Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/mVS2rqLCRTyqkmgiC6lZlGBwP7U.roa
File: mVS2rqLCRTyqkmgiC6lZlGBwP7U.roa (raw, json)
Hash identifier: t7orOcqfPWCWy08QbeWqvU5uZlku4qaRe2onBumwn8M=
Subject key identifier: 99:54:B6:AE:A2:C2:45:3C:AA:92:68:22:0B:A9:59:94:60:70:3F:B5
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 01856F26E1462FD684C71E0BF9FCDD0F64F6
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/mVS2rqLCRTyqkmgiC6lZlGBwP7U.roa
Signing time: Sun 01 Jan 2023 21:04:57 +0000
ROA not before: Sun 01 Jan 2023 21:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196714
IP address blocks: 93.94.7.0/24 maxlen: 24
93.94.6.0/24 maxlen: 24
93.94.6.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:e1:46:2f:d6:84:c7:1e:0b:f9:fc:dd:0f:64:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Jan 1 21:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9954b6aea2c2453caa9268220ba9599460703fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:62:31:72:1f:aa:35:ea:39:ca:d1:90:8f:41:
6c:2e:38:6a:66:6c:92:80:2b:2d:99:3d:95:0a:dd:
30:c9:0c:81:ca:d6:4f:bf:73:50:e0:1a:74:fa:bf:
36:22:d8:dd:34:85:d1:d5:5f:7c:7c:6a:80:48:92:
ae:10:a1:6c:35:96:5b:7a:2c:61:05:63:c9:30:4d:
79:b5:25:0a:55:39:99:81:b6:f5:7c:e6:73:df:d6:
b1:af:c3:33:9c:6a:af:c2:fb:0e:fa:4b:a9:97:43:
a5:1c:f4:55:29:a5:22:3a:83:75:dd:11:53:23:1e:
d2:c1:dc:f8:5d:57:6f:07:9e:cd:10:20:9f:d3:f6:
64:92:97:d3:6f:ea:f3:b7:bd:0d:11:5f:62:b3:79:
56:af:34:99:b6:e0:f7:18:a2:e5:76:06:d1:1c:0d:
d1:10:0e:72:e4:ce:63:68:98:73:37:2f:4d:fd:99:
82:d6:08:01:3e:d8:87:65:7f:fc:5e:c7:2d:72:c2:
8f:df:64:6d:f1:2d:cd:5c:47:d0:b1:ea:62:30:e2:
66:3b:19:ef:e3:29:1b:fd:56:50:80:79:74:dd:75:
db:6e:47:d2:e7:87:30:6c:e5:7f:48:3e:a5:78:31:
7c:6b:20:bc:cf:86:57:79:f2:4d:49:6b:25:d8:c3:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:54:B6:AE:A2:C2:45:3C:AA:92:68:22:0B:A9:59:94:60:70:3F:B5
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/mVS2rqLCRTyqkmgiC6lZlGBwP7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.6.0/23
Signature Algorithm: sha256WithRSAEncryption
01:0d:2f:24:52:5e:aa:d4:cf:49:d4:df:c3:7e:a6:c1:4a:94:
ed:1a:95:c9:54:86:66:35:08:48:45:dd:7e:5f:9f:11:d3:7f:
68:2e:b6:d4:f1:7d:b8:06:c9:42:ef:ee:1e:aa:40:c6:42:a8:
82:d0:5a:cd:6f:b5:be:00:c7:4f:47:28:42:e3:67:e8:03:cf:
74:96:e4:eb:9c:67:f5:ac:a9:37:87:f6:48:37:47:62:5e:64:
d1:d2:a6:ad:03:d5:98:d1:14:fc:ea:65:47:8d:19:0f:9b:de:
9d:2d:9b:dd:84:d8:0d:13:04:c6:37:6d:be:3d:6c:af:68:c5:
83:b2:f0:78:3a:1a:5e:f4:b0:c7:b7:74:6b:86:db:f8:97:63:
10:f8:03:64:d7:4b:d3:83:a7:34:c0:f1:31:54:bf:83:eb:de:
3c:4a:78:58:6f:9f:5c:84:86:d2:e8:29:d1:92:03:f7:84:49:
27:e1:10:b1:6f:88:0f:aa:fe:e4:f5:a8:cc:cd:c4:00:e4:da:
f2:73:67:32:ba:fc:71:7e:08:83:81:ba:b1:45:68:c2:dc:fe:
c2:07:d0:a2:b7:b0:f7:7a:ca:58:64:5f:55:db:75:cf:8f:7d:
69:87:79:01:92:df:78:1c:23:94:91:7c:7b:b9:76:8f:da:c9:
da:b3:e4:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvJuFGL9aExx4L+fzdD2T2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYjQ5MzQ1N2IyZjAyZTY5Yjg1ZjcxOGRjYzE2YTlhOWVm
MGZjZDEwHhcNMjMwMTAxMjEwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTU0YjZhZWEyYzI0NTNjYWE5MjY4MjIwYmE5NTk5NDYwNzAzZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GIxch+qNeo5ytGQj0FsLjhqZmyS
gCstmT2VCt0wyQyBytZPv3NQ4Bp0+r82ItjdNIXR1V98fGqASJKuEKFsNZZbeixh
BWPJME15tSUKVTmZgbb1fOZz39axr8MznGqvwvsO+kupl0OlHPRVKaUiOoN13RFT
Ix7Swdz4XVdvB57NECCf0/ZkkpfTb+rzt70NEV9is3lWrzSZtuD3GKLldgbRHA3R
EA5y5M5jaJhzNy9N/ZmC1ggBPtiHZX/8XsctcsKP32Rt8S3NXEfQsepiMOJmOxnv
4ykb/VZQgHl03XXbbkfS54cwbOV/SD6leDF8ayC8z4ZXefJNSWsl2MN93wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJlUtq6iwkU8qpJoIgupWZRgcD+1MB8GA1UdIwQY
MBaAFL+0k0V7LwLmm4X3GNzBapqe8PzRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdTVFJYc3ZBdWFiaGZjWTNNRnFtcDd3X05FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hNDE0MWQtODQ5OC00MmY0LWIyZjMt
MWY2NDA5ODQ4MTUwLzEvbVZTMnJxTENSVHlxa21naUM2bFpsR0J3UDdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hNDE0MWQtODQ5OC00MmY0LWIyZjMtMWY2NDA5ODQ4MTUw
LzEvdjdTVFJYc3ZBdWFiaGZjWTNNRnFtcDd3X05FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXV4GMA0G
CSqGSIb3DQEBCwUAA4IBAQABDS8kUl6q1M9J1N/DfqbBSpTtGpXJVIZmNQhIRd1+
X58R039oLrbU8X24BslC7+4eqkDGQqiC0FrNb7W+AMdPRyhC42foA890luTrnGf1
rKk3h/ZIN0diXmTR0qatA9WY0RT86mVHjRkPm96dLZvdhNgNEwTGN22+PWyvaMWD
svB4Ohpe9LDHt3Rrhtv4l2MQ+ANk10vTg6c0wPExVL+D6948SnhYb59chIbS6CnR
kgP3hEkn4RCxb4gPqv7k9ajMzcQA5Nryc2cyuvxxfgiDgbqxRWjC3P7CB9Cit7D3
espYZF9V23XPj31ph3kBkt94HCOUkXx7uXaP2snas+TO
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:40 2024 by rpki-client on console-ams.rpki-client.org