Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/iqn6uRc-yo0jDciPF6Gj0oPm2os.roa
File: iqn6uRc-yo0jDciPF6Gj0oPm2os.roa (raw, json)
Hash identifier: QFn9av7ZYsAjbz6/gS6UEEHClQeegps5i8HeuPZlYuc=
Subject key identifier: 8A:A9:FA:B9:17:3E:CA:8D:23:0D:C8:8F:17:A1:A3:D2:83:E6:DA:8B
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 01857295B64E3376954206F48F71C50CC70D
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/iqn6uRc-yo0jDciPF6Gj0oPm2os.roa
Signing time: Mon 02 Jan 2023 13:04:52 +0000
ROA not before: Mon 02 Jan 2023 13:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28853
IP address blocks: 193.138.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:b6:4e:33:76:95:42:06:f4:8f:71:c5:0c:c7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Jan 2 13:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8aa9fab9173eca8d230dc88f17a1a3d283e6da8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:07:5c:3b:cc:0f:e8:8e:f2:a2:f1:80:99:
42:c7:72:cc:d0:cc:72:43:5a:3e:74:ab:00:91:b2:
1b:61:f3:80:f9:9f:4b:40:3f:86:ff:5f:0b:a5:3d:
3c:30:9e:2d:d2:ad:be:4d:14:40:eb:20:e4:af:f3:
ae:b9:21:fb:24:f4:00:eb:c2:cf:23:89:e3:1c:7f:
5e:5d:0d:08:96:61:90:7c:23:53:2f:f3:a0:91:d8:
4d:27:a8:7b:cb:8e:86:26:7c:4f:29:71:1e:a9:17:
e6:a3:7e:79:d8:7b:0f:3f:49:e8:30:e2:25:05:2a:
47:6f:24:f6:a7:fb:f2:c8:e3:20:5b:5d:59:13:cc:
35:90:93:f9:4f:81:1f:6d:28:0b:40:c5:70:90:9d:
1c:03:1b:f5:70:42:26:e2:07:64:95:cf:52:0e:40:
16:3f:5f:af:92:d9:56:69:75:a5:ca:59:78:3e:13:
68:df:1c:6a:fa:fb:0d:ff:11:88:39:49:a8:0e:be:
5e:37:90:99:e3:3e:55:ff:53:ca:ba:9a:d9:b4:59:
fa:14:ac:7d:09:13:d1:54:68:74:df:6c:43:61:9f:
55:dd:eb:4c:e1:b4:3b:1a:2c:6a:6f:da:2e:8a:f9:
4c:ce:cb:ea:ad:69:6e:8b:a7:96:9b:d8:33:44:2f:
39:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A9:FA:B9:17:3E:CA:8D:23:0D:C8:8F:17:A1:A3:D2:83:E6:DA:8B
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/iqn6uRc-yo0jDciPF6Gj0oPm2os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.103.0/24
Signature Algorithm: sha256WithRSAEncryption
72:9b:a0:f2:a0:9c:d6:1b:3c:c6:63:90:96:fa:b3:2d:61:e5:
05:c0:ae:da:10:9d:9d:a6:5d:14:2f:2c:87:81:18:eb:ac:93:
0f:eb:7c:59:ef:63:1a:73:44:fa:61:8d:ff:b3:8f:eb:92:b5:
47:eb:f2:2c:1d:ac:6d:06:30:be:dc:b4:77:72:ac:90:f2:08:
17:ce:be:b3:5b:90:bc:85:c8:e0:0e:df:d3:58:d6:0e:11:1c:
11:2c:80:af:2c:5c:5f:35:eb:dd:3b:0f:b8:d2:58:b7:32:a1:
8d:75:16:dd:fd:4d:ee:22:3a:c9:41:1b:6d:b5:c6:10:0d:1a:
c7:a4:ac:24:60:dc:b6:3e:27:46:0d:1f:25:17:27:0e:02:0c:
c2:d2:68:2f:e6:ec:f5:11:e7:4f:67:f2:7e:7e:d1:30:28:13:
05:92:e2:cb:2d:74:3e:0b:94:99:12:db:08:75:6f:b4:6b:cf:
76:1d:a5:fb:bb:53:f2:90:7d:5e:73:8f:42:40:91:dd:52:78:
8c:a5:74:04:27:17:fc:1f:37:17:07:ae:40:11:69:89:00:c9:
19:fe:b5:4e:27:5f:66:e8:1c:35:81:af:72:a6:e3:e1:d7:f7:
a1:59:07:25:c6:72:57:af:2f:ba:a3:36:62:34:1f:e9:a4:02:
30:61:69:6e
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVylbZOM3aVQgb0j3HFDMcNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OWRmNTYyNDhmOTc3N2ZhMjJkNWRhNmMwNGI1ZmIzMzJh
NGIzNTAwHhcNMjMwMTAyMTMwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWE5ZmFiOTE3M2VjYThkMjMwZGM4OGYxN2ExYTNkMjgzZTZkYThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcEHXDvMD+iO8qLxgJlCx3LM0Mxy
Q1o+dKsAkbIbYfOA+Z9LQD+G/18LpT08MJ4t0q2+TRRA6yDkr/OuuSH7JPQA68LP
I4njHH9eXQ0IlmGQfCNTL/OgkdhNJ6h7y46GJnxPKXEeqRfmo3552HsPP0noMOIl
BSpHbyT2p/vyyOMgW11ZE8w1kJP5T4EfbSgLQMVwkJ0cAxv1cEIm4gdklc9SDkAW
P1+vktlWaXWlyll4PhNo3xxq+vsN/xGIOUmoDr5eN5CZ4z5V/1PKuprZtFn6FKx9
CRPRVGh032xDYZ9V3etM4bQ7Gixqb9ouivlMzsvqrWlui6eWm9gzRC85VwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFIqp+rkXPsqNIw3Ijxeho9KD5tqLMB8GA1UdIwQY
MBaAFPid9WJI+Xd/oi1dpsBLX7MypLNQMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KMzFZa2o1ZDMtaUxWMm13RXRmc3pLa3MxQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvZDQ2ZDI1LTVkOGYtNDk4OS1iNTU3
LWMxNmJhZWRmNmZhNi8xL2lxbjZ1UmMteW8wakRjaVBGNkdqMG9QbTJvcy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzUvZDQ2ZDI1LTVkOGYtNDk4OS1iNTU3LWMxNmJhZWRmNmZh
Ni8xLzEtSjMxWWtqNWQzLWlMVjJtd0V0ZnN6S2tzMUEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBimcw
DQYJKoZIhvcNAQELBQADggEBAHKboPKgnNYbPMZjkJb6sy1h5QXArtoQnZ2mXRQv
LIeBGOuskw/rfFnvYxpzRPphjf+zj+uStUfr8iwdrG0GML7ctHdyrJDyCBfOvrNb
kLyFyOAO39NY1g4RHBEsgK8sXF816907D7jSWLcyoY11Ft39Te4iOslBG221xhAN
GsekrCRg3LY+J0YNHyUXJw4CDMLSaC/m7PUR509n8n5+0TAoEwWS4sstdD4LlJkS
2wh1b7Rrz3Ydpfu7U/KQfV5zj0JAkd1SeIyldAQnF/wfNxcHrkARaYkAyRn+tU4n
X2boHDWBr3Km4+HX96FZByXGclevL7qjNmI0H+mkAjBhaW4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:14 2024 by rpki-client on console-ams.rpki-client.org