Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/nfUaWpnKg4_h-mf1jnb3h810LQU.roa
File: nfUaWpnKg4_h-mf1jnb3h810LQU.roa (raw, json)
Hash identifier: hVm9eB4MYdEGbjGoECH6qmODq+NV+UqdU4czFxrl7mM=
Subject key identifier: 9D:F5:1A:5A:99:CA:83:8F:E1:FA:67:F5:8E:76:F7:87:CD:74:2D:05
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 018CC4245549A6730EBD03EFEA287BC4934E
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/nfUaWpnKg4_h-mf1jnb3h810LQU.roa
Signing time: Mon 01 Jan 2024 08:29:24 +0000
ROA not before: Mon 01 Jan 2024 08:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20668
IP address blocks: 193.169.142.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 06 Jan 2024 09:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:55:49:a6:73:0e:bd:03:ef:ea:28:7b:c4:93:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Jan 1 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9df51a5a99ca838fe1fa67f58e76f787cd742d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8d:82:74:3b:d8:9e:c1:f8:d6:ec:dd:27:51:
6c:8f:a8:19:a9:5e:fe:cf:31:bc:b5:3e:2c:0f:b9:
f5:0f:c7:b1:f9:4b:d8:b5:4e:a9:4e:ab:6d:a3:b3:
3a:a3:ba:1e:6e:f3:18:f2:db:e4:b3:5d:85:68:5d:
59:a3:ab:0f:bb:50:44:3e:19:76:bc:c5:05:61:8c:
d0:32:4f:22:e9:c0:9c:a8:bf:75:4a:79:c7:13:f5:
75:77:2d:1c:26:52:93:1a:d3:ea:3c:9f:a6:f4:e0:
67:35:6f:16:b3:30:33:90:bb:a7:cf:ce:3a:db:3b:
27:68:c5:0a:db:32:62:d5:67:9d:e3:b5:c9:1d:c2:
04:ba:2a:9b:f8:88:e0:04:27:5f:88:64:16:b0:8e:
a2:a8:1d:45:69:1d:bf:5b:8c:78:85:6e:7f:fd:71:
07:2b:ef:5f:bb:10:97:08:2a:92:30:0c:73:1a:32:
5d:16:55:2b:7e:e2:3c:c3:b0:dd:34:e7:f9:1e:4c:
78:8f:71:95:f5:2d:4e:00:98:0e:4f:ec:40:f6:cd:
dd:5e:fa:85:f2:e8:72:79:32:cf:c7:f4:47:10:86:
50:49:af:e9:3d:18:44:18:ae:6f:41:69:73:4d:a0:
4a:70:32:01:77:1e:cb:b9:8e:a8:da:13:0c:11:74:
61:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F5:1A:5A:99:CA:83:8F:E1:FA:67:F5:8E:76:F7:87:CD:74:2D:05
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/nfUaWpnKg4_h-mf1jnb3h810LQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.142.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:da:97:4b:db:1b:6e:b7:9b:87:38:41:ca:78:a6:9b:2b:cd:
86:4e:11:74:08:33:95:ed:20:f5:9d:5d:66:5b:80:32:fb:85:
a9:29:5e:5a:6c:b0:a4:79:3c:14:fd:02:75:a7:7c:39:dc:f2:
af:ce:fb:6f:14:b2:b2:6e:76:a4:e5:f9:fd:9a:9e:5e:db:77:
16:70:56:46:61:7e:83:43:51:17:23:e9:49:78:b1:39:2e:92:
7b:75:5f:20:07:11:6c:17:5c:b6:32:47:f6:b8:a2:ef:32:69:
c6:c2:92:7b:53:0a:24:c4:41:99:6b:9c:73:19:78:ed:e5:be:
ad:d1:e1:ea:9d:84:a8:18:42:32:2d:49:5f:c5:0a:ff:63:50:
43:61:7c:e3:5c:ed:bb:97:27:ff:20:3a:32:a2:4d:e7:0d:02:
b0:4b:e5:11:29:51:2a:c1:64:d9:e7:34:33:d6:53:f8:db:c1:
5e:70:ea:3d:51:c7:58:eb:07:b7:61:45:6d:4b:cb:02:6e:45:
81:bb:65:1c:3c:0c:bb:8d:20:04:9b:e9:28:e3:da:72:64:76:
cd:aa:25:00:82:b7:3e:3d:94:f0:25:c0:9b:67:9e:da:f1:b0:
1d:75:1c:7d:58:5d:73:91:24:3a:49:7a:c9:8e:22:78:87:26:
4b:78:f5:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJFVJpnMOvQPv6ih7xJNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNGRiNzYyMzI0MWQ3ZTY2NzhmYzI1NzUxZmE0ZTBiNjY2
NTE4NmIwHhcNMjQwMTAxMDgyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGY1MWE1YTk5Y2E4MzhmZTFmYTY3ZjU4ZTc2Zjc4N2NkNzQyZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI2CdDvYnsH41uzdJ1Fsj6gZqV7+
zzG8tT4sD7n1D8ex+UvYtU6pTqtto7M6o7oebvMY8tvks12FaF1Zo6sPu1BEPhl2
vMUFYYzQMk8i6cCcqL91SnnHE/V1dy0cJlKTGtPqPJ+m9OBnNW8WszAzkLunz846
2zsnaMUK2zJi1Wed47XJHcIEuiqb+IjgBCdfiGQWsI6iqB1FaR2/W4x4hW5//XEH
K+9fuxCXCCqSMAxzGjJdFlUrfuI8w7DdNOf5Hkx4j3GV9S1OAJgOT+xA9s3dXvqF
8uhyeTLPx/RHEIZQSa/pPRhEGK5vQWlzTaBKcDIBdx7LuY6o2hMMEXRhpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ31GlqZyoOP4fpn9Y5294fNdC0FMB8GA1UdIwQY
MBaAFMBNt2IyQdfmZ4/CV1H6TgtmZRhrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMt
MDQyM2YyNjNmMmNiLzEvbmZVYVdwbktnNF9oLW1mMWpuYjNoODEwTFFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82ZTg3NGUtNzNmZS00ZGJiLWI3NGMtMDQyM2YyNjNmMmNi
LzEvd0UyM1lqSkIxLVpuajhKWFVmcE9DMlpsR0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwamOMA0G
CSqGSIb3DQEBCwUAA4IBAQCO2pdL2xtut5uHOEHKeKabK82GThF0CDOV7SD1nV1m
W4Ay+4WpKV5abLCkeTwU/QJ1p3w53PKvzvtvFLKybnak5fn9mp5e23cWcFZGYX6D
Q1EXI+lJeLE5LpJ7dV8gBxFsF1y2Mkf2uKLvMmnGwpJ7UwokxEGZa5xzGXjt5b6t
0eHqnYSoGEIyLUlfxQr/Y1BDYXzjXO27lyf/IDoyok3nDQKwS+URKVEqwWTZ5zQz
1lP428FecOo9UcdY6we3YUVtS8sCbkWBu2UcPAy7jSAEm+ko49pyZHbNqiUAgrc+
PZTwJcCbZ57a8bAddRx9WF1zkSQ6SXrJjiJ4hyZLePUv
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org