Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/KTbm4WEYMBf1QZqWHpBvAiUArHA.roa
File: KTbm4WEYMBf1QZqWHpBvAiUArHA.roa (raw, json)
Hash identifier: YUqXbY5PJyJ3kG6Dixtyj0z/kWZuXz53UBk6qZx612s=
Subject key identifier: 29:36:E6:E1:61:18:30:17:F5:41:9A:96:1E:90:6F:02:25:00:AC:70
Certificate issuer: /CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Certificate serial: 01856F94E01BF4F074802C46E4E9BC5E04E8
Authority key identifier: 38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/KTbm4WEYMBf1QZqWHpBvAiUArHA.roa
Signing time: Sun 01 Jan 2023 23:05:05 +0000
ROA not before: Sun 01 Jan 2023 23:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56552
IP address blocks: 193.84.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:e0:1b:f4:f0:74:80:2c:46:e4:e9:bc:5e:04:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e7f47bb9b91657e5726bfcb2def8aad973e268
Validity
Not Before: Jan 1 23:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2936e6e161183017f5419a961e906f022500ac70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:9d:48:f0:25:4c:ea:78:cb:0d:9e:29:7e:
15:b9:7a:22:6a:70:fd:73:26:13:e4:ac:fc:3b:e3:
1f:d1:54:94:7f:d6:de:a1:6f:38:55:e2:62:a5:17:
57:8d:31:a6:95:aa:99:b9:7e:cb:4f:49:6c:59:f9:
92:41:ac:0a:2d:b7:69:51:3d:a6:bc:c9:6c:58:c5:
f4:f5:f1:d4:02:d3:e3:08:23:c9:c3:f9:6a:f7:4d:
97:3a:e2:a3:11:04:18:45:ca:57:5f:4b:e3:73:a0:
f3:ca:0a:43:b5:c9:fb:7a:a5:85:17:a8:f8:2f:b5:
ff:c2:16:88:4f:4f:64:c7:0f:ce:83:ba:37:91:23:
ac:16:7a:01:41:1d:0c:c5:18:56:60:d4:ed:4a:e3:
b7:13:96:77:5a:53:34:69:ec:d0:59:b3:64:4b:f2:
da:27:89:96:2c:8c:51:84:7c:7e:92:88:7e:47:a4:
77:28:fd:01:1f:20:3c:8b:72:48:d6:42:ca:c1:9d:
64:4f:0d:b7:3c:9d:80:d5:19:5c:4f:b5:bd:a6:1a:
ad:7b:31:1d:72:7f:a1:ae:44:c5:54:a8:e2:ee:2c:
0e:4b:a2:51:47:d7:3d:c8:c3:e3:6a:fa:6a:39:f8:
77:38:eb:0f:4c:23:2d:6e:c7:cf:2b:98:9c:d1:22:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:36:E6:E1:61:18:30:17:F5:41:9A:96:1E:90:6F:02:25:00:AC:70
X509v3 Authority Key Identifier:
keyid:38:E7:F4:7B:B9:B9:16:57:E5:72:6B:FC:B2:DE:F8:AA:D9:73:E2:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOf0e7m5Flflcmv8st74qtlz4mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/KTbm4WEYMBf1QZqWHpBvAiUArHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bb0e7b-2a81-4970-b3bd-686f0a0616cc/1/OOf0e7m5Flflcmv8st74qtlz4mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.78.0/24
Signature Algorithm: sha256WithRSAEncryption
98:66:02:78:3b:db:b0:8d:d7:c8:29:eb:2a:ab:f7:b0:05:87:
f6:7d:ab:28:76:50:24:73:e3:42:1b:78:86:33:fe:59:24:f9:
b4:75:d9:60:d5:c1:26:88:e5:53:04:74:c5:22:ff:75:77:94:
33:4d:c2:c2:cb:4c:15:ef:62:cd:1d:bc:f9:19:ff:81:65:c5:
ff:c4:3e:a0:8e:e7:a3:78:8b:7c:03:6c:d1:22:bc:51:b9:14:
0f:ee:06:b4:06:3e:49:d5:95:34:dc:8a:43:d5:98:97:b3:18:
3a:fa:d5:2f:75:54:a2:70:c1:55:a0:20:3d:53:5f:34:dd:30:
ca:94:ea:29:20:17:1b:fd:45:77:40:4c:1d:7a:f9:94:30:ce:
ec:9b:6a:21:64:29:76:38:35:dd:8f:91:86:a4:d9:cd:ac:6b:
31:d7:62:6f:de:f1:16:34:48:e9:d0:32:4d:e7:d8:d6:3f:08:
ba:21:e5:ef:e4:1e:ac:84:6d:ec:ec:3a:1e:16:94:39:50:e2:
33:b2:0b:97:0e:3c:3f:17:ff:e8:7d:c7:c8:ab:b7:14:39:12:
a1:93:b0:84:72:3c:5a:80:44:e6:67:c4:cf:a6:94:1b:71:71:
0c:d4:7b:13:14:27:62:4f:4c:41:82:8b:17:a2:02:e8:9f:08:
eb:10:4c:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvlOAb9PB0gCxG5Om8XgToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZTdmNDdiYjliOTE2NTdlNTcyNmJmY2IyZGVmOGFhZDk3
M2UyNjgwHhcNMjMwMTAxMjMwNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTM2ZTZlMTYxMTgzMDE3ZjU0MTlhOTYxZTkwNmYwMjI1MDBhYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAudSPAlTOp4yw2eKX4VuXoianD9
cyYT5Kz8O+Mf0VSUf9beoW84VeJipRdXjTGmlaqZuX7LT0lsWfmSQawKLbdpUT2m
vMlsWMX09fHUAtPjCCPJw/lq902XOuKjEQQYRcpXX0vjc6DzygpDtcn7eqWFF6j4
L7X/whaIT09kxw/Og7o3kSOsFnoBQR0MxRhWYNTtSuO3E5Z3WlM0aezQWbNkS/La
J4mWLIxRhHx+koh+R6R3KP0BHyA8i3JI1kLKwZ1kTw23PJ2A1RlcT7W9phqtezEd
cn+hrkTFVKji7iwOS6JRR9c9yMPjavpqOfh3OOsPTCMtbsfPK5ic0SJ2PQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCk25uFhGDAX9UGalh6QbwIlAKxwMB8GA1UdIwQY
MBaAFDjn9Hu5uRZX5XJr/LLe+KrZc+JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQt
Njg2ZjBhMDYxNmNjLzEvS1RibTRXRVlNQmYxUVpxV0hwQnZBaVVBckhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iYjBlN2ItMmE4MS00OTcwLWIzYmQtNjg2ZjBhMDYxNmNj
LzEvT09mMGU3bTVGbGZsY212OHN0NzRxdGx6NG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwVROMA0G
CSqGSIb3DQEBCwUAA4IBAQCYZgJ4O9uwjdfIKesqq/ewBYf2fasodlAkc+NCG3iG
M/5ZJPm0ddlg1cEmiOVTBHTFIv91d5QzTcLCy0wV72LNHbz5Gf+BZcX/xD6gjuej
eIt8A2zRIrxRuRQP7ga0Bj5J1ZU03IpD1ZiXsxg6+tUvdVSicMFVoCA9U1803TDK
lOopIBcb/UV3QEwdevmUMM7sm2ohZCl2ODXdj5GGpNnNrGsx12Jv3vEWNEjp0DJN
59jWPwi6IeXv5B6shG3s7DoeFpQ5UOIzsguXDjw/F//ofcfIq7cUORKhk7CEcjxa
gETmZ8TPppQbcXEM1HsTFCdiT0xBgosXogLonwjrEEwi
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:44 2024 by rpki-client on console-fra.rpki-client.org