Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/P8TDTQK9noXvpjhHOt8yO5eeStU.roa
File: P8TDTQK9noXvpjhHOt8yO5eeStU.roa (raw, json)
Hash identifier: 5+BNIKOAZkfU5d0164xvik2Zs4BsCWkKYpFXMqYh3WU=
Subject key identifier: 3F:C4:C3:4D:02:BD:9E:85:EF:A6:38:47:3A:DF:32:3B:97:9E:4A:D5
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 0192B913D296FC281A2E4373DCC8E2540730
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/P8TDTQK9noXvpjhHOt8yO5eeStU.roa
Signing time: Wed 23 Oct 2024 11:12:16 +0000
ROA not before: Wed 23 Oct 2024 11:12:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4492
IP address blocks: 193.5.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 02:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:13:d2:96:fc:28:1a:2e:43:73:dc:c8:e2:54:07:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Oct 23 11:12:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fc4c34d02bd9e85efa638473adf323b979e4ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:03:28:53:65:82:e1:61:dc:8c:24:95:76:
f4:33:ec:1c:a6:ab:1d:56:58:c4:4b:c3:6f:6a:0d:
8b:ee:a8:3b:22:a7:46:f6:bc:6c:e5:da:51:96:fc:
db:fb:c6:00:c8:62:09:cf:86:b3:55:d1:f1:53:62:
22:91:eb:d3:46:36:c8:e4:c9:de:e4:29:4c:98:6f:
38:26:89:28:8e:3e:1e:1c:bd:17:e0:17:57:ce:d4:
d6:f8:36:29:aa:d7:e5:1b:73:27:6f:78:9c:44:4f:
56:88:74:f6:48:5f:a6:a4:5e:9e:67:b9:44:d9:45:
ce:a5:d4:65:16:07:37:c8:c9:ac:b2:bd:b6:ea:b4:
96:60:2f:70:90:b5:f5:df:7f:3e:b5:de:ab:e8:7c:
c9:0c:3e:e8:38:aa:28:bd:22:8b:09:79:5b:36:40:
68:2f:4f:8f:b1:8b:08:52:dc:35:ba:51:cc:bb:e6:
13:6a:c4:1e:70:13:e4:71:aa:30:b9:21:2d:bd:84:
a8:eb:f7:01:a9:9d:68:f9:45:3e:1b:5d:3f:0b:9d:
3e:dc:66:fe:16:1c:78:9f:6c:1f:c1:72:3e:03:ab:
f4:20:d6:cb:7e:2f:9a:34:f3:0e:36:95:63:e1:e7:
79:c2:79:9b:7e:99:fc:c2:df:39:e2:e9:93:cd:69:
88:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C4:C3:4D:02:BD:9E:85:EF:A6:38:47:3A:DF:32:3B:97:9E:4A:D5
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/P8TDTQK9noXvpjhHOt8yO5eeStU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:03:23:2e:1d:f8:57:32:54:b2:c1:b6:73:07:dc:fa:b7:4e:
eb:93:42:b5:13:e3:c7:8e:b1:ed:1a:9e:31:57:fb:f6:1a:f5:
b9:8d:7c:b4:42:6f:86:b1:b3:fc:8c:0e:fd:2c:a1:63:7f:25:
9c:ce:2c:5d:19:7b:02:f5:d2:cc:82:45:0e:46:44:34:e0:09:
bf:ee:93:be:06:ef:49:dc:6c:47:de:c0:ca:a0:1e:b3:fb:f7:
56:94:84:df:ab:85:94:fb:3f:e4:b0:bd:e9:d7:95:90:97:6c:
7a:fb:7c:9a:c2:b7:ca:14:53:b0:36:bc:dc:a4:4b:03:83:7d:
08:ac:ec:8d:0f:87:b0:9e:b1:f1:e1:bf:90:b3:6d:d0:60:45:
e0:11:c0:c5:d2:24:0c:18:b8:f5:39:63:f3:10:15:92:12:ba:
54:08:fd:93:71:29:c4:90:21:c8:9f:e2:90:f1:22:a5:0b:a0:
2c:06:a5:f1:a9:ea:c7:c8:dd:45:50:98:c1:c9:1a:ba:a1:aa:
f0:6b:67:30:ec:04:9b:05:98:24:a4:36:56:97:8f:05:d9:ca:
0a:35:2a:c6:94:49:cc:33:43:ad:ef:56:7e:2d:f2:a3:95:de:
8f:65:69:be:c1:f8:cc:dc:aa:23:d7:49:f9:36:58:b8:25:57:
b9:17:0e:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZK5E9KW/CgaLkNz3MjiVAcwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi
YzE3YWIwHhcNMjQxMDIzMTExMjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmM0YzM0ZDAyYmQ5ZTg1ZWZhNjM4NDczYWRmMzIzYjk3OWU0YWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+IDKFNlguFh3IwklXb0M+wcpqsd
VljES8Nvag2L7qg7IqdG9rxs5dpRlvzb+8YAyGIJz4azVdHxU2IikevTRjbI5Mne
5ClMmG84Jokojj4eHL0X4BdXztTW+DYpqtflG3Mnb3icRE9WiHT2SF+mpF6eZ7lE
2UXOpdRlFgc3yMmssr226rSWYC9wkLX1338+td6r6HzJDD7oOKoovSKLCXlbNkBo
L0+PsYsIUtw1ulHMu+YTasQecBPkcaowuSEtvYSo6/cBqZ1o+UU+G10/C50+3Gb+
Fhx4n2wfwXI+A6v0INbLfi+aNPMONpVj4ed5wnmbfpn8wt854umTzWmIeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD/Ew00CvZ6F76Y4RzrfMjuXnkrVMB8GA1UdIwQY
MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt
NjkxNTJlOWEwOGMzLzEvUDhURFRRSzlub1h2cGpoSE90OHlPNWVlU3RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz
LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQUTMA0G
CSqGSIb3DQEBCwUAA4IBAQBdAyMuHfhXMlSywbZzB9z6t07rk0K1E+PHjrHtGp4x
V/v2GvW5jXy0Qm+GsbP8jA79LKFjfyWczixdGXsC9dLMgkUORkQ04Am/7pO+Bu9J
3GxH3sDKoB6z+/dWlITfq4WU+z/ksL3p15WQl2x6+3yawrfKFFOwNrzcpEsDg30I
rOyND4ewnrHx4b+Qs23QYEXgEcDF0iQMGLj1OWPzEBWSErpUCP2TcSnEkCHIn+KQ
8SKlC6AsBqXxqerHyN1FUJjByRq6oarwa2cw7ASbBZgkpDZWl48F2coKNSrGlEnM
M0Ot71Z+LfKjld6PZWm+wfjM3Koj10n5Nli4JVe5Fw6L
-----END CERTIFICATE-----
Generated at Sat Nov 9 05:49:57 2024 by rpki-client on console-fra.rpki-client.org