Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ir-dbYn5CSrQ_rTXxnLMqajTSco.roa
File: ir-dbYn5CSrQ_rTXxnLMqajTSco.roa (raw, json)
Hash identifier: +WAMBTPuboGM6kRJXL0MwZh7UfEyOO1BdesSG5zW7cI=
Subject key identifier: 8A:BF:9D:6D:89:F9:09:2A:D0:FE:B4:D7:C6:72:CC:A9:A8:D3:49:CA
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB0D6B500E9F2F4C59BB936950316D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ir-dbYn5CSrQ_rTXxnLMqajTSco.roa
Signing time: Sun 01 Jan 2023 10:05:24 +0000
ROA not before: Sun 01 Jan 2023 10:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208583
IP address blocks: 193.181.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:0d:6b:50:0e:9f:2f:4c:59:bb:93:69:50:31:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8abf9d6d89f9092ad0feb4d7c672cca9a8d349ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:96:b9:7f:12:df:c8:5e:40:c6:76:3d:b6:03:
7d:d7:33:66:4c:17:b0:58:74:af:ab:1d:49:e8:b9:
40:1b:c8:ce:ca:ee:7b:bd:fd:0c:cd:1a:bc:96:69:
41:ba:3a:60:4b:68:c6:68:23:03:e5:5a:b1:5f:25:
02:0e:9e:c2:b7:a7:fe:a6:dd:b5:61:6d:fb:8b:45:
c4:bb:54:64:ff:be:d4:c6:6a:86:a5:e1:d4:e0:10:
d8:14:b6:e5:07:2c:d8:df:aa:5a:07:b5:02:30:65:
08:05:f2:d0:3c:82:2f:bb:e5:e8:86:d0:8d:6a:e0:
b1:b4:f7:f1:6e:ff:7e:b8:cf:69:f5:3b:f5:06:8d:
ca:ca:65:45:3d:dd:24:f3:0b:a9:16:d9:33:8e:2b:
be:85:c1:d8:6d:1a:93:0a:78:98:db:5e:13:67:d5:
73:16:6d:bb:5e:b6:01:ee:03:ef:8d:11:ad:ad:ee:
ab:c1:dd:4a:80:c6:83:bd:cc:be:1e:9f:1a:f1:b2:
47:14:9e:dc:af:45:ab:6f:a1:ec:30:59:8d:8e:81:
1d:1a:82:3c:8b:3b:aa:4c:87:b0:07:99:a8:ed:3b:
11:5a:13:cb:34:0a:14:8f:74:60:2f:a5:80:8b:2c:
cd:21:85:b2:5b:ad:66:fa:fd:e9:79:00:ed:c8:da:
1b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BF:9D:6D:89:F9:09:2A:D0:FE:B4:D7:C6:72:CC:A9:A8:D3:49:CA
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ir-dbYn5CSrQ_rTXxnLMqajTSco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.177.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:eb:f2:6c:42:e8:b4:7a:44:50:5e:f6:a7:60:9e:be:5e:31:
85:c9:cd:0b:dc:2b:f5:c6:34:c0:03:aa:61:7d:58:33:9a:b6:
0c:87:e5:65:30:23:97:ff:05:55:ea:fd:1d:9d:16:ca:67:d4:
66:0a:d4:f5:c8:fb:df:5e:a1:f0:86:54:20:ce:4c:4e:33:e7:
b4:6e:5e:74:cf:3c:3e:bc:6f:e4:f5:57:a1:b9:58:75:9e:25:
40:46:cb:d7:e2:82:57:c2:b0:25:87:e6:50:02:d8:0a:13:7a:
3f:3e:b9:d6:48:3b:7d:b6:5c:b0:2c:08:64:b2:11:76:78:1c:
4c:65:3d:e5:61:cc:b6:e0:9b:79:30:eb:0a:f5:ed:a9:5a:da:
86:ac:82:13:9c:5c:90:10:a6:23:e3:42:d5:f4:64:e6:14:23:
07:a5:02:eb:59:e5:cf:a2:8f:28:f8:fd:c5:83:d2:84:0e:ab:
60:3f:48:e2:20:a9:27:f5:91:ff:79:34:29:95:ea:9c:74:08:
ad:09:9c:03:92:70:e2:47:42:2b:ba:a0:9e:23:a7:5d:f8:d7:
2f:f8:3e:d1:21:bd:94:31:2c:40:6c:90:80:45:f7:1e:12:fc:
49:ba:b6:8a:52:0b:49:58:4d:60:79:f3:a3:9d:96:54:91:90:
81:f3:2c:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsyw1rUA6fL0xZu5NpUDFtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwMTAxMTAwNTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWJmOWQ2ZDg5ZjkwOTJhZDBmZWI0ZDdjNjcyY2NhOWE4ZDM0OWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZa5fxLfyF5AxnY9tgN91zNmTBew
WHSvqx1J6LlAG8jOyu57vf0MzRq8lmlBujpgS2jGaCMD5VqxXyUCDp7Ct6f+pt21
YW37i0XEu1Rk/77UxmqGpeHU4BDYFLblByzY36paB7UCMGUIBfLQPIIvu+XohtCN
auCxtPfxbv9+uM9p9Tv1Bo3KymVFPd0k8wupFtkzjiu+hcHYbRqTCniY214TZ9Vz
Fm27XrYB7gPvjRGtre6rwd1KgMaDvcy+Hp8a8bJHFJ7cr0Wrb6HsMFmNjoEdGoI8
izuqTIewB5mo7TsRWhPLNAoUj3RgL6WAiyzNIYWyW61m+v3peQDtyNobOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIq/nW2J+Qkq0P6018ZyzKmo00nKMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvaXItZGJZbjVDU3JRX3JUWHhuTE1xYWpUU2NvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbWxMA0G
CSqGSIb3DQEBCwUAA4IBAQAr6/JsQui0ekRQXvanYJ6+XjGFyc0L3Cv1xjTAA6ph
fVgzmrYMh+VlMCOX/wVV6v0dnRbKZ9RmCtT1yPvfXqHwhlQgzkxOM+e0bl50zzw+
vG/k9VehuVh1niVARsvX4oJXwrAlh+ZQAtgKE3o/PrnWSDt9tlywLAhkshF2eBxM
ZT3lYcy24Jt5MOsK9e2pWtqGrIITnFyQEKYj40LV9GTmFCMHpQLrWeXPoo8o+P3F
g9KEDqtgP0jiIKkn9ZH/eTQpleqcdAitCZwDknDiR0IruqCeI6dd+Ncv+D7RIb2U
MSxAbJCARfceEvxJuraKUgtJWE1gefOjnZZUkZCB8yxQ
-----END CERTIFICATE-----
Generated at Thu Aug 31 10:34:06 2023 by rpki-client on console-fra.rpki-client.org