Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/jtpqRKUwBxbWwQo6HqNvhj8ZLUQ.roa
File: jtpqRKUwBxbWwQo6HqNvhj8ZLUQ.roa (raw, json)
Hash identifier: 9KWbz6lRtQDOwMmQER9CWEMUY1wJvlgFxt/7EL70gcA=
Subject key identifier: 8E:DA:6A:44:A5:30:07:16:D6:C1:0A:3A:1E:A3:6F:86:3F:19:2D:44
Certificate issuer: /CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Certificate serial: 01856FD4F501179A2ACB94FF3C256DDE4CF6
Authority key identifier: E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/jtpqRKUwBxbWwQo6HqNvhj8ZLUQ.roa
Signing time: Mon 02 Jan 2023 00:15:05 +0000
ROA not before: Mon 02 Jan 2023 00:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49009
IP address blocks: 193.96.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:f5:01:17:9a:2a:cb:94:ff:3c:25:6d:de:4c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9d880e887077fad82b74c998010fa9b253e0ea8
Validity
Not Before: Jan 2 00:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8eda6a44a5300716d6c10a3a1ea36f863f192d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2b:70:33:08:8d:5f:19:fa:01:81:f5:03:f2:
c8:03:0f:dc:f8:b0:69:77:f5:c0:7b:ce:5a:a4:b4:
43:a9:9d:86:8e:2d:4a:bb:26:85:20:4f:4f:91:cd:
a5:97:a0:f5:60:56:b1:3b:56:15:ab:4a:c4:9f:2a:
9c:cf:74:4f:67:4e:49:75:5d:5e:39:65:a0:00:0f:
59:50:fe:9e:40:a8:3a:e6:e0:c7:fa:64:c5:29:d2:
84:30:97:16:a6:d0:d4:ae:01:04:81:70:05:2c:00:
bd:c9:c2:8c:31:d9:92:84:18:01:a1:99:61:67:dd:
fa:d2:f5:88:d5:68:c0:31:4d:24:48:d9:96:3e:76:
76:9a:a0:ae:91:ea:5e:09:f0:59:b5:67:48:4e:b6:
f0:aa:6f:b5:0f:1a:ca:34:e1:34:35:eb:ea:8a:39:
c1:18:65:7a:30:75:28:fd:ee:25:ab:f0:5a:40:cf:
00:ba:fe:5b:6d:c1:d9:22:f5:82:49:a3:67:19:a9:
27:eb:f2:58:93:29:df:84:33:e5:2c:f6:af:6a:31:
3f:5b:24:a0:b0:2a:53:7c:61:a1:f5:67:3a:41:c9:
6e:db:ce:39:5e:57:84:3f:e7:54:19:69:64:19:0e:
e5:c1:5e:ea:05:70:43:83:25:ca:81:76:23:6f:7e:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DA:6A:44:A5:30:07:16:D6:C1:0A:3A:1E:A3:6F:86:3F:19:2D:44
X509v3 Authority Key Identifier:
keyid:E9:D8:80:E8:87:07:7F:AD:82:B7:4C:99:80:10:FA:9B:25:3E:0E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6diA6IcHf62Ct0yZgBD6myU-Dqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/jtpqRKUwBxbWwQo6HqNvhj8ZLUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dbdad2-7c43-4cac-b4a6-facf48586249/1/6diA6IcHf62Ct0yZgBD6myU-Dqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.96.224.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fd:79:cb:07:09:0c:e4:cf:72:90:ef:f5:6d:3a:17:d4:29:
ef:62:63:6e:51:95:ab:9f:73:29:a2:34:55:5b:ca:cc:7d:65:
84:92:9a:cb:34:d2:a3:68:97:89:53:22:66:7f:65:c0:3d:a3:
33:53:a9:ae:34:4e:08:96:09:b2:0f:43:e2:67:72:7f:78:25:
cb:8e:d2:ad:47:4e:17:3d:89:a5:3e:f5:2b:38:92:0b:1a:9b:
5a:6e:3f:ce:b3:97:c7:fc:db:a9:68:b3:f3:51:cc:64:ed:c0:
29:78:c0:bf:fb:33:b5:d0:4b:14:14:87:06:df:3d:5a:c0:6e:
59:a9:43:d0:63:6e:23:72:e1:78:71:99:e2:be:f9:f9:05:91:
56:68:91:a9:ce:14:fd:2a:f8:4e:cc:99:e2:80:d5:a4:4c:0a:
2f:85:d8:a3:49:7c:51:d9:86:50:6c:69:69:1c:49:98:ec:c6:
da:c4:22:a2:6c:f2:36:e9:56:e9:e1:d6:d7:19:2c:5e:eb:02:
35:c6:e5:3a:95:de:bd:00:2e:20:3b:46:a7:c7:75:15:46:0e:
cb:ca:84:49:64:60:70:a1:54:95:5e:4b:1e:1f:61:f0:43:5c:
9f:87:0a:ee:18:57:dc:e7:13:51:2e:c9:38:aa:5a:4b:f5:55:
40:6d:36:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv1PUBF5oqy5T/PCVt3kz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZDg4MGU4ODcwNzdmYWQ4MmI3NGM5OTgwMTBmYTliMjUz
ZTBlYTgwHhcNMjMwMTAyMDAxNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWRhNmE0NGE1MzAwNzE2ZDZjMTBhM2ExZWEzNmY4NjNmMTkyZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjitwMwiNXxn6AYH1A/LIAw/c+LBp
d/XAe85apLRDqZ2Gji1KuyaFIE9Pkc2ll6D1YFaxO1YVq0rEnyqcz3RPZ05JdV1e
OWWgAA9ZUP6eQKg65uDH+mTFKdKEMJcWptDUrgEEgXAFLAC9ycKMMdmShBgBoZlh
Z9360vWI1WjAMU0kSNmWPnZ2mqCukepeCfBZtWdITrbwqm+1DxrKNOE0NevqijnB
GGV6MHUo/e4lq/BaQM8Auv5bbcHZIvWCSaNnGakn6/JYkynfhDPlLPavajE/WySg
sCpTfGGh9Wc6Qclu2845XleEP+dUGWlkGQ7lwV7qBXBDgyXKgXYjb36jzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI7aakSlMAcW1sEKOh6jb4Y/GS1EMB8GA1UdIwQY
MBaAFOnYgOiHB3+tgrdMmYAQ+pslPg6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kYmRhZDItN2M0My00Y2FjLWI0YTYt
ZmFjZjQ4NTg2MjQ5LzEvanRwcVJLVXdCeGJXd1FvNkhxTnZoajhaTFVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kYmRhZDItN2M0My00Y2FjLWI0YTYtZmFjZjQ4NTg2MjQ5
LzEvNmRpQTZJY0hmNjJDdDB5WmdCRDZteVUtRHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWDgMA0G
CSqGSIb3DQEBCwUAA4IBAQBY/XnLBwkM5M9ykO/1bToX1CnvYmNuUZWrn3MpojRV
W8rMfWWEkprLNNKjaJeJUyJmf2XAPaMzU6muNE4IlgmyD0PiZ3J/eCXLjtKtR04X
PYmlPvUrOJILGptabj/Os5fH/NupaLPzUcxk7cApeMC/+zO10EsUFIcG3z1awG5Z
qUPQY24jcuF4cZnivvn5BZFWaJGpzhT9KvhOzJnigNWkTAovhdijSXxR2YZQbGlp
HEmY7MbaxCKibPI26Vbp4dbXGSxe6wI1xuU6ld69AC4gO0anx3UVRg7LyoRJZGBw
oVSVXkseH2HwQ1yfhwruGFfc5xNRLsk4qlpL9VVAbTZB
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:51 2024 by rpki-client on console-fra.rpki-client.org