Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/wAZ3lSx_sU1wmv3gQriOqCdxPRk.roa
File: wAZ3lSx_sU1wmv3gQriOqCdxPRk.roa (raw, json)
Hash identifier: L+fEC59qTsJ6HoXF5mDDZfHWoq9067w5yR7SB+Ejx58=
Subject key identifier: C0:06:77:95:2C:7F:B1:4D:70:9A:FD:E0:42:B8:8E:A8:27:71:3D:19
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 0185729EFE8566635558C923CA84C1A0930E
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/wAZ3lSx_sU1wmv3gQriOqCdxPRk.roa
Signing time: Mon 02 Jan 2023 13:15:00 +0000
ROA not before: Mon 02 Jan 2023 13:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212707
IP address blocks: 193.163.47.0/24 maxlen: 24
2a10:5bc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:fe:85:66:63:55:58:c9:23:ca:84:c1:a0:93:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Jan 2 13:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c00677952c7fb14d709afde042b88ea827713d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e9:98:e8:38:e0:0f:f3:7f:3f:d8:e6:8e:3d:
52:29:ba:dd:f5:bd:b4:1c:17:e9:db:26:6c:e1:fd:
16:c8:18:20:ad:69:3b:ea:e6:33:87:83:2d:30:12:
9a:0c:f8:e2:e3:77:48:d6:bd:00:40:9e:e0:98:8a:
07:be:55:14:07:e8:06:12:09:e0:0a:02:74:4a:75:
e0:6c:82:b4:90:0f:8c:eb:10:89:1e:33:73:c2:a4:
93:02:ff:e2:6c:4c:2b:9f:60:60:7f:b3:0d:ed:ac:
d7:aa:fe:a6:b9:66:ab:67:04:31:63:13:1f:f7:5a:
c9:00:53:3d:fb:c6:a4:3d:2f:70:9c:ff:69:30:1c:
9f:fa:0f:6f:44:a5:ef:44:ee:92:c1:1d:5a:12:4d:
c9:c1:a2:ea:37:a8:e2:99:86:d7:57:f0:1e:3a:57:
f9:74:95:fc:57:ca:46:3a:7b:25:0b:47:46:a0:ec:
5a:34:41:a7:75:97:c6:64:b1:52:40:cd:0c:0d:45:
6d:2b:dc:ff:a7:78:e3:a2:df:f9:ab:27:7e:f3:de:
95:77:f5:34:a0:a5:be:f3:e9:4f:9d:24:9e:13:5e:
b0:43:13:c8:79:d1:89:59:c7:a0:ee:44:ae:83:3b:
86:81:a4:27:c0:89:55:07:45:14:b8:dc:35:6e:89:
38:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:06:77:95:2C:7F:B1:4D:70:9A:FD:E0:42:B8:8E:A8:27:71:3D:19
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/wAZ3lSx_sU1wmv3gQriOqCdxPRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.47.0/24
IPv6:
2a10:5bc0::/29
Signature Algorithm: sha256WithRSAEncryption
19:9a:36:53:99:b2:24:bd:98:a8:4f:32:2f:bd:c2:74:4f:cb:
ff:6b:8c:c0:1a:93:d3:73:1c:b4:cd:78:de:92:32:10:26:57:
ba:9b:2b:72:f2:f7:45:d0:b6:76:05:13:48:98:aa:8c:ef:b2:
86:0f:ee:47:11:b3:56:7a:99:67:d2:b4:d0:2a:96:fc:31:8a:
82:f4:d0:fa:ad:89:ec:65:9d:7a:b4:fd:7d:fb:ca:0d:f7:21:
af:88:0c:83:f3:98:49:49:1d:7a:b6:df:4b:e3:0b:2b:17:fa:
52:2e:56:3e:88:dc:68:7b:fc:90:f0:05:44:9f:eb:65:92:a9:
79:d8:d5:47:b8:98:a8:2b:65:3b:5c:d3:a1:69:2b:41:0f:eb:
9f:37:cf:52:35:33:5a:12:fc:78:d0:00:64:02:f7:a9:67:87:
52:36:24:7e:ce:f9:29:bf:65:a7:2b:0a:77:d8:38:b1:21:eb:
99:d2:56:71:31:8c:a8:27:30:43:5d:10:5b:46:9e:97:ce:8c:
87:26:fa:21:8b:2b:27:b8:dc:af:81:a3:a9:87:33:9a:ee:87:
dc:35:2f:ce:75:d9:7c:2b:84:c2:9b:96:c7:0d:ac:56:dd:8d:
db:f6:31:33:9a:9f:ce:fb:d8:c7:94:ad:58:0a:9b:91:1e:31:
5e:51:5a:27
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVynv6FZmNVWMkjyoTBoJMOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZGEwMTk2MDk2YzExYzIzMWU0OWJiMzA4OTY3MGI5NGRi
ZjVlODAwHhcNMjMwMTAyMTMxNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDA2Nzc5NTJjN2ZiMTRkNzA5YWZkZTA0MmI4OGVhODI3NzEzZDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+mY6DjgD/N/P9jmjj1SKbrd9b20
HBfp2yZs4f0WyBggrWk76uYzh4MtMBKaDPji43dI1r0AQJ7gmIoHvlUUB+gGEgng
CgJ0SnXgbIK0kA+M6xCJHjNzwqSTAv/ibEwrn2Bgf7MN7azXqv6muWarZwQxYxMf
91rJAFM9+8akPS9wnP9pMByf+g9vRKXvRO6SwR1aEk3JwaLqN6jimYbXV/AeOlf5
dJX8V8pGOnslC0dGoOxaNEGndZfGZLFSQM0MDUVtK9z/p3jjot/5qyd+896Vd/U0
oKW+8+lPnSSeE16wQxPIedGJWceg7kSugzuGgaQnwIlVB0UUuNw1bok4JQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMAGd5Usf7FNcJr94EK4jqgncT0ZMB8GA1UdIwQY
MBaAFKPaAZYJbBHCMeSbswiWcLlNv16AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYt
YTMwMmY2YTc0YjA4LzEvd0FaM2xTeF9zVTF3bXYzZ1FyaU9xQ2R4UFJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83ZDk4NTQtOTY5ZS00ZTM0LWExZGYtYTMwMmY2YTc0YjA4
LzEvbzlvQmxnbHNFY0l4NUp1ekNKWnd1VTJfWG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwaMvMA0E
AgACMAcDBQMqEFvAMA0GCSqGSIb3DQEBCwUAA4IBAQAZmjZTmbIkvZioTzIvvcJ0
T8v/a4zAGpPTcxy0zXjekjIQJle6myty8vdF0LZ2BRNImKqM77KGD+5HEbNWepln
0rTQKpb8MYqC9ND6rYnsZZ16tP19+8oN9yGviAyD85hJSR16tt9L4wsrF/pSLlY+
iNxoe/yQ8AVEn+tlkql52NVHuJioK2U7XNOhaStBD+ufN89SNTNaEvx40ABkAvep
Z4dSNiR+zvkpv2WnKwp32DixIeuZ0lZxMYyoJzBDXRBbRp6XzoyHJvohiysnuNyv
gaOphzOa7ofcNS/Oddl8K4TCm5bHDaxW3Y3b9jEzmp/O+9jHlK1YCpuRHjFeUVon
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:31 2024 by rpki-client on console-ams.rpki-client.org