Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/W9Hs7WIhigC9plGjJBmaobB6yZ0.roa
File: W9Hs7WIhigC9plGjJBmaobB6yZ0.roa (raw, json)
Hash identifier: dRMeHUvg7L+SFugpbFeP3LA8JNvlR8Rij6J3nuV6nmw=
Subject key identifier: 5B:D1:EC:ED:62:21:8A:00:BD:A6:51:A3:24:19:9A:A1:B0:7A:C9:9D
Certificate issuer: /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Certificate serial: 01856B77AE7F329538B463FE686C5CE118B3
Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/W9Hs7WIhigC9plGjJBmaobB6yZ0.roa
Signing time: Sun 01 Jan 2023 03:54:43 +0000
ROA not before: Sun 01 Jan 2023 03:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209651
IP address blocks: 193.104.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:77:ae:7f:32:95:38:b4:63:fe:68:6c:5c:e1:18:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Validity
Not Before: Jan 1 03:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bd1eced62218a00bda651a324199aa1b07ac99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0f:19:4b:bd:c3:1c:ff:2a:3a:13:bb:2c:22:
fe:9e:26:09:4e:78:11:ce:33:5f:5f:84:6c:30:f8:
27:45:76:91:15:8d:55:23:ea:c9:55:47:a5:8d:6e:
ec:f4:72:78:d8:34:33:6a:22:62:aa:5d:65:66:ec:
ee:8e:9b:b6:20:a1:71:f1:3c:fd:ca:e8:18:4e:56:
28:3f:f2:38:ee:19:dd:93:05:d2:4c:12:14:7a:d8:
44:b0:2d:f6:be:72:8a:83:3f:95:b4:c1:fd:16:d5:
3b:c7:24:ad:51:f6:17:69:49:99:79:50:70:f5:59:
66:a2:ed:2b:56:6b:ef:ff:ac:bb:36:5d:3b:a3:5f:
44:8c:6a:71:5c:a5:72:1b:18:7d:96:83:1a:30:60:
48:2f:07:c6:58:9c:4c:aa:31:20:80:4c:86:2f:ba:
12:ed:0e:39:e8:7c:77:07:f4:36:a3:18:a9:93:1e:
4c:e8:f5:dd:17:10:14:a1:4a:4b:4a:f4:f9:4f:75:
18:aa:c8:6a:65:98:67:93:56:a2:e3:4b:3f:46:c4:
ff:bc:ea:ff:06:7c:c7:d6:54:15:68:3f:d3:8a:3b:
f4:1e:c6:47:c9:0a:66:5d:14:c7:6d:3a:ac:db:05:
98:a9:f1:f4:0c:d7:82:55:4d:35:8d:c4:36:88:4b:
d8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D1:EC:ED:62:21:8A:00:BD:A6:51:A3:24:19:9A:A1:B0:7A:C9:9D
X509v3 Authority Key Identifier:
keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/W9Hs7WIhigC9plGjJBmaobB6yZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.133.0/24
Signature Algorithm: sha256WithRSAEncryption
45:37:d9:11:e5:70:e7:5e:dc:35:8a:0f:d0:7c:47:1e:aa:46:
77:99:e0:8b:5f:a2:de:d5:ce:56:c2:8d:92:55:e8:f5:33:40:
6f:67:a1:8c:04:70:51:ce:38:d2:16:1d:0d:6f:95:74:40:a2:
2d:fd:f4:d8:08:72:c5:ce:06:fd:18:8b:c7:f9:18:ab:0e:96:
34:13:7a:34:ae:1c:97:ca:2a:38:e2:8f:e2:aa:a8:b8:9a:b1:
1c:e2:fa:97:58:5b:62:11:51:3a:fd:4b:14:37:b5:15:60:8b:
9a:cd:04:1f:e0:c1:6e:7b:da:d7:05:9c:a6:1e:d2:d3:cd:73:
55:9c:82:c3:95:ed:b3:56:58:d1:82:43:7c:49:6c:99:85:90:
c7:44:d1:e4:68:49:2e:97:9c:75:ad:d6:cc:d0:65:94:7f:01:
15:aa:db:6d:2c:22:4b:a1:a7:ac:b5:8a:2e:38:cd:80:0c:5c:
28:6b:b7:5e:5e:b1:c6:fd:0f:a1:2d:d3:1e:3e:f3:7f:0d:a0:
6e:93:94:5b:49:e0:71:24:9a:ce:7d:3c:07:37:5f:6d:c0:ed:
52:3d:20:6c:90:90:bf:73:9f:42:de:2c:d3:e9:45:8a:e8:a1:
70:11:45:35:b7:8a:5b:37:bb:d6:d0:8c:c2:65:df:f3:41:b2:
6a:b4:70:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrd65/MpU4tGP+aGxc4RizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYmE5MGM3MWViNGNiMDE2OWM5NDg0M2U1YzcyZmQ3Nzc1
MDE5MDYwHhcNMjMwMTAxMDM1NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmQxZWNlZDYyMjE4YTAwYmRhNjUxYTMyNDE5OWFhMWIwN2FjOTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg8ZS73DHP8qOhO7LCL+niYJTngR
zjNfX4RsMPgnRXaRFY1VI+rJVUeljW7s9HJ42DQzaiJiql1lZuzujpu2IKFx8Tz9
yugYTlYoP/I47hndkwXSTBIUethEsC32vnKKgz+VtMH9FtU7xyStUfYXaUmZeVBw
9Vlmou0rVmvv/6y7Nl07o19EjGpxXKVyGxh9loMaMGBILwfGWJxMqjEggEyGL7oS
7Q456Hx3B/Q2oxipkx5M6PXdFxAUoUpLSvT5T3UYqshqZZhnk1ai40s/RsT/vOr/
BnzH1lQVaD/Tijv0HsZHyQpmXRTHbTqs2wWYqfH0DNeCVU01jcQ2iEvYbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFvR7O1iIYoAvaZRoyQZmqGwesmdMB8GA1UdIwQY
MBaAFPO6kMcetMsBaclIQ+XHL9d3UBkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODdxUXh4NjB5d0ZweVVoRDVjY3YxM2RRR1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYmNjMDctOWE2MC00OWY2LWExZWYt
OGQ1MjkwMmFjODMwLzEvVzlIczdXSWhpZ0M5cGxHakpCbWFvYkI2eVowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hYmNjMDctOWE2MC00OWY2LWExZWYtOGQ1MjkwMmFjODMw
LzEvODdxUXh4NjB5d0ZweVVoRDVjY3YxM2RRR1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWiFMA0G
CSqGSIb3DQEBCwUAA4IBAQBFN9kR5XDnXtw1ig/QfEceqkZ3meCLX6Le1c5Wwo2S
Vej1M0BvZ6GMBHBRzjjSFh0Nb5V0QKIt/fTYCHLFzgb9GIvH+RirDpY0E3o0rhyX
yio44o/iqqi4mrEc4vqXWFtiEVE6/UsUN7UVYIuazQQf4MFue9rXBZymHtLTzXNV
nILDle2zVljRgkN8SWyZhZDHRNHkaEkul5x1rdbM0GWUfwEVqtttLCJLoaestYou
OM2ADFwoa7deXrHG/Q+hLdMePvN/DaBuk5RbSeBxJJrOfTwHN19twO1SPSBskJC/
c59C3izT6UWK6KFwEUU1t4pbN7vW0IzCZd/zQbJqtHBs
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:52 2024 by rpki-client on console-ams.rpki-client.org