Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/IPhydI9oqwFXZMZE_DNdErIZTVw.roa
File: IPhydI9oqwFXZMZE_DNdErIZTVw.roa (raw, json)
Hash identifier: /bIouAyuXElQgcy4uih9JxD7o/3oDcqsavCqqMilbe8=
Subject key identifier: 20:F8:72:74:8F:68:AB:01:57:64:C6:44:FC:33:5D:12:B2:19:4D:5C
Certificate issuer: /CN=770d35d7566ee7246e4d2133cbde48a774423c77
Certificate serial: 0186CA9B2F15195D247B4B2CAED412E1B050
Authority key identifier: 77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/IPhydI9oqwFXZMZE_DNdErIZTVw.roa
Signing time: Fri 10 Mar 2023 08:20:13 +0000
ROA not before: Fri 10 Mar 2023 08:20:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61175
IP address blocks: 193.27.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:9b:2f:15:19:5d:24:7b:4b:2c:ae:d4:12:e1:b0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=770d35d7566ee7246e4d2133cbde48a774423c77
Validity
Not Before: Mar 10 08:20:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20f872748f68ab015764c644fc335d12b2194d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8a:84:84:68:3e:5f:c2:42:a9:8d:fe:6c:b9:
00:f0:98:65:1e:9f:09:bc:46:14:18:93:3b:85:1c:
fa:af:11:92:7e:78:bf:d9:a5:ff:85:99:2e:b0:e5:
ec:d9:74:e1:b7:84:7e:f7:e7:06:45:a1:94:c1:ee:
e0:7f:49:70:e0:a0:74:11:03:59:0b:09:1a:82:57:
e6:73:af:1f:96:e5:99:90:5f:8c:ae:8d:cf:38:be:
9f:5e:04:48:1b:ff:1b:b6:54:73:88:4e:3b:55:17:
00:92:ad:d4:c8:bd:38:bb:2b:dc:16:de:4d:1b:20:
aa:c3:8e:df:9d:36:e2:72:e6:8b:fb:ae:6a:d7:db:
f1:c3:fd:51:eb:24:ba:a0:d8:4b:b9:d6:1d:78:0b:
8d:88:fb:b5:d1:2d:64:2d:e0:42:73:ed:43:ec:a7:
62:92:52:59:63:23:0c:90:c6:e0:51:ec:e8:8e:db:
2e:6c:37:0c:2b:be:5d:b4:7b:a2:5a:6b:f5:59:a1:
01:8c:66:47:05:5e:3c:4b:02:e1:47:29:c0:9f:fc:
9d:44:68:00:fd:87:8e:88:8f:99:e2:84:71:87:19:
3e:5b:d3:24:ff:e2:73:c8:1e:32:4b:78:29:8e:9f:
3a:17:a1:b4:34:3c:92:4f:e1:68:c7:0d:3a:ec:ee:
8b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F8:72:74:8F:68:AB:01:57:64:C6:44:FC:33:5D:12:B2:19:4D:5C
X509v3 Authority Key Identifier:
keyid:77:0D:35:D7:56:6E:E7:24:6E:4D:21:33:CB:DE:48:A7:74:42:3C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dw0111Zu5yRuTSEzy95Ip3RCPHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/IPhydI9oqwFXZMZE_DNdErIZTVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/36e60b-2411-463b-8254-5475de603cd3/1/dw0111Zu5yRuTSEzy95Ip3RCPHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.229.0/24
Signature Algorithm: sha256WithRSAEncryption
02:87:49:5c:20:2a:cc:bd:f8:61:b4:14:fb:d5:ef:91:c7:b9:
f1:a2:ae:19:ef:ee:2e:99:d6:2b:12:0c:8b:bf:1f:45:a6:4d:
5b:5d:b6:33:c0:b2:45:47:51:47:fb:b0:cd:4a:b0:b9:e9:a6:
f5:86:5b:0c:77:81:0d:8c:e9:40:94:9c:dc:5f:5f:b0:c9:b3:
b9:8a:b0:ff:52:4b:17:a0:67:1d:e6:32:d6:74:4d:08:8c:03:
d6:d8:df:a5:ad:4f:be:da:d4:dd:0b:9b:ec:c7:0d:cf:f3:62:
d1:09:47:30:ac:7f:3f:2c:2f:0d:fc:db:5b:55:08:bf:ec:87:
e9:d4:99:0c:3e:5d:76:c7:27:8e:6c:81:20:2a:67:c9:8b:79:
bd:b8:22:03:d1:16:37:f9:3e:85:6e:14:f4:3c:0f:1d:f3:16:
b1:73:1f:b5:77:83:ff:a2:a3:2e:0c:e3:89:c2:96:5f:04:5d:
26:90:a0:fb:96:a8:72:82:a7:1f:0a:ac:43:cf:42:b9:c7:b8:
bb:cb:9d:72:59:dc:75:1e:bd:d5:d3:9f:52:3a:83:2d:17:6e:
8d:46:79:a6:85:cb:01:41:dd:4b:b2:af:bf:39:f3:1c:6c:44:
d9:90:4c:63:ad:32:0e:0f:8a:fb:f7:fd:03:8e:b1:06:92:4c:
2f:23:d4:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbKmy8VGV0ke0ssrtQS4bBQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MGQzNWQ3NTY2ZWU3MjQ2ZTRkMjEzM2NiZGU0OGE3NzQ0
MjNjNzcwHhcNMjMwMzEwMDgyMDEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGY4NzI3NDhmNjhhYjAxNTc2NGM2NDRmYzMzNWQxMmIyMTk0ZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYqEhGg+X8JCqY3+bLkA8JhlHp8J
vEYUGJM7hRz6rxGSfni/2aX/hZkusOXs2XTht4R+9+cGRaGUwe7gf0lw4KB0EQNZ
Cwkaglfmc68fluWZkF+Mro3POL6fXgRIG/8btlRziE47VRcAkq3UyL04uyvcFt5N
GyCqw47fnTbicuaL+65q19vxw/1R6yS6oNhLudYdeAuNiPu10S1kLeBCc+1D7Kdi
klJZYyMMkMbgUezojtsubDcMK75dtHuiWmv1WaEBjGZHBV48SwLhRynAn/ydRGgA
/YeOiI+Z4oRxhxk+W9Mk/+JzyB4yS3gpjp86F6G0NDyST+Foxw067O6LYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCD4cnSPaKsBV2TGRPwzXRKyGU1cMB8GA1UdIwQY
MBaAFHcNNddWbuckbk0hM8veSKd0Qjx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHcwMTExWnU1eVJ1VFNFenk5NUlwM1JDUEhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8zNmU2MGItMjQxMS00NjNiLTgyNTQt
NTQ3NWRlNjAzY2QzLzEvSVBoeWRJOW9xd0ZYWk1aRV9ETmRFcklaVFZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8zNmU2MGItMjQxMS00NjNiLTgyNTQtNTQ3NWRlNjAzY2Qz
LzEvZHcwMTExWnU1eVJ1VFNFenk5NUlwM1JDUEhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRvlMA0G
CSqGSIb3DQEBCwUAA4IBAQACh0lcICrMvfhhtBT71e+Rx7nxoq4Z7+4umdYrEgyL
vx9Fpk1bXbYzwLJFR1FH+7DNSrC56ab1hlsMd4ENjOlAlJzcX1+wybO5irD/UksX
oGcd5jLWdE0IjAPW2N+lrU++2tTdC5vsxw3P82LRCUcwrH8/LC8N/NtbVQi/7Ifp
1JkMPl12xyeObIEgKmfJi3m9uCID0RY3+T6FbhT0PA8d8xaxcx+1d4P/oqMuDOOJ
wpZfBF0mkKD7lqhygqcfCqxDz0K5x7i7y51yWdx1Hr3V059SOoMtF26NRnmmhcsB
Qd1Lsq+/OfMcbETZkExjrTIOD4r79/0DjrEGkkwvI9RX
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:40 2024 by rpki-client on console.sobornost.net