Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/uKavTnRCiDzUz0ME45Jl_FDoPYc.roa
File: uKavTnRCiDzUz0ME45Jl_FDoPYc.roa (raw, json)
Hash identifier: Edf4tc+v8GEVT+jwG7+N0xnRy5AD3xXusu5gK+D2U/U=
Subject key identifier: B8:A6:AF:4E:74:42:88:3C:D4:CF:43:04:E3:92:65:FC:50:E8:3D:87
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 01856D0181E41C5E721172361793A072799E
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/uKavTnRCiDzUz0ME45Jl_FDoPYc.roa
Signing time: Sun 01 Jan 2023 11:04:53 +0000
ROA not before: Sun 01 Jan 2023 11:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.56.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jan 2023 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:81:e4:1c:5e:72:11:72:36:17:93:a0:72:79:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Jan 1 11:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b8a6af4e7442883cd4cf4304e39265fc50e83d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:5b:8b:56:6c:0d:d5:9b:28:ce:24:f9:1c:
96:7d:00:58:3d:64:d6:a5:dc:a5:29:81:ec:74:1c:
a4:29:b8:56:d5:00:55:ab:88:ea:c5:ba:17:d5:8e:
82:83:ed:45:5b:c7:0d:bd:12:31:bf:90:9c:f9:18:
62:e2:5f:f6:38:53:c2:15:0a:d3:e0:56:70:3f:50:
1c:55:2e:b6:62:df:51:35:ee:d0:29:77:8a:30:9a:
7a:55:47:a3:8d:47:a9:75:99:9a:ee:e7:d9:20:93:
a0:82:a6:f0:b1:87:f6:55:35:63:73:6a:b1:70:45:
73:7e:cf:0d:4f:d3:97:78:13:16:41:8e:73:1c:33:
e7:81:91:df:d8:a7:7f:06:25:f2:91:0f:10:d9:a5:
7c:22:29:d0:80:25:f6:11:cc:0c:ee:9b:25:32:d8:
21:7b:fa:56:46:57:3b:88:17:d0:a4:31:f6:2d:c5:
70:07:60:dd:73:ca:48:7b:39:5a:38:77:1a:58:47:
a5:af:98:5a:d1:af:80:62:0a:21:84:26:bf:9c:d1:
ae:54:63:9a:d4:e3:e9:d3:91:b3:24:45:4f:ce:71:
c7:df:b4:44:f4:21:d7:49:aa:2d:81:1a:db:97:01:
d7:c1:ac:e0:92:1a:ce:0f:39:b5:58:40:b9:6e:49:
23:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A6:AF:4E:74:42:88:3C:D4:CF:43:04:E3:92:65:FC:50:E8:3D:87
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/uKavTnRCiDzUz0ME45Jl_FDoPYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.147.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a7:e9:c2:e7:51:53:54:b0:9d:aa:20:f4:13:ad:71:7e:21:
52:fa:b9:cf:a0:38:2e:82:78:df:9e:21:ef:4e:87:f1:12:a9:
f5:5f:a7:eb:85:cc:65:37:56:2b:ab:11:26:fa:cf:bf:b9:82:
2f:72:d7:ba:28:e3:e1:11:39:02:9f:ea:1b:52:f5:c3:51:fe:
4a:a7:66:65:0e:e8:11:ed:43:9c:cd:04:47:23:46:8b:e2:5b:
b8:f4:f0:eb:f5:b4:58:4a:3c:09:9a:1c:92:29:c5:c5:97:3c:
0d:30:c5:45:d3:60:1a:27:e2:ec:75:1b:e7:2a:d3:37:7c:7c:
7a:54:ae:84:46:79:14:17:4a:62:07:ea:d7:55:d4:17:1e:2a:
27:bb:b6:51:53:63:97:6f:0f:3d:e2:22:f6:18:e2:b8:8c:32:
24:57:d5:72:50:90:b4:64:5f:79:01:78:ac:1e:2d:6c:1e:2b:
c0:4e:8e:10:6f:f6:c5:62:f4:18:26:fb:a2:b8:68:4f:6f:e0:
b5:21:93:0a:b2:d5:69:ec:fc:d6:05:89:1a:c5:e3:d9:e9:24:
97:11:12:f9:17:ac:83:be:6a:d9:a0:a2:f7:68:69:57:41:e6:
69:c5:cd:a1:f9:48:6f:d4:96:cb:7e:92:7f:7d:d6:83:68:e6:
9f:f1:20:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtAYHkHF5yEXI2F5OgcnmeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1
OGM4MjAwHhcNMjMwMTAxMTEwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGE2YWY0ZTc0NDI4ODNjZDRjZjQzMDRlMzkyNjVmYzUwZTgzZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApapbi1ZsDdWbKM4k+RyWfQBYPWTW
pdylKYHsdBykKbhW1QBVq4jqxboX1Y6Cg+1FW8cNvRIxv5Cc+Rhi4l/2OFPCFQrT
4FZwP1AcVS62Yt9RNe7QKXeKMJp6VUejjUepdZma7ufZIJOggqbwsYf2VTVjc2qx
cEVzfs8NT9OXeBMWQY5zHDPngZHf2Kd/BiXykQ8Q2aV8IinQgCX2EcwM7pslMtgh
e/pWRlc7iBfQpDH2LcVwB2Ddc8pIezlaOHcaWEelr5ha0a+AYgohhCa/nNGuVGOa
1OPp05GzJEVPznHH37RE9CHXSaotgRrblwHXwazgkhrODzm1WEC5bkkjQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLimr050Qog81M9DBOOSZfxQ6D2HMB8GA1UdIwQY
MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt
NThjZjg5ODg4ZTJhLzEvdUthdlRuUkNpRHpVejBNRTQ1SmxfRkRvUFljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgtNThjZjg5ODg4ZTJh
LzEvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTiTMA0G
CSqGSIb3DQEBCwUAA4IBAQCwp+nC51FTVLCdqiD0E61xfiFS+rnPoDgugnjfniHv
TofxEqn1X6frhcxlN1YrqxEm+s+/uYIvcte6KOPhETkCn+obUvXDUf5Kp2ZlDugR
7UOczQRHI0aL4lu49PDr9bRYSjwJmhySKcXFlzwNMMVF02AaJ+LsdRvnKtM3fHx6
VK6ERnkUF0piB+rXVdQXHionu7ZRU2OXbw894iL2GOK4jDIkV9VyUJC0ZF95AXis
Hi1sHivATo4Qb/bFYvQYJvuiuGhPb+C1IZMKstVp7PzWBYkaxePZ6SSXERL5F6yD
vmrZoKL3aGlXQeZpxc2h+Uhv1JbLfpJ/fdaDaOaf8SB2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:49 2024 by rpki-client on console-fra.rpki-client.org