Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/o-oTTgTw8nnx7OH3JkgL8ODCfP0.roa
File: o-oTTgTw8nnx7OH3JkgL8ODCfP0.roa (raw, json)
Hash identifier: HR4l2lso6zkCnOD1YMOv6IhprlcPVu9kt+uJZW0exuA=
Subject key identifier: A3:EA:13:4E:04:F0:F2:79:F1:EC:E1:F7:26:48:0B:F0:E0:C2:7C:FD
Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial: 018571552784509DBBE45E048C6AA90AD3B5
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/o-oTTgTw8nnx7OH3JkgL8ODCfP0.roa
Signing time: Mon 02 Jan 2023 07:14:44 +0000
ROA not before: Mon 02 Jan 2023 07:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204922
IP address blocks: 193.16.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:27:84:50:9d:bb:e4:5e:04:8c:6a:a9:0a:d3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Validity
Not Before: Jan 2 07:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3ea134e04f0f279f1ece1f726480bf0e0c27cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:e1:90:ab:41:4e:96:d3:78:ee:9b:d7:aa:
f3:5c:16:be:c0:27:1d:ee:54:97:41:83:e9:15:de:
d2:63:db:da:00:9c:20:71:67:df:94:bf:27:a0:c4:
43:a9:fe:9c:a0:9c:eb:33:97:1d:80:b0:c0:db:54:
65:77:ee:59:01:e9:22:f6:a0:57:78:00:41:1d:73:
0a:29:5e:ab:81:9f:f0:e5:7f:a9:3c:f7:e7:88:d4:
db:34:af:bc:d8:db:50:7a:48:79:0d:0a:8b:da:80:
c5:67:c7:d8:fa:b6:17:9e:38:d2:35:e8:57:5a:de:
67:42:b6:2a:9c:aa:62:d7:c9:c3:13:5f:b1:7b:2c:
f4:4a:d9:fd:78:9c:21:8a:3a:8f:89:88:de:25:14:
5c:81:fc:a2:a6:45:db:50:de:ca:70:26:6d:0a:a3:
eb:d1:9c:5c:59:e5:98:a3:a3:2e:01:77:08:72:c0:
50:85:22:7a:c8:9f:00:fc:86:b5:3b:a6:b5:5a:30:
9f:59:00:80:79:7b:35:82:a9:ae:5f:fe:17:45:dd:
71:6c:c1:ba:b5:8d:e6:2d:60:8a:89:6c:8d:ac:3e:
5c:82:11:e2:59:15:14:20:ad:ee:e7:fc:3d:6d:8e:
7b:9f:da:ac:91:dd:b6:82:ee:95:9b:74:d9:86:e5:
78:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EA:13:4E:04:F0:F2:79:F1:EC:E1:F7:26:48:0B:F0:E0:C2:7C:FD
X509v3 Authority Key Identifier:
keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/o-oTTgTw8nnx7OH3JkgL8ODCfP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.234.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1d:5f:34:f1:7f:d9:c3:61:1f:09:28:ec:74:0e:da:07:b1:
d9:27:33:c6:73:6a:92:03:37:22:92:fd:3c:f1:73:88:56:f5:
71:8e:5d:f3:7f:9b:3c:32:f3:df:3e:74:17:fb:12:2a:b2:20:
5a:25:c3:4b:45:61:96:f5:90:63:de:9a:76:31:ee:34:de:86:
6e:6f:9b:ea:dd:13:f5:f0:20:e1:7a:99:2a:b0:68:cb:d8:ee:
ac:bf:a0:1f:79:c8:5f:6f:2d:af:a3:8d:9c:b7:a5:df:6b:41:
de:ff:6f:bf:52:c0:b6:01:17:82:e9:de:d5:d7:c5:7a:cb:d3:
49:76:6b:f2:30:81:85:56:e3:f8:13:19:a5:9c:1e:d8:57:f2:
22:bb:28:45:fe:eb:f2:1d:d2:e4:c1:1f:12:1a:43:44:1d:ff:
b8:d6:36:38:87:c5:c8:54:8a:66:57:c1:46:22:5b:5c:93:07:
60:06:5f:a7:e0:90:56:29:19:a6:3b:9e:26:af:77:ba:eb:4b:
4b:da:54:37:65:17:8c:0d:92:df:cf:81:39:bd:f6:59:f5:e6:
bd:51:81:b7:9f:50:85:99:c2:e0:88:0d:de:01:ff:22:24:e0:
49:6e:ed:8e:70:02:c0:5a:7f:8d:4f:4a:b1:5e:5d:d4:0f:94:
d9:0f:fb:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxVSeEUJ275F4EjGqpCtO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiY2MyYmJhZjNlMGQ0MzQyYTAxNGY4YjcwZjg3M2NlZTlh
OGNhYzUwHhcNMjMwMTAyMDcxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2VhMTM0ZTA0ZjBmMjc5ZjFlY2UxZjcyNjQ4MGJmMGUwYzI3Y2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi13hkKtBTpbTeO6b16rzXBa+wCcd
7lSXQYPpFd7SY9vaAJwgcWfflL8noMRDqf6coJzrM5cdgLDA21Rld+5ZAeki9qBX
eABBHXMKKV6rgZ/w5X+pPPfniNTbNK+82NtQekh5DQqL2oDFZ8fY+rYXnjjSNehX
Wt5nQrYqnKpi18nDE1+xeyz0Stn9eJwhijqPiYjeJRRcgfyipkXbUN7KcCZtCqPr
0ZxcWeWYo6MuAXcIcsBQhSJ6yJ8A/Ia1O6a1WjCfWQCAeXs1gqmuX/4XRd1xbMG6
tY3mLWCKiWyNrD5cghHiWRUUIK3u5/w9bY57n9qskd22gu6Vm3TZhuV4owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKPqE04E8PJ58ezh9yZIC/Dgwnz9MB8GA1UdIwQY
MBaAFNvMK7rz4NQ0KgFPi3D4c87pqMrFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC80MTRlZjQtNGMxZi00MjU2LTg4Yzkt
ZjRkNWU4NGFjMWRkLzEvby1vVFRnVHc4bm54N09IM0prZ0w4T0RDZlAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC80MTRlZjQtNGMxZi00MjU2LTg4YzktZjRkNWU4NGFjMWRk
LzEvMjh3cnV2UGcxRFFxQVUtTGNQaHp6dW1veXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRDqMA0G
CSqGSIb3DQEBCwUAA4IBAQCFHV808X/Zw2EfCSjsdA7aB7HZJzPGc2qSAzcikv08
8XOIVvVxjl3zf5s8MvPfPnQX+xIqsiBaJcNLRWGW9ZBj3pp2Me403oZub5vq3RP1
8CDhepkqsGjL2O6sv6Afechfby2vo42ct6Xfa0He/2+/UsC2AReC6d7V18V6y9NJ
dmvyMIGFVuP4ExmlnB7YV/IiuyhF/uvyHdLkwR8SGkNEHf+41jY4h8XIVIpmV8FG
IltckwdgBl+n4JBWKRmmO54mr3e660tL2lQ3ZReMDZLfz4E5vfZZ9ea9UYG3n1CF
mcLgiA3eAf8iJOBJbu2OcALAWn+NT0qxXl3UD5TZD/s4
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:03:03 2024 by rpki-client on console-ams.rpki-client.org