Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/I4nqAvMqD5EN66_GZcfgD65rMEc.roa
File: I4nqAvMqD5EN66_GZcfgD65rMEc.roa (raw, json)
Hash identifier: hE5hwRfX7qnbL7Eb9CCOtG/VQSrfNSQ6JPVMPBx2O8U=
Subject key identifier: 23:89:EA:02:F3:2A:0F:91:0D:EB:AF:C6:65:C7:E0:0F:AE:6B:30:47
Certificate issuer: /CN=e29471ae0aaacab83e293f1f8ea1bd7070ec335b
Certificate serial: 0187503F3DDAF71711926886719234E726C9
Authority key identifier: E2:94:71:AE:0A:AA:CA:B8:3E:29:3F:1F:8E:A1:BD:70:70:EC:33:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pRxrgqqyrg-KT8fjqG9cHDsM1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/I4nqAvMqD5EN66_GZcfgD65rMEc.roa
Signing time: Wed 05 Apr 2023 07:08:54 +0000
ROA not before: Wed 05 Apr 2023 07:08:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52157
IP address blocks: 185.193.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Apr 2023 09:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:3f:3d:da:f7:17:11:92:68:86:71:92:34:e7:26:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29471ae0aaacab83e293f1f8ea1bd7070ec335b
Validity
Not Before: Apr 5 07:08:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2389ea02f32a0f910debafc665c7e00fae6b3047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:3b:14:f4:8e:f4:d6:5c:e6:ae:b0:f3:e2:
52:38:bd:f7:1a:55:06:c9:8d:a1:02:c1:81:f7:70:
e0:78:70:b2:ca:d7:c5:d1:32:36:32:5d:fc:62:7d:
d7:81:f4:a4:00:5a:ca:4a:e8:b9:53:4b:83:a1:6c:
08:ee:78:6d:12:b6:09:59:ba:cd:6f:ce:07:19:a9:
08:50:ee:00:91:64:52:5c:9f:84:c0:24:d4:e4:1e:
5e:84:6e:4a:c3:db:69:a7:1b:ae:c7:ba:b5:2f:ea:
db:ce:e0:1e:89:36:e6:56:ee:58:48:91:39:36:66:
ed:09:95:f5:f0:5a:b1:61:75:c8:06:aa:1c:c2:dc:
e1:05:69:84:aa:d7:05:cd:95:04:a4:73:9f:8f:41:
7d:60:11:0f:44:f8:ae:61:bb:28:c6:16:66:a2:e0:
e8:dc:0a:dc:73:13:c7:83:63:1f:7b:71:4e:40:5c:
7c:d4:f0:84:56:b9:1a:49:f3:e7:a4:33:b2:87:d5:
73:8f:f0:3c:ee:ab:23:14:f3:6f:fe:a7:99:4d:f9:
5f:12:55:66:58:f3:74:ab:d2:cd:e7:f3:71:7c:37:
0a:6b:95:01:0b:8c:a0:62:96:bf:7c:d8:22:4d:a5:
22:32:3d:ae:39:29:5d:c0:43:45:cf:c1:9e:74:58:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:89:EA:02:F3:2A:0F:91:0D:EB:AF:C6:65:C7:E0:0F:AE:6B:30:47
X509v3 Authority Key Identifier:
keyid:E2:94:71:AE:0A:AA:CA:B8:3E:29:3F:1F:8E:A1:BD:70:70:EC:33:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pRxrgqqyrg-KT8fjqG9cHDsM1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/I4nqAvMqD5EN66_GZcfgD65rMEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.92.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:01:ea:f1:ad:7c:3b:dd:fc:6f:c6:6b:c8:dc:26:05:f4:fd:
69:94:9e:35:d8:6c:8a:13:99:50:ac:12:d4:d8:f9:a9:1f:32:
9c:5f:26:c5:f0:c5:3c:03:20:c3:30:00:86:41:a5:cb:23:25:
88:f6:04:68:43:3a:12:20:e7:d4:67:56:a0:7b:a1:d9:3a:c8:
8a:49:14:5d:34:7a:d3:3a:7d:42:2f:9c:86:02:8e:ca:a9:e4:
73:3b:d2:c5:ac:dd:7b:2f:60:56:3b:3b:9e:9e:e2:25:53:c0:
66:13:1b:3d:2d:f2:a4:7d:ff:a4:8f:da:24:53:70:76:87:06:
53:93:b5:f9:d4:fa:13:5a:78:c4:ac:97:05:5a:24:89:ba:34:
26:e5:bf:f5:6c:6b:1b:67:d8:c6:bc:9a:2f:26:1b:cd:7b:f3:
34:d5:c1:0c:38:57:d6:a6:aa:a8:97:3d:69:4b:e3:ec:ad:38:
10:ef:3b:42:bd:e2:d9:2e:43:d0:80:15:16:66:2a:75:e3:cc:
4d:6d:ce:b3:ba:9f:97:6c:43:b1:26:93:de:cb:24:6a:57:05:
21:fc:0f:22:35:7e:61:cb:c1:f4:ce:af:ff:b3:23:d0:01:3b:
d0:f3:a1:35:2e:98:c9:55:a3:8b:3d:bd:76:b4:b2:f1:4b:d3:
cd:31:61:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdQPz3a9xcRkmiGcZI05ybJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOTQ3MWFlMGFhYWNhYjgzZTI5M2YxZjhlYTFiZDcwNzBl
YzMzNWIwHhcNMjMwNDA1MDcwODU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzg5ZWEwMmYzMmEwZjkxMGRlYmFmYzY2NWM3ZTAwZmFlNmIzMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8c7FPSO9NZc5q6w8+JSOL33GlUG
yY2hAsGB93DgeHCyytfF0TI2Ml38Yn3XgfSkAFrKSui5U0uDoWwI7nhtErYJWbrN
b84HGakIUO4AkWRSXJ+EwCTU5B5ehG5Kw9tppxuux7q1L+rbzuAeiTbmVu5YSJE5
NmbtCZX18FqxYXXIBqocwtzhBWmEqtcFzZUEpHOfj0F9YBEPRPiuYbsoxhZmouDo
3ArccxPHg2Mfe3FOQFx81PCEVrkaSfPnpDOyh9Vzj/A87qsjFPNv/qeZTflfElVm
WPN0q9LN5/NxfDcKa5UBC4ygYpa/fNgiTaUiMj2uOSldwENFz8GedFgBDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCOJ6gLzKg+RDeuvxmXH4A+uazBHMB8GA1UdIwQY
MBaAFOKUca4Kqsq4Pik/H46hvXBw7DNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHBSeHJncXF5cmctS1Q4ZmpxRzljSERzTTFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jODQ5MmQtYzM2NC00ZDgzLTg1YjQt
MTM3YjZlM2I4YzIwLzEvSTRucUF2TXFENUVONjZfR1pjZmdENjVyTUVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9jODQ5MmQtYzM2NC00ZDgzLTg1YjQtMTM3YjZlM2I4YzIw
LzEvNHBSeHJncXF5cmctS1Q4ZmpxRzljSERzTTFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucFcMA0G
CSqGSIb3DQEBCwUAA4IBAQAbAerxrXw73fxvxmvI3CYF9P1plJ412GyKE5lQrBLU
2PmpHzKcXybF8MU8AyDDMACGQaXLIyWI9gRoQzoSIOfUZ1age6HZOsiKSRRdNHrT
On1CL5yGAo7KqeRzO9LFrN17L2BWOzuenuIlU8BmExs9LfKkff+kj9okU3B2hwZT
k7X51PoTWnjErJcFWiSJujQm5b/1bGsbZ9jGvJovJhvNe/M01cEMOFfWpqqolz1p
S+PsrTgQ7ztCveLZLkPQgBUWZip148xNbc6zup+XbEOxJpPeyyRqVwUh/A8iNX5h
y8H0zq//syPQATvQ86E1LpjJVaOLPb12tLLxS9PNMWEg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:41 2024 by rpki-client on console-ams.rpki-client.org