Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/1I4HwR4jfempmJjcSVLIggyLEPM.roa
File: 1I4HwR4jfempmJjcSVLIggyLEPM.roa (raw, json)
Hash identifier: YHTk88e9IZxjLd38n4UxnPb1ab5CUqzYd7LlmsGnjFQ=
Subject key identifier: D4:8E:07:C1:1E:23:7D:E9:A9:98:98:DC:49:52:C8:82:0C:8B:10:F3
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01857139BDF60FDE6D7EBDC0E9F7E7A6B2D4
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/1I4HwR4jfempmJjcSVLIggyLEPM.roa
Signing time: Mon 02 Jan 2023 06:44:47 +0000
ROA not before: Mon 02 Jan 2023 06:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62315
IP address blocks: 193.32.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:bd:f6:0f:de:6d:7e:bd:c0:e9:f7:e7:a6:b2:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 2 06:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d48e07c11e237de9a99898dc4952c8820c8b10f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:30:b1:54:95:2f:ef:94:3c:6a:83:ed:ed:
c6:08:2a:64:60:39:23:66:e6:1a:16:64:e0:dc:a1:
ec:14:4d:ca:2b:29:3a:75:19:5d:db:f9:22:63:36:
b2:8e:24:f4:54:35:97:3d:e7:c6:35:0f:ac:16:77:
1b:66:6f:a6:57:f8:30:cd:05:c2:61:85:67:49:f0:
8e:8a:62:19:3c:cc:32:72:fb:9b:1c:1b:3c:7f:01:
ab:04:c5:0d:a2:d1:bb:7c:19:0e:d7:73:0b:c2:0f:
db:d2:59:aa:98:77:ac:a5:2f:7a:2d:58:7c:ab:9e:
0c:eb:8f:e1:3b:09:50:14:8c:f3:eb:3f:e8:f8:bc:
a9:e4:e8:a9:b2:65:49:83:0d:af:21:71:fe:a4:5f:
dc:64:67:11:06:97:77:f3:49:df:8c:24:09:cf:ea:
7b:18:7b:51:6a:65:66:20:7e:a0:21:6f:6a:de:91:
ef:22:5e:aa:3d:ea:60:61:b2:6d:37:fc:31:e0:7e:
29:74:16:f1:8e:1c:1e:7d:41:3d:d2:e6:c7:c4:6b:
b9:f0:97:f6:5a:4c:9f:4a:5e:6a:90:c5:b4:b9:7d:
ba:cc:d2:34:98:55:d2:0d:b2:2d:ea:95:46:5f:ff:
f4:15:e8:23:fa:13:eb:56:4c:90:73:7f:3d:6d:26:
7b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8E:07:C1:1E:23:7D:E9:A9:98:98:DC:49:52:C8:82:0C:8B:10:F3
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/1I4HwR4jfempmJjcSVLIggyLEPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:40:67:e2:9d:25:e9:58:bc:cb:ca:da:7e:bc:02:59:5f:b1:
68:28:8b:1f:46:43:08:c1:61:49:3f:7c:58:6f:c8:80:b0:08:
99:0b:7a:da:29:7b:e3:d0:d7:e8:c4:a3:fe:d9:1d:c3:94:b8:
8f:31:5f:93:a0:ee:73:10:21:89:2e:6b:66:ca:62:e1:92:8d:
4b:cf:1a:31:6a:ee:95:b1:7f:56:92:fe:ce:3a:15:ef:38:cc:
7c:38:2b:a2:f4:01:d6:0e:29:ec:36:f1:40:ac:cd:4e:8b:70:
9e:d6:76:2a:58:98:8f:e4:61:02:1f:09:7e:49:5e:39:7a:0b:
85:c5:59:e3:59:f7:c1:bf:d7:ee:1b:f3:f7:b3:8b:82:f4:33:
9a:05:4b:b6:f6:a2:80:4a:1f:20:1a:13:10:04:55:8c:c0:c7:
7c:65:4c:ad:d3:b8:15:65:d9:aa:b8:06:92:e9:cc:06:42:79:
a2:88:0c:f8:b3:ee:cd:5e:7f:fe:27:fc:b4:c7:e6:18:ca:4f:
5e:61:18:9f:55:4d:32:b7:37:3f:d5:9c:88:be:be:00:ec:0e:
d8:7d:1f:97:51:d2:b9:ee:0c:36:7d:af:20:f6:87:2c:70:0f:
af:ad:dc:7b:45:c1:ef:d7:48:40:63:5d:9f:20:49:90:8d:12:
5c:d8:77:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxOb32D95tfr3A6ffnprLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk
YmM3YjMwHhcNMjMwMTAyMDY0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDhlMDdjMTFlMjM3ZGU5YTk5ODk4ZGM0OTUyYzg4MjBjOGIxMGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35owsVSVL++UPGqD7e3GCCpkYDkj
ZuYaFmTg3KHsFE3KKyk6dRld2/kiYzayjiT0VDWXPefGNQ+sFncbZm+mV/gwzQXC
YYVnSfCOimIZPMwycvubHBs8fwGrBMUNotG7fBkO13MLwg/b0lmqmHespS96LVh8
q54M64/hOwlQFIzz6z/o+Lyp5OipsmVJgw2vIXH+pF/cZGcRBpd380nfjCQJz+p7
GHtRamVmIH6gIW9q3pHvIl6qPepgYbJtN/wx4H4pdBbxjhwefUE90ubHxGu58Jf2
WkyfSl5qkMW0uX26zNI0mFXSDbIt6pVGX//0Fegj+hPrVkyQc389bSZ7XQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNSOB8EeI33pqZiY3ElSyIIMixDzMB8GA1UdIwQY
MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt
NTQ4NDQwMmNlYjdhLzEvMUk0SHdSNGpmZW1wbUpqY1NWTElnZ3lMRVBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh
LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSAKMA0G
CSqGSIb3DQEBCwUAA4IBAQCLQGfinSXpWLzLytp+vAJZX7FoKIsfRkMIwWFJP3xY
b8iAsAiZC3raKXvj0NfoxKP+2R3DlLiPMV+ToO5zECGJLmtmymLhko1Lzxoxau6V
sX9Wkv7OOhXvOMx8OCui9AHWDinsNvFArM1Oi3Ce1nYqWJiP5GECHwl+SV45eguF
xVnjWffBv9fuG/P3s4uC9DOaBUu29qKASh8gGhMQBFWMwMd8ZUyt07gVZdmquAaS
6cwGQnmiiAz4s+7NXn/+J/y0x+YYyk9eYRifVU0ytzc/1ZyIvr4A7A7YfR+XUdK5
7gw2fa8g9ocscA+vrdx7RcHv10hAY12fIEmQjRJc2Hdr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org