Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/AG3ZiixYYz1fW8mUMTJUYuvX04M.roa
File: AG3ZiixYYz1fW8mUMTJUYuvX04M.roa (raw, json)
Hash identifier: RZaY51tKkK4LDmrCQ3pwRRNHc+Z9QV+vD06mYNP4JkI=
Subject key identifier: 00:6D:D9:8A:2C:58:63:3D:5F:5B:C9:94:31:32:54:62:EB:D7:D3:83
Certificate issuer: /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial: 01856DC1CA4AD46CD2724FF96182A8EE341D
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/AG3ZiixYYz1fW8mUMTJUYuvX04M.roa
Signing time: Sun 01 Jan 2023 14:34:54 +0000
ROA not before: Sun 01 Jan 2023 14:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50036
IP address blocks: 193.104.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:ca:4a:d4:6c:d2:72:4f:f9:61:82:a8:ee:34:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Validity
Not Before: Jan 1 14:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=006dd98a2c58633d5f5bc99431325462ebd7d383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ba:e7:dc:7d:f2:83:49:db:fa:7a:6c:b7:2a:
1d:39:25:dd:71:d2:cb:0d:2c:d3:c5:93:62:43:d2:
ea:f3:40:6f:de:94:da:c3:c9:dc:50:0e:98:b9:3b:
01:36:e0:f8:7a:94:da:ef:63:d0:82:46:62:12:56:
b2:28:33:29:24:48:18:5e:e0:ee:f6:f7:ec:5d:b6:
7c:c2:e1:3f:be:79:ae:f3:4e:ca:c0:9b:95:5f:61:
9c:1c:af:c8:90:1f:ae:0b:fe:3b:e4:12:79:be:21:
bd:84:de:b2:98:f5:69:d1:1f:eb:59:af:86:e9:af:
4b:bc:6c:bb:ce:f5:df:23:21:02:1f:88:e1:36:d4:
57:68:62:43:66:61:c8:22:48:c1:f7:9b:fc:db:60:
cb:c4:bc:44:0d:0e:01:93:34:22:3e:52:8d:98:c8:
89:25:84:8d:4d:b0:4a:37:04:36:04:ac:d5:87:ed:
6e:e5:36:a3:a0:66:58:67:d9:fc:73:c3:18:c3:85:
7f:68:74:bd:ca:1f:26:bf:26:69:7f:ff:26:1f:23:
85:a2:d8:8f:c1:fc:0d:5b:c7:f7:45:09:66:38:0a:
cf:81:a9:c1:7c:19:75:d4:e2:78:00:f8:a5:de:13:
c7:04:97:67:d1:53:e2:0a:31:44:c4:d5:7c:8d:f8:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6D:D9:8A:2C:58:63:3D:5F:5B:C9:94:31:32:54:62:EB:D7:D3:83
X509v3 Authority Key Identifier:
keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/AG3ZiixYYz1fW8mUMTJUYuvX04M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.72.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:30:15:18:b4:0e:0a:ac:e2:79:ce:59:b3:20:9d:41:33:5a:
f9:12:23:09:5c:6f:06:a2:62:72:34:d9:06:02:1c:c3:69:3c:
54:a5:9e:50:52:c0:e3:b3:84:0b:76:c1:87:7b:e1:6b:56:31:
5a:ac:d3:78:89:e1:e3:29:4c:8b:19:b2:67:17:99:96:bc:dc:
4d:3b:0c:50:cd:d1:9a:f6:f3:d1:a2:2e:c9:6d:51:f8:b3:b3:
92:2e:dd:82:58:af:87:7d:9e:0b:de:fc:44:2a:83:43:06:2f:
b5:cb:92:b8:37:8e:a9:9a:1c:35:e3:a9:45:64:72:0e:e3:4c:
a0:a6:f6:57:15:17:33:59:67:38:be:89:79:e6:d7:63:54:dd:
2b:a4:24:6f:1c:2d:d1:87:16:1b:1d:44:ab:3d:80:91:76:fb:
17:99:d5:1e:37:ac:41:dd:f0:8a:58:22:a3:85:79:38:6e:8d:
58:0c:ac:80:e5:37:36:f5:44:ef:ae:0a:d6:0f:45:c0:ae:00:
d7:5c:f1:98:17:e9:b2:90:ba:58:b1:45:77:69:2b:4c:af:8f:
7b:be:ef:d7:47:2f:1b:b0:ea:e4:c3:87:09:d0:9c:e7:79:36:
92:bf:25:34:ef:9c:69:f2:50:6f:fd:5c:6e:09:f9:fa:80:ae:
5b:43:c1:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtwcpK1GzSck/5YYKo7jQdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2VlMThjNDYzOWVlYWExNmE2MTkwOGNjYjQ1YzdhOThk
NWRkNmIwHhcNMjMwMTAxMTQzNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDZkZDk4YTJjNTg2MzNkNWY1YmM5OTQzMTMyNTQ2MmViZDdkMzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7rn3H3yg0nb+npstyodOSXdcdLL
DSzTxZNiQ9Lq80Bv3pTaw8ncUA6YuTsBNuD4epTa72PQgkZiElayKDMpJEgYXuDu
9vfsXbZ8wuE/vnmu807KwJuVX2GcHK/IkB+uC/475BJ5viG9hN6ymPVp0R/rWa+G
6a9LvGy7zvXfIyECH4jhNtRXaGJDZmHIIkjB95v822DLxLxEDQ4BkzQiPlKNmMiJ
JYSNTbBKNwQ2BKzVh+1u5TajoGZYZ9n8c8MYw4V/aHS9yh8mvyZpf/8mHyOFotiP
wfwNW8f3RQlmOArPganBfBl11OJ4APil3hPHBJdn0VPiCjFExNV8jfjJZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFABt2YosWGM9X1vJlDEyVGLr19ODMB8GA1UdIwQY
MBaAFPJ+4YxGOe6qFqYZCMy0XHqY1d1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG43aGpFWTU3cW9XcGhrSXpMUmNlcGpWM1dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNThhMmEtMGYyNS00ODMxLWJiMDkt
YTBkZDNiNWYxNWY4LzEvQUczWmlpeFlZejFmVzhtVU1USlVZdXZYMDRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNThhMmEtMGYyNS00ODMxLWJiMDktYTBkZDNiNWYxNWY4
LzEvOG43aGpFWTU3cW9XcGhrSXpMUmNlcGpWM1dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWhIMA0G
CSqGSIb3DQEBCwUAA4IBAQCNMBUYtA4KrOJ5zlmzIJ1BM1r5EiMJXG8GomJyNNkG
AhzDaTxUpZ5QUsDjs4QLdsGHe+FrVjFarNN4ieHjKUyLGbJnF5mWvNxNOwxQzdGa
9vPRoi7JbVH4s7OSLt2CWK+HfZ4L3vxEKoNDBi+1y5K4N46pmhw146lFZHIO40yg
pvZXFRczWWc4vol55tdjVN0rpCRvHC3RhxYbHUSrPYCRdvsXmdUeN6xB3fCKWCKj
hXk4bo1YDKyA5Tc29UTvrgrWD0XArgDXXPGYF+mykLpYsUV3aStMr497vu/XRy8b
sOrkw4cJ0JzneTaSvyU075xp8lBv/VxuCfn6gK5bQ8EM
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:21 2024 by rpki-client on console-ams.rpki-client.org