Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/MjQijAOShNCXo6x1vEbw_hhVu9k.roa
File: MjQijAOShNCXo6x1vEbw_hhVu9k.roa (raw, json)
Hash identifier: tXS9j6YUabon5zhKtq0Wx5q8tzlqNdSoUIZVss9vW+c=
Subject key identifier: 32:34:22:8C:03:92:84:D0:97:A3:AC:75:BC:46:F0:FE:18:55:BB:D9
Certificate issuer: /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial: 0185701532BE00E5E14BEBE8CE05FEB0C0F4
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/MjQijAOShNCXo6x1vEbw_hhVu9k.roa
Signing time: Mon 02 Jan 2023 01:25:15 +0000
ROA not before: Mon 02 Jan 2023 01:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.26.22.0/24 maxlen: 24
193.26.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Aug 2023 14:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:32:be:00:e5:e1:4b:eb:e8:ce:05:fe:b0:c0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Validity
Not Before: Jan 2 01:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3234228c039284d097a3ac75bc46f0fe1855bbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:75:87:29:d8:55:ac:8b:eb:3b:53:0d:63:
f8:c3:44:5c:73:07:42:42:38:63:b2:07:42:3f:75:
10:3f:e2:c8:7c:5f:ad:c4:a1:6b:b5:9c:20:79:3f:
10:92:b6:a2:b7:cd:15:1c:99:9c:e5:a0:f4:41:01:
20:97:19:f3:fd:7a:9b:2c:33:7a:c2:4e:74:0c:4c:
54:45:05:15:70:2f:d8:a1:4f:2c:67:89:3d:35:46:
d5:b4:ab:40:73:1a:60:76:e7:14:7a:94:5a:14:ba:
5b:76:36:37:6d:4b:bb:a6:54:ee:4d:1b:71:09:76:
3a:0a:65:95:57:33:14:af:4f:2b:0c:4c:e4:ec:f9:
06:54:4e:3d:47:55:08:32:c2:b8:74:20:bb:a6:68:
10:88:b1:a8:90:6b:1d:0c:0e:ac:0d:2f:d2:7e:b7:
02:71:0d:85:58:32:f3:75:18:68:46:62:50:ed:8d:
8a:02:c9:64:e7:6e:30:32:53:3f:70:4b:56:49:fd:
ef:84:31:6f:81:05:95:5a:60:44:02:df:de:eb:b0:
7a:9e:35:83:b8:9a:e2:11:44:6c:5e:75:1b:74:3e:
15:49:c4:6f:fe:41:cf:0b:d5:0a:5c:f3:d8:3e:ad:
82:a6:10:3a:57:93:18:91:2d:c7:fe:a5:e2:00:33:
49:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:34:22:8C:03:92:84:D0:97:A3:AC:75:BC:46:F0:FE:18:55:BB:D9
X509v3 Authority Key Identifier:
keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/MjQijAOShNCXo6x1vEbw_hhVu9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.21.0-193.26.22.255
Signature Algorithm: sha256WithRSAEncryption
67:87:26:2b:81:15:c9:82:4e:5d:19:8f:3e:f5:43:fa:66:13:
1b:4b:b4:44:53:04:2e:1e:91:96:70:48:b2:28:4b:c3:92:30:
64:79:68:7d:66:c4:bc:42:f7:3d:be:b0:dd:2c:c3:7f:85:92:
de:38:71:0a:68:bb:69:72:9d:37:67:bd:b9:d5:27:47:9c:34:
df:f0:81:6f:87:b2:d7:02:32:c1:1a:f3:b0:fe:78:e5:89:35:
24:31:56:ae:43:78:7f:c8:68:d4:ee:a2:50:e0:ad:2d:30:62:
12:15:d6:07:55:67:bd:b9:90:80:44:69:22:83:89:da:93:6c:
bf:7d:14:de:95:1e:5f:cc:73:e2:7c:6c:8f:3f:87:03:56:e6:
5b:89:60:67:5f:35:e1:7c:29:aa:83:b5:58:97:ed:c5:5c:65:
aa:32:2d:81:34:68:a1:25:96:60:7c:31:68:dd:aa:2c:42:90:
2e:25:4f:78:d8:9d:70:22:80:3b:a0:e8:ee:20:70:be:90:e0:
80:51:df:27:5d:8b:e8:e5:72:1a:34:3e:15:43:9f:15:7b:94:
24:2e:9e:1d:ab:d1:03:6b:dc:e9:e2:81:e6:9b:44:73:da:23:
dc:b2:26:25:cc:8f:0b:34:57:73:0b:77:8c:0b:8c:5c:93:76:
2c:52:26:30
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVwFTK+AOXhS+vozgX+sMD0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMGM5ZjMwZTNiNDZkNTBiOGQxYmY3OWI5ZDFkYjg0ZjI1
MTM0YmEwHhcNMjMwMTAyMDEyNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjM0MjI4YzAzOTI4NGQwOTdhM2FjNzViYzQ2ZjBmZTE4NTViYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmal1hynYVayL6ztTDWP4w0RccwdC
QjhjsgdCP3UQP+LIfF+txKFrtZwgeT8Qkrait80VHJmc5aD0QQEglxnz/XqbLDN6
wk50DExURQUVcC/YoU8sZ4k9NUbVtKtAcxpgducUepRaFLpbdjY3bUu7plTuTRtx
CXY6CmWVVzMUr08rDEzk7PkGVE49R1UIMsK4dCC7pmgQiLGokGsdDA6sDS/SfrcC
cQ2FWDLzdRhoRmJQ7Y2KAslk524wMlM/cEtWSf3vhDFvgQWVWmBEAt/e67B6njWD
uJriEURsXnUbdD4VScRv/kHPC9UKXPPYPq2CphA6V5MYkS3H/qXiADNJiwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDI0IowDkoTQl6OsdbxG8P4YVbvZMB8GA1UdIwQY
MBaAFP4MnzDjtG1QuNG/ebnR24TyUTS6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2d5Zk1PTzBiVkM0MGI5NXVkSGJoUEpSTkxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9iOWVkNmMtZThjNS00MzFlLWIxODgt
ZjUyMDBmNTQ5Mzc3LzEvTWpRaWpBT1NoTkNYbzZ4MXZFYndfaGhWdTlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9iOWVkNmMtZThjNS00MzFlLWIxODgtZjUyMDBmNTQ5Mzc3
LzEvX2d5Zk1PTzBiVkM0MGI5NXVkSGJoUEpSTkxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBGhUD
BADBGhYwDQYJKoZIhvcNAQELBQADggEBAGeHJiuBFcmCTl0Zjz71Q/pmExtLtERT
BC4ekZZwSLIoS8OSMGR5aH1mxLxC9z2+sN0sw3+Fkt44cQpou2lynTdnvbnVJ0ec
NN/wgW+HstcCMsEa87D+eOWJNSQxVq5DeH/IaNTuolDgrS0wYhIV1gdVZ725kIBE
aSKDidqTbL99FN6VHl/Mc+J8bI8/hwNW5luJYGdfNeF8KaqDtViX7cVcZaoyLYE0
aKEllmB8MWjdqixCkC4lT3jYnXAigDug6O4gcL6Q4IBR3yddi+jlcho0PhVDnxV7
lCQunh2r0QNr3OnigeabRHPaI9yyJiXMjws0V3MLd4wLjFyTdixSJjA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:55 2024 by rpki-client on console-fra.rpki-client.org