Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/J2cH033BOgQp4ARxJAcBT4-PElU.roa
File: J2cH033BOgQp4ARxJAcBT4-PElU.roa (raw, json)
Hash identifier: qY8mxMYwDPHAn37/IspQX780I/C3HUglViK5XiAAi0g=
Subject key identifier: 27:67:07:D3:7D:C1:3A:04:29:E0:04:71:24:07:01:4F:8F:8F:12:55
Certificate issuer: /CN=c3e715d9490f521e36a056f999bfb56e0f21fc86
Certificate serial: 018A27020B92903582B8D0AC5FB42AFF21AC
Authority key identifier: C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/J2cH033BOgQp4ARxJAcBT4-PElU.roa
Signing time: Thu 24 Aug 2023 10:06:00 +0000
ROA not before: Thu 24 Aug 2023 10:06:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31632
IP address blocks: 193.23.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:27:02:0b:92:90:35:82:b8:d0:ac:5f:b4:2a:ff:21:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e715d9490f521e36a056f999bfb56e0f21fc86
Validity
Not Before: Aug 24 10:06:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=276707d37dc13a0429e004712407014f8f8f1255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:be:de:38:3e:8d:56:f9:d5:ed:81:41:46:
3c:c1:64:9d:17:c8:bf:f9:75:2b:0f:56:82:90:9d:
7f:0c:97:53:04:cd:e0:2c:5a:77:0f:01:65:e2:45:
c9:71:51:8a:f0:4d:21:fc:60:8b:ed:e9:5c:31:60:
a3:cf:00:69:14:ea:49:72:90:a5:97:84:8b:44:b9:
3e:42:37:49:76:19:f8:0a:0d:b6:5b:f4:b8:c0:2b:
ec:d1:6a:cd:1e:0d:85:b9:9e:e7:01:60:88:2c:bb:
3a:79:07:e6:a8:a4:1b:fb:63:00:2d:d4:38:d8:83:
ef:de:c8:eb:4c:0f:3d:0a:f6:dd:a7:83:d7:dc:0d:
b6:2a:0f:61:38:56:f9:61:ce:f5:72:68:7f:10:5e:
40:ab:5e:5d:b5:a7:ab:e4:03:93:6f:b3:a3:1d:26:
9e:77:2c:5f:37:63:2d:c0:b6:3b:63:02:45:84:4a:
5b:5c:43:6d:49:f3:e9:e1:16:b8:f0:e2:d1:06:f0:
5e:5f:a4:8d:ba:3c:57:79:15:75:e2:86:0d:ed:0f:
3e:67:c6:c5:1b:b6:25:d2:ab:47:2d:83:1b:95:36:
70:de:7e:8f:ff:d8:6f:c1:71:74:79:c9:4d:57:67:
a1:e6:78:3f:3d:cd:e5:ae:5f:8d:12:0d:be:37:f5:
4b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:67:07:D3:7D:C1:3A:04:29:E0:04:71:24:07:01:4F:8F:8F:12:55
X509v3 Authority Key Identifier:
keyid:C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/J2cH033BOgQp4ARxJAcBT4-PElU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.116.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:88:3a:51:cb:27:21:46:bd:5b:16:db:75:be:c0:b0:3a:6e:
77:3b:be:14:74:5d:ce:27:94:99:08:14:07:c3:7f:88:e4:7d:
3d:f5:30:43:08:15:62:eb:0e:ed:ff:1c:6d:ff:53:72:6f:d1:
e6:01:6f:23:56:6c:78:d5:d3:31:1b:6b:05:39:87:cd:d8:b6:
96:2a:ba:53:7e:5c:9d:db:95:56:d2:33:53:73:06:b4:cd:a7:
75:fc:20:60:ca:59:93:02:2a:ee:a2:73:19:bf:e2:b2:9b:ce:
7b:dc:ad:5d:ab:2b:ef:a8:f0:d4:57:d0:44:03:03:f9:1f:e2:
58:8d:c5:90:c9:fc:f7:22:24:bf:59:45:ac:0f:22:cf:c5:f2:
81:00:0a:e2:dc:f9:f6:b5:c9:d7:1d:ad:06:6d:10:74:7b:32:
20:31:bc:5f:8d:ec:e6:05:d3:7e:8b:6a:c7:fb:d3:ec:1a:3f:
35:ad:ae:99:96:d3:03:9b:7c:c1:c9:f4:72:ee:71:27:f9:61:
2b:09:a8:4a:b3:66:7f:3f:6c:e1:10:72:36:32:ac:0f:9a:35:
5a:d0:df:bf:6c:7d:4f:e0:b2:2c:58:c1:f0:73:e9:c6:ce:5f:
32:13:56:50:d2:50:83:8a:02:68:a4:6c:68:7f:18:47:9f:10:
2a:cb:c1:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYonAguSkDWCuNCsX7Qq/yGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZTcxNWQ5NDkwZjUyMWUzNmEwNTZmOTk5YmZiNTZlMGYy
MWZjODYwHhcNMjMwODI0MTAwNjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzY3MDdkMzdkYzEzYTA0MjllMDA0NzEyNDA3MDE0ZjhmOGYxMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqe+3jg+jVb51e2BQUY8wWSdF8i/
+XUrD1aCkJ1/DJdTBM3gLFp3DwFl4kXJcVGK8E0h/GCL7elcMWCjzwBpFOpJcpCl
l4SLRLk+QjdJdhn4Cg22W/S4wCvs0WrNHg2FuZ7nAWCILLs6eQfmqKQb+2MALdQ4
2IPv3sjrTA89Cvbdp4PX3A22Kg9hOFb5Yc71cmh/EF5Aq15dtaer5AOTb7OjHSae
dyxfN2MtwLY7YwJFhEpbXENtSfPp4Ra48OLRBvBeX6SNujxXeRV14oYN7Q8+Z8bF
G7Yl0qtHLYMblTZw3n6P/9hvwXF0eclNV2eh5ng/Pc3lrl+NEg2+N/VLGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCdnB9N9wToEKeAEcSQHAU+PjxJVMB8GA1UdIwQY
MBaAFMPnFdlJD1IeNqBW+Zm/tW4PIfyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdy1jVjJVa1BVaDQyb0ZiNW1iLTFiZzhoX0lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS81MmIyNzktNGUwMi00NDBmLTgzYzAt
YjkzNjAyNGEyNTRhLzEvSjJjSDAzM0JPZ1FwNEFSeEpBY0JUNC1QRWxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS81MmIyNzktNGUwMi00NDBmLTgzYzAtYjkzNjAyNGEyNTRh
LzEvdy1jVjJVa1BVaDQyb0ZiNW1iLTFiZzhoX0lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRd0MA0G
CSqGSIb3DQEBCwUAA4IBAQAciDpRyychRr1bFtt1vsCwOm53O74UdF3OJ5SZCBQH
w3+I5H099TBDCBVi6w7t/xxt/1Nyb9HmAW8jVmx41dMxG2sFOYfN2LaWKrpTflyd
25VW0jNTcwa0zad1/CBgylmTAiruonMZv+Kym8573K1dqyvvqPDUV9BEAwP5H+JY
jcWQyfz3IiS/WUWsDyLPxfKBAAri3Pn2tcnXHa0GbRB0ezIgMbxfjezmBdN+i2rH
+9PsGj81ra6ZltMDm3zByfRy7nEn+WErCahKs2Z/P2zhEHI2MqwPmjVa0N+/bH1P
4LIsWMHwc+nGzl8yE1ZQ0lCDigJopGxofxhHnxAqy8HT
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:03 2024 by rpki-client on console-fra.rpki-client.org