Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/OSZq7vbhGROilw9XXsLgIvDGpAQ.roa
File: OSZq7vbhGROilw9XXsLgIvDGpAQ.roa (raw, json)
Hash identifier: 3fAcvVEU1+TISWsvHrEOtp3AccqaRQpQADlAnfkiFJY=
Subject key identifier: 39:26:6A:EE:F6:E1:19:13:A2:97:0F:57:5E:C2:E0:22:F0:C6:A4:04
Certificate issuer: /CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Certificate serial: 01882416ECA6D5DDD62A9B32E49F53C4FD51
Authority key identifier: C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/OSZq7vbhGROilw9XXsLgIvDGpAQ.roa
Signing time: Tue 16 May 2023 10:24:22 +0000
ROA not before: Tue 16 May 2023 10:24:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210917
IP address blocks: 193.30.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 05:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:16:ec:a6:d5:dd:d6:2a:9b:32:e4:9f:53:c4:fd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50e0801823f19d51b962ab6d4ebbbc27dd4ed96
Validity
Not Before: May 16 10:24:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39266aeef6e11913a2970f575ec2e022f0c6a404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e7:2f:ac:2b:ca:2f:19:3e:72:89:d5:9d:15:
37:ca:e1:93:1a:79:dc:03:1a:cd:9a:44:26:8c:0d:
63:83:5c:e8:e7:df:a6:29:78:9d:ec:25:a6:e2:a0:
52:af:bf:9c:05:6d:4b:23:bc:a2:5f:f8:06:33:0a:
8c:f0:b6:a8:16:5c:e8:bf:07:72:c3:90:82:d4:db:
1d:f1:ed:75:84:ef:dd:1f:b7:3a:2b:6c:75:55:8b:
7c:c8:dd:a1:bd:ba:ad:97:4b:a5:34:bf:1f:05:3b:
f9:db:5f:5e:8e:eb:39:be:46:f7:3f:f7:55:6f:42:
e8:23:ea:ca:46:1c:b9:3e:3b:b8:a1:6d:69:01:f1:
4d:37:95:1b:f0:a4:37:75:78:93:7f:4d:b5:9f:ce:
1c:c6:4c:33:63:10:1c:61:03:05:cd:00:e4:ac:5c:
2e:40:aa:0a:2a:9a:4d:c7:34:d9:1f:dc:e0:12:24:
0a:e5:5d:9c:f0:0b:38:64:b9:23:29:f4:8b:54:93:
0d:8e:83:34:4f:79:93:bf:1b:b5:64:22:0b:f4:d8:
1e:88:91:12:63:3f:47:f6:ac:6b:aa:1a:76:89:d5:
67:1c:63:af:11:e7:ff:93:4b:2f:e4:90:47:f7:66:
ce:6c:26:41:aa:54:9f:99:43:47:ef:0e:cb:d6:89:
56:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:26:6A:EE:F6:E1:19:13:A2:97:0F:57:5E:C2:E0:22:F0:C6:A4:04
X509v3 Authority Key Identifier:
keyid:C5:0E:08:01:82:3F:19:D5:1B:96:2A:B6:D4:EB:BB:C2:7D:D4:ED:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/OSZq7vbhGROilw9XXsLgIvDGpAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/474f65-fe29-4822-ba14-ce8214cef6b5/1/xQ4IAYI_GdUbliq21Ou7wn3U7ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.116.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f7:12:6c:3b:15:20:c0:ee:4f:e6:d8:fd:7c:26:97:21:ad:
97:df:2f:20:8a:06:28:80:33:99:0a:25:88:64:d1:d0:62:a5:
e8:b3:8a:f1:59:b1:21:81:c6:3c:6d:04:86:06:7f:3b:82:c0:
49:08:51:16:9b:aa:5c:25:14:79:a1:42:a9:7e:d7:eb:5a:cf:
17:90:a8:fa:0f:ae:29:a6:e5:37:4f:8c:26:89:31:53:7a:fc:
58:87:01:2c:33:28:77:6d:ba:75:cd:16:5f:a1:1d:bc:8b:78:
67:4b:83:96:8a:55:72:2b:ff:c8:89:cc:7b:1d:26:81:bb:d7:
ec:bf:0e:20:20:53:26:70:0b:30:71:f9:b7:c2:f8:8f:58:6f:
32:85:a5:f3:33:15:b7:6b:e3:89:09:22:b9:71:45:a3:64:de:
1b:a3:aa:8e:01:76:9e:d6:ab:74:d2:dc:12:16:2c:9a:70:d8:
74:a4:73:69:2c:c3:b5:9c:bb:8f:46:6f:7f:b1:98:e0:3a:c9:
90:79:9c:27:4d:cb:be:18:66:98:ac:21:ff:0d:c6:e4:65:c3:
bb:c3:91:ba:10:8d:76:4b:29:ef:c1:1b:f7:89:78:4e:92:45:
43:16:1f:f0:87:e6:91:83:06:52:f6:87:fb:ab:ca:f9:7c:4f:
e0:10:88:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgkFuym1d3WKpsy5J9TxP1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGUwODAxODIzZjE5ZDUxYjk2MmFiNmQ0ZWJiYmMyN2Rk
NGVkOTYwHhcNMjMwNTE2MTAyNDIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTI2NmFlZWY2ZTExOTEzYTI5NzBmNTc1ZWMyZTAyMmYwYzZhNDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+cvrCvKLxk+conVnRU3yuGTGnnc
AxrNmkQmjA1jg1zo59+mKXid7CWm4qBSr7+cBW1LI7yiX/gGMwqM8LaoFlzovwdy
w5CC1Nsd8e11hO/dH7c6K2x1VYt8yN2hvbqtl0ulNL8fBTv5219ejus5vkb3P/dV
b0LoI+rKRhy5Pju4oW1pAfFNN5Ub8KQ3dXiTf021n84cxkwzYxAcYQMFzQDkrFwu
QKoKKppNxzTZH9zgEiQK5V2c8As4ZLkjKfSLVJMNjoM0T3mTvxu1ZCIL9NgeiJES
Yz9H9qxrqhp2idVnHGOvEef/k0sv5JBH92bObCZBqlSfmUNH7w7L1olWcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDkmau724RkTopcPV17C4CLwxqQEMB8GA1UdIwQY
MBaAFMUOCAGCPxnVG5YqttTru8J91O2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQt
Y2U4MjE0Y2VmNmI1LzEvT1NacTd2YmhHUk9pbHc5WFhzTGdJdkRHcEFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80NzRmNjUtZmUyOS00ODIyLWJhMTQtY2U4MjE0Y2VmNmI1
LzEveFE0SUFZSV9HZFVibGlxMjFPdTd3bjNVN1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR50MA0G
CSqGSIb3DQEBCwUAA4IBAQCp9xJsOxUgwO5P5tj9fCaXIa2X3y8gigYogDOZCiWI
ZNHQYqXos4rxWbEhgcY8bQSGBn87gsBJCFEWm6pcJRR5oUKpftfrWs8XkKj6D64p
puU3T4wmiTFTevxYhwEsMyh3bbp1zRZfoR28i3hnS4OWilVyK//Iicx7HSaBu9fs
vw4gIFMmcAswcfm3wviPWG8yhaXzMxW3a+OJCSK5cUWjZN4bo6qOAXae1qt00twS
FiyacNh0pHNpLMO1nLuPRm9/sZjgOsmQeZwnTcu+GGaYrCH/DcbkZcO7w5G6EI12
SynvwRv3iXhOkkVDFh/wh+aRgwZS9of7q8r5fE/gEIio
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:57 2024 by rpki-client on console-ams.rpki-client.org