Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/a8pjZ4oYmXNWuU-5qNGN3CIQGBs.roa
File: a8pjZ4oYmXNWuU-5qNGN3CIQGBs.roa (raw, json)
Hash identifier: xcxTJu1nEINKYufmNV4lSvR1KmamP8qBhiJbyPtNGKg=
Subject key identifier: 6B:CA:63:67:8A:18:99:73:56:B9:4F:B9:A8:D1:8D:DC:22:10:18:1B
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01877B5468D18E892EBA23D6BED8FEE07D0E
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/a8pjZ4oYmXNWuU-5qNGN3CIQGBs.roa
Signing time: Thu 13 Apr 2023 15:55:42 +0000
ROA not before: Thu 13 Apr 2023 15:55:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209728
IP address blocks: 193.34.235.0/24 maxlen: 24
193.168.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:54:68:d1:8e:89:2e:ba:23:d6:be:d8:fe:e0:7d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Apr 13 15:55:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bca63678a18997356b94fb9a8d18ddc2210181b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ff:21:b6:32:af:0a:8d:eb:51:60:61:9c:8d:
8e:f9:e0:14:6d:fa:86:bc:7f:68:49:59:cb:b4:43:
31:d0:8d:e1:92:a1:9d:13:2b:56:25:b5:90:02:12:
c4:c4:f4:95:36:1a:0e:c8:aa:a6:97:20:6d:7d:e7:
82:a2:f3:88:9d:00:f8:43:b7:db:56:80:fa:d3:e8:
47:55:38:c9:b5:bc:a8:f5:83:30:7a:1e:49:18:e0:
15:f5:2a:38:41:28:93:98:3a:4d:d5:77:72:9a:fe:
61:ba:9c:52:52:6f:85:ea:6d:6a:27:a3:cc:98:b3:
e9:f1:88:f2:a8:48:d9:ab:bd:ce:8d:4c:78:3e:ae:
fd:cc:4e:b1:96:cd:bd:4a:a7:dd:7a:1b:d0:f4:04:
21:11:4a:66:68:de:d1:54:c1:4d:10:bb:b5:f1:31:
d5:d0:36:e6:1e:a1:a5:30:c5:ab:9a:fd:65:f5:dd:
98:86:a5:69:38:41:fa:44:61:42:52:75:df:ad:98:
aa:97:eb:bd:94:71:68:05:32:21:80:9d:ef:53:88:
9b:99:ca:b4:10:60:4d:1a:91:9d:19:01:30:fe:a0:
34:2a:3e:82:b5:d6:c0:b8:4d:f8:00:b7:4a:59:cf:
56:fc:0e:d3:ba:d8:6b:ac:cb:18:ae:f9:0f:f7:43:
46:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CA:63:67:8A:18:99:73:56:B9:4F:B9:A8:D1:8D:DC:22:10:18:1B
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/a8pjZ4oYmXNWuU-5qNGN3CIQGBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.235.0/24
193.168.225.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:a3:11:29:2f:7c:15:6c:14:90:3a:1e:3c:9a:e5:16:d8:85:
f9:01:ec:42:4c:5e:10:6f:a8:c0:7c:d9:ec:fe:46:f5:32:35:
27:18:20:72:47:78:68:ed:69:f6:3b:ab:ec:5a:c4:58:30:bc:
7b:ea:89:fa:ce:93:d1:76:50:f0:d1:93:25:74:9a:9f:0a:f3:
38:99:b7:c9:aa:8f:22:20:f8:f0:37:f3:36:59:cf:70:aa:89:
3d:fa:00:ca:07:c1:80:72:f2:f8:7a:c7:b1:b6:56:2b:50:b1:
0e:18:0c:8e:17:ab:6a:9c:3f:11:23:eb:8e:28:f1:5d:88:b9:
b3:ec:f3:30:4d:fe:2e:90:b6:6c:40:39:1a:4e:c5:94:f1:64:
be:5a:06:f8:a7:d5:38:36:6c:2a:98:60:83:95:da:4e:48:68:
39:fd:27:c5:56:98:47:86:d6:9b:b5:b0:b0:c2:bb:35:92:d6:
ef:a8:03:e1:77:c3:61:5e:a4:91:71:6a:b4:a3:7e:f5:21:f4:
c1:22:35:d7:af:29:64:6a:ed:d2:53:02:35:23:14:a8:56:49:
b8:91:a6:e7:73:1c:e4:c3:60:e3:df:9f:13:8a:51:4c:de:da:
3f:79:c4:9e:ec:27:20:27:25:20:59:e8:cd:80:a5:5e:cb:d3:
4c:fd:ef:27
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYd7VGjRjokuuiPWvtj+4H0OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMwNDEzMTU1NTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmNhNjM2NzhhMTg5OTczNTZiOTRmYjlhOGQxOGRkYzIyMTAxODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf8htjKvCo3rUWBhnI2O+eAUbfqG
vH9oSVnLtEMx0I3hkqGdEytWJbWQAhLExPSVNhoOyKqmlyBtfeeCovOInQD4Q7fb
VoD60+hHVTjJtbyo9YMweh5JGOAV9So4QSiTmDpN1Xdymv5hupxSUm+F6m1qJ6PM
mLPp8YjyqEjZq73OjUx4Pq79zE6xls29SqfdehvQ9AQhEUpmaN7RVMFNELu18THV
0DbmHqGlMMWrmv1l9d2YhqVpOEH6RGFCUnXfrZiql+u9lHFoBTIhgJ3vU4ibmcq0
EGBNGpGdGQEw/qA0Kj6CtdbAuE34ALdKWc9W/A7TuthrrMsYrvkP90NG8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGvKY2eKGJlzVrlPuajRjdwiEBgbMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvYThwalo0b1ltWE5XdVUtNXFOR04zQ0lRR0JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwSLrAwQA
wajhMA0GCSqGSIb3DQEBCwUAA4IBAQCsoxEpL3wVbBSQOh48muUW2IX5AexCTF4Q
b6jAfNns/kb1MjUnGCByR3ho7Wn2O6vsWsRYMLx76on6zpPRdlDw0ZMldJqfCvM4
mbfJqo8iIPjwN/M2Wc9wqok9+gDKB8GAcvL4esextlYrULEOGAyOF6tqnD8RI+uO
KPFdiLmz7PMwTf4ukLZsQDkaTsWU8WS+Wgb4p9U4NmwqmGCDldpOSGg5/SfFVphH
htabtbCwwrs1ktbvqAPhd8NhXqSRcWq0o371IfTBIjXXrylkau3SUwI1IxSoVkm4
kabncxzkw2Dj358TilFM3to/ecSe7CcgJyUgWejNgKVey9NM/e8n
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org