Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OvvK4BRdOMNZOEcGonyXeUO_PIc.roa
File: OvvK4BRdOMNZOEcGonyXeUO_PIc.roa (raw, json)
Hash identifier: 3rQhZJn2DaPaLV0gNIsvKSMfTAu3vLDTPJ2+WFMjUOc=
Subject key identifier: 3A:FB:CA:E0:14:5D:38:C3:59:38:47:06:A2:7C:97:79:43:BF:3C:87
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 01856F5DB93C350FD5A8C6CE77DBAD9E1A40
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OvvK4BRdOMNZOEcGonyXeUO_PIc.roa
Signing time: Sun 01 Jan 2023 22:04:51 +0000
ROA not before: Sun 01 Jan 2023 22:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5408
IP address blocks: 193.218.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:b9:3c:35:0f:d5:a8:c6:ce:77:db:ad:9e:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Jan 1 22:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3afbcae0145d38c359384706a27c977943bf3c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:27:26:7d:4f:02:c6:b5:b0:ed:b3:0e:ee:
b0:d4:7d:a9:af:ee:aa:e5:00:61:e5:c3:43:e2:67:
8e:16:88:17:bf:01:ac:5e:0a:a2:7b:f6:fb:92:a6:
22:fb:d4:18:58:01:98:00:7a:6c:d2:97:06:a4:e5:
46:28:90:cf:4d:bc:8b:8f:32:d6:27:20:41:5e:d5:
52:01:84:79:7c:aa:04:88:ad:21:a4:f0:20:5f:3f:
ee:f7:27:37:e0:61:cb:31:6f:27:ac:8f:c8:ca:5b:
a0:7b:13:61:22:d0:af:5d:8e:c4:d7:47:e3:53:45:
61:1c:1d:8a:8d:1b:a6:01:9b:cf:04:70:9d:db:fb:
87:0a:c2:5b:e9:1f:d3:00:5f:f2:b2:a1:61:32:57:
e4:a1:2f:5d:43:fb:39:67:f2:80:16:56:8d:e9:22:
49:7d:ca:68:b5:b2:0b:fa:7a:bf:04:00:24:d2:26:
3e:33:57:13:8a:04:d6:6f:09:5a:81:1c:78:16:b9:
e1:59:fa:7f:2b:4a:da:c1:09:e8:df:b8:88:7f:a5:
2e:7a:74:7b:39:a2:10:ba:d7:6c:ab:d1:d9:d0:80:
e1:a1:ab:28:d5:f0:f9:80:d9:7b:94:c2:a1:b0:4d:
70:59:51:f4:15:1a:1a:1d:6d:27:a9:83:67:3d:97:
e7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FB:CA:E0:14:5D:38:C3:59:38:47:06:A2:7C:97:79:43:BF:3C:87
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OvvK4BRdOMNZOEcGonyXeUO_PIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.36.0/24
Signature Algorithm: sha256WithRSAEncryption
93:aa:e4:97:ca:6e:ca:c4:97:e5:bf:99:bf:06:a4:af:53:01:
98:69:7b:40:9e:aa:cb:d9:d1:88:43:6e:5b:dd:81:32:1d:e8:
84:48:83:c4:e6:81:a4:93:2f:19:85:c3:d5:fd:25:6e:a3:f7:
26:a5:9b:8a:ab:99:ee:62:c4:bf:e8:11:8f:c1:27:2c:87:d6:
38:48:99:eb:a8:11:7f:6e:5b:db:8e:33:66:fc:95:4f:38:db:
40:88:1d:3c:7c:89:76:bf:c3:89:7e:b8:68:6d:24:ac:28:fc:
55:cd:60:56:d6:e7:ea:1c:34:b6:35:c0:10:b0:85:d4:75:14:
7d:5c:e9:2f:1f:a2:de:ce:57:99:64:d7:5a:d1:26:28:e4:85:
f8:ef:eb:b3:21:48:d9:1f:25:c9:a9:32:69:ae:45:03:75:26:
6d:a6:dd:85:d4:d4:72:03:fc:d0:c2:00:55:88:8c:f3:d4:30:
93:15:68:e5:72:17:c1:e4:2e:e8:8b:67:0f:33:c5:08:1f:3a:
0b:b9:17:ca:8d:db:ae:44:a9:f1:81:49:eb:93:21:d0:16:45:
d7:c6:97:a2:28:59:c1:b8:98:9a:b5:cc:aa:5c:ff:66:16:e9:
62:a1:d3:13:c4:3b:59:e4:53:4d:16:60:8b:8d:21:46:96:3d:
08:33:f3:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXbk8NQ/VqMbOd9utnhpAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzdiNWE1MTU2YjVjNzJmZmMwZjljMGI3MTA0YmIxODhk
YmNiYmMwHhcNMjMwMTAxMjIwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYWZiY2FlMDE0NWQzOGMzNTkzODQ3MDZhMjdjOTc3OTQzYmYzYzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXcnJn1PAsa1sO2zDu6w1H2pr+6q
5QBh5cND4meOFogXvwGsXgqie/b7kqYi+9QYWAGYAHps0pcGpOVGKJDPTbyLjzLW
JyBBXtVSAYR5fKoEiK0hpPAgXz/u9yc34GHLMW8nrI/IylugexNhItCvXY7E10fj
U0VhHB2KjRumAZvPBHCd2/uHCsJb6R/TAF/ysqFhMlfkoS9dQ/s5Z/KAFlaN6SJJ
fcpotbIL+nq/BAAk0iY+M1cTigTWbwlagRx4FrnhWfp/K0rawQno37iIf6UuenR7
OaIQutdsq9HZ0IDhoaso1fD5gNl7lMKhsE1wWVH0FRoaHW0nqYNnPZfnCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDr7yuAUXTjDWThHBqJ8l3lDvzyHMB8GA1UdIwQY
MBaAFDk3taUVa1xy/8D5wLcQS7GI28u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTkt
ZGQxNDJhMTMzNWYwLzEvT3Z2SzRCUmRPTU5aT0VjR29ueVhlVU9fUEljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTktZGQxNDJhMTMzNWYw
LzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwdokMA0G
CSqGSIb3DQEBCwUAA4IBAQCTquSXym7KxJflv5m/BqSvUwGYaXtAnqrL2dGIQ25b
3YEyHeiESIPE5oGkky8ZhcPV/SVuo/cmpZuKq5nuYsS/6BGPwScsh9Y4SJnrqBF/
blvbjjNm/JVPONtAiB08fIl2v8OJfrhobSSsKPxVzWBW1ufqHDS2NcAQsIXUdRR9
XOkvH6LezleZZNda0SYo5IX47+uzIUjZHyXJqTJprkUDdSZtpt2F1NRyA/zQwgBV
iIzz1DCTFWjlchfB5C7oi2cPM8UIHzoLuRfKjduuRKnxgUnrkyHQFkXXxpeiKFnB
uJiatcyqXP9mFuliodMTxDtZ5FNNFmCLjSFGlj0IM/M3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:27 2024 by rpki-client on console-fra.rpki-client.org