Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/ODQFSWzSwhdxitMKjYn9eOCp-Ho.roa
File: ODQFSWzSwhdxitMKjYn9eOCp-Ho.roa (raw, json)
Hash identifier: VdZsO/p1gFl8X8iw7d2YL1KD4WjkfuFdsoZhdBleD34=
Subject key identifier: 38:34:05:49:6C:D2:C2:17:71:8A:D3:0A:8D:89:FD:78:E0:A9:F8:7A
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 0185711533C293C5C6CACC7A297DF15F2970
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/ODQFSWzSwhdxitMKjYn9eOCp-Ho.roa
Signing time: Mon 02 Jan 2023 06:04:53 +0000
ROA not before: Mon 02 Jan 2023 06:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41099
IP address blocks: 193.9.15.0/24 maxlen: 24
195.10.215.0/24 maxlen: 24
193.9.255.0/24 maxlen: 24
195.10.222.0/24 maxlen: 24
193.16.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:33:c2:93:c5:c6:ca:cc:7a:29:7d:f1:5f:29:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Jan 2 06:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=383405496cd2c217718ad30a8d89fd78e0a9f87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8e:4f:7e:ce:e2:12:67:ab:3e:56:ab:98:02:
5e:11:51:1a:29:7e:80:71:2d:a1:53:04:5d:b5:b9:
0f:76:58:d7:b3:bd:0c:c9:b2:e2:fe:cc:34:f1:9e:
b6:c4:30:6b:ee:70:ca:87:08:7b:b1:fe:d3:2a:b7:
5c:69:ab:59:6c:53:a9:7d:18:b1:a6:7e:0b:3d:d7:
dd:2c:94:0c:3a:02:2c:94:16:00:99:10:9e:c3:c1:
48:08:f9:5c:73:f7:6d:a3:58:82:44:19:62:3c:61:
d9:35:db:95:61:d3:06:d8:3e:a4:87:9b:b8:0c:56:
6b:4c:6a:a6:71:46:55:9a:cc:79:3c:82:05:19:50:
c3:14:4a:6c:a5:af:ef:6b:e1:7f:d8:ff:66:11:a5:
63:c3:e8:d6:7d:71:3a:c0:48:45:7b:36:3f:b7:8a:
8d:c0:24:27:11:5c:4c:87:b1:e7:d9:46:91:90:ff:
ee:41:fe:b9:c2:52:0c:ad:c5:c4:61:39:53:95:83:
9d:17:69:0b:71:90:9c:2e:56:ae:24:0b:9b:3b:b5:
50:fd:8a:0b:3c:7f:12:7a:9b:8e:6d:9f:03:58:0c:
43:28:d8:6b:27:68:42:07:2d:42:bb:f5:4e:f1:8a:
22:a1:5a:e4:6d:f1:a7:14:c0:51:14:f2:07:c2:c8:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:34:05:49:6C:D2:C2:17:71:8A:D3:0A:8D:89:FD:78:E0:A9:F8:7A
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/ODQFSWzSwhdxitMKjYn9eOCp-Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.15.0/24
193.9.255.0/24
193.16.0.0/24
195.10.215.0/24
195.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d9:77:a9:7e:f4:8c:79:0b:67:b1:55:6e:30:32:1b:47:64:
29:c5:72:8b:ad:cc:47:53:c8:7b:b8:00:a5:ac:59:51:61:e9:
70:14:ec:3a:b8:9c:c2:14:5a:00:ce:e8:83:7b:36:31:41:fe:
9d:d2:99:ce:e9:d7:5d:87:7e:cc:20:5c:5e:ca:f8:9c:d5:2a:
85:68:40:3a:c4:e9:4d:87:36:0f:bb:e2:92:fd:82:bd:ae:02:
43:4b:95:93:78:32:d1:c2:4d:b2:7c:4d:55:68:02:1a:ae:74:
1a:53:ec:85:68:2b:c5:69:dc:ae:c7:8d:94:22:82:b1:58:eb:
66:a8:09:23:94:f1:87:1f:a5:e2:eb:ea:5d:1a:dd:77:a1:8a:
88:a3:88:c5:6f:0a:7c:58:e6:65:bc:ef:06:de:c7:60:06:de:
81:e7:ef:30:0f:22:0c:9d:12:77:f1:f7:f0:ed:89:5f:23:6f:
64:19:0a:54:4f:58:87:6d:9c:6d:53:c0:8b:ac:91:db:e5:1c:
14:53:7e:f5:7e:10:d3:2e:ba:e0:29:8b:88:59:14:43:e9:06:
55:7e:13:0e:44:df:72:97:11:30:fe:73:42:82:70:52:c5:e1:
95:85:8a:7d:a3:63:34:46:49:35:c1:5f:7e:0a:28:42:33:ea:
a6:e4:7b:ed
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVxFTPCk8XGysx6KX3xXylwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkNDQyYmRkYTJhMzUzMjBhOTZkODA2YmYxNjhkNWI4NGE3
NmQ0MjYwHhcNMjMwMTAyMDYwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODM0MDU0OTZjZDJjMjE3NzE4YWQzMGE4ZDg5ZmQ3OGUwYTlmODdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI5Pfs7iEmerPlarmAJeEVEaKX6A
cS2hUwRdtbkPdljXs70MybLi/sw08Z62xDBr7nDKhwh7sf7TKrdcaatZbFOpfRix
pn4LPdfdLJQMOgIslBYAmRCew8FICPlcc/dto1iCRBliPGHZNduVYdMG2D6kh5u4
DFZrTGqmcUZVmsx5PIIFGVDDFEpspa/va+F/2P9mEaVjw+jWfXE6wEhFezY/t4qN
wCQnEVxMh7Hn2UaRkP/uQf65wlIMrcXEYTlTlYOdF2kLcZCcLlauJAubO7VQ/YoL
PH8SepuObZ8DWAxDKNhrJ2hCBy1Cu/VO8YoioVrkbfGnFMBRFPIHwsiEsQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDg0BUls0sIXcYrTCo2J/Xjgqfh6MB8GA1UdIwQY
MBaAFK1EK92io1MgqW2Aa/Fo1bhKdtQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclVRcjNhS2pVeUNwYllCcjhXalZ1RXAyMUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9kZDY3MmQtZTk4MC00ZGNhLTkxOTUt
ODU5ZGJjYTM4NzE0LzEvT0RRRlNXelN3aGR4aXRNS2pZbjllT0NwLUhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9kZDY3MmQtZTk4MC00ZGNhLTkxOTUtODU5ZGJjYTM4NzE0
LzEvclVRcjNhS2pVeUNwYllCcjhXalZ1RXAyMUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwQkPAwQA
wQn/AwQAwRAAAwQAwwrXAwQAwwreMA0GCSqGSIb3DQEBCwUAA4IBAQBB2XepfvSM
eQtnsVVuMDIbR2QpxXKLrcxHU8h7uAClrFlRYelwFOw6uJzCFFoAzuiDezYxQf6d
0pnO6dddh37MIFxeyvic1SqFaEA6xOlNhzYPu+KS/YK9rgJDS5WTeDLRwk2yfE1V
aAIarnQaU+yFaCvFadyux42UIoKxWOtmqAkjlPGHH6Xi6+pdGt13oYqIo4jFbwp8
WOZlvO8G3sdgBt6B5+8wDyIMnRJ38ffw7YlfI29kGQpUT1iHbZxtU8CLrJHb5RwU
U371fhDTLrrgKYuIWRRD6QZVfhMORN9ylxEw/nNCgnBSxeGVhYp9o2M0Rkk1wV9+
CihCM+qm5Hvt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:48 2024 by rpki-client on console-fra.rpki-client.org