Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Rr_gqig9YmroTqNyqbWwA5PD5X4.roa
File: Rr_gqig9YmroTqNyqbWwA5PD5X4.roa (raw, json)
Hash identifier: RlPZqwYWLIAEmDmSd9VqkQk2/mBWaALSr3yxIMy6e2Q=
Subject key identifier: 46:BF:E0:AA:28:3D:62:6A:E8:4E:A3:72:A9:B5:B0:03:93:C3:E5:7E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAEC53E547459D748ED6E8B4F9E28D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Rr_gqig9YmroTqNyqbWwA5PD5X4.roa
Signing time: Sun 01 Jan 2023 10:05:16 +0000
ROA not before: Sun 01 Jan 2023 10:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44515
IP address blocks: 193.181.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:ec:53:e5:47:45:9d:74:8e:d6:e8:b4:f9:e2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46bfe0aa283d626ae84ea372a9b5b00393c3e57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:58:34:78:bb:75:82:76:5e:11:06:7d:3d:6f:
b7:6b:4f:c0:16:6f:bb:62:5b:4d:a5:c6:7e:b5:5e:
c0:bd:e4:c9:20:da:ac:5b:8f:f9:38:93:55:68:07:
ac:ab:2a:f2:91:bf:10:d0:d9:69:71:54:74:08:a4:
c9:d3:2a:83:fe:b4:e0:90:f3:c7:6a:19:0a:fc:78:
c3:83:e4:7f:4a:62:8a:00:59:8c:d8:4c:8c:c8:92:
3b:72:b3:6f:19:5b:6e:01:91:c1:ce:45:2f:f5:a9:
82:d7:99:b4:d4:2f:5b:1d:da:ba:0b:50:db:31:d8:
65:6a:be:db:f4:c3:c5:62:89:a0:b6:0f:9c:c5:90:
68:83:9c:b7:9c:02:3c:8a:72:75:d6:50:4e:84:92:
a3:8d:e2:d9:36:c8:b7:54:db:74:9d:1f:12:f3:16:
d6:6b:e6:14:53:04:51:cd:25:bd:f9:57:4a:0a:7f:
d1:89:11:2f:20:f6:f0:9d:85:37:71:5d:c9:da:50:
fa:42:2b:31:65:42:9b:54:1d:75:74:45:90:8f:17:
84:bc:4b:f2:53:85:82:09:8b:29:f5:48:e8:2b:c4:
e1:38:1d:3f:7a:7e:e3:9f:a3:eb:59:4d:84:d6:5f:
61:a6:2c:5d:24:dc:2f:bd:02:75:ed:b7:5f:d0:06:
d8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BF:E0:AA:28:3D:62:6A:E8:4E:A3:72:A9:B5:B0:03:93:C3:E5:7E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Rr_gqig9YmroTqNyqbWwA5PD5X4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.194.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:19:43:ec:1b:56:d1:e6:03:c8:b5:19:11:51:bd:bf:95:e1:
0c:25:3d:98:5f:80:2e:31:3a:0e:37:ab:61:d9:18:d5:4c:38:
41:9f:34:cf:73:65:09:81:82:63:f0:4d:0e:f9:8e:b1:88:7d:
85:a5:f8:ec:3a:db:07:cb:cc:18:fc:39:d0:ff:48:9b:4c:4e:
13:7f:dc:2a:26:7a:2c:19:36:8b:db:a3:c5:1c:12:ec:de:41:
f9:47:59:ea:c6:a7:a5:6f:3b:44:e8:e6:87:c2:93:96:e6:ab:
f7:40:90:38:9c:7d:1e:f6:00:b9:bd:f7:09:79:2b:d9:b6:bb:
87:6b:00:aa:17:ab:2b:bb:ae:c2:f7:c3:d9:70:d8:b4:14:b1:
79:db:bb:87:3e:de:53:97:48:99:54:3d:a5:75:a9:4c:7f:f0:
7a:8b:c1:60:dc:31:21:14:96:9d:76:12:43:f2:ce:67:e5:bd:
74:13:6b:03:41:18:7a:96:97:b5:23:5d:50:8d:a6:1e:d7:6b:
51:ec:e8:87:f0:76:b6:e5:fa:f9:c5:d0:47:01:9e:6b:82:1a:
ea:69:25:61:8e:1b:bd:73:bd:15:c6:3c:08:d2:a4:ce:af:31:
69:e4:43:48:e9:51:f3:b8:7a:1f:7f:9b:63:3b:e5:b6:1c:69:
5f:ca:c4:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsyuxT5UdFnXSO1ui0+eKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwMTAxMTAwNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmJmZTBhYTI4M2Q2MjZhZTg0ZWEzNzJhOWI1YjAwMzkzYzNlNTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVg0eLt1gnZeEQZ9PW+3a0/AFm+7
YltNpcZ+tV7AveTJINqsW4/5OJNVaAesqyrykb8Q0NlpcVR0CKTJ0yqD/rTgkPPH
ahkK/HjDg+R/SmKKAFmM2EyMyJI7crNvGVtuAZHBzkUv9amC15m01C9bHdq6C1Db
Mdhlar7b9MPFYomgtg+cxZBog5y3nAI8inJ11lBOhJKjjeLZNsi3VNt0nR8S8xbW
a+YUUwRRzSW9+VdKCn/RiREvIPbwnYU3cV3J2lD6QisxZUKbVB11dEWQjxeEvEvy
U4WCCYsp9UjoK8ThOB0/en7jn6PrWU2E1l9hpixdJNwvvQJ17bdf0AbYNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEa/4KooPWJq6E6jcqm1sAOTw+V+MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvUnJfZ3FpZzlZbXJvVHFOeXFiV3dBNVBENVg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbXCMA0G
CSqGSIb3DQEBCwUAA4IBAQCxGUPsG1bR5gPItRkRUb2/leEMJT2YX4AuMToON6th
2RjVTDhBnzTPc2UJgYJj8E0O+Y6xiH2FpfjsOtsHy8wY/DnQ/0ibTE4Tf9wqJnos
GTaL26PFHBLs3kH5R1nqxqelbztE6OaHwpOW5qv3QJA4nH0e9gC5vfcJeSvZtruH
awCqF6sru67C98PZcNi0FLF527uHPt5Tl0iZVD2ldalMf/B6i8Fg3DEhFJaddhJD
8s5n5b10E2sDQRh6lpe1I11QjaYe12tR7OiH8Ha25fr5xdBHAZ5rghrqaSVhjhu9
c70VxjwI0qTOrzFp5ENI6VHzuHoff5tjO+W2HGlfysR9
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org