:48:
4f:13:86:1d:e8:fe:9d:20:22:e7:93:8e:d0:67:a8:54:74:18:
3e:29:7b:0c:ac:4e:ee:4d:a1:6d:bb:41:be:32:37:53:78:52:
12:c0:88:8a:88:85:a9:86:e8:94:d9:dc:cd:c9:83:72:81:61:
ce:c2:75:c0:32:fa:80:2a:d7:8c:74:fd:de:28:bf:f1:f6:4a:
5e:d5:85:8d:0d:c4:1d:80:3c:da:c5:0b:fc:5a:44:5b:c2:d6:
e3:5f:7c:5a:5e:df:f4:8a:bb:29:27:bd:b5:b6:03:3a:4a:92:
d0:d3:97:e7:a6:40:72:2b:b1:2b:bd:8b:71:d6:b9:22:ad:c9:
91:33:fa:14:45:ad:42:33:be:fe:6c:e9:96:14:f0:c5:48:d5:
17:e3:05:16:35:e3:7d:55:d8:bc:c7:3d:86:47:21:59:62:c1:
34:15:bb:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkmtRuVJ8rQiG3hiOSeqDNkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjMwNzA1MTUzOTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjAxYzY0MTMzNWY1YzY0ZDg2N2Y2ZGQ4NjliZWY4NDQ2MTBiNzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxTzucBg7uJQipotnPeFUueAnEes
SQlst0NWz1W9dMRYxVrfz4jFHnc5j0X3TQQHZGvnGc8mOq7r6pVo5EgzLSTiPZEH
NlJOQlh7AILpaNCanD/bfJ9mzgL2EynL64UPbDhJwQwNQLBj2RRoqJ/b9K722Wlc
CvqbBr14qx9MfbU49ht1NY6uF/T8lboaK9R/2M8/QMTzjad01JUR1qfsh9abyg/Y
chEMXyvGMGIj5lDIzM6UxJewAPX4CuMvtRSfYHkMPz1tGwyYPcoo4EJInw857nt/
Ni9Cg6x/xXCyVgf0QGxYB71Xk9XFeg8l/ftM97qq5OB/d5gwcykof89leQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP8BxkEzX1xk2Gf23Yab74RGELeOMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvX3dIR1FUTmZYR1RZWl9iZGhwdnZoRVlRdDQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZQ9MA0G
CSqGSIb3DQEBCwUAA4IBAQB9uhvKdjwDnuw7Y/iXnOS8KwNrijVzpbzPuEEN3QBF
gduuqndCFi5QnxVL2KuPqlZnggCH62vxo5dpGzmClHRQNRseEldRkBvs5CZpjsP9
+2+4nFDimzH9x0hPE4Yd6P6dICLnk47QZ6hUdBg+KXsMrE7uTaFtu0G+MjdTeFIS
wIiKiIWphuiU2dzNyYNygWHOwnXAMvqAKteMdP3eKL/x9kpe1YWNDcQdgDzaxQv8
WkRbwtbjX3xaXt/0irspJ721tgM6SpLQ05fnpkByK7ErvYtx1rkircmRM/oURa1C
M77+bOmWFPDFSNUX4wUWNeN9Vdi8xz2GRyFZYsE0FbtT
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:41 2024 by rpki-client on console-ams.rpki-client.org