Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/11592e-3296-48c6-a4d4-8708f697e669/1/KgCXfEKPMXe_MuTrqK5vVho7WWE.roa
File: KgCXfEKPMXe_MuTrqK5vVho7WWE.roa (raw, json)
Hash identifier: qgE46T4HDVPqtxuN8rypHrsZwO+LzF2VxQNtN4U9Mlk=
Subject key identifier: 2A:00:97:7C:42:8F:31:77:BF:32:E4:EB:A8:AE:6F:56:1A:3B:59:61
Certificate issuer: /CN=9748fcd3ceecdb8e04a524af9674cb58803ff668
Certificate serial: 018CC64B16B766111DB1E9FBD88015149326
Authority key identifier: 97:48:FC:D3:CE:EC:DB:8E:04:A5:24:AF:96:74:CB:58:80:3F:F6:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0j8087s244EpSSvlnTLWIA_9mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/11592e-3296-48c6-a4d4-8708f697e669/1/KgCXfEKPMXe_MuTrqK5vVho7WWE.roa
Signing time: Mon 01 Jan 2024 18:30:58 +0000
ROA not before: Mon 01 Jan 2024 18:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202499
IP address blocks: 193.142.188.0/22 maxlen: 24
2a0c:9b40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Apr 2024 10:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:16:b7:66:11:1d:b1:e9:fb:d8:80:15:14:93:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9748fcd3ceecdb8e04a524af9674cb58803ff668
Validity
Not Before: Jan 1 18:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a00977c428f3177bf32e4eba8ae6f561a3b5961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b3:78:d0:e9:5a:0c:47:f7:ba:5d:b2:eb:2a:
29:85:ac:67:77:c5:e7:7d:89:f9:45:90:8c:9f:51:
5f:39:96:fb:23:46:fc:3f:6f:94:c4:35:e8:35:a0:
13:f0:38:0a:d2:7d:01:ba:f8:9f:62:9d:00:c4:66:
38:67:c7:21:8a:03:92:77:06:e6:5c:ec:2c:44:2f:
80:e0:53:b9:33:f8:93:07:82:08:1c:f8:05:9e:9d:
6b:e5:7f:83:f7:48:39:8a:12:df:5b:ad:a8:51:2a:
8e:1c:a4:6c:fd:6e:d6:be:7f:ae:a8:5f:3a:e2:c7:
30:cd:ab:8e:a4:cb:d0:13:53:c7:b0:45:c3:34:46:
b6:fd:8d:ee:2a:0f:9b:3c:48:44:5f:a6:d2:6a:df:
39:61:51:df:15:64:6f:b4:55:b3:43:6a:01:4c:2f:
40:98:30:96:79:7d:c9:e0:de:4f:0c:96:61:f7:35:
41:f8:e0:9f:23:d5:37:7e:c1:90:b3:b8:7f:6f:39:
cb:61:56:e1:80:97:21:38:fc:21:96:58:ac:cc:c7:
6e:bb:79:be:ff:ba:bb:8b:8e:44:15:d3:80:ae:fc:
08:b1:51:50:c4:60:c7:57:2d:73:77:49:db:aa:e8:
d7:f8:29:ef:f5:dd:9a:54:18:f7:be:a7:03:9e:80:
61:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:00:97:7C:42:8F:31:77:BF:32:E4:EB:A8:AE:6F:56:1A:3B:59:61
X509v3 Authority Key Identifier:
keyid:97:48:FC:D3:CE:EC:DB:8E:04:A5:24:AF:96:74:CB:58:80:3F:F6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0j8087s244EpSSvlnTLWIA_9mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/11592e-3296-48c6-a4d4-8708f697e669/1/KgCXfEKPMXe_MuTrqK5vVho7WWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/11592e-3296-48c6-a4d4-8708f697e669/1/l0j8087s244EpSSvlnTLWIA_9mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.188.0/22
IPv6:
2a0c:9b40::/29
Signature Algorithm: sha256WithRSAEncryption
6b:b0:0b:2e:98:c0:58:c6:94:93:76:87:14:43:4a:2c:4d:c7:
16:0a:60:9a:83:b8:d0:69:95:d3:1b:82:8f:a3:a8:87:ca:c9:
d8:6f:e2:ec:bf:da:2b:8f:ae:74:ad:b4:c3:c0:a6:d4:85:8a:
73:c3:20:89:cd:62:c3:b1:2f:d3:ce:d2:2b:59:8c:05:8d:7f:
82:78:28:29:f2:d6:0c:85:a7:92:4b:28:db:8c:72:0a:74:8c:
ee:68:70:19:47:51:fc:21:06:de:1d:41:62:5e:43:f2:38:b0:
de:e9:2f:3e:1b:d1:0e:dd:03:26:e8:78:94:8f:7b:29:f0:02:
95:af:01:17:61:c4:2f:80:d5:d4:a5:29:78:4d:d2:f8:46:2b:
61:13:ba:80:62:87:ed:c9:2e:67:2b:20:e3:e1:35:1e:54:59:
a3:02:07:a3:a9:21:0f:1a:5b:9d:81:b7:3a:ce:70:ad:bd:2a:
bb:89:f9:b1:a3:7f:5e:a7:ca:fd:8b:b6:3f:ba:a0:c6:4f:3d:
f1:f3:6a:50:49:c9:08:ca:e2:96:d2:ce:6d:57:ce:34:55:db:
b4:eb:2a:62:df:52:d7:a3:7f:42:3c:97:80:7b:0d:96:2b:9a:
c4:ed:08:bf:61:a6:d0:21:4f:2a:cd:86:75:1e:0b:b3:2c:95:
2e:ac:e4:24
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzGSxa3ZhEdsen72IAVFJMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NDhmY2QzY2VlY2RiOGUwNGE1MjRhZjk2NzRjYjU4ODAz
ZmY2NjgwHhcNMjQwMTAxMTgzMDU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTAwOTc3YzQyOGYzMTc3YmYzMmU0ZWJhOGFlNmY1NjFhM2I1OTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7N40OlaDEf3ul2y6yophaxnd8Xn
fYn5RZCMn1FfOZb7I0b8P2+UxDXoNaAT8DgK0n0BuvifYp0AxGY4Z8chigOSdwbm
XOwsRC+A4FO5M/iTB4IIHPgFnp1r5X+D90g5ihLfW62oUSqOHKRs/W7Wvn+uqF86
4scwzauOpMvQE1PHsEXDNEa2/Y3uKg+bPEhEX6bSat85YVHfFWRvtFWzQ2oBTC9A
mDCWeX3J4N5PDJZh9zVB+OCfI9U3fsGQs7h/bznLYVbhgJchOPwhlliszMduu3m+
/7q7i45EFdOArvwIsVFQxGDHVy1zd0nbqujX+Cnv9d2aVBj3vqcDnoBh9QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFCoAl3xCjzF3vzLk66iub1YaO1lhMB8GA1UdIwQY
MBaAFJdI/NPO7NuOBKUkr5Z0y1iAP/ZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDBqODA4N3MyNDRFcFNTdmxuVExXSUFfOW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xMTU5MmUtMzI5Ni00OGM2LWE0ZDQt
ODcwOGY2OTdlNjY5LzEvS2dDWGZFS1BNWGVfTXVUcnFLNXZWaG83V1dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xMTU5MmUtMzI5Ni00OGM2LWE0ZDQtODcwOGY2OTdlNjY5
LzEvbDBqODA4N3MyNDRFcFNTdmxuVExXSUFfOW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwY68MA0E
AgACMAcDBQMqDJtAMA0GCSqGSIb3DQEBCwUAA4IBAQBrsAsumMBYxpSTdocUQ0os
TccWCmCag7jQaZXTG4KPo6iHysnYb+Lsv9orj650rbTDwKbUhYpzwyCJzWLDsS/T
ztIrWYwFjX+CeCgp8tYMhaeSSyjbjHIKdIzuaHAZR1H8IQbeHUFiXkPyOLDe6S8+
G9EO3QMm6HiUj3sp8AKVrwEXYcQvgNXUpSl4TdL4RithE7qAYoftyS5nKyDj4TUe
VFmjAgejqSEPGludgbc6znCtvSq7ifmxo39ep8r9i7Y/uqDGTz3x82pQSckIyuKW
0s5tV840Vdu06ypi31LXo39CPJeAew2WK5rE7Qi/YabQIU8qzYZ1HguzLJUurOQk
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:34 2024 by rpki-client on console-ams.rpki-client.org