Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/lGdtfZ0zXgnunoMO5Gzsurq4Z2M.roa
File: lGdtfZ0zXgnunoMO5Gzsurq4Z2M.roa (raw, json)
Hash identifier: hxzgO4R1IDIvuErs8esZEDYpurJAlRKx26jEFR9lKyE=
Subject key identifier: 94:67:6D:7D:9D:33:5E:09:EE:9E:83:0E:E4:6C:EC:BA:BA:B8:67:63
Certificate issuer: /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial: 018CC9BC80684B5F32B2DCCA3655206959C9
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/lGdtfZ0zXgnunoMO5Gzsurq4Z2M.roa
Signing time: Tue 02 Jan 2024 10:33:43 +0000
ROA not before: Tue 02 Jan 2024 10:33:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 193.227.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 17 Feb 2024 08:08:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:80:68:4b:5f:32:b2:dc:ca:36:55:20:69:59:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Validity
Not Before: Jan 2 10:33:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=94676d7d9d335e09ee9e830ee46cecbabab86763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:10:58:ad:fd:b5:58:d6:2a:9e:71:30:50:
e2:d9:2b:e1:76:3b:96:a9:5a:83:40:1f:47:c3:df:
35:23:96:ff:25:f4:1a:1b:48:c6:3a:42:fc:2e:7b:
47:b4:60:9d:ff:71:69:34:56:ee:6b:28:4a:16:fa:
e5:47:cd:f0:e3:ad:d5:a0:7c:0d:5d:a1:74:a9:90:
9e:1d:cf:94:7b:7f:1b:48:68:32:98:d7:6e:8c:17:
ca:f2:6f:83:81:c7:4f:5b:86:8d:28:6f:ef:f3:49:
1b:fa:c0:5c:ee:3d:64:ba:da:97:a2:55:84:88:0f:
e5:ab:ab:22:3e:53:37:ee:ea:fd:1b:30:00:21:26:
ba:20:e6:90:0d:1a:a4:b9:3c:83:73:a8:c1:8a:0f:
05:f7:64:a7:7f:69:ea:6f:d0:69:0f:d7:28:bd:6f:
6f:be:9f:3b:db:f2:4b:1d:f5:93:02:ca:3b:e3:bb:
a7:d8:81:c5:5b:15:60:21:54:af:1e:88:69:bf:07:
1e:3d:26:8e:2b:57:85:d3:40:ca:56:5d:83:52:b5:
82:28:b2:6e:6b:20:a8:16:2a:d8:27:9c:1f:43:60:
17:39:f4:c1:9c:13:21:90:af:f0:ce:04:22:33:ee:
a8:ec:25:65:b4:1e:42:82:05:e1:2f:4e:83:fb:9d:
21:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:67:6D:7D:9D:33:5E:09:EE:9E:83:0E:E4:6C:EC:BA:BA:B8:67:63
X509v3 Authority Key Identifier:
keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/lGdtfZ0zXgnunoMO5Gzsurq4Z2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.246.0/23
Signature Algorithm: sha256WithRSAEncryption
02:12:04:ec:1d:c7:81:72:c3:75:6c:06:fa:d3:b9:1d:7c:50:
ba:2d:66:5f:8c:35:e2:e6:95:28:00:b1:e4:9d:0e:fb:4d:e0:
38:1c:20:22:0d:4e:ab:29:c7:73:76:de:52:a3:17:f4:36:1b:
2b:11:b2:8f:17:9e:e7:10:da:9f:a1:7c:31:c7:d7:28:34:4f:
40:03:92:5c:22:78:11:b5:5a:e2:5e:56:88:ca:b8:7d:c6:b8:
96:da:93:b9:99:31:2c:db:00:5a:50:aa:f0:c6:04:04:59:e8:
08:f3:86:3f:e5:15:21:28:86:1d:69:0b:ec:b0:1f:2d:a7:1b:
74:f1:21:b3:4b:ad:96:84:dd:3f:c0:f9:b7:f8:da:55:43:a3:
78:b5:3f:8e:7b:61:34:ac:de:50:cd:5f:36:d2:5f:e1:2b:b8:
3a:fb:18:c8:52:6d:6f:57:06:cb:ec:ab:d4:63:e1:8e:6c:3b:
f9:e9:ef:8d:36:83:b5:de:d2:da:b1:ab:d0:7c:3f:4a:8a:2f:
f2:db:81:68:4a:63:f8:6c:fc:04:62:dd:50:f4:0b:1b:3c:24:
15:3d:0b:87:d4:2f:5f:f4:0e:59:68:3a:35:18:ca:bd:a3:be:
5d:75:cf:f5:1c:c3:f4:b2:9f:04:ef:0a:d2:17:62:6c:0e:d0:
5d:63:98:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvIBoS18ystzKNlUgaVnJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMmU0ZmQyMTlmNWI3N2NlODBjZGZhZjllM2E2NDQxZGVj
NTAwNDIwHhcNMjQwMTAyMTAzMzQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDY3NmQ3ZDlkMzM1ZTA5ZWU5ZTgzMGVlNDZjZWNiYWJhYjg2NzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm78QWK39tVjWKp5xMFDi2SvhdjuW
qVqDQB9Hw981I5b/JfQaG0jGOkL8LntHtGCd/3FpNFbuayhKFvrlR83w463VoHwN
XaF0qZCeHc+Ue38bSGgymNdujBfK8m+DgcdPW4aNKG/v80kb+sBc7j1kutqXolWE
iA/lq6siPlM37ur9GzAAISa6IOaQDRqkuTyDc6jBig8F92Snf2nqb9BpD9covW9v
vp872/JLHfWTAso747un2IHFWxVgIVSvHohpvwcePSaOK1eF00DKVl2DUrWCKLJu
ayCoFirYJ5wfQ2AXOfTBnBMhkK/wzgQiM+6o7CVltB5CggXhL06D+50hiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJRnbX2dM14J7p6DDuRs7Lq6uGdjMB8GA1UdIwQY
MBaAFA4uT9IZ9bd86Azfr546ZEHexQBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGk1UDBobjF0M3pvRE4tdm5qcGtRZDdGQUVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lMTEyMjQtNjFjNy00Nzg2LTg2ZTkt
MjM4ZmVlNjkyNDMwLzEvbEdkdGZaMHpYZ251bm9NTzVHenN1cnE0WjJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9lMTEyMjQtNjFjNy00Nzg2LTg2ZTktMjM4ZmVlNjkyNDMw
LzEvRGk1UDBobjF0M3pvRE4tdm5qcGtRZDdGQUVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBweP2MA0G
CSqGSIb3DQEBCwUAA4IBAQACEgTsHceBcsN1bAb607kdfFC6LWZfjDXi5pUoALHk
nQ77TeA4HCAiDU6rKcdzdt5Soxf0NhsrEbKPF57nENqfoXwxx9coNE9AA5JcIngR
tVriXlaIyrh9xriW2pO5mTEs2wBaUKrwxgQEWegI84Y/5RUhKIYdaQvssB8tpxt0
8SGzS62WhN0/wPm3+NpVQ6N4tT+Oe2E0rN5QzV820l/hK7g6+xjIUm1vVwbL7KvU
Y+GObDv56e+NNoO13tLasavQfD9Kii/y24FoSmP4bPwEYt1Q9AsbPCQVPQuH1C9f
9A5ZaDo1GMq9o75ddc/1HMP0sp8E7wrSF2JsDtBdY5ib
Generated at Sat Feb 17 10:59:38 2024 by rpki-client on console-fra.rpki-client.org