Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/xUcgVOcYbJMBTogXq_A_fQZIaLc.roa
File: xUcgVOcYbJMBTogXq_A_fQZIaLc.roa (raw, json)
Hash identifier: /mznB1MAEPoelIeeUVHMxWSvlJtxQEb6RCM2oe1g5S8=
Subject key identifier: C5:47:20:54:E7:18:6C:93:01:4E:88:17:AB:F0:3F:7D:06:48:68:B7
Certificate issuer: /CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Certificate serial: 01856F024231EB09FCEE4DC26FCCD8F879E8
Authority key identifier: C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/xUcgVOcYbJMBTogXq_A_fQZIaLc.roa
Signing time: Sun 01 Jan 2023 20:24:56 +0000
ROA not before: Sun 01 Jan 2023 20:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34996
IP address blocks: 193.202.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:42:31:eb:09:fc:ee:4d:c2:6f:cc:d8:f8:79:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9cdeb328e3187dbff23729a48b47054c1d519da
Validity
Not Before: Jan 1 20:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5472054e7186c93014e8817abf03f7d064868b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:4f:45:a5:39:45:ae:62:96:c4:de:de:1a:
c0:dc:c7:ac:05:db:4d:31:87:ca:9c:db:39:c9:80:
0e:5a:a9:7e:e3:36:68:26:5a:d9:c4:be:e7:2a:8e:
2f:c3:87:e2:76:b4:9f:63:12:dc:71:2b:c2:3c:0a:
4b:b7:8d:03:33:1a:38:f5:b4:4f:ec:4b:9a:8a:a3:
ae:41:c7:b4:ff:6d:db:a9:5c:2c:e7:b1:70:60:cc:
ea:c0:f4:02:ce:64:c6:7f:9d:61:d0:61:94:b0:99:
81:dc:8c:6c:2f:30:c4:91:a2:38:1f:7d:89:8c:63:
de:ea:26:09:a1:9e:fe:d5:e3:31:8d:d8:92:55:e4:
dd:58:92:99:ff:4c:b1:50:ce:3a:27:80:af:d5:2c:
57:8e:b3:bb:d7:bf:ca:ac:55:e6:f5:1f:6e:e7:04:
cf:e0:a0:97:f1:db:09:73:ac:20:d2:b7:26:46:2e:
54:fe:aa:24:36:76:e8:20:fa:7f:85:9e:28:63:38:
c3:39:70:ce:39:7f:b6:98:91:a1:db:85:42:5b:43:
9b:ee:4d:c7:90:72:37:ee:28:73:e2:42:e2:fa:17:
d0:e7:00:f0:8e:8d:a5:3a:a6:53:47:23:f2:7e:b3:
fb:1d:52:e6:9e:9f:60:c1:89:9a:9a:0e:21:b9:85:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:47:20:54:E7:18:6C:93:01:4E:88:17:AB:F0:3F:7D:06:48:68:B7
X509v3 Authority Key Identifier:
keyid:C9:CD:EB:32:8E:31:87:DB:FF:23:72:9A:48:B4:70:54:C1:D5:19:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yc3rMo4xh9v_I3KaSLRwVMHVGdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/xUcgVOcYbJMBTogXq_A_fQZIaLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8642-8889-47ad-90c0-b89aa01edc80/1/yc3rMo4xh9v_I3KaSLRwVMHVGdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.18.0/24
Signature Algorithm: sha256WithRSAEncryption
15:4b:79:39:8d:7a:fb:2f:41:af:6b:7d:d8:d5:e7:a9:31:14:
2f:1c:02:2a:26:fa:32:18:75:7c:b7:7c:c6:a7:4e:d9:89:e1:
ae:f1:e8:70:27:de:f6:15:00:33:cc:ef:4c:03:cb:79:11:fe:
a7:f0:a8:b4:8c:54:45:22:ed:96:b0:87:5d:14:1c:fa:64:57:
3c:e4:ed:99:bf:13:ee:67:a9:43:01:a2:b4:c8:3b:28:4c:89:
22:f9:50:a0:87:94:56:a4:53:86:2d:f0:71:95:4f:94:ee:d7:
12:6d:8b:0e:51:50:46:85:4b:f8:ed:c7:e5:08:0c:f1:a7:8d:
d2:ca:20:59:21:01:5e:2c:4d:89:b5:24:a4:9a:ae:ed:1c:58:
1b:91:6d:fd:04:ad:d5:26:a0:99:e5:43:f2:23:3a:48:28:9d:
1d:f6:39:29:3d:e4:ff:02:fe:f9:0d:4f:0f:c2:7f:75:3b:45:
e4:9c:3d:01:da:0d:de:2a:e7:dd:97:52:3d:c2:bc:c6:df:ed:
de:97:f6:cd:52:05:1f:f4:ea:37:be:20:b4:e0:e8:7c:90:a4:
de:b0:65:54:55:db:da:b0:cc:a0:28:7c:2d:9e:f2:6c:5a:28:
58:84:57:a7:b0:89:99:c4:ab:0f:16:4e:56:f2:ae:38:ce:ff:
86:66:fd:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAkIx6wn87k3Cb8zY+HnoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5Y2RlYjMyOGUzMTg3ZGJmZjIzNzI5YTQ4YjQ3MDU0YzFk
NTE5ZGEwHhcNMjMwMTAxMjAyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTQ3MjA1NGU3MTg2YzkzMDE0ZTg4MTdhYmYwM2Y3ZDA2NDg2OGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQBPRaU5Ra5ilsTe3hrA3MesBdtN
MYfKnNs5yYAOWql+4zZoJlrZxL7nKo4vw4fidrSfYxLccSvCPApLt40DMxo49bRP
7EuaiqOuQce0/23bqVws57FwYMzqwPQCzmTGf51h0GGUsJmB3IxsLzDEkaI4H32J
jGPe6iYJoZ7+1eMxjdiSVeTdWJKZ/0yxUM46J4Cv1SxXjrO717/KrFXm9R9u5wTP
4KCX8dsJc6wg0rcmRi5U/qokNnboIPp/hZ4oYzjDOXDOOX+2mJGh24VCW0Ob7k3H
kHI37ihz4kLi+hfQ5wDwjo2lOqZTRyPyfrP7HVLmnp9gwYmamg4huYW9VwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMVHIFTnGGyTAU6IF6vwP30GSGi3MB8GA1UdIwQY
MBaAFMnN6zKOMYfb/yNymki0cFTB1RnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80ZTg2NDItODg4OS00N2FkLTkwYzAt
Yjg5YWEwMWVkYzgwLzEveFVjZ1ZPY1liSk1CVG9nWHFfQV9mUVpJYUxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80ZTg2NDItODg4OS00N2FkLTkwYzAtYjg5YWEwMWVkYzgw
LzEveWMzck1vNHhoOXZfSTNLYVNMUndWTUhWR2RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcoSMA0G
CSqGSIb3DQEBCwUAA4IBAQAVS3k5jXr7L0Gva33Y1eepMRQvHAIqJvoyGHV8t3zG
p07ZieGu8ehwJ972FQAzzO9MA8t5Ef6n8Ki0jFRFIu2WsIddFBz6ZFc85O2ZvxPu
Z6lDAaK0yDsoTIki+VCgh5RWpFOGLfBxlU+U7tcSbYsOUVBGhUv47cflCAzxp43S
yiBZIQFeLE2JtSSkmq7tHFgbkW39BK3VJqCZ5UPyIzpIKJ0d9jkpPeT/Av75DU8P
wn91O0XknD0B2g3eKufdl1I9wrzG3+3el/bNUgUf9Oo3viC04Oh8kKTesGVUVdva
sMygKHwtnvJsWihYhFensImZxKsPFk5W8q44zv+GZv3Q
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:22 2024 by rpki-client on console-fra.rpki-client.org