Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/46X5L62NbWxdZolPbngi4WdCyw8.roa
File: 46X5L62NbWxdZolPbngi4WdCyw8.roa (raw, json)
Hash identifier: 7isgoEjUXxc4CCIlkiFBeuoRfCZrbp5x8RNsTuxDQs8=
Subject key identifier: E3:A5:F9:2F:AD:8D:6D:6C:5D:66:89:4F:6E:78:22:E1:67:42:CB:0F
Certificate issuer: /CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Certificate serial: 018C79A2DEFE49D04742F2EA3F4946D66089
Authority key identifier: 87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/46X5L62NbWxdZolPbngi4WdCyw8.roa
Signing time: Sun 17 Dec 2023 21:16:06 +0000
ROA not before: Sun 17 Dec 2023 21:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.169.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Dec 2023 22:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:79:a2:de:fe:49:d0:47:42:f2:ea:3f:49:46:d6:60:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Validity
Not Before: Dec 17 21:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3a5f92fad8d6d6c5d66894f6e7822e16742cb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:a6:93:9b:7d:5d:7d:b2:69:3f:49:4e:20:
ea:ac:0a:d0:c6:9f:da:78:ea:2f:34:56:e9:83:78:
be:96:0d:04:61:21:e2:15:06:6c:7f:d4:b8:a0:bb:
25:86:52:92:8c:bc:1d:ed:0c:2a:b0:ad:bf:75:4f:
d3:dc:c3:9f:c8:e6:93:9b:cb:c1:6f:37:59:d5:91:
e1:ad:fe:71:bc:af:04:aa:c1:22:f8:e2:4a:88:55:
64:98:40:ea:d1:85:05:6f:12:5d:be:ba:bc:13:41:
da:e1:ba:a8:54:b5:55:c4:40:4e:b5:6f:22:d8:f2:
50:66:9f:e3:5c:d1:08:79:9e:01:0a:20:77:a4:a2:
39:39:91:8d:88:8f:7e:8f:33:92:bd:10:e0:f5:a1:
ee:a4:30:37:63:24:69:68:9f:c6:72:25:63:51:a5:
db:d7:88:18:77:fc:db:ae:71:27:21:50:bd:2a:bc:
52:3b:b1:c2:d0:c9:03:a0:38:5a:73:85:bc:6a:09:
1a:f8:86:f0:69:33:30:5a:f8:7e:ee:77:57:58:3f:
56:c9:d8:9f:58:96:3c:67:b1:49:7d:bf:da:3c:14:
4f:3f:91:38:ae:e5:51:90:ee:20:6a:29:16:11:8c:
06:d7:f8:4e:95:3a:af:26:12:f8:55:f0:ca:4a:2a:
56:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A5:F9:2F:AD:8D:6D:6C:5D:66:89:4F:6E:78:22:E1:67:42:CB:0F
X509v3 Authority Key Identifier:
keyid:87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/46X5L62NbWxdZolPbngi4WdCyw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.59.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ee:d4:71:a4:71:b1:ef:01:0f:a0:c2:bf:72:15:96:5c:36:
3e:8b:50:27:3a:ea:01:19:3b:66:c8:27:9f:ad:5f:c0:b7:4d:
71:0d:68:3d:7e:94:53:48:a2:74:7b:3c:cf:ed:da:b3:3e:a8:
15:a7:16:5d:e6:c8:56:8d:27:e4:5c:9f:8a:fb:8f:35:4b:b0:
1b:8c:e3:8b:4a:c5:22:a4:a3:0f:a2:a2:93:ae:31:7e:04:7a:
17:76:4b:2c:48:c5:af:33:7a:3c:b1:f8:9b:69:d0:64:9f:e2:
36:9f:ac:43:cb:ac:75:18:7f:a1:db:a3:97:5a:68:da:ae:5e:
e9:a6:fa:2a:e5:0a:b8:7d:30:43:13:6d:1d:14:5f:c0:8c:18:
07:c9:cb:7f:1f:d7:dd:f4:1c:b0:47:ca:97:66:b2:cb:f2:ba:
03:ce:6f:c9:28:25:af:d2:95:dd:7d:b7:88:26:12:50:2d:7a:
e2:79:a2:bb:36:c0:e0:b0:87:28:a6:96:09:1f:a4:58:03:57:
6b:e6:2a:6c:7f:87:f7:ce:8b:17:d6:73:b3:1d:0e:8b:e7:92:
c2:7f:56:b1:90:f9:69:48:0b:85:0f:7e:d7:92:5b:59:0f:58:
e8:53:ff:27:bb:3b:35:23:0d:e4:07:b0:9c:42:2b:c5:66:93:
b7:65:d3:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYx5ot7+SdBHQvLqP0lG1mCJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NWZjODAyNDJkMmU2OWViZDBmMjJiNWUzY2M0NTc1OTRh
ZTkwYWMwHhcNMjMxMjE3MjExNjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2E1ZjkyZmFkOGQ2ZDZjNWQ2Njg5NGY2ZTc4MjJlMTY3NDJjYjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix2mk5t9XX2yaT9JTiDqrArQxp/a
eOovNFbpg3i+lg0EYSHiFQZsf9S4oLslhlKSjLwd7QwqsK2/dU/T3MOfyOaTm8vB
bzdZ1ZHhrf5xvK8EqsEi+OJKiFVkmEDq0YUFbxJdvrq8E0Ha4bqoVLVVxEBOtW8i
2PJQZp/jXNEIeZ4BCiB3pKI5OZGNiI9+jzOSvRDg9aHupDA3YyRpaJ/GciVjUaXb
14gYd/zbrnEnIVC9KrxSO7HC0MkDoDhac4W8agka+IbwaTMwWvh+7ndXWD9Wydif
WJY8Z7FJfb/aPBRPP5E4ruVRkO4gaikWEYwG1/hOlTqvJhL4VfDKSipWoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOOl+S+tjW1sXWaJT254IuFnQssPMB8GA1UdIwQY
MBaAFIdfyAJC0uaevQ8itePMRXWUrpCsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDFfSUFrTFM1cDY5RHlLMTQ4eEZkWlN1a0t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi82MTAyNWYtNDNkYS00MzdkLWIwMTAt
Y2M0OWU1MzRkYjAwLzEvNDZYNUw2Mk5iV3hkWm9sUGJuZ2k0V2RDeXc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi82MTAyNWYtNDNkYS00MzdkLWIwMTAtY2M0OWU1MzRkYjAw
LzEvaDFfSUFrTFM1cDY5RHlLMTQ4eEZkWlN1a0t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwak7MA0G
CSqGSIb3DQEBCwUAA4IBAQBA7tRxpHGx7wEPoMK/chWWXDY+i1AnOuoBGTtmyCef
rV/At01xDWg9fpRTSKJ0ezzP7dqzPqgVpxZd5shWjSfkXJ+K+481S7AbjOOLSsUi
pKMPoqKTrjF+BHoXdkssSMWvM3o8sfibadBkn+I2n6xDy6x1GH+h26OXWmjarl7p
pvoq5Qq4fTBDE20dFF/AjBgHyct/H9fd9BywR8qXZrLL8roDzm/JKCWv0pXdfbeI
JhJQLXrieaK7NsDgsIcoppYJH6RYA1dr5ipsf4f3zosX1nOzHQ6L55LCf1axkPlp
SAuFD37XkltZD1joU/8nuzs1Iw3kB7CcQivFZpO3ZdNu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:54 2024 by rpki-client on console-fra.rpki-client.org