Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/jupZCHLHWxXivoxblIhOyAULlUk.roa
File: jupZCHLHWxXivoxblIhOyAULlUk.roa (raw, json)
Hash identifier: XD+pZpqXA3va5JDvwNiXQ/VOzAh5rADzJvQpDGJuhrE=
Subject key identifier: 8E:EA:59:08:72:C7:5B:15:E2:BE:8C:5B:94:88:4E:C8:05:0B:95:49
Certificate issuer: /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial: 01856FF9612062E382E26210D729302D1C27
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/jupZCHLHWxXivoxblIhOyAULlUk.roa
Signing time: Mon 02 Jan 2023 00:54:52 +0000
ROA not before: Mon 02 Jan 2023 00:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48943
IP address blocks: 193.28.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:61:20:62:e3:82:e2:62:10:d7:29:30:2d:1c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
Validity
Not Before: Jan 2 00:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8eea590872c75b15e2be8c5b94884ec8050b9549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e1:2d:59:35:61:63:0d:6e:21:18:bf:07:37:
b0:da:8c:77:60:f6:00:f6:48:b6:78:6d:94:be:8e:
ee:f9:84:67:03:07:fb:fb:82:06:ac:3e:8c:35:52:
48:7a:5c:df:d6:7d:5f:67:ea:99:e8:2d:96:d9:f6:
6e:b3:0e:2a:0a:5b:89:5a:a3:fc:1f:14:ec:af:1e:
d5:aa:99:c3:75:55:b9:58:fa:ca:a5:42:cf:3f:9e:
6d:d7:c2:45:79:55:ef:77:a1:d7:b2:5b:c3:ac:5f:
68:f0:06:80:d5:78:1b:6c:d3:5a:a9:ee:74:7d:cb:
ae:45:8e:9e:44:d6:3b:7a:fe:f5:2b:0d:f5:1f:21:
e1:3d:be:ee:06:df:01:5e:90:2d:7c:da:b2:50:9a:
54:77:5c:04:c9:ed:4c:b9:4d:b5:ad:dd:1e:48:fc:
0d:44:4a:d6:7b:f0:30:3f:be:59:fd:e5:54:94:49:
f4:2d:ef:46:9e:fa:17:37:58:4e:20:9c:81:e4:d5:
ab:f5:70:7e:72:a5:6c:11:18:ba:ea:bf:68:10:be:
78:aa:63:ab:b4:18:da:c0:42:26:a8:43:29:e2:27:
13:d4:1a:93:71:16:0a:35:1d:b2:b4:be:79:0c:d2:
1e:82:2a:46:b1:04:a8:b7:03:d4:3f:c0:bc:09:90:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EA:59:08:72:C7:5B:15:E2:BE:8C:5B:94:88:4E:C8:05:0B:95:49
X509v3 Authority Key Identifier:
keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/jupZCHLHWxXivoxblIhOyAULlUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.12.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:34:6b:de:6a:a1:a4:b5:f4:ec:21:87:a9:89:49:7d:8a:fa:
05:c9:08:2e:48:f4:bc:a9:cc:52:a1:da:9c:f4:39:df:30:76:
89:16:da:b0:23:b0:71:76:0f:7c:a2:e2:20:30:d0:2c:ca:0c:
ca:6f:01:db:eb:7c:61:73:ea:aa:80:5c:8c:d3:e5:2c:c5:39:
42:a1:fe:4e:24:e6:ed:18:50:d0:4c:ec:a8:45:23:5b:74:e1:
f5:75:64:c4:62:b3:4b:0d:e0:3b:19:cd:a7:87:9d:a4:3c:74:
27:fe:d8:f7:23:da:4b:aa:e9:64:7b:e5:24:89:b4:c9:b7:e8:
51:3a:96:3e:0f:90:a2:0f:97:23:0d:7c:b1:29:fc:50:a3:26:
57:a7:b5:0f:98:f0:12:6b:25:6f:90:81:95:aa:ff:59:cc:35:
cc:84:51:ba:1e:13:a2:61:c0:e6:b7:bf:41:61:5d:1f:f0:ee:
41:bc:a9:dd:72:ad:c4:6b:91:5a:30:88:44:ff:c0:89:ea:6d:
37:87:a7:32:7e:6a:46:bf:b5:02:5a:43:a1:57:e2:87:5d:35:
1d:33:25:c2:b2:bc:91:95:ef:7a:34:93:d1:bb:a9:40:09:5a:
1d:3c:e0:e1:02:fc:82:20:19:dd:49:36:6f:f5:4e:f8:a3:d1:
e1:bb:90:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv+WEgYuOC4mIQ1ykwLRwnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5YzU1MjQ5ODg4MTg3NjU1NmYxNmUzMjNmMWNhMzY5YjI1
ZWRiMGMwHhcNMjMwMTAyMDA1NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWVhNTkwODcyYzc1YjE1ZTJiZThjNWI5NDg4NGVjODA1MGI5NTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+EtWTVhYw1uIRi/Bzew2ox3YPYA
9ki2eG2Uvo7u+YRnAwf7+4IGrD6MNVJIelzf1n1fZ+qZ6C2W2fZusw4qCluJWqP8
HxTsrx7VqpnDdVW5WPrKpULPP55t18JFeVXvd6HXslvDrF9o8AaA1XgbbNNaqe50
fcuuRY6eRNY7ev71Kw31HyHhPb7uBt8BXpAtfNqyUJpUd1wEye1MuU21rd0eSPwN
RErWe/AwP75Z/eVUlEn0Le9GnvoXN1hOIJyB5NWr9XB+cqVsERi66r9oEL54qmOr
tBjawEImqEMp4icT1BqTcRYKNR2ytL55DNIegipGsQSotwPUP8C8CZC9yQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI7qWQhyx1sV4r6MW5SITsgFC5VJMB8GA1UdIwQY
MBaAFAnFUkmIgYdlVvFuMj8co2myXtsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgt
MTFmMzY1YTczNTJjLzEvanVwWkNITEhXeFhpdm94YmxJaE95QVVMbFVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jMzRjMzAtODFiNC00ZGJlLTgzZTgtMTFmMzY1YTczNTJj
LzEvQ2NWU1NZaUJoMlZXOFc0eVB4eWphYkplMnd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRwMMA0G
CSqGSIb3DQEBCwUAA4IBAQBONGveaqGktfTsIYepiUl9ivoFyQguSPS8qcxSodqc
9DnfMHaJFtqwI7Bxdg98ouIgMNAsygzKbwHb63xhc+qqgFyM0+UsxTlCof5OJObt
GFDQTOyoRSNbdOH1dWTEYrNLDeA7Gc2nh52kPHQn/tj3I9pLqulke+UkibTJt+hR
OpY+D5CiD5cjDXyxKfxQoyZXp7UPmPASayVvkIGVqv9ZzDXMhFG6HhOiYcDmt79B
YV0f8O5BvKndcq3Ea5FaMIhE/8CJ6m03h6cyfmpGv7UCWkOhV+KHXTUdMyXCsryR
le96NJPRu6lACVodPODhAvyCIBndSTZv9U74o9Hhu5DX
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:34 2024 by rpki-client on console-ams.rpki-client.org