Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/GQ_YZU0tRNj23zO-HYsNCC1tktA.roa
File: GQ_YZU0tRNj23zO-HYsNCC1tktA.roa (raw, json)
Hash identifier: p+uPAAJFiEf/jBMO1U6ZgqgHmUxMpgCPWS4yfUfEz9U=
Subject key identifier: 19:0F:D8:65:4D:2D:44:D8:F6:DF:33:BE:1D:8B:0D:08:2D:6D:92:D0
Certificate issuer: /CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Certificate serial: 01856FD4EA236F0BB757099A26FFF11AD14B
Authority key identifier: 2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/GQ_YZU0tRNj23zO-HYsNCC1tktA.roa
Signing time: Mon 02 Jan 2023 00:15:02 +0000
ROA not before: Mon 02 Jan 2023 00:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43455
IP address blocks: 193.46.82.0/24 maxlen: 24
2001:67c:1498::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:ea:23:6f:0b:b7:57:09:9a:26:ff:f1:1a:d1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ebaaac513982b3c24d360c6d465cf8242056a89
Validity
Not Before: Jan 2 00:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=190fd8654d2d44d8f6df33be1d8b0d082d6d92d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c8:0d:30:0d:c8:2a:74:f7:8c:28:8d:be:9e:
29:ad:d4:be:22:a0:08:84:0e:62:2c:db:6a:66:26:
47:b4:aa:1c:a6:1e:34:d0:5b:0d:e9:dc:f6:0d:99:
50:1e:02:d6:73:ba:c1:59:3f:66:54:90:a7:41:15:
91:be:3b:82:ee:29:ac:09:da:f2:4a:5a:9f:2e:c6:
51:c3:ac:34:33:88:4d:1f:75:6a:f1:2a:cb:43:10:
2f:bc:9c:fa:27:59:d5:e1:dd:4b:36:a5:cb:b3:23:
9b:0e:45:76:c5:51:60:8f:ed:1f:f8:1d:80:4c:f3:
c9:bb:77:fa:52:7a:8b:8f:96:a7:b7:05:f3:76:40:
79:c1:fa:cd:f0:6d:77:57:2b:70:f5:4a:d8:87:73:
6c:21:dc:aa:2c:7e:bb:b4:72:08:8f:32:7b:d2:f8:
42:2e:ae:00:46:3e:80:5b:54:7f:e8:76:7c:66:55:
22:23:2b:b4:87:8b:d3:ad:e7:93:79:e6:0e:ad:7b:
16:56:2f:6c:51:cc:34:4a:c1:c2:05:4c:17:10:3f:
77:06:2d:12:17:39:91:22:e5:e3:8f:7f:f7:12:d4:
0b:79:26:ee:e7:37:6f:97:60:d5:0f:17:dc:1e:4f:
67:07:8c:21:f6:e5:b9:cc:70:94:51:4f:a2:9c:69:
27:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0F:D8:65:4D:2D:44:D8:F6:DF:33:BE:1D:8B:0D:08:2D:6D:92:D0
X509v3 Authority Key Identifier:
keyid:2E:BA:AA:C5:13:98:2B:3C:24:D3:60:C6:D4:65:CF:82:42:05:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrqqxROYKzwk02DG1GXPgkIFaok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/GQ_YZU0tRNj23zO-HYsNCC1tktA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/42ad02-d48a-41ac-a80b-2102d96ee355/1/LrqqxROYKzwk02DG1GXPgkIFaok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.82.0/24
IPv6:
2001:67c:1498::/48
Signature Algorithm: sha256WithRSAEncryption
13:8b:2d:a0:2c:11:fa:09:a6:b1:f6:0e:83:93:4c:15:88:1b:
11:57:df:51:6a:63:7c:b6:ea:82:6c:50:cd:df:76:9c:5e:d8:
ba:c1:f3:3f:38:c7:72:de:02:06:9e:fe:a3:b6:b9:3e:d9:b5:
11:b2:cd:7c:39:85:9b:28:c4:6b:03:cb:9d:bc:0c:c4:1e:c3:
85:a4:c9:87:00:58:3a:79:47:2d:27:8f:5a:9c:af:39:67:49:
c5:24:5f:f3:62:d1:cd:8e:de:a2:d3:70:5a:56:e1:50:5e:67:
92:2d:13:90:a0:0e:1c:52:9f:a6:0d:13:1b:dc:6d:b2:5f:84:
1f:1a:f7:de:40:08:9a:f8:73:13:52:02:e2:11:bc:53:29:1d:
17:31:50:23:26:c2:cc:85:13:6a:97:ce:bf:3a:d5:1c:c3:9d:
e4:75:c9:f3:32:00:f3:88:4e:73:bb:41:c8:72:86:f1:89:eb:
f9:c7:18:3f:00:70:c8:7b:55:70:bc:f1:3f:a3:d1:5f:ea:6e:
e8:c3:c4:f8:88:2c:8e:17:2e:5f:f8:a8:32:26:c2:3a:23:f7:
d0:0c:90:a7:d9:41:45:71:58:c0:b6:3b:48:ac:52:cf:5c:46:
fa:61:28:1b:8c:42:9b:92:ea:02:3b:a5:95:52:a0:e2:9b:a1:
2b:78:53:06
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVv1Oojbwu3VwmaJv/xGtFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYmFhYWM1MTM5ODJiM2MyNGQzNjBjNmQ0NjVjZjgyNDIw
NTZhODkwHhcNMjMwMTAyMDAxNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTBmZDg2NTRkMmQ0NGQ4ZjZkZjMzYmUxZDhiMGQwODJkNmQ5MmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cgNMA3IKnT3jCiNvp4prdS+IqAI
hA5iLNtqZiZHtKocph400FsN6dz2DZlQHgLWc7rBWT9mVJCnQRWRvjuC7imsCdry
SlqfLsZRw6w0M4hNH3Vq8SrLQxAvvJz6J1nV4d1LNqXLsyObDkV2xVFgj+0f+B2A
TPPJu3f6UnqLj5antwXzdkB5wfrN8G13Vytw9UrYh3NsIdyqLH67tHIIjzJ70vhC
Lq4ARj6AW1R/6HZ8ZlUiIyu0h4vTreeTeeYOrXsWVi9sUcw0SsHCBUwXED93Bi0S
FzmRIuXjj3/3EtQLeSbu5zdvl2DVDxfcHk9nB4wh9uW5zHCUUU+inGkn9QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBkP2GVNLUTY9t8zvh2LDQgtbZLQMB8GA1UdIwQY
MBaAFC66qsUTmCs8JNNgxtRlz4JCBWqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJxcXhST1lLendrMDJERzFHWFBna0lGYW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80MmFkMDItZDQ4YS00MWFjLWE4MGIt
MjEwMmQ5NmVlMzU1LzEvR1FfWVpVMHRSTmoyM3pPLUhZc05DQzF0a3RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC80MmFkMDItZDQ4YS00MWFjLWE4MGItMjEwMmQ5NmVlMzU1
LzEvTHJxcXhST1lLendrMDJERzFHWFBna0lGYW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwS5SMA8E
AgACMAkDBwAgAQZ8FJgwDQYJKoZIhvcNAQELBQADggEBABOLLaAsEfoJprH2DoOT
TBWIGxFX31FqY3y26oJsUM3fdpxe2LrB8z84x3LeAgae/qO2uT7ZtRGyzXw5hZso
xGsDy528DMQew4WkyYcAWDp5Ry0nj1qcrzlnScUkX/Ni0c2O3qLTcFpW4VBeZ5It
E5CgDhxSn6YNExvcbbJfhB8a995ACJr4cxNSAuIRvFMpHRcxUCMmwsyFE2qXzr86
1RzDneR1yfMyAPOITnO7QchyhvGJ6/nHGD8AcMh7VXC88T+j0V/qbujDxPiILI4X
Ll/4qDImwjoj99AMkKfZQUVxWMC2O0isUs9cRvphKBuMQpuS6gI7pZVSoOKboSt4
UwY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:25 2024 by rpki-client on console-ams.rpki-client.org