Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/1E15gOzzg9UWLMbqV-tstVFJJn4.roa
File: 1E15gOzzg9UWLMbqV-tstVFJJn4.roa (raw, json)
Hash identifier: AdF8Ytp6KPlXFWbrSC9Vx62tPKzwLpj6qRCSJBP5Ytg=
Subject key identifier: D4:4D:79:80:EC:F3:83:D5:16:2C:C6:EA:57:EB:6C:B5:51:49:26:7E
Certificate issuer: /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Certificate serial: 01856FC27E0C3C6FBD40D91B40AD98EE25D3
Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/1E15gOzzg9UWLMbqV-tstVFJJn4.roa
Signing time: Sun 01 Jan 2023 23:54:55 +0000
ROA not before: Sun 01 Jan 2023 23:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8495
IP address blocks: 193.25.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:7e:0c:3c:6f:bd:40:d9:1b:40:ad:98:ee:25:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Validity
Not Before: Jan 1 23:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d44d7980ecf383d5162cc6ea57eb6cb55149267e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:4a:56:74:55:e9:5f:8e:60:af:70:b0:ae:
1a:d6:a8:81:9c:f2:3b:1a:42:e7:91:45:da:b9:76:
cc:c4:fc:f6:cf:89:ae:33:bb:67:44:cb:9f:d4:96:
d4:44:49:1d:b4:4f:62:c2:04:e6:17:ba:96:7a:61:
33:d4:08:8f:e8:a6:46:e7:e1:67:30:be:67:59:9b:
de:0f:8b:2d:15:58:d4:5b:62:d3:34:af:78:3b:37:
f3:4e:d1:bd:17:32:fd:10:7d:c6:42:3c:24:0d:f2:
4b:76:9a:ac:d3:d5:df:50:71:f9:4a:55:ef:5d:f7:
b3:05:cd:51:36:0b:fa:20:9f:ef:e7:be:06:63:4d:
02:d1:14:91:e3:b5:51:0a:a7:7e:6b:c8:be:bd:57:
d7:a7:9b:90:79:3b:9d:c4:a0:b4:81:96:1f:36:e3:
a2:3c:63:16:1a:79:f7:a6:4e:99:c6:ce:61:45:9e:
a3:16:9d:5c:ca:40:b0:54:fd:d3:73:33:4d:1a:6f:
77:f8:08:23:55:fc:6a:04:31:c8:ce:49:dc:08:a7:
2c:1b:11:b1:fb:d7:d2:6c:ca:e3:39:07:7d:5a:ea:
69:ba:7e:cf:71:ba:36:0d:40:22:9a:55:9c:55:55:
ba:e5:4c:73:3e:f9:8c:12:08:4a:1c:88:2a:fb:52:
dc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4D:79:80:EC:F3:83:D5:16:2C:C6:EA:57:EB:6C:B5:51:49:26:7E
X509v3 Authority Key Identifier:
keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/1E15gOzzg9UWLMbqV-tstVFJJn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.172.0/24
Signature Algorithm: sha256WithRSAEncryption
77:1b:20:b0:99:93:90:65:e6:7c:52:de:27:57:f3:82:2f:45:
f6:c3:4c:f7:6b:98:cf:9e:ec:0a:1e:98:81:86:c9:cc:a8:ed:
49:3f:1a:ff:fa:8e:77:c7:31:8a:5b:2d:86:95:4c:8e:8c:d8:
fd:fd:66:64:d7:56:28:ba:54:2a:46:27:90:00:7a:99:fb:b0:
7e:36:25:b8:32:4f:b8:53:b4:82:43:7b:ff:80:cb:b0:b4:58:
ea:54:86:bd:d6:c1:8d:86:63:59:16:f7:f6:98:41:fb:98:d8:
5e:59:21:bd:b1:fa:b0:1a:a4:a0:43:33:d8:a6:ed:67:9e:de:
9e:f8:4b:72:1e:4a:96:a5:7f:da:01:8d:ef:eb:75:e1:6a:cf:
13:b0:5b:c5:11:a8:3a:3a:5d:b5:71:7f:8c:10:08:ac:23:69:
d7:76:c3:46:8e:b7:1c:09:4c:f5:0a:c5:f1:ca:e8:fd:07:b3:
fe:59:8c:c3:c0:8f:e3:a9:6f:77:d4:ae:9a:90:f2:37:fd:6f:
3c:94:f5:7b:04:1b:16:f1:0e:bd:0d:bf:c8:99:78:a3:cd:17:
44:8d:61:1c:91:5a:35:15:f4:5e:28:29:1a:ea:14:1a:57:60:
62:c8:f6:fa:3d:8a:c0:e7:bc:32:d4:2d:95:0c:3f:55:f3:b5:
84:4b:04:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvwn4MPG+9QNkbQK2Y7iXTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTgzZDYxZjJlNTdhNmIxNmVhNGIxYTljYTI3YmIyNTBk
NzQ4ZWYwHhcNMjMwMTAxMjM1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDRkNzk4MGVjZjM4M2Q1MTYyY2M2ZWE1N2ViNmNiNTUxNDkyNjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEtKVnRV6V+OYK9wsK4a1qiBnPI7
GkLnkUXauXbMxPz2z4muM7tnRMuf1JbUREkdtE9iwgTmF7qWemEz1AiP6KZG5+Fn
ML5nWZveD4stFVjUW2LTNK94OzfzTtG9FzL9EH3GQjwkDfJLdpqs09XfUHH5SlXv
XfezBc1RNgv6IJ/v574GY00C0RSR47VRCqd+a8i+vVfXp5uQeTudxKC0gZYfNuOi
PGMWGnn3pk6Zxs5hRZ6jFp1cykCwVP3TczNNGm93+AgjVfxqBDHIzkncCKcsGxGx
+9fSbMrjOQd9Wuppun7Pcbo2DUAimlWcVVW65UxzPvmMEghKHIgq+1LcjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNRNeYDs84PVFizG6lfrbLVRSSZ+MB8GA1UdIwQY
MBaAFOpYPWHy5XprFupLGpyie7JQ10jvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxnOVlmTGxlbXNXNmtzYW5LSjdzbERYU084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZjUxMjgtN2NiYS00OWM1LTliMjUt
OTljMWIwY2ZjM2E4LzEvMUUxNWdPenpnOVVXTE1icVYtdHN0VkZKSm40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82ZjUxMjgtN2NiYS00OWM1LTliMjUtOTljMWIwY2ZjM2E4
LzEvNmxnOVlmTGxlbXNXNmtzYW5LSjdzbERYU084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRmsMA0G
CSqGSIb3DQEBCwUAA4IBAQB3GyCwmZOQZeZ8Ut4nV/OCL0X2w0z3a5jPnuwKHpiB
hsnMqO1JPxr/+o53xzGKWy2GlUyOjNj9/WZk11YoulQqRieQAHqZ+7B+NiW4Mk+4
U7SCQ3v/gMuwtFjqVIa91sGNhmNZFvf2mEH7mNheWSG9sfqwGqSgQzPYpu1nnt6e
+EtyHkqWpX/aAY3v63Xhas8TsFvFEag6Ol21cX+MEAisI2nXdsNGjrccCUz1CsXx
yuj9B7P+WYzDwI/jqW931K6akPI3/W88lPV7BBsW8Q69Db/ImXijzRdEjWEckVo1
FfReKCka6hQaV2BiyPb6PYrA57wy1C2VDD9V87WESwSI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:17 2024 by rpki-client on console-fra.rpki-client.org