Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7SmvydavEcG0BUeL3NVooYf_siQ.roa
File: 7SmvydavEcG0BUeL3NVooYf_siQ.roa (raw, json)
Hash identifier: 9sPJZ47wafOObH/4xaPWkUz/KnIxRAuVMKoXQ4ZJa2Q=
Subject key identifier: ED:29:AF:C9:D6:AF:11:C1:B4:05:47:8B:DC:D5:68:A1:87:FF:B2:24
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018793E9BC8CBCCC40ADE0BE244A7D2A0AB8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7SmvydavEcG0BUeL3NVooYf_siQ.roa
Signing time: Tue 18 Apr 2023 10:29:41 +0000
ROA not before: Tue 18 Apr 2023 10:29:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 193.58.146.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 19 Apr 2023 08:50:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:e9:bc:8c:bc:cc:40:ad:e0:be:24:4a:7d:2a:0a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 18 10:29:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed29afc9d6af11c1b405478bdcd568a187ffb224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6e:c3:0e:5d:c4:47:e2:ca:b0:07:ae:68:a2:
2b:df:92:a0:53:c6:d6:b6:b2:e7:e4:bf:68:18:6b:
db:b4:26:60:e4:ca:6e:6f:6c:2c:b8:5f:5a:62:27:
e1:34:6e:a2:bc:77:4a:31:31:55:46:85:af:b0:e5:
83:87:70:cc:6d:2b:a7:0e:f2:8e:7d:2c:81:c2:c5:
17:ee:c1:64:6f:f3:24:22:80:af:61:e7:2e:67:53:
bd:5e:32:fa:f3:69:ce:68:2d:f6:d8:5b:cc:0c:42:
e1:88:d7:62:08:09:95:2e:37:41:73:43:c4:3b:09:
c3:40:1c:f8:8c:75:40:bd:20:15:83:63:72:98:05:
e4:0a:20:ee:aa:6c:2f:6b:3a:62:a1:f4:26:1e:8a:
7c:9d:7a:87:f8:8a:66:da:fc:2d:6f:d3:92:47:25:
17:4b:a3:fa:aa:00:8c:11:47:80:9b:26:2e:92:d4:
d2:9c:db:60:1b:c8:a1:41:7f:11:3d:bb:f5:dd:b3:
b8:04:d2:ca:06:f4:b9:30:83:58:84:a9:3c:33:3f:
16:0d:9a:99:b2:fc:97:a8:a4:1e:90:af:15:12:ca:
3c:32:f8:00:14:8d:f2:f9:a7:af:ef:0c:cc:e8:8a:
0e:e0:58:b7:0b:fc:3d:70:73:bd:a2:f6:07:a6:62:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:29:AF:C9:D6:AF:11:C1:B4:05:47:8B:DC:D5:68:A1:87:FF:B2:24
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7SmvydavEcG0BUeL3NVooYf_siQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.146.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:cc:79:b7:47:de:18:52:d6:80:d5:f6:82:ae:fd:3e:68:eb:
9c:b6:f8:b7:cc:d9:9b:4e:0c:f5:3a:f3:88:a6:1c:34:be:77:
7e:2b:78:9a:84:a9:00:1f:21:5d:70:06:c2:0f:67:04:e7:53:
2a:f6:65:a2:29:77:04:9d:40:1c:ca:ec:9a:ce:d9:4f:3a:ae:
00:33:f5:3d:a3:1a:04:85:0f:0a:8a:0a:33:79:ff:f5:d8:9e:
f3:1b:ac:20:dc:3d:bb:21:ec:b9:d8:d4:4f:91:31:cb:06:03:
9d:92:50:bf:97:ed:e4:69:f6:95:80:d7:3d:e2:55:74:3a:3a:
4d:8c:b2:40:6a:2f:a6:13:2d:c3:0c:0e:77:34:c8:08:49:32:
32:39:2c:ed:da:76:74:66:1b:97:ea:48:96:bb:a7:e4:48:1a:
af:8c:a9:b8:5a:d2:78:dc:2f:1e:f7:f3:49:eb:62:c0:45:c2:
40:ad:9d:84:0c:39:d8:61:2f:0a:7e:79:f4:d3:38:e0:63:f1:
1b:28:fa:6f:d2:7c:51:ab:a9:f6:e0:d3:12:77:e4:91:ea:08:
8f:c1:cd:58:6f:32:6b:c3:ad:28:67:a3:af:3b:47:5e:84:7c:
f2:bc:e7:92:cd:cb:e5:57:1c:c4:b1:f8:b5:00:15:33:ea:f7:
e4:8b:16:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeT6byMvMxAreC+JEp9Kgq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwNDE4MTAyOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDI5YWZjOWQ2YWYxMWMxYjQwNTQ3OGJkY2Q1NjhhMTg3ZmZiMjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW7DDl3ER+LKsAeuaKIr35KgU8bW
trLn5L9oGGvbtCZg5Mpub2wsuF9aYifhNG6ivHdKMTFVRoWvsOWDh3DMbSunDvKO
fSyBwsUX7sFkb/MkIoCvYecuZ1O9XjL682nOaC322FvMDELhiNdiCAmVLjdBc0PE
OwnDQBz4jHVAvSAVg2NymAXkCiDuqmwvazpiofQmHop8nXqH+Ipm2vwtb9OSRyUX
S6P6qgCMEUeAmyYuktTSnNtgG8ihQX8RPbv13bO4BNLKBvS5MINYhKk8Mz8WDZqZ
svyXqKQekK8VEso8MvgAFI3y+aev7wzM6IoO4Fi3C/w9cHO9ovYHpmLjMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO0pr8nWrxHBtAVHi9zVaKGH/7IkMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvN1NtdnlkYXZFY0cwQlVlTDNOVm9vWWZfc2lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwTqSMA0G
CSqGSIb3DQEBCwUAA4IBAQB8zHm3R94YUtaA1faCrv0+aOuctvi3zNmbTgz1OvOI
phw0vnd+K3iahKkAHyFdcAbCD2cE51Mq9mWiKXcEnUAcyuyaztlPOq4AM/U9oxoE
hQ8Kigozef/12J7zG6wg3D27Iey52NRPkTHLBgOdklC/l+3kafaVgNc94lV0OjpN
jLJAai+mEy3DDA53NMgISTIyOSzt2nZ0ZhuX6kiWu6fkSBqvjKm4WtJ43C8e9/NJ
62LARcJArZ2EDDnYYS8Kfnn00zjgY/EbKPpv0nxRq6n24NMSd+SR6giPwc1YbzJr
w60oZ6OvO0dehHzyvOeSzcvlVxzEsfi1ABUz6vfkixZY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org