Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/ASecuuoftvoeswLgO3xlLnq0Rpk.roa
File: ASecuuoftvoeswLgO3xlLnq0Rpk.roa (raw, json)
Hash identifier: RhTtCDlhJeF7EC11qfLcnGF7WEJ4Ki22yNEuSpOqekk=
Subject key identifier: 01:27:9C:BA:EA:1F:B6:FA:1E:B3:02:E0:3B:7C:65:2E:7A:B4:46:99
Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial: 01863A7407A3C97B08D677B020DE64434910
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/ASecuuoftvoeswLgO3xlLnq0Rpk.roa
Signing time: Fri 10 Feb 2023 08:32:07 +0000
ROA not before: Fri 10 Feb 2023 08:32:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20668
IP address blocks: 93.113.128.0/24 maxlen: 24
188.213.35.0/24 maxlen: 24
93.113.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3a:74:07:a3:c9:7b:08:d6:77:b0:20:de:64:43:49:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
Validity
Not Before: Feb 10 08:32:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01279cbaea1fb6fa1eb302e03b7c652e7ab44699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2b:62:a1:94:58:9a:f3:5f:3a:e4:cf:80:3d:
30:92:75:55:4a:b2:b8:60:e7:47:b4:ec:89:d0:f8:
50:e0:fc:84:50:7b:82:65:e0:4c:7e:2a:ef:40:7a:
fd:d7:82:e3:67:60:35:51:7f:86:20:13:98:d2:92:
92:e5:6e:1b:aa:3b:e8:25:a5:c9:41:db:5e:c0:0d:
01:1a:59:b1:1c:36:9e:7b:e5:49:1d:e3:20:f6:07:
60:6e:a7:c1:a3:56:5a:8b:7e:91:39:be:fe:c8:ee:
4e:f1:02:f7:76:59:30:e0:9e:01:c2:d0:91:0d:e2:
ad:79:17:38:3d:89:c6:c3:7a:6d:07:bb:d8:e0:ab:
66:f1:8b:d6:db:dc:0b:60:6e:0f:a6:0f:a4:b5:0f:
d7:c2:27:53:ea:5b:7f:37:40:d3:a6:e2:26:96:7e:
d9:03:e8:6c:fc:fe:5d:a0:ad:af:6d:f8:2b:57:ce:
50:dc:29:ae:b1:7e:44:9f:c7:b0:e2:5a:d5:69:ef:
82:65:b7:66:6a:a1:2c:e9:c8:69:1b:c6:de:82:73:
05:a2:f8:be:73:2a:7e:02:62:89:f5:6f:0e:bd:bd:
8a:de:90:57:ec:6d:a7:ca:d9:ae:76:b0:64:2d:b5:
2d:4a:92:9d:d7:7e:88:c9:4e:48:59:f3:69:ae:1a:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:27:9C:BA:EA:1F:B6:FA:1E:B3:02:E0:3B:7C:65:2E:7A:B4:46:99
X509v3 Authority Key Identifier:
keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/ASecuuoftvoeswLgO3xlLnq0Rpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.128.0/24
93.113.205.0/24
188.213.35.0/24
Signature Algorithm: sha256WithRSAEncryption
49:5b:b4:c0:31:8b:78:33:55:84:c9:5d:e4:60:b6:65:4c:28:
9a:bc:62:6c:b4:b8:d5:88:51:ac:3b:a6:8a:e5:86:72:b3:0e:
5e:23:e0:42:0d:09:3c:93:c2:60:d6:1c:f3:ad:2a:c4:d4:48:
bd:93:8b:e7:6e:c7:5a:3b:f3:b5:6a:d1:df:8b:1e:74:dd:3a:
0b:48:a7:58:ca:53:a0:25:05:8f:98:15:30:78:7d:7a:92:cf:
d4:6d:83:cd:32:ed:de:a7:5b:14:95:7e:1c:04:6b:05:e1:21:
01:76:fc:11:1d:63:3e:1e:a0:b0:3b:40:ce:75:b6:c1:89:cc:
e6:be:72:6f:9e:5d:3c:82:5e:1c:64:8d:68:6e:e7:5b:05:ad:
84:74:a0:f9:18:d3:af:48:6f:d6:9f:96:d7:8d:d1:74:6e:13:
00:6f:ff:f0:de:dd:26:d6:36:a6:ec:cd:28:de:09:15:2a:d8:
85:60:c1:28:4a:39:93:3f:d2:80:4f:18:b6:a5:6c:b9:96:ea:
a5:1f:b0:03:55:76:1c:66:09:9b:93:44:49:ad:ab:80:1f:cd:
cd:32:3b:f9:f9:a2:25:3d:c6:08:08:39:46:4f:7a:e3:ae:48:
cf:9c:b1:7e:27:11:7c:25:f9:ed:ba:e4:64:b3:e8:eb:5a:90:
68:49:8c:5e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYY6dAejyXsI1newIN5kQ0kQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz
NjE3MzEwHhcNMjMwMjEwMDgzMjA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTI3OWNiYWVhMWZiNmZhMWViMzAyZTAzYjdjNjUyZTdhYjQ0Njk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCtioZRYmvNfOuTPgD0wknVVSrK4
YOdHtOyJ0PhQ4PyEUHuCZeBMfirvQHr914LjZ2A1UX+GIBOY0pKS5W4bqjvoJaXJ
QdtewA0BGlmxHDaee+VJHeMg9gdgbqfBo1Zai36ROb7+yO5O8QL3dlkw4J4BwtCR
DeKteRc4PYnGw3ptB7vY4Ktm8YvW29wLYG4Ppg+ktQ/XwidT6lt/N0DTpuImln7Z
A+hs/P5doK2vbfgrV85Q3CmusX5En8ew4lrVae+CZbdmaqEs6chpG8begnMFovi+
cyp+AmKJ9W8Ovb2K3pBX7G2nytmudrBkLbUtSpKd136IyU5IWfNprho3NwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAEnnLrqH7b6HrMC4Dt8ZS56tEaZMB8GA1UdIwQY
MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt
ODQyODU4MTIyYmJjLzEvQVNlY3V1b2Z0dm9lc3dMZ08zeGxMbnEwUnBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj
LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXXGAAwQA
XXHNAwQAvNUjMA0GCSqGSIb3DQEBCwUAA4IBAQBJW7TAMYt4M1WEyV3kYLZlTCia
vGJstLjViFGsO6aK5YZysw5eI+BCDQk8k8Jg1hzzrSrE1Ei9k4vnbsdaO/O1atHf
ix503ToLSKdYylOgJQWPmBUweH16ks/UbYPNMu3ep1sUlX4cBGsF4SEBdvwRHWM+
HqCwO0DOdbbBiczmvnJvnl08gl4cZI1obudbBa2EdKD5GNOvSG/Wn5bXjdF0bhMA
b//w3t0m1jam7M0o3gkVKtiFYMEoSjmTP9KATxi2pWy5luqlH7ADVXYcZgmbk0RJ
rauAH83NMjv5+aIlPcYICDlGT3rjrkjPnLF+JxF8JfntuuRks+jrWpBoSYxe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:11 2024 by rpki-client on console-ams.rpki-client.org