Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IsXpnxHfjKfax5kzA_GQjhjtmIE.roa
File: IsXpnxHfjKfax5kzA_GQjhjtmIE.roa (raw, json)
Hash identifier: bqV8zDASw5d2h+lmtufB/hdUtVJAtZUfCy3Cf4CV68Y=
Subject key identifier: 22:C5:E9:9F:11:DF:8C:A7:DA:C7:99:33:03:F1:90:8E:18:ED:98:81
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC80296769E1251BAB1ACF4E8D68E8F86
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IsXpnxHfjKfax5kzA_GQjhjtmIE.roa
Signing time: Tue 02 Jan 2024 02:31:01 +0000
ROA not before: Tue 02 Jan 2024 02:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212335
IP address blocks: 193.58.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 10:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:96:76:9e:12:51:ba:b1:ac:f4:e8:d6:8e:8f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22c5e99f11df8ca7dac7993303f1908e18ed9881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:31:11:40:28:20:2c:63:bd:24:49:36:64:
b4:2b:01:dd:58:f3:76:71:34:2e:db:b1:fe:02:74:
f4:62:55:43:99:11:90:10:28:cd:85:0d:7a:62:d0:
2b:79:57:3e:c5:be:50:5b:b8:59:ff:19:8b:a1:df:
21:c9:01:f0:26:2f:c4:93:94:4c:7b:1d:28:e0:7e:
a9:d6:c9:c7:3d:10:87:65:bd:50:10:8f:41:fb:6d:
a2:a4:51:65:b7:26:06:ae:e8:1b:57:df:2b:86:f0:
f7:80:1b:67:ff:61:63:50:1c:97:3a:b7:ce:19:af:
64:8c:ef:a0:2b:56:81:4d:b3:c1:60:7a:15:63:1f:
9e:75:f8:27:f0:69:2e:ad:f6:96:65:43:1b:37:20:
34:a1:be:be:83:49:af:89:b2:a8:99:2e:39:11:62:
de:1e:58:b5:82:5a:37:8b:55:b0:32:44:0f:61:56:
ab:d6:f3:c8:b2:38:97:b4:e3:74:04:a0:b9:c8:25:
e5:7a:c0:d8:03:25:79:91:64:bd:7b:3e:43:f2:58:
64:c8:3e:02:a4:fd:16:af:1d:a6:dc:20:17:c1:cf:
55:34:16:8d:b5:48:ee:44:43:b5:34:7b:cf:df:7e:
44:d5:27:be:34:18:ba:f0:80:4d:14:21:02:95:47:
73:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C5:E9:9F:11:DF:8C:A7:DA:C7:99:33:03:F1:90:8E:18:ED:98:81
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IsXpnxHfjKfax5kzA_GQjhjtmIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.145.0/24
Signature Algorithm: sha256WithRSAEncryption
61:60:80:1b:91:ef:f3:f3:b2:1b:8c:35:79:c0:35:09:42:9e:
2f:e4:c1:11:b5:aa:39:50:c3:13:27:23:87:a7:95:c6:be:8d:
e7:a1:4f:e2:ca:56:46:09:ea:55:3e:91:b7:05:78:ce:26:eb:
ab:e2:97:05:b7:89:27:3e:60:86:e9:60:36:1c:f3:d5:d7:8f:
2f:d5:98:75:8e:3e:48:ce:f4:3a:c7:2b:91:72:dd:4d:ec:c2:
87:40:13:4a:71:3f:4f:50:1e:b2:c5:9c:1b:69:15:11:1f:3b:
03:b1:a7:fb:2b:66:a9:3d:14:43:1c:d0:30:5a:ff:64:63:fb:
af:82:6c:78:ec:23:e2:65:09:09:63:43:4b:38:e6:24:e1:67:
21:6a:f0:83:b6:1b:2a:07:13:cc:a6:12:81:ed:8e:14:5c:4e:
4f:f4:76:17:f6:51:e0:4a:ff:6b:d8:79:8b:98:e5:c9:50:15:
c3:4b:1e:74:3c:a3:cb:84:68:20:bd:98:63:7e:ba:57:4e:7f:
18:76:7b:e3:c7:44:70:0b:ec:b7:d5:7b:ff:47:48:75:5f:41:
f1:92:b2:cb:d0:26:43:e5:1b:a1:ad:4b:4e:94:ac:e7:12:26:
4d:e1:f3:b0:49:2a:15:e0:6c:d1:f1:be:cd:f8:f1:40:9b:47:
f3:81:fe:23
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIApZ2nhJRurGs9OjWjo+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjQwMTAyMDIzMTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmM1ZTk5ZjExZGY4Y2E3ZGFjNzk5MzMwM2YxOTA4ZTE4ZWQ5ODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeUxEUAoICxjvSRJNmS0KwHdWPN2
cTQu27H+AnT0YlVDmRGQECjNhQ16YtAreVc+xb5QW7hZ/xmLod8hyQHwJi/Ek5RM
ex0o4H6p1snHPRCHZb1QEI9B+22ipFFltyYGrugbV98rhvD3gBtn/2FjUByXOrfO
Ga9kjO+gK1aBTbPBYHoVYx+edfgn8GkurfaWZUMbNyA0ob6+g0mvibKomS45EWLe
Hli1glo3i1WwMkQPYVar1vPIsjiXtON0BKC5yCXlesDYAyV5kWS9ez5D8lhkyD4C
pP0Wrx2m3CAXwc9VNBaNtUjuREO1NHvP335E1Se+NBi68IBNFCEClUdz4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCLF6Z8R34yn2seZMwPxkI4Y7ZiBMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvSXNYcG54SGZqS2ZheDVrekFfR1FqaGp0bUlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTqRMA0G
CSqGSIb3DQEBCwUAA4IBAQBhYIAbke/z87IbjDV5wDUJQp4v5MERtao5UMMTJyOH
p5XGvo3noU/iylZGCepVPpG3BXjOJuur4pcFt4knPmCG6WA2HPPV148v1Zh1jj5I
zvQ6xyuRct1N7MKHQBNKcT9PUB6yxZwbaRURHzsDsaf7K2apPRRDHNAwWv9kY/uv
gmx47CPiZQkJY0NLOOYk4WchavCDthsqBxPMphKB7Y4UXE5P9HYX9lHgSv9r2HmL
mOXJUBXDSx50PKPLhGggvZhjfrpXTn8Ydnvjx0RwC+y31Xv/R0h1X0HxkrLL0CZD
5RuhrUtOlKznEiZN4fOwSSoV4GzR8b7N+PFAm0fzgf4j
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org