Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/jwmWYEyB83917WMbZgm92NzNNFk.roa
File: jwmWYEyB83917WMbZgm92NzNNFk.roa (raw, json)
Hash identifier: gewXY/isjXccv6+yMT9SEcJR+Jzc4qJyEKG6LM24fUI=
Subject key identifier: 8F:09:96:60:4C:81:F3:7F:75:ED:63:1B:66:09:BD:D8:DC:CD:34:59
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 01856F26E1DC0680CD032318AC67E98B5DF1
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/jwmWYEyB83917WMbZgm92NzNNFk.roa
Signing time: Sun 01 Jan 2023 21:04:57 +0000
ROA not before: Sun 01 Jan 2023 21:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203865
IP address blocks: 93.94.0.0/23 maxlen: 23
93.94.2.0/24 maxlen: 24
2a03:1e02::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:e1:dc:06:80:cd:03:23:18:ac:67:e9:8b:5d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Jan 1 21:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f0996604c81f37f75ed631b6609bdd8dccd3459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:8d:14:76:82:78:a2:e4:91:7f:15:21:1e:
40:d4:e7:42:fc:ef:a9:a2:cb:95:cb:69:16:94:a4:
d6:74:b0:4d:7b:ec:18:f5:ab:86:a7:c6:63:67:fc:
20:b7:64:c8:33:81:8f:82:6f:5d:7c:c7:63:40:82:
0c:8f:1f:8d:56:95:d2:af:20:1c:91:c5:76:b0:b2:
88:f5:73:0d:3d:d6:f1:01:dc:e0:13:88:e8:53:82:
72:34:77:3a:e7:db:18:f2:f8:48:b1:b5:ef:96:9f:
4b:f2:2a:e8:92:bc:41:cf:36:54:a1:45:3e:e6:ce:
45:3d:26:88:dd:25:c9:58:5e:2b:14:0a:9c:6d:e0:
37:5a:4b:b3:e0:c1:2c:51:41:c8:93:b5:14:02:4b:
a6:9b:75:49:52:8a:1d:cf:f9:87:a9:23:8d:a5:27:
8b:6f:3b:fc:91:3f:44:47:ca:7c:74:14:8a:af:b4:
a5:c7:a1:26:41:43:41:d1:0c:43:a1:80:47:b1:7b:
d5:e0:7b:33:ba:fc:5e:69:df:c1:c5:99:08:63:b2:
10:a1:c6:4f:bb:51:d7:80:88:86:4e:dc:a1:53:ef:
08:06:45:cb:50:28:a1:25:e5:1a:bb:2a:97:2f:48:
3c:de:ce:2d:c4:66:a1:01:ce:05:e4:b3:e8:81:45:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:09:96:60:4C:81:F3:7F:75:ED:63:1B:66:09:BD:D8:DC:CD:34:59
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/jwmWYEyB83917WMbZgm92NzNNFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.0.0-93.94.2.255
IPv6:
2a03:1e02::/32
Signature Algorithm: sha256WithRSAEncryption
44:28:02:ce:1a:4f:0a:cd:9b:da:61:b2:03:72:c8:70:60:cf:
54:26:13:97:b4:33:ba:0a:e5:b3:99:8e:3b:dc:1c:13:1a:10:
14:ac:3b:30:f3:fa:dd:f1:49:17:2f:6d:5b:31:6d:2e:a9:f4:
19:f8:a6:07:95:8f:8b:ad:2c:04:10:4e:84:2e:fc:9b:36:38:
c1:8a:f6:fb:11:3e:39:c2:05:6f:2a:8c:42:ab:b5:2e:a0:2f:
8b:71:d3:81:a8:04:05:1b:89:f1:b9:6f:4d:72:8a:a8:ac:e4:
f7:61:f9:95:29:7d:48:0d:f4:a9:5f:22:6d:af:3a:35:ee:15:
9b:cb:82:61:42:43:3f:c1:1d:56:90:8e:56:89:44:0a:42:51:
af:47:92:40:26:5f:30:3a:1b:c8:28:ef:16:09:2d:ab:16:ad:
7d:7e:b2:71:db:c0:55:3b:2e:e8:57:21:b3:4f:4b:28:ac:0f:
a2:ee:16:d0:90:ff:51:39:dd:e6:4e:47:43:6a:33:e4:29:64:
33:da:91:09:f1:5f:f9:26:1e:3c:09:10:be:4e:31:f7:2d:40:
ad:cd:42:72:d4:80:5d:f4:09:ec:e6:74:ac:35:ac:ea:20:e6:
21:d2:bc:0a:4b:75:e1:d4:3f:9f:26:c3:38:16:7f:90:5d:48:
ec:da:ce:da
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYVvJuHcBoDNAyMYrGfpi13xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYjQ5MzQ1N2IyZjAyZTY5Yjg1ZjcxOGRjYzE2YTlhOWVm
MGZjZDEwHhcNMjMwMTAxMjEwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjA5OTY2MDRjODFmMzdmNzVlZDYzMWI2NjA5YmRkOGRjY2QzNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuviNFHaCeKLkkX8VIR5A1OdC/O+p
osuVy2kWlKTWdLBNe+wY9auGp8ZjZ/wgt2TIM4GPgm9dfMdjQIIMjx+NVpXSryAc
kcV2sLKI9XMNPdbxAdzgE4joU4JyNHc659sY8vhIsbXvlp9L8irokrxBzzZUoUU+
5s5FPSaI3SXJWF4rFAqcbeA3Wkuz4MEsUUHIk7UUAkumm3VJUoodz/mHqSONpSeL
bzv8kT9ER8p8dBSKr7Slx6EmQUNB0QxDoYBHsXvV4Hszuvxead/BxZkIY7IQocZP
u1HXgIiGTtyhU+8IBkXLUCihJeUauyqXL0g83s4txGahAc4F5LPogUWubQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFI8JlmBMgfN/de1jG2YJvdjczTRZMB8GA1UdIwQY
MBaAFL+0k0V7LwLmm4X3GNzBapqe8PzRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdTVFJYc3ZBdWFiaGZjWTNNRnFtcDd3X05FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hNDE0MWQtODQ5OC00MmY0LWIyZjMt
MWY2NDA5ODQ4MTUwLzEvandtV1lFeUI4MzkxN1dNYlpnbTkyTnpOTkZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hNDE0MWQtODQ5OC00MmY0LWIyZjMtMWY2NDA5ODQ4MTUw
LzEvdjdTVFJYc3ZBdWFiaGZjWTNNRnFtcDd3X05FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDATBAIAATANMAsDAwFdXgME
AF1eAjANBAIAAjAHAwUAKgMeAjANBgkqhkiG9w0BAQsFAAOCAQEARCgCzhpPCs2b
2mGyA3LIcGDPVCYTl7Qzugrls5mOO9wcExoQFKw7MPP63fFJFy9tWzFtLqn0Gfim
B5WPi60sBBBOhC78mzY4wYr2+xE+OcIFbyqMQqu1LqAvi3HTgagEBRuJ8blvTXKK
qKzk92H5lSl9SA30qV8iba86Ne4Vm8uCYUJDP8EdVpCOVolECkJRr0eSQCZfMDob
yCjvFgktqxatfX6ycdvAVTsu6Fchs09LKKwPou4W0JD/UTnd5k5HQ2oz5ClkM9qR
CfFf+SYePAkQvk4x9y1Arc1CctSAXfQJ7OZ0rDWs6iDmIdK8Ckt14dQ/nybDOBZ/
kF1I7NrO2g==
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:50 2024 by rpki-client on console-fra.rpki-client.org