Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/D51vOgm9qccQ6pEoywOTNy-v-Ig.roa
File: D51vOgm9qccQ6pEoywOTNy-v-Ig.roa (raw, json)
Hash identifier: 5smI6fhcTSf2BNi9WAVVrMjxE2Kn5C9ZhhZaZUldljQ=
Subject key identifier: 0F:9D:6F:3A:09:BD:A9:C7:10:EA:91:28:CB:03:93:37:2F:AF:F8:88
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C1876B2A6C344F496CC115E668421
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/D51vOgm9qccQ6pEoywOTNy-v-Ig.roa
Signing time: Mon 02 Jan 2023 05:54:56 +0000
ROA not before: Mon 02 Jan 2023 05:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 193.0.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:18:76:b2:a6:c3:44:f4:96:cc:11:5e:66:84:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f9d6f3a09bda9c710ea9128cb0393372faff888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:51:05:03:45:93:6f:4e:38:9d:d7:b3:3b:b9:
42:a1:5d:66:eb:a7:3e:ee:73:a1:c5:c1:35:2d:10:
53:16:71:60:4a:d1:b9:5f:b8:7e:80:ca:95:e4:fd:
e8:f9:b1:0f:cb:8c:5c:79:d0:a7:dd:b3:31:bc:b6:
7d:2a:a8:71:26:30:c3:10:79:0a:25:52:74:e2:7e:
d1:14:e1:77:18:97:84:cd:08:67:59:b8:4b:8a:35:
09:1d:ec:db:2f:61:5d:87:ae:02:29:8c:ef:8e:42:
95:af:08:67:00:42:80:f6:b1:a0:e9:63:8c:b9:72:
49:75:1f:fa:87:67:6b:de:31:08:b0:2b:f1:6d:06:
99:68:ae:a1:57:ba:d4:20:c7:d2:87:a1:95:db:fa:
1d:0e:70:5a:80:e1:33:87:00:c4:25:5e:dc:da:23:
dc:8d:66:83:b1:b9:1f:4d:53:0f:9c:6f:30:6d:47:
db:bd:64:d1:bb:99:35:b7:e0:06:59:0a:e7:f1:20:
36:90:2a:5f:8e:11:f7:10:ec:3c:3f:27:cf:76:21:
fe:0c:e4:0b:0a:e0:a8:e0:b6:5e:1f:3f:66:8d:5b:
a4:a6:72:b1:7f:27:2e:1c:12:08:ee:68:9e:08:1a:
ec:89:28:99:53:7c:41:82:3f:32:40:4d:dc:40:1a:
32:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9D:6F:3A:09:BD:A9:C7:10:EA:91:28:CB:03:93:37:2F:AF:F8:88
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/D51vOgm9qccQ6pEoywOTNy-v-Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.201.0/24
Signature Algorithm: sha256WithRSAEncryption
04:32:0e:d1:d7:0c:9a:c3:38:2c:e0:8d:52:9b:b6:a3:4a:af:
8b:ca:a1:c8:b2:6c:ef:54:48:3e:cf:06:1c:af:eb:6c:77:b2:
7e:8b:45:79:41:90:18:ed:5b:cf:7b:65:1a:5d:05:63:83:50:
1f:52:f6:cc:10:c3:88:7d:0d:c4:a3:a7:2a:e1:6f:8d:19:99:
c8:3d:da:5c:6b:0d:29:45:79:d4:2d:31:9f:c7:59:24:ac:6e:
f9:57:2c:a8:68:49:a8:83:d1:00:bc:bd:65:0e:3e:45:5f:bb:
4f:99:aa:59:c4:40:f2:2c:7f:d8:18:d7:95:83:ef:e6:ec:fd:
91:5e:9a:0f:8f:b3:d6:f0:da:4b:62:79:fd:f4:a3:4c:61:bd:
57:b2:3f:d1:49:f4:6a:af:a8:57:1e:3f:d1:b8:ab:13:da:77:
d5:eb:9f:c6:c9:91:a2:f6:80:fd:f3:be:c2:c2:7b:b8:aa:d7:
d9:7d:5c:50:92:29:b9:1c:c4:f4:1d:d2:e5:4b:b0:35:6a:62:
18:ff:e0:d0:ea:7f:53:2a:7e:81:0c:1c:9e:cc:b5:cc:03:7b:
54:2c:40:74:a4:d8:44:2d:5c:15:f2:6a:bb:1b:e3:de:f6:ab:
0b:64:c5:8c:5b:ff:63:21:46:a8:9c:30:3b:06:18:7b:a5:17:
3d:32:23:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxDBh2sqbDRPSWzBFeZoQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMwMTAyMDU1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjlkNmYzYTA5YmRhOWM3MTBlYTkxMjhjYjAzOTMzNzJmYWZmODg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilEFA0WTb044ndezO7lCoV1m66c+
7nOhxcE1LRBTFnFgStG5X7h+gMqV5P3o+bEPy4xcedCn3bMxvLZ9KqhxJjDDEHkK
JVJ04n7RFOF3GJeEzQhnWbhLijUJHezbL2Fdh64CKYzvjkKVrwhnAEKA9rGg6WOM
uXJJdR/6h2dr3jEIsCvxbQaZaK6hV7rUIMfSh6GV2/odDnBagOEzhwDEJV7c2iPc
jWaDsbkfTVMPnG8wbUfbvWTRu5k1t+AGWQrn8SA2kCpfjhH3EOw8PyfPdiH+DOQL
CuCo4LZeHz9mjVukpnKxfycuHBII7mieCBrsiSiZU3xBgj8yQE3cQBoy6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA+dbzoJvanHEOqRKMsDkzcvr/iIMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvRDUxdk9nbTlxY2NRNnBFb3l3T1ROeS12LUlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQDJMA0G
CSqGSIb3DQEBCwUAA4IBAQAEMg7R1wyawzgs4I1Sm7ajSq+LyqHIsmzvVEg+zwYc
r+tsd7J+i0V5QZAY7VvPe2UaXQVjg1AfUvbMEMOIfQ3Eo6cq4W+NGZnIPdpcaw0p
RXnULTGfx1kkrG75VyyoaEmog9EAvL1lDj5FX7tPmapZxEDyLH/YGNeVg+/m7P2R
XpoPj7PW8NpLYnn99KNMYb1Xsj/RSfRqr6hXHj/RuKsT2nfV65/GyZGi9oD9877C
wnu4qtfZfVxQkim5HMT0HdLlS7A1amIY/+DQ6n9TKn6BDByezLXMA3tULEB0pNhE
LVwV8mq7G+Pe9qsLZMWMW/9jIUaonDA7Bhh7pRc9MiN0
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org